last executing test programs: 8m14.486874561s ago: executing program 1 (id=4154): unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8, 0xb, 0x7f}]}, 0x140}}, 0x844) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) close(r6) 8m12.219456091s ago: executing program 1 (id=4159): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000200025a729a17000fddbdf250a0000cdff0000019f0001000800060000000000080017004e204e2305001500020000"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x76d, 0x10000001, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) kexec_load(0x0, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0xe, "4372070000001000476fb2940acf"}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r7, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r7, 0xc008aec1, &(0x7f0000000640)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x50}}, 0x0) 8m7.01104934s ago: executing program 1 (id=4168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac", 0x59}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9", 0xf}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x328}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8m6.346620211s ago: executing program 1 (id=4171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000100), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x3, [{0x3, 0x3f, 0x4}, {0xb, 0x2}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x61, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000240)=""/116, 0x45, 0x74, 0x1, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0xb8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000000000)={r7, 0x0, 0x1, 0x0, 0x1000000000000}) r8 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) writev(r9, &(0x7f0000003600)=[{&(0x7f0000002400)='\n', 0x1}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x54) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, "cb933c", 0x0, 0x2, 0x1, @remote, @local}}}}, 0x0) 8m4.497908955s ago: executing program 1 (id=4176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 8m2.541651904s ago: executing program 1 (id=4179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x2}, {0x3, 0x1, 0x1, 'c'}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000340)=@xdp={0x2c, 0x7, r3, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="7cb1", 0x2}], 0x1}, 0x4) 7m47.372808945s ago: executing program 32 (id=4179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x2}, {0x3, 0x1, 0x1, 'c'}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000340)=@xdp={0x2c, 0x7, r3, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="7cb1", 0x2}], 0x1}, 0x4) 2.333324726s ago: executing program 3 (id=5495): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x105, 0xfa, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.646872114s ago: executing program 0 (id=5508): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.557720507s ago: executing program 0 (id=5511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c80)={0x200, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "133c7fdf316a6f793b48440f53d5eecf04da7bbde922d789188b0f45a3666d7596d46f42cb885612807e6567f64441d60f52f0222297819c726cbfd1b2fd7e7fb4de1cbe8c85722ecd0ae2bfcc5b060a5cf1e0673820c0a18d0b3f82cfcad5a2dd97df6eb1b87888580304cfdee867c2cf78da52773865739f2a7b4422203514b4a5aebeca78ada418ffbbbb757bdee21bdaca688047b1f726f1a68d5916667caae5659110f7d2f103d744a38dece187212aaa70ed48ea4ccc232dd8f9feab11fe50cca1b97dab9a7be8d46f5bf121b1266dff2f3ef58117e455507e063dbf28d3c7eb72a27bf3b6116d37e04b7db05c0e0b0862c93b59e6c2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x31, 0x5, "81713307a3f54ec79ed5a5160a260d21c817fbea8ebc6ed788ef46501c402248dfe3d0b8047373cd4418d6c3c1"}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x44801}, 0x40) 1.472807136s ago: executing program 5 (id=5512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.444776013s ago: executing program 0 (id=5514): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) close(r1) 1.351341839s ago: executing program 5 (id=5515): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4004040) 1.26597236s ago: executing program 5 (id=5518): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xff}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.264955496s ago: executing program 3 (id=5519): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 1.130144151s ago: executing program 5 (id=5522): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r2, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.018780556s ago: executing program 5 (id=5525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 879.294353ms ago: executing program 5 (id=5529): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x44084, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback, 0x5}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x7ffffffd}}, 0x0, 0x0, 0xe457, 0x0, 0x54, 0x6}, 0x9c) 640.084232ms ago: executing program 4 (id=5532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x40810) 543.985348ms ago: executing program 2 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 536.735764ms ago: executing program 2 (id=5534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) 527.977147ms ago: executing program 4 (id=5535): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x400c1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x1, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x40001, 0x8, 0x1, 0x5, 0x5, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0xb58, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x2, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 488.476338ms ago: executing program 0 (id=5536): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x8e}, 0x4) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 424.193508ms ago: executing program 2 (id=5537): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 403.29635ms ago: executing program 2 (id=5538): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0x1, 0x3, 0x0, 0x0, 0x0, [{0xfffffffe}, {0x0, 0x400000}, {0x5}, {0xfffffffd, 0x3}, {0x10005}, {0xc9, 0x100}, {0x100000, 0x8000002}, {0x3ff, 0xcfb}], 0x4, 0x40, 0x4, 0x0, 0x3}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) getpid() statx(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x800, 0x200, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, 0x0, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 365.594959ms ago: executing program 4 (id=5539): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001c80)={0x200, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "133c7fdf316a6f793b48440f53d5eecf04da7bbde922d789188b0f45a3666d7596d46f42cb885612807e6567f64441d60f52f0222297819c726cbfd1b2fd7e7fb4de1cbe8c85722ecd0ae2bfcc5b060a5cf1e0673820c0a18d0b3f82cfcad5a2dd97df6eb1b87888580304cfdee867c2cf78da52773865739f2a7b4422203514b4a5aebeca78ada418ffbbbb757bdee21bdaca688047b1f726f1a68d5916667caae5659110f7d2f103d744a38dece187212aaa70ed48ea4ccc232dd8f9feab11fe50cca1b97dab9a7be8d46f5bf121b1266dff2f3ef58117e455507e063dbf28d3c7eb72a27bf3b6116d37e04b7db05c0e0b0862c93b59e6c2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x31, 0x5, "81713307a3f54ec79ed5a5160a260d21c817fbea8ebc6ed788ef46501c402248dfe3d0b8047373cd4418d6c3c1"}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x44801}, 0x40) 346.601866ms ago: executing program 0 (id=5540): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040), 0x0, 0x0}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 256.654544ms ago: executing program 3 (id=5541): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 254.679855ms ago: executing program 4 (id=5542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf254400000008000300", @ANYRES32, @ANYBLOB="190023800600020073"], 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 231.230442ms ago: executing program 2 (id=5543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 177.992279ms ago: executing program 3 (id=5544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 159.1346ms ago: executing program 4 (id=5545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000600), 0x4) 63.273709ms ago: executing program 2 (id=5546): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) write(r0, &(0x7f00000003c0)="17f3a661a9", 0x5) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44040) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 63.115905ms ago: executing program 3 (id=5547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 63.02237ms ago: executing program 4 (id=5548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_hsr\x00', 0x10) r1 = dup(r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) 28.084699ms ago: executing program 0 (id=5549): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a", 0x3a}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=5550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000020c0)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x14) kernel console output (not intermixed with test programs): 26 audit(1771900935.781:17448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2036.419938][T26836] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.4818'. [ 2036.437096][T21310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2036.450686][ T30] audit: type=1326 audit(1771900935.781:17449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2036.579561][ T30] audit: type=1326 audit(1771900935.781:17450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2036.615116][T21310] usb 4-1: Using ep0 maxpacket: 32 [ 2036.673857][T21310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.696364][T21310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.842718][T21310] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2036.922879][T21310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.932864][ T30] audit: type=1326 audit(1771900935.781:17451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2036.976729][T21310] usb 4-1: config 0 descriptor?? [ 2037.002023][ T30] audit: type=1326 audit(1771900935.781:17452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2037.139829][ T30] audit: type=1326 audit(1771900935.781:17453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2037.249891][ T30] audit: type=1326 audit(1771900935.781:17454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2037.319245][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.329847][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.339394][ T30] audit: type=1326 audit(1771900935.781:17455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2037.524177][ T30] audit: type=1326 audit(1771900935.781:17456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26825 comm="syz.3.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2038.154943][ T9537] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 2038.186720][T26853] binder: BINDER_SET_CONTEXT_MGR already set [ 2038.193035][T26853] binder: 26850:26853 ioctl 4018620d 200000000040 returned -16 [ 2038.368708][ T9537] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2038.376340][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2038.389759][ T9537] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2038.422781][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2038.485615][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2038.535554][ T9537] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2038.543382][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2038.558297][ T9537] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2038.590838][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2038.658848][T26857] fuse: Unknown parameter 'group_i00000000000000000000' [ 2038.720543][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2038.734681][ T9537] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2038.742178][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2038.755860][ T9537] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2038.851446][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2039.005428][ T9537] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2039.029941][ T9537] usb 6-1: string descriptor 0 read error: -22 [ 2039.055057][ T9537] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2039.257522][T21310] usbhid 4-1:0.0: can't add hid device: -71 [ 2039.263895][ T9537] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.272488][T21310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2039.389575][T26862] fuse: Unknown parameter '0x0000000000000007' [ 2039.437010][T21310] usb 4-1: USB disconnect, device number 4 [ 2039.540247][ T9537] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2040.022073][T24071] usb 6-1: USB disconnect, device number 25 [ 2041.607035][T20761] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2041.948066][T20761] usb 3-1: Using ep0 maxpacket: 32 [ 2041.977851][T20761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2041.996638][T20761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2042.026674][T20761] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2042.075361][T20761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.114743][T20761] usb 3-1: config 0 descriptor?? [ 2042.802941][T26902] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.4832'. [ 2044.421503][T20761] usbhid 3-1:0.0: can't add hid device: -71 [ 2044.431646][T20761] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2044.441467][T20761] usb 3-1: USB disconnect, device number 25 [ 2044.550971][T26917] binder: BINDER_SET_CONTEXT_MGR already set [ 2044.557162][T26917] binder: 26911:26917 ioctl 4018620d 200000000040 returned -16 [ 2046.852951][T26938] fuse: Unknown parameter '0x0000000000000007' [ 2046.982811][T26949] libceph: resolve '0..' (ret=-3): failed [ 2049.093327][T26968] netlink: 212396 bytes leftover after parsing attributes in process `syz.5.4846'. [ 2049.374559][T26970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4844'. [ 2050.802628][T26994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4851'. [ 2051.115259][T26998] binder: BINDER_SET_CONTEXT_MGR already set [ 2051.121279][T26998] binder: 26995:26998 ioctl 4018620d 200000000040 returned -16 [ 2053.680874][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 2053.680892][ T30] audit: type=1326 audit(1771900953.251:17509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2053.717493][ T30] audit: type=1326 audit(1771900953.251:17510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2053.817597][ T30] audit: type=1326 audit(1771900953.251:17511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2053.869931][T27022] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.4858'. [ 2053.945329][T20761] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2054.065896][ T30] audit: type=1326 audit(1771900953.251:17512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2054.174919][T20761] usb 3-1: Using ep0 maxpacket: 32 [ 2054.197458][ T30] audit: type=1326 audit(1771900953.251:17513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2054.266887][T20761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.304764][T20761] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.343965][T20761] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2054.426684][T20761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.456721][T20761] usb 3-1: config 0 descriptor?? [ 2054.473207][ T30] audit: type=1326 audit(1771900953.251:17514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2054.734965][ T30] audit: type=1326 audit(1771900953.251:17515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2054.799242][ T30] audit: type=1326 audit(1771900953.251:17516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2054.922243][ T30] audit: type=1326 audit(1771900953.251:17517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2055.062328][T27031] binder: BINDER_SET_CONTEXT_MGR already set [ 2055.068402][T27031] binder: 27028:27031 ioctl 4018620d 200000000040 returned -16 [ 2055.277249][ T30] audit: type=1326 audit(1771900953.251:17518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27016 comm="syz.2.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2057.286520][T20761] usbhid 3-1:0.0: can't add hid device: -71 [ 2057.294451][T20761] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2057.319274][T27059] fuse: Bad value for 'fd' [ 2057.484350][T20761] usb 3-1: USB disconnect, device number 26 [ 2057.830021][ T5927] kworker/0:6 (5927) used greatest stack depth: 15200 bytes left [ 2058.808252][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2058.808271][ T30] audit: type=1326 audit(1771900958.431:17569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2058.944968][ T30] audit: type=1326 audit(1771900958.431:17570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2059.131304][ T797] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2059.538308][ T30] audit: type=1326 audit(1771900958.441:17571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2059.615091][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 2059.736320][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.755041][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2059.788140][ T30] audit: type=1326 audit(1771900958.441:17572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2059.868304][ T797] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2059.887419][ T30] audit: type=1326 audit(1771900958.441:17573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2059.887705][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.986439][ T797] usb 4-1: config 0 descriptor?? [ 2060.053650][ T30] audit: type=1326 audit(1771900958.441:17574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2060.167154][ T30] audit: type=1326 audit(1771900958.441:17575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2060.303483][ T30] audit: type=1326 audit(1771900958.441:17576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2060.575453][ T30] audit: type=1326 audit(1771900958.441:17577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2060.914745][ T30] audit: type=1326 audit(1771900958.441:17578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b959c629 code=0x7ffc0000 [ 2063.354975][T20761] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2063.601926][ T797] usbhid 4-1:0.0: can't add hid device: -71 [ 2063.608075][ T797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2063.638518][T20761] usb 6-1: Using ep0 maxpacket: 32 [ 2063.699722][ T797] usb 4-1: USB disconnect, device number 5 [ 2063.781967][T20761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2063.795616][T20761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2063.810961][T20761] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2063.853246][T20761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.888725][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 2063.888742][ T30] audit: type=1326 audit(1771900963.531:17687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27120 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c2bb code=0x7ffc0000 [ 2063.959864][T20761] usb 6-1: config 0 descriptor?? [ 2064.014969][ T9537] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2064.083382][ T30] audit: type=1326 audit(1771900963.601:17688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27120 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c2bb code=0x7ffc0000 [ 2064.185104][ T9537] usb 3-1: Using ep0 maxpacket: 32 [ 2064.204676][ T9537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2064.221968][ T9537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2064.233447][ T30] audit: type=1326 audit(1771900963.671:17689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27120 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c2bb code=0x7ffc0000 [ 2064.297902][T24071] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2064.312855][ T9537] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2064.347993][ T9537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.363762][ T30] audit: type=1326 audit(1771900963.681:17690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27120 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c2bb code=0x7ffc0000 [ 2064.476811][ T9537] usb 3-1: config 0 descriptor?? [ 2064.585019][ T30] audit: type=1326 audit(1771900963.681:17691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27120 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c2bb code=0x7ffc0000 [ 2064.716923][ T30] audit: type=1326 audit(1771900963.751:17692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27120 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c2bb code=0x7ffc0000 [ 2064.717629][T24071] usb 5-1: Using ep0 maxpacket: 32 [ 2064.860758][T24071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2064.895103][ T30] audit: type=1326 audit(1771900963.801:17693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27116 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336159c2bb code=0x7ffc0000 [ 2064.920556][T24071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2064.930597][T24071] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2064.941451][T24071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.036082][T24071] usb 5-1: config 0 descriptor?? [ 2065.062607][ T30] audit: type=1326 audit(1771900963.811:17694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27116 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336159c2bb code=0x7ffc0000 [ 2065.344118][ T30] audit: type=1326 audit(1771900963.811:17695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27116 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336159c2bb code=0x7ffc0000 [ 2065.434249][ T30] audit: type=1326 audit(1771900963.811:17696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27116 comm="syz.5.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336159c2bb code=0x7ffc0000 [ 2066.474209][T20761] usbhid 6-1:0.0: can't add hid device: -71 [ 2066.489435][T20761] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2066.521392][T20761] usb 6-1: USB disconnect, device number 26 [ 2067.078852][T24071] usbhid 5-1:0.0: can't add hid device: -71 [ 2067.085195][T24071] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2067.114948][T20761] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 2067.184552][ T9537] usbhid 3-1:0.0: can't add hid device: -71 [ 2067.194985][ T9537] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2067.212967][ T9537] usb 3-1: USB disconnect, device number 27 [ 2067.413455][T20761] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2067.434632][T24071] usb 5-1: USB disconnect, device number 21 [ 2067.438522][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2067.644755][T27161] netlink: 179596 bytes leftover after parsing attributes in process `syz.2.4886'. [ 2067.732536][T20761] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2067.756641][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2067.797647][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2068.804696][T20761] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2068.813564][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2068.827925][T20761] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2068.884972][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2068.957176][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2069.097550][T20761] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2069.127336][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2069.165011][T20761] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2069.654421][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2069.674937][T20761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2069.727662][T20761] usb 4-1: string descriptor 0 read error: -71 [ 2069.743137][T20761] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2069.760040][T20761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.824026][T27187] fuse: Unknown parameter 'user_i00000000000000000000' [ 2070.725728][T20761] usb 4-1: can't set config #168, error -71 [ 2070.811700][T20761] usb 4-1: USB disconnect, device number 6 [ 2071.851364][T27205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4896'. [ 2072.493416][T27217] libceph: resolve '0..' (ret=-3): failed [ 2073.695423][T27225] kAFS: unable to lookup cell 'ÿ' [ 2073.701313][T27225] kAFS: unable to lookup cell '(,c¾Ì' [ 2075.065700][T27244] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.4905'. [ 2076.405073][T27255] fuse: Invalid rootmode [ 2077.757944][T27275] kAFS: unable to lookup cell 'ÿ' [ 2077.764070][T27275] kAFS: unable to lookup cell '(,c¾Ì' [ 2078.753653][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 2078.753671][ T30] audit: type=1326 audit(1771900978.291:17748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27276 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2079.035042][T24071] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2079.110664][ T30] audit: type=1326 audit(1771900978.291:17749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27276 comm="syz.5.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2079.311085][T24071] usb 6-1: Using ep0 maxpacket: 32 [ 2079.490710][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.685036][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2079.756992][T24071] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2079.785616][T24071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.879938][T24071] usb 6-1: config 0 descriptor?? [ 2080.459989][T27298] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.4916'. [ 2080.998577][T27306] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.4918'. [ 2081.727277][T24071] usbhid 6-1:0.0: can't add hid device: -71 [ 2081.738851][T24071] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2081.805154][T24071] usb 6-1: USB disconnect, device number 27 [ 2083.360456][T27330] netlink: 179596 bytes leftover after parsing attributes in process `syz.2.4923'. [ 2083.754940][ T9537] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 2083.973275][ T9537] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2083.987824][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2084.014909][ T9537] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2084.094894][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2084.106358][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2084.131056][ T9537] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2084.138824][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2084.149634][ T9537] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2084.161405][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2084.172680][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2084.206393][ T9537] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2084.213911][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2084.225031][ T9537] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2084.304894][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2084.479999][ T9537] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2084.603573][ T9537] usb 4-1: string descriptor 0 read error: -22 [ 2084.624740][ T9537] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2084.651490][ T9537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.743792][ T9537] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2085.079570][T21310] usb 4-1: USB disconnect, device number 7 [ 2085.439726][T27352] fuse: Unknown parameter '0x0000000000000007' [ 2085.931256][T27354] fuse: Bad value for 'user_id' [ 2085.936312][T27354] fuse: Bad value for 'user_id' [ 2086.044975][T27355] kAFS: unable to lookup cell 'ÿ' [ 2086.086826][T27355] kAFS: unable to lookup cell '(,c¾Ì' [ 2087.275032][T21310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2087.356812][T27368] kAFS: unable to lookup cell 'ÿ' [ 2087.363254][T27368] kAFS: unable to lookup cell '(,c¾Ì' [ 2087.515001][T21310] usb 4-1: Using ep0 maxpacket: 32 [ 2087.540581][T21310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.614683][T21310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2087.665099][T27373] kAFS: unable to lookup cell 'ÿ' [ 2087.671417][T27373] kAFS: unable to lookup cell '(,c¾Ì' [ 2087.712341][T21310] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2087.739245][T21310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.766921][T21310] usb 4-1: config 0 descriptor?? [ 2089.885326][T27393] kAFS: unable to lookup cell 'ÿ' [ 2089.891539][T27393] kAFS: unable to lookup cell '(,c¾Ì' [ 2090.699197][T21310] usbhid 4-1:0.0: can't add hid device: -71 [ 2090.709854][T21310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2090.734815][T21310] usb 4-1: USB disconnect, device number 8 [ 2090.905500][T27408] kAFS: unable to lookup cell 'ÿ' [ 2090.911453][T27408] kAFS: unable to lookup cell '(,c¾Ì' [ 2090.931034][T27409] kAFS: unable to lookup cell 'ÿ' [ 2090.937105][T27409] kAFS: unable to lookup cell '(,c¾Ì' [ 2092.786021][T27422] kAFS: unable to lookup cell 'ÿ' [ 2092.878746][T27427] kAFS: unable to lookup cell '(,c¾Ì' [ 2093.573909][T27433] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.4945'. [ 2094.392416][T27439] libceph: resolve '0..' (ret=-3): failed [ 2094.852076][T27446] kAFS: unable to lookup cell 'ÿ' [ 2094.858606][T27446] kAFS: unable to lookup cell '(,c¾Ì' [ 2095.313214][T27456] kAFS: unable to lookup cell 'ÿ' [ 2095.319594][T27456] kAFS: unable to lookup cell '(,c¾Ì' [ 2096.253433][T27463] fuse: Unknown parameter '0x0000000000000007' [ 2097.217813][T27474] kAFS: unable to lookup cell 'ÿ' [ 2097.223857][T27474] kAFS: unable to lookup cell '(,c¾Ì' [ 2098.000318][T27478] kAFS: unable to lookup cell 'ÿ' [ 2098.008491][T27478] kAFS: unable to lookup cell '(,c¾Ì' [ 2098.445555][ T30] audit: type=1326 audit(1771900998.061:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2098.684975][ T797] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2098.766436][ T30] audit: type=1326 audit(1771900998.061:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2098.875441][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.881768][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.888176][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 2098.939845][ T30] audit: type=1326 audit(1771900998.061:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.027035][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.046744][T27494] kAFS: unable to lookup cell 'ÿ' [ 2099.054068][T27494] kAFS: unable to lookup cell '(,c¾Ì' [ 2099.113467][ T30] audit: type=1326 audit(1771900998.061:17753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.273620][ T30] audit: type=1326 audit(1771900998.061:17754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.307426][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.331195][ T797] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2099.354718][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.392859][ T30] audit: type=1326 audit(1771900998.061:17755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.433110][ T797] usb 3-1: config 0 descriptor?? [ 2099.565760][ T30] audit: type=1326 audit(1771900998.061:17756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.640566][ T30] audit: type=1326 audit(1771900998.071:17757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.782495][ T30] audit: type=1326 audit(1771900998.071:17758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2099.925454][ T30] audit: type=1326 audit(1771900998.071:17759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27479 comm="syz.2.4956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f820739c629 code=0x7ffc0000 [ 2101.489277][ T797] usbhid 3-1:0.0: can't add hid device: -71 [ 2101.495508][ T797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2101.522276][ T797] usb 3-1: USB disconnect, device number 28 [ 2102.159301][T27516] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2102.183514][T23867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2102.195436][T23867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2102.214982][T23867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2102.233101][T23867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2102.913474][T27538] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.4967'. [ 2103.052182][T27543] kAFS: unable to lookup cell 'ÿ' [ 2103.107369][T27546] kAFS: unable to lookup cell '(,c¾Ì' [ 2103.203410][T27519] chnl_net:caif_netlink_parms(): no params data found [ 2104.385070][T10675] Bluetooth: hci2: command tx timeout [ 2104.691106][ T1341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.850991][T27519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.875039][T27519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2104.882452][T27519] bridge_slave_0: entered allmulticast mode [ 2104.896901][T27519] bridge_slave_0: entered promiscuous mode [ 2105.039954][ T1341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.205835][T27519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.214732][T27519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.233027][T27519] bridge_slave_1: entered allmulticast mode [ 2105.249999][T27519] bridge_slave_1: entered promiscuous mode [ 2105.276748][T27566] kAFS: unable to lookup cell 'ÿ' [ 2105.328585][ T1341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.373497][T27569] kAFS: unable to lookup cell '(,c¾Ì' [ 2105.893877][ T1341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2105.969798][T27519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.046830][T27575] kAFS: unable to lookup cell 'ÿ' [ 2106.053112][T27575] kAFS: unable to lookup cell '(,c¾Ì' [ 2106.396807][T27519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2106.437937][T10675] Bluetooth: hci2: command tx timeout [ 2106.649150][T27519] team0: Port device team_slave_0 added [ 2106.824479][T27519] team0: Port device team_slave_1 added [ 2106.955627][T27519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2106.962592][T27519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.035071][T27519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2107.137501][T27519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2107.144555][T27519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.188331][T27519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2107.313239][ T1341] bridge_slave_1: left allmulticast mode [ 2107.345561][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.387135][ T1341] bridge_slave_0: left allmulticast mode [ 2107.392800][ T1341] bridge_slave_0: left promiscuous mode [ 2107.421747][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.515145][T20761] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2107.695034][T23950] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2107.832164][T20761] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2107.844094][T20761] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2107.884370][T20761] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2107.893964][T20761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.903713][T23950] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2107.915037][T23950] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2107.995089][T23950] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2108.004451][T27577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2108.047720][T20761] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2108.089618][T23950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.177029][T27582] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2108.520199][T10675] Bluetooth: hci2: command tx timeout [ 2108.530882][T23950] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2108.543049][T20761] usb 4-1: USB disconnect, device number 9 [ 2108.774360][T23950] usb 6-1: USB disconnect, device number 28 [ 2109.503581][T27611] kAFS: unable to lookup cell 'ÿ' [ 2109.511586][T27611] kAFS: unable to lookup cell '(,c¾Ì' [ 2109.768564][T27617] kAFS: unable to lookup cell 'ÿ' [ 2110.236533][T27624] kAFS: unable to lookup cell 'ÿ' [ 2110.242663][T27624] kAFS: unable to lookup cell '(,c¾Ì' [ 2110.442296][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.595219][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.598991][T10675] Bluetooth: hci2: command tx timeout [ 2110.623729][ T1341] bond0 (unregistering): Released all slaves [ 2110.861465][ T1341] tipc: Left network mode [ 2111.253778][T27519] hsr_slave_0: entered promiscuous mode [ 2111.268894][T27519] hsr_slave_1: entered promiscuous mode [ 2111.316130][T27519] debugfs: 'hsr0' already exists in 'hsr' [ 2111.321947][T27519] Cannot create hsr debugfs directory [ 2111.716097][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2111.716115][ T30] audit: type=1326 audit(1771901011.331:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2111.835503][ T30] audit: type=1326 audit(1771901011.331:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2111.925246][ T30] audit: type=1326 audit(1771901011.331:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2111.959702][T24071] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2112.023328][ T30] audit: type=1326 audit(1771901011.331:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.099991][ T1341] hsr_slave_0: left promiscuous mode [ 2112.108955][ T1341] hsr_slave_1: left promiscuous mode [ 2112.122375][ T30] audit: type=1326 audit(1771901011.331:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.145210][T24071] usb 6-1: Using ep0 maxpacket: 32 [ 2112.155548][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.178392][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.219107][T27645] kAFS: unable to lookup cell 'ÿ' [ 2112.225642][T27645] kAFS: unable to lookup cell '(,c¾Ì' [ 2112.243035][T24071] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2112.253015][ T30] audit: type=1326 audit(1771901011.331:17819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.360223][T24071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.387972][T24071] usb 6-1: config 0 descriptor?? [ 2112.418275][ T30] audit: type=1326 audit(1771901011.331:17820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.418894][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2112.581906][ T30] audit: type=1326 audit(1771901011.331:17821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.608949][ T30] audit: type=1326 audit(1771901011.331:17822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.679352][ T30] audit: type=1326 audit(1771901011.331:17823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27631 comm="syz.5.4986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2112.712373][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2112.732446][ T1341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2112.768793][ T1341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2112.807867][ T1341] veth1_macvtap: left promiscuous mode [ 2112.825884][ T1341] veth0_macvtap: left promiscuous mode [ 2112.833717][ T1341] veth1_vlan: left promiscuous mode [ 2113.679147][ T1341] team0 (unregistering): Port device batadv1 removed [ 2113.813122][T27657] kAFS: unable to lookup cell 'ÿ' [ 2113.835435][T27657] kAFS: unable to lookup cell '(,c¾Ì' [ 2114.156849][T27662] fuse: Bad value for 'user_id' [ 2114.192367][T27662] fuse: Bad value for 'user_id' [ 2114.885010][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 2114.887594][T27666] kAFS: unable to lookup cell 'ÿ' [ 2114.908470][T27666] kAFS: unable to lookup cell '(,c¾Ì' [ 2115.165582][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 2115.394365][T24071] usbhid 6-1:0.0: can't add hid device: -71 [ 2115.452843][T24071] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2115.506506][T24071] usb 6-1: USB disconnect, device number 29 [ 2116.496723][T27681] kAFS: unable to lookup cell 'ÿ' [ 2116.506062][T27681] kAFS: unable to lookup cell '(,c¾Ì' [ 2117.164895][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2117.164914][ T30] audit: type=1326 audit(1771901016.801:17873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2117.454970][ T797] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2117.469713][ T30] audit: type=1326 audit(1771901016.801:17874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2117.575556][ T30] audit: type=1326 audit(1771901016.801:17875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2117.635103][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 2117.638199][ T30] audit: type=1326 audit(1771901016.801:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2117.707211][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2117.724957][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2117.785138][ T797] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2117.794205][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.862069][ T30] audit: type=1326 audit(1771901016.801:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2117.970443][ T30] audit: type=1326 audit(1771901016.821:17878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2118.119583][T27698] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.4996'. [ 2118.129930][ T797] usb 5-1: config 0 descriptor?? [ 2118.190860][T27519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2118.290768][ T30] audit: type=1326 audit(1771901016.821:17879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2118.313914][T24071] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2118.356778][T27519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2118.407498][T27519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2118.445651][ T30] audit: type=1326 audit(1771901016.821:17880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2118.516772][T24071] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2118.526337][T27519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2118.537630][ T30] audit: type=1326 audit(1771901016.821:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2118.575671][T24071] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2118.595572][ T30] audit: type=1326 audit(1771901016.821:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27685 comm="syz.4.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2118.654703][T24071] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2118.679497][T24071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.979673][T27702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2119.039363][T24071] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2119.402287][ T1341] IPVS: stop unused estimator thread 0... [ 2119.734457][T27519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2119.866146][T27519] 8021q: adding VLAN 0 to HW filter on device team0 [ 2119.923134][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 2119.930315][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2120.018649][T27586] usb 4-1: USB disconnect, device number 10 [ 2120.074215][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 2120.081404][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2120.278664][T27519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2120.378578][ T797] usbhid 5-1:0.0: can't add hid device: -71 [ 2120.386460][ T797] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2120.419526][T27519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.454405][ T797] usb 5-1: USB disconnect, device number 22 [ 2120.608587][T27519] veth0_vlan: entered promiscuous mode [ 2120.637665][T27725] syzkaller0: entered promiscuous mode [ 2120.665933][T27725] syzkaller0: entered allmulticast mode [ 2120.680878][T27519] veth1_vlan: entered promiscuous mode [ 2120.912712][T27737] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.5001'. [ 2120.949366][T27738] netlink: 179596 bytes leftover after parsing attributes in process `syz.5.5000'. [ 2120.968687][T27519] veth0_macvtap: entered promiscuous mode [ 2121.119414][T27519] veth1_macvtap: entered promiscuous mode [ 2121.476159][T27519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2121.555108][T27748] kAFS: unable to lookup cell 'ÿ' [ 2121.646075][T27748] kAFS: unable to lookup cell '(,c¾Ì' [ 2121.754277][T27519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2121.895036][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.929305][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.994104][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.065786][ T443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.506592][ T443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.517593][ T443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.645962][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.666737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.267129][T27768] kAFS: unable to lookup cell 'ÿ' [ 2123.274066][T27768] kAFS: unable to lookup cell '(,c¾Ì' [ 2124.015055][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 2124.015069][ T30] audit: type=1326 audit(1771901023.621:17933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2124.114019][T23867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2124.133406][T23867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2124.141325][T23867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2124.149332][T23867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2124.157054][T23867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2124.226457][ T30] audit: type=1326 audit(1771901023.621:17934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2124.372014][ T30] audit: type=1326 audit(1771901023.621:17935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2124.412678][T23950] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2124.758168][T27787] kAFS: unable to lookup cell 'ÿ' [ 2124.837570][ T30] audit: type=1326 audit(1771901023.621:17936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2124.874970][T23950] usb 5-1: Using ep0 maxpacket: 32 [ 2124.963956][T23950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.020537][ T30] audit: type=1326 audit(1771901023.621:17937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2125.051686][T23950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2125.063282][T23950] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2125.096125][T23950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.097862][ T30] audit: type=1326 audit(1771901023.621:17938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2125.115239][T23950] usb 5-1: config 0 descriptor?? [ 2125.403858][ T30] audit: type=1326 audit(1771901023.621:17939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2125.547567][ T30] audit: type=1326 audit(1771901023.621:17940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2125.744930][ T30] audit: type=1326 audit(1771901023.621:17941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2125.803128][ T30] audit: type=1326 audit(1771901023.621:17942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27773 comm="syz.4.5006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6f1bf9c629 code=0x7ffc0000 [ 2125.991492][T20713] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2126.170873][T27779] chnl_net:caif_netlink_parms(): no params data found [ 2126.295103][T23867] Bluetooth: hci3: command tx timeout [ 2126.625616][T27757] IPVS: starting estimator thread 0... [ 2126.779480][T27809] IPVS: using max 55 ests per chain, 132000 per kthread [ 2126.906424][T20713] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2127.239376][T20713] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2127.397984][T27779] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.434287][T27779] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.455191][T27779] bridge_slave_0: entered allmulticast mode [ 2127.462216][T27779] bridge_slave_0: entered promiscuous mode [ 2127.589831][T27779] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.623334][T27779] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.659194][T27779] bridge_slave_1: entered allmulticast mode [ 2127.691690][T27779] bridge_slave_1: entered promiscuous mode [ 2128.277181][T20713] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 2128.359186][T23867] Bluetooth: hci3: command tx timeout [ 2128.385030][T23950] usbhid 5-1:0.0: can't add hid device: -71 [ 2128.391337][T23950] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2128.497424][T23950] usb 5-1: USB disconnect, device number 23 [ 2128.828136][T27835] fuse: Bad value for 'user_id' [ 2128.833382][T27835] fuse: Bad value for 'user_id' [ 2129.284617][T27779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2129.688478][T27779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2129.858230][T27779] team0: Port device team_slave_0 added [ 2129.892039][T27779] team0: Port device team_slave_1 added [ 2130.300040][T27779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2130.314215][T27779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2130.355823][T27779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2130.377574][T27779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2130.384617][T27779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2130.460875][T23867] Bluetooth: hci3: command tx timeout [ 2130.568371][T27779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.343178][T20713] bridge_slave_1: left promiscuous mode [ 2131.397867][T27869] kAFS: unable to lookup cell 'ÿ' [ 2131.403218][T20713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.629893][T20713] bridge_slave_0: left promiscuous mode [ 2131.638841][T20713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.549473][T23867] Bluetooth: hci3: command tx timeout [ 2132.646432][T20713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2132.705352][T20713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2132.744098][T20713] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2132.799664][T20713] dummy0: left allmulticast mode [ 2132.822409][T20713] bond0 (unregistering): Released all slaves [ 2133.056731][T27779] hsr_slave_0: entered promiscuous mode [ 2133.358842][T27779] hsr_slave_1: entered promiscuous mode [ 2133.365433][T27779] debugfs: 'hsr0' already exists in 'hsr' [ 2133.371169][T27779] Cannot create hsr debugfs directory [ 2133.386968][T20713] : left promiscuous mode [ 2133.801908][T20713] tipc: Left network mode [ 2135.130364][T27902] kAFS: unable to lookup cell 'ÿ' [ 2135.172559][T27902] kAFS: unable to lookup cell '(,c¾Ì' [ 2135.448542][T20713] hsr_slave_0: left promiscuous mode [ 2135.461647][T20713] hsr_slave_1: left promiscuous mode [ 2135.489259][T20713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2135.646650][T20713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2135.691899][T20713] pim6reg (unregistering): left allmulticast mode [ 2136.940540][T20713] team0 (unregistering): Port device team_slave_1 removed [ 2137.010985][T20713] team0 (unregistering): Port device team_slave_0 removed [ 2138.110709][T27779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2138.164574][T27937] kAFS: unable to lookup cell 'ÿ' [ 2138.216523][T27779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2138.224111][T27937] kAFS: unable to lookup cell '(,c¾Ì' [ 2138.349470][T27779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2138.399062][T27779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2139.216395][T27779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2139.391993][T27779] 8021q: adding VLAN 0 to HW filter on device team0 [ 2139.599186][T27958] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.606318][T27958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2139.729681][T27958] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.736784][T27958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2139.998492][T20713] IPVS: stop unused estimator thread 0... [ 2140.096359][T27779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2140.272744][T27779] veth0_vlan: entered promiscuous mode [ 2140.439579][T27779] veth1_vlan: entered promiscuous mode [ 2140.576874][T27974] kAFS: unable to lookup cell '(,c¾Ì' [ 2140.854865][T27779] veth0_macvtap: entered promiscuous mode [ 2140.942118][T27779] veth1_macvtap: entered promiscuous mode [ 2141.022443][T27779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2141.038373][T27779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2141.254495][ T1341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.300419][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.396349][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.417635][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.741340][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.752705][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2142.020235][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2142.045965][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2143.093459][T10675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2143.116150][T10675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2143.131589][T10675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2143.166224][T10675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2143.176358][T10675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2143.379982][ T9537] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2143.698381][T28007] chnl_net:caif_netlink_parms(): no params data found [ 2143.754912][ T9537] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.800614][ T9537] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2143.852317][ T9537] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2143.866059][ T9537] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2143.884981][ T9537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.965112][ T9537] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2143.972954][ T9537] usb 3-1: invalid MIDI out EP 0 [ 2144.068720][ T9537] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2144.416131][T28017] udevd[28017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2144.767063][ T5913] usb 3-1: USB disconnect, device number 29 [ 2144.786604][T28007] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.825117][T28007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.858354][T28007] bridge_slave_0: entered allmulticast mode [ 2144.867047][T28007] bridge_slave_0: entered promiscuous mode [ 2144.874772][T28007] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.884423][T28007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.891889][T28007] bridge_slave_1: entered allmulticast mode [ 2144.910970][T28007] bridge_slave_1: entered promiscuous mode [ 2144.961307][T28007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2145.034868][T28007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2145.147026][T28007] team0: Port device team_slave_0 added [ 2145.234366][T28007] team0: Port device team_slave_1 added [ 2145.349264][T23867] Bluetooth: hci1: command tx timeout [ 2145.365073][T28007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2145.372034][T28007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2145.526532][T28007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2145.597565][T28007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2145.629350][T28007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2145.718821][T28007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2145.900621][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2145.900639][ T30] audit: type=1326 audit(1771901045.521:17990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2146.195208][T23950] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2146.273769][ T30] audit: type=1326 audit(1771901045.521:17991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2146.275461][T28007] hsr_slave_0: entered promiscuous mode [ 2146.350889][ T30] audit: type=1326 audit(1771901045.521:17992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2146.390261][T28007] hsr_slave_1: entered promiscuous mode [ 2146.405713][T28007] debugfs: 'hsr0' already exists in 'hsr' [ 2146.411428][T28007] Cannot create hsr debugfs directory [ 2146.473441][T23950] usb 6-1: Using ep0 maxpacket: 32 [ 2146.518896][ T30] audit: type=1326 audit(1771901045.521:17993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2146.556086][ T30] audit: type=1326 audit(1771901045.521:17994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2146.674781][T23950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.687745][T23950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.709569][T28035] kAFS: unable to lookup cell 'ÿ' [ 2146.753443][T28035] kAFS: unable to lookup cell '(,c¾Ì' [ 2146.827409][T23950] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2146.872700][T23950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.873068][ T30] audit: type=1326 audit(1771901045.521:17995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2146.898102][T23950] usb 6-1: config 0 descriptor?? [ 2147.001928][ T30] audit: type=1326 audit(1771901045.521:17996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2147.102505][ T30] audit: type=1326 audit(1771901045.521:17997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2147.159903][T28007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.415063][T23867] Bluetooth: hci1: command tx timeout [ 2147.475443][ T30] audit: type=1326 audit(1771901045.521:17998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2147.618011][T28007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2147.875326][ T30] audit: type=1326 audit(1771901045.521:17999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28026 comm="syz.5.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f336159c629 code=0x7ffc0000 [ 2148.207870][T28007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.242164][T28007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2148.270018][T28045] kAFS: unable to lookup cell 'ÿ' [ 2148.277198][T28045] kAFS: unable to lookup cell '(,c¾Ì' [ 2148.624399][T28007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.684804][T28007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2149.282821][T23950] usbhid 6-1:0.0: can't add hid device: -71 [ 2149.289654][T23950] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2149.453108][T28007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2149.461921][T23950] usb 6-1: USB disconnect, device number 30 [ 2149.481921][T23867] Bluetooth: hci1: command tx timeout [ 2149.563891][T28007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2149.642937][T28007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2149.714555][T28007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2150.158442][T28007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2150.261324][T28007] 8021q: adding VLAN 0 to HW filter on device team0 [ 2150.433887][T27958] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.441013][T27958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2150.501748][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.508872][ T443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2151.071171][T28007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2151.471292][T28007] veth0_vlan: entered promiscuous mode [ 2151.537737][T28007] veth1_vlan: entered promiscuous mode [ 2151.558138][T23867] Bluetooth: hci1: command tx timeout [ 2151.749165][T28007] veth0_macvtap: entered promiscuous mode [ 2151.859081][T28007] veth1_macvtap: entered promiscuous mode [ 2151.992433][T28007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2152.014101][T28007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.281133][T20732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.311672][T20732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.333166][T20732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.583707][T20732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.875269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2152.894932][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2152.966850][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2152.979293][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.407880][T28119] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.5038'. [ 2155.229210][T28139] kAFS: unable to lookup cell 'ÿ' [ 2155.236165][T28139] kAFS: unable to lookup cell '(,c¾Ì' [ 2155.477749][T10675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2155.494631][T10675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2155.507875][T10675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2155.529752][T10675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2155.551882][T10675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2156.471923][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.056212][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.143099][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 2157.143111][ T30] audit: type=1326 audit(1771901056.761:18051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2157.230417][T28164] fuse: Bad value for 'user_id' [ 2157.235457][T28164] fuse: Bad value for 'user_id' [ 2157.389706][ T30] audit: type=1326 audit(1771901056.761:18052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2157.532137][ T30] audit: type=1326 audit(1771901056.761:18053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2157.645321][T10675] Bluetooth: hci4: command tx timeout [ 2157.660725][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.669709][ T30] audit: type=1326 audit(1771901056.761:18054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2157.697955][ T30] audit: type=1326 audit(1771901056.761:18055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2157.835754][ T30] audit: type=1326 audit(1771901056.761:18056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2157.861870][ T30] audit: type=1326 audit(1771901056.761:18057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2158.047135][T28170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2158.082956][T28173] kAFS: unable to lookup cell 'ÿ' [ 2158.089038][T28173] kAFS: unable to lookup cell '(,c¾Ì' [ 2158.163644][ T30] audit: type=1326 audit(1771901056.761:18058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2158.293425][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2158.386251][ T30] audit: type=1326 audit(1771901056.761:18059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2158.433518][T28142] chnl_net:caif_netlink_parms(): no params data found [ 2158.508088][ T30] audit: type=1326 audit(1771901056.771:18060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28156 comm="syz.0.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc701b9c629 code=0x7ffc0000 [ 2158.624990][T23950] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2158.875130][ T13] bridge_slave_1: left allmulticast mode [ 2158.891238][ T13] bridge_slave_1: left promiscuous mode [ 2158.903791][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.922950][ T13] bridge_slave_0: left allmulticast mode [ 2158.929052][ T13] bridge_slave_0: left promiscuous mode [ 2158.935450][T23950] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 2158.935998][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.943620][T23950] usb 6-1: config 0 has no interface number 0 [ 2158.943667][T23950] usb 6-1: config 0 interface 244 has no altsetting 0 [ 2159.017214][T23950] usb 6-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice= d.0f [ 2159.034884][T23950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.065103][T23950] usb 6-1: Product: syz [ 2159.069292][T23950] usb 6-1: Manufacturer: syz [ 2159.096269][T23950] usb 6-1: SerialNumber: syz [ 2159.160411][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 2159.195067][T23950] usb 6-1: config 0 descriptor?? [ 2159.440387][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 2159.709231][ T13] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 2159.725531][T10675] Bluetooth: hci4: command tx timeout [ 2159.752259][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2159.789983][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2159.840165][ T13] bond0 (unregistering): Released all slaves [ 2159.880372][ T13] bond1 (unregistering): Released all slaves [ 2159.922347][ T13] bond2 (unregistering): Released all slaves [ 2160.014335][T28142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.021961][T28142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2160.034691][T28142] bridge_slave_0: entered allmulticast mode [ 2160.052259][T23950] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2160.082067][T28142] bridge_slave_0: entered promiscuous mode [ 2160.093158][ T13] tipc: Disabling bearer [ 2160.100820][ T13] tipc: Disabling bearer [ 2160.129414][ T13] tipc: Disabling bearer [ 2160.145243][T28142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.152351][ T13] tipc: Left network mode [ 2160.172645][T28142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2160.212990][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.214676][T28142] bridge_slave_1: entered allmulticast mode [ 2160.225272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.264210][T23950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.273048][T28142] bridge_slave_1: entered promiscuous mode [ 2160.287153][T23950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2160.308565][T23950] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2160.318079][T23950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2160.326493][T23950] usb 4-1: SerialNumber: syz [ 2160.365729][T27586] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2160.436265][T28142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2160.488109][T28142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2160.527213][T27586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2160.540907][T27586] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2160.568598][T23950] usb 4-1: 0:2 : does not exist [ 2160.574975][T27586] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2160.588537][T27586] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2160.599751][T28142] team0: Port device team_slave_0 added [ 2160.630074][T27586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.656434][T23950] usb 4-1: USB disconnect, device number 11 [ 2160.665050][T27586] usb 3-1: config 0 descriptor?? [ 2160.730944][T28142] team0: Port device team_slave_1 added [ 2160.753557][T28019] udevd[28019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2160.914461][T28142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2160.928030][T28142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2160.957530][T28142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2160.973548][T28142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2160.985022][T28142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2161.039096][T28142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2161.088140][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.104639][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.117646][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.153761][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.178752][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.212558][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.221676][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.242001][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.252475][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.260060][T27586] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 2161.289664][ T13] hsr_slave_0: left promiscuous mode [ 2161.295905][T27586] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2161.320328][ T13] hsr_slave_1: left promiscuous mode [ 2161.336050][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2161.353571][T27586] usb 3-1: USB disconnect, device number 30 [ 2161.363319][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2161.388602][T28232] fido_id[28232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2161.410971][T24071] usb 6-1: USB disconnect, device number 31 [ 2161.795319][T10675] Bluetooth: hci4: command tx timeout [ 2162.088589][T28142] hsr_slave_0: entered promiscuous mode [ 2162.095400][T28142] hsr_slave_1: entered promiscuous mode [ 2163.628346][T28303] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer. [ 2163.772008][ T13] IPVS: stop unused estimator thread 0... [ 2163.854935][T24071] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2163.885616][T10675] Bluetooth: hci4: command tx timeout [ 2163.962004][T28142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2164.002243][T28142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2164.026431][T28142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2164.033940][T24071] usb 6-1: Using ep0 maxpacket: 8 [ 2164.046681][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2164.072411][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2164.092554][T28142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2164.100027][T24071] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2164.129440][T24071] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2164.162675][T24071] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2164.198900][T24071] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2164.232318][T24071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.239917][T28330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 2164.267985][T24071] usb 6-1: config 0 descriptor?? [ 2164.287089][T28306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2164.346146][T28142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2164.422129][T28142] 8021q: adding VLAN 0 to HW filter on device team0 [ 2164.466367][T20732] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.473549][T20732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2164.495440][T28282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.502565][T28282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.695534][T28142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2164.751747][T28336] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2164.763839][T24071] usb 6-1: USB disconnect, device number 32 [ 2164.765581][T10675] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 2164.782069][T28142] veth0_vlan: entered promiscuous mode [ 2164.816174][T28336] kvm: pic: non byte read [ 2164.834248][T28336] kvm: pic: level sensitive irq not supported [ 2164.862752][T28336] kvm: pic: non byte read [ 2164.875656][T28142] veth1_vlan: entered promiscuous mode [ 2164.922569][T28336] kvm: pic: level sensitive irq not supported [ 2164.922667][T28336] kvm: pic: non byte read [ 2164.990329][T28336] kvm: pic: level sensitive irq not supported [ 2164.990446][T28336] kvm: pic: non byte read [ 2165.012314][T28336] kvm: pic: level sensitive irq not supported [ 2165.012396][T28336] kvm: pic: non byte read [ 2165.025890][T28142] veth0_macvtap: entered promiscuous mode [ 2165.041178][T28142] veth1_macvtap: entered promiscuous mode [ 2165.072188][T28142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2165.088844][T28142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2165.157454][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.178307][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.228786][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.249252][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.743696][T20713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2165.786069][T20713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2165.815001][T27757] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2165.920270][T20732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2165.948945][T20732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2166.010677][T27757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.044922][T27757] usb 4-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 2166.076495][T27757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.113624][T27757] usb 4-1: config 0 descriptor?? [ 2166.625587][ T797] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 2166.748803][T27757] usb 4-1: USB disconnect, device number 12 [ 2166.790289][ T797] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2166.815765][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2166.838242][ T797] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2166.852798][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2166.889487][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2167.001758][ T797] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2167.030186][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2167.071639][ T797] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2167.106950][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2167.125468][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2167.150920][ T797] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2167.168618][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2167.180337][ T797] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2167.194918][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2167.225805][ T797] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2167.293955][ T797] usb 5-1: string descriptor 0 read error: -22 [ 2167.317256][ T797] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2167.345039][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.388735][ T797] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2167.532914][T28418] netlink: 'syz.3.5114': attribute type 7 has an invalid length. [ 2167.684760][ T9537] usb 5-1: USB disconnect, device number 24 [ 2167.889383][T28426] syzkaller0: entered promiscuous mode [ 2167.933673][T28426] syzkaller0: entered allmulticast mode [ 2169.025607][T28480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.101215][T28480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2169.122401][T28480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2170.398495][T28459] tap0: tun_chr_ioctl cmd 1074025677 [ 2170.403922][T28459] tap0: linktype set to 773 [ 2170.412277][T28458] tap0: tun_chr_ioctl cmd 1074025675 [ 2170.417640][T28458] tap0: persist disabled [ 2170.540709][T28488] batadv_slave_1: entered promiscuous mode [ 2170.556141][T28485] batadv_slave_1: left promiscuous mode [ 2170.845349][ T9537] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2171.005546][ T9537] usb 4-1: Using ep0 maxpacket: 32 [ 2171.016417][ T9537] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2171.034095][ T9537] usb 4-1: config 0 has no interface number 0 [ 2171.044283][ T9537] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2171.057791][ T9537] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2171.068882][ T9537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.075649][T24071] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2171.081257][ T9537] usb 4-1: Product: syz [ 2171.098888][ T9537] usb 4-1: Manufacturer: syz [ 2171.118232][ T9537] usb 4-1: SerialNumber: syz [ 2171.135783][ T9537] usb 4-1: config 0 descriptor?? [ 2171.265962][T24071] usb 3-1: Using ep0 maxpacket: 16 [ 2171.272882][T24071] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2171.283891][T24071] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2171.293802][T24071] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2171.300960][T24071] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2171.324946][T24071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.346053][T24071] usb 3-1: config 0 descriptor?? [ 2171.375048][T27757] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2171.537844][T27757] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2171.547243][T27757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.560175][T27757] usb 6-1: config 0 descriptor?? [ 2171.761861][ T9537] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2171.772898][ T9537] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2171.785339][T24071] hid (null): bogus close delimiter [ 2171.785382][ T9537] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2171.790977][ T9537] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 2171.810309][T24071] hid (null): global environment stack underflow [ 2171.823677][T24071] hid (null): bogus close delimiter [ 2171.849268][T24071] hid_parser_main: 5 callbacks suppressed [ 2171.849306][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.869709][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.895051][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.912297][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.926372][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.952220][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.973711][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2171.993266][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2172.003398][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2172.023417][T24071] cougar 0003:060B:500A.0012: unknown main item tag 0x0 [ 2172.061546][T24071] cougar 0003:060B:500A.0012: bogus close delimiter [ 2172.085579][T24071] cougar 0003:060B:500A.0012: item 0 0 2 10 parsing failed [ 2172.092072][ T9537] usb 4-1: USB disconnect, device number 13 [ 2172.104040][T24071] cougar 0003:060B:500A.0012: parse failed [ 2172.113336][T24071] cougar 0003:060B:500A.0012: probe with driver cougar failed with error -22 [ 2172.140946][T24071] usb 3-1: USB disconnect, device number 31 [ 2172.257517][T28542] xt_hashlimit: size too large, truncated to 1048576 [ 2172.636509][ T9537] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2172.807658][ T9537] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 2172.830434][ T9537] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 2172.834626][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5168'. [ 2172.852629][T28568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5168'. [ 2172.855776][ T9537] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2172.898641][ T9537] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2172.916276][ T9537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.934441][ T9537] usb 4-1: Product: syz [ 2172.941146][ T9537] usb 4-1: Manufacturer: syz [ 2172.953374][T28571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2172.954894][ T9537] usb 4-1: SerialNumber: syz [ 2172.977623][ T9537] usb 4-1: config 0 descriptor?? [ 2172.997988][ T9537] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2173.002574][T27757] usb 6-1: Cannot set autoneg [ 2173.011614][T27757] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2173.029304][ T9537] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 2173.051625][T27757] usb 6-1: USB disconnect, device number 33 [ 2173.073792][T28575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5171'. [ 2173.199271][ T5913] usb 4-1: USB disconnect, device number 14 [ 2173.474985][ T797] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2173.542283][T28587] IPv6: Can't replace route, no match found [ 2173.648171][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.660616][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.731239][ T797] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2173.802493][ T797] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2173.814971][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.843571][ T797] usb 5-1: config 0 descriptor?? [ 2174.194105][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5183'. [ 2174.282954][ T797] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2174.353547][T28614] xt_hashlimit: size too large, truncated to 1048576 [ 2174.417108][T28615] xt_socket: unknown flags 0xc [ 2174.959467][T28628] bridge0: port 3(gretap0) entered blocking state [ 2174.970154][T28628] bridge0: port 3(gretap0) entered disabled state [ 2174.978392][T28628] gretap0: entered allmulticast mode [ 2174.986162][T28628] gretap0: entered promiscuous mode [ 2174.994775][T28628] bridge0: port 3(gretap0) entered blocking state [ 2175.001359][T28628] bridge0: port 3(gretap0) entered forwarding state [ 2175.354935][T27757] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2175.453681][T28644] capability: warning: `syz.5.5196' uses 32-bit capabilities (legacy support in use) [ 2175.506732][T27757] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.528672][T27757] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 2175.562146][T27757] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2175.576917][T27757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2175.594904][T27757] usb 3-1: SerialNumber: syz [ 2175.885984][ T5913] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2175.904307][T27757] usb 3-1: bad CDC descriptors [ 2175.922118][T27757] usb 3-1: USB disconnect, device number 32 [ 2176.044906][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 2176.052671][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.065351][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2176.076880][ T5913] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2176.090874][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.099851][ T5913] usb 6-1: Product: syz [ 2176.104218][ T5913] usb 6-1: Manufacturer: syz [ 2176.110324][ T5913] usb 6-1: SerialNumber: syz [ 2176.326306][T21310] usb 5-1: USB disconnect, device number 25 [ 2176.338580][ T5913] usb 6-1: 0:2 : does not exist [ 2176.364749][ T5913] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2176.470475][ T5913] usb 6-1: USB disconnect, device number 34 [ 2176.551243][T28019] udevd[28019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2179.055010][ T5913] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2179.287135][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.300813][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.311022][ T5913] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2179.345344][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.394625][ T5913] usb 6-1: config 0 descriptor?? [ 2179.644160][ T5913] usbhid 6-1:0.0: can't add hid device: -71 [ 2179.654025][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2179.685510][ T5913] usb 6-1: USB disconnect, device number 35 [ 2180.135014][ T5913] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 2180.297422][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2180.317075][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2180.327886][ T5913] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2180.337790][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.391651][ T5913] usb 6-1: config 0 descriptor?? [ 2180.409407][ T5913] hub 6-1:0.0: USB hub found [ 2180.416280][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5249'. [ 2180.608176][ T5913] hub 6-1:0.0: 1 port detected [ 2180.790842][T28783] xt_CT: No such helper "snmp_trap" [ 2180.809717][ T5913] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 2180.835018][ T5913] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 2180.858450][ T5913] usbhid 6-1:0.0: can't add hid device: -71 [ 2180.873949][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2180.927957][ T5913] usb 6-1: USB disconnect, device number 36 [ 2181.174955][T24071] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2181.335091][T24071] usb 3-1: Using ep0 maxpacket: 16 [ 2181.363877][T24071] usb 3-1: config index 0 descriptor too short (expected 232, got 36) [ 2181.373144][T24071] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 2181.391410][T24071] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.408547][T24071] usb 3-1: config 1 has no interface number 0 [ 2181.414750][T24071] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2181.432096][T24071] usb 3-1: config 1 interface 105 has no altsetting 0 [ 2181.446596][T24071] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2181.465343][T24071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.473349][T24071] usb 3-1: Product: syz [ 2181.485431][T24071] usb 3-1: Manufacturer: syz [ 2181.490043][T24071] usb 3-1: SerialNumber: syz [ 2181.717652][T24071] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 2181.840373][T28824] xt_hashlimit: size too large, truncated to 1048576 [ 2181.922162][ T9537] usb 3-1: USB disconnect, device number 33 [ 2182.173032][T28836] netlink: 'syz.4.5273': attribute type 10 has an invalid length. [ 2182.217183][T28836] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2182.349603][T28841] kvm: kvm [28840]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2182.382521][T10675] Bluetooth: hci5: unexpected event for opcode 0x0803 [ 2182.390969][T10675] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 2182.905285][T27757] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2182.935546][T24071] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 2183.065043][T27757] usb 4-1: Using ep0 maxpacket: 32 [ 2183.072401][T27757] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2183.082486][T27757] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2183.091750][T27757] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2183.101918][T27757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2183.113530][T24071] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2183.123661][T24071] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2183.136634][T27757] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2183.146108][T27757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2183.154090][T27757] usb 4-1: Product: syz [ 2183.158562][T24071] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2183.172048][T27757] usb 4-1: Manufacturer: syz [ 2183.185241][T27757] usb 4-1: SerialNumber: syz [ 2183.192086][T24071] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2183.218835][T24071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.242438][T24071] usbtmc 3-1:16.0: bulk endpoints not found [ 2183.383213][T28878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2183.423493][T27757] usb 4-1: 0:2 : does not exist [ 2183.459060][T27757] usb 4-1: USB disconnect, device number 15 [ 2183.481582][T28019] udevd[28019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2183.790545][T28886] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2183.810248][T28886] tipc: Started in network mode [ 2183.815433][T28886] tipc: Node identity 1ebb185ef506, cluster identity 4711 [ 2183.822790][T28886] tipc: Enabled bearer , priority 0 [ 2183.843664][T28886] syzkaller0: entered promiscuous mode [ 2183.853046][T28886] syzkaller0: entered allmulticast mode [ 2183.868948][T28889] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 2183.883684][T28886] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5295'. [ 2183.904396][T28889] bridge_slave_0: left allmulticast mode [ 2183.910179][T28889] bridge_slave_0: left promiscuous mode [ 2183.917290][T28889] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.928164][T28889] bridge_slave_1: left allmulticast mode [ 2183.934115][T28889] bridge_slave_1: left promiscuous mode [ 2183.941940][T28889] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.948214][T28890] netlink: 'syz.0.5296': attribute type 10 has an invalid length. [ 2183.970880][T28889] bond0: (slave bond_slave_0): Releasing backup interface [ 2183.998229][T28889] bond0: (slave bond_slave_1): Releasing backup interface [ 2184.025681][T28889] team0: Port device team_slave_0 removed [ 2184.045461][T28889] team0: Port device team_slave_1 removed [ 2184.051692][T28889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2184.066417][T28889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2184.077985][T28889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2184.085817][T28889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2184.158183][T28889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2184.182068][T28886] tipc: Resetting bearer [ 2184.193363][T28890] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 2184.220454][T28890] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2184.269277][T28885] tipc: Resetting bearer [ 2184.406047][T28885] tipc: Disabling bearer [ 2185.704123][T24071] usb 3-1: USB disconnect, device number 34 [ 2185.820931][T28937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5312'. [ 2186.440910][T10675] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2186.449518][T10675] Bluetooth: hci5: Injecting HCI hardware error event [ 2186.461593][T10675] Bluetooth: hci5: hardware error 0x00 [ 2186.864928][T24071] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2187.034910][T24071] usb 3-1: Using ep0 maxpacket: 8 [ 2187.044080][T24071] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2187.063867][T24071] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2187.089534][T24071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2187.112135][T24071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2187.122935][T24071] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2187.140072][T24071] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2187.149499][T24071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.377954][T24071] usb 3-1: GET_CAPABILITIES returned 0 [ 2187.392312][T24071] usbtmc 3-1:16.0: can't read capabilities [ 2187.517263][T28969] kvm: kvm [28968]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 2187.552407][T28969] kvm: kvm [28968]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 2187.582303][T24071] usb 3-1: USB disconnect, device number 35 [ 2187.623974][T28969] kvm: kvm [28968]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000000 [ 2188.517127][T10675] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2188.765565][T28981] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.772892][T28981] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.042960][T28989] fuse: Bad value for 'fd' [ 2189.440300][T28981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2189.478393][T28981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2189.831041][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5331'. [ 2189.848176][T28282] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.865175][T28282] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.911672][T28282] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2189.935132][T28282] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.414948][T10675] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 2190.524941][T29023] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2190.631083][T29029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5342'. [ 2190.912968][T29043] bond1: option downdelay: invalid value (18446744073709551615) [ 2190.926562][T29043] bond1: option downdelay: allowed values 0 - 2147483647 [ 2190.949294][T29043] bond1 (unregistering): Released all slaves [ 2190.959986][T29050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5350'. [ 2191.099863][T29053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5349'. [ 2191.432517][T29060] syzkaller0: entered promiscuous mode [ 2191.438140][T29060] syzkaller0: entered allmulticast mode [ 2191.585069][ T797] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2191.751444][ T797] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 2191.775184][ T797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2191.804937][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2191.827579][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2191.884947][ T797] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2191.917512][ T797] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2191.945058][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.084466][ T797] usb 5-1: config 0 descriptor?? [ 2192.124035][T29062] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2192.260157][T28651] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2192.432209][T28651] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2192.451684][T28651] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2192.477290][T28651] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2192.486873][T28651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.513771][T29070] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2192.534535][T28651] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2192.561386][ T797] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 2192.644722][ T797] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2192.769827][ T797] usb 6-1: USB disconnect, device number 37 [ 2192.830033][T27586] usb 5-1: USB disconnect, device number 26 [ 2193.825352][T27586] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2194.015464][T27586] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2194.024527][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.043705][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.074960][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.105742][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.124819][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.139514][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.162970][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.172282][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.219508][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.245798][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.255663][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.274660][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.299503][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.318039][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.348745][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.372121][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.381817][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.393266][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.439737][T10675] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2194.450294][T10675] Bluetooth: hci2: Injecting HCI hardware error event [ 2194.457649][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.476180][T10675] Bluetooth: hci2: hardware error 0x00 [ 2194.487542][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.504997][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.512903][T27586] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2194.522709][T27586] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2194.534201][T27586] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2194.543646][T27586] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2194.553695][T27586] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2194.562307][T27586] usb 6-1: Product: syz [ 2194.566835][T27586] usb 6-1: Manufacturer: syz [ 2194.571441][T27586] usb 6-1: SerialNumber: syz [ 2194.580371][T27586] usb 6-1: config 0 descriptor?? [ 2194.598076][T27586] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 2194.807778][T27586] usb 6-1: USB disconnect, device number 38 [ 2194.835569][T27586] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 2196.514997][T10675] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2196.632444][T29135] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5387'. [ 2196.652954][T29137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5384'. [ 2197.022864][T28990] IPVS: starting estimator thread 0... [ 2197.114975][T28651] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2197.125681][T29162] IPVS: using max 29 ests per chain, 69600 per kthread [ 2197.279094][T28651] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2197.295034][T28651] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2197.354702][T28651] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2197.377689][T28651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.626991][T28651] usb 6-1: usb_control_msg returned -32 [ 2197.645295][T28651] usbtmc 6-1:16.0: can't read capabilities [ 2197.667833][T29185] tipc: Started in network mode [ 2197.691944][T29185] tipc: Node identity 4, cluster identity 4711 [ 2197.705804][T29185] tipc: Node number set to 4 [ 2198.164923][ T797] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2198.182971][T27586] usb 6-1: USB disconnect, device number 39 [ 2198.237074][ T9537] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2198.275262][T28651] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2198.325317][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 2198.332231][ T797] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2198.340731][ T797] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2198.352105][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2198.366515][ T797] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2198.379221][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2198.390674][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2198.402465][ T797] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2198.415996][ T9537] usb 4-1: Using ep0 maxpacket: 8 [ 2198.421106][ T797] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2198.424988][T28651] usb 5-1: Using ep0 maxpacket: 32 [ 2198.429170][ T797] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2198.443445][ T797] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2198.444543][T28651] usb 5-1: config 64 has an invalid interface number: 251 but max is 0 [ 2198.454708][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2198.474982][ T797] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2198.475245][T28651] usb 5-1: config 64 has an invalid descriptor of length 10, skipping remainder of the config [ 2198.487094][ T9537] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2198.500210][T28651] usb 5-1: config 64 has no interface number 0 [ 2198.505865][ T9537] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2198.514657][T28651] usb 5-1: config 64 interface 251 has no altsetting 0 [ 2198.522013][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2198.533065][T28651] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0111, bcdDevice=3b.d5 [ 2198.540121][ T9537] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2198.550803][T28651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.559901][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2198.568004][T28651] usb 5-1: Product: syz [ 2198.578998][ T9537] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2198.583351][T28651] usb 5-1: Manufacturer: syz [ 2198.593005][ T797] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2198.612532][ T9537] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2198.613491][T28651] usb 5-1: SerialNumber: syz [ 2198.625886][ T797] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2198.637566][ T9537] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2198.650614][ T9537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.660093][ T797] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2198.668264][ T797] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2198.688630][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2198.700450][ T797] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2198.728471][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2198.740366][ T797] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2198.753119][ T797] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2198.772928][ T797] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2198.785542][ T797] usb 3-1: string descriptor 0 read error: -22 [ 2198.791833][ T797] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2198.801412][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.830838][ T797] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2198.850559][T28651] kvaser_usb 5-1:64.251: error -ENODEV: Cannot get usb endpoint(s) [ 2198.887165][ T9537] usb 4-1: GET_CAPABILITIES returned 0 [ 2198.889519][T28651] usb 5-1: USB disconnect, device number 27 [ 2198.892755][ T9537] usbtmc 4-1:16.0: can't read capabilities [ 2199.030762][T28990] usb 3-1: USB disconnect, device number 36 [ 2199.094643][T29213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.104285][T29213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.114185][T29213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.123586][T29213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.133253][ T9537] usb 4-1: USB disconnect, device number 16 [ 2199.235017][T28651] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2199.385013][T28651] usb 6-1: Using ep0 maxpacket: 8 [ 2199.392662][T28651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2199.404403][T28651] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2199.414811][T28651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.427904][T28651] usb 6-1: config 0 descriptor?? [ 2199.586734][T28991] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2199.639388][T28651] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2199.744981][T28991] usb 4-1: Using ep0 maxpacket: 32 [ 2199.751579][T28991] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2199.760784][T28991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.775318][T28991] usb 4-1: config 0 descriptor?? [ 2199.835782][ T797] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2199.983007][T28991] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2199.994640][T28991] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2200.003643][T28991] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2200.004945][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 2200.026021][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2200.038878][ T797] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 2200.048261][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.060228][ T797] usb 3-1: config 0 descriptor?? [ 2200.219676][T29221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.228655][T29221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.238966][T28651] usb 6-1: USB disconnect, device number 40 [ 2200.357827][T29235] netlink: 'syz.4.5425': attribute type 10 has an invalid length. [ 2200.477211][ T797] hid_parser_main: 53 callbacks suppressed [ 2200.477232][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.495106][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.502259][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.525827][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.532987][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.551742][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.560179][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.574897][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.582027][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.604921][ T797] logitech 0003:046D:C24F.0015: unknown main item tag 0x0 [ 2200.625464][ T797] logitech 0003:046D:C24F.0015: hidraw0: USB HID v0.09 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 2200.644934][ T797] logitech 0003:046D:C24F.0015: no inputs found [ 2200.687111][T28651] usb 3-1: USB disconnect, device number 37 [ 2200.886926][T29246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2202.374997][ T797] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2202.528161][ T797] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 2202.537577][ T797] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2202.550578][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2202.575389][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2202.586969][ T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2202.601980][ T797] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2202.612611][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.622240][T29330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5468'. [ 2202.634280][ T797] usb 6-1: config 0 descriptor?? [ 2202.650468][T29303] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2202.802237][T29342] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2202.816389][T29342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2203.086339][ T797] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 2203.111401][ T797] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2203.316278][T29303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.339440][T29303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.439886][T29303] plantronics 0003:047F:FFFF.0016: implement() called with too large value 19203840 (n: 0)! (syz.5.5456) [ 2203.451465][T29303] plantronics 0003:047F:FFFF.0016: implement() called with too large value 129 (n: 0)! (syz.5.5456) [ 2203.767217][T20761] IPVS: starting estimator thread 0... [ 2203.854984][T29369] IPVS: using max 33 ests per chain, 79200 per kthread [ 2203.869471][T29375] syzkaller1: entered promiscuous mode [ 2203.876828][T29375] syzkaller1: entered allmulticast mode [ 2204.155297][T29386] syzkaller0: entered promiscuous mode [ 2204.160822][T29386] syzkaller0: entered allmulticast mode [ 2204.591389][T29403] netlink: 'syz.4.5501': attribute type 3 has an invalid length. [ 2204.816404][T29411] macvtap1: entered promiscuous mode [ 2204.821705][T29411] macvtap1: entered allmulticast mode [ 2204.846327][T29413] syz_tun: entered allmulticast mode [ 2204.856900][T29412] syz_tun: left allmulticast mode [ 2205.223586][T29427] netlink: 'syz.5.5512': attribute type 3 has an invalid length. [ 2205.237753][T28657] usb 6-1: USB disconnect, device number 41 [ 2205.408872][T29438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5517'. [ 2205.615538][ T797] IPVS: starting estimator thread 0... [ 2205.703404][T29456] netlink: 'syz.5.5525': attribute type 3 has an invalid length. [ 2205.745265][T29454] IPVS: using max 34 ests per chain, 81600 per kthread [ 2205.813215][T29462] netlink: 'syz.4.5530': attribute type 13 has an invalid length. [ 2205.886374][T29468] xt_hashlimit: size too large, truncated to 1048576 [ 2206.180801][T29480] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.189496][T29480] bridge0: port 1(bridge_slave_0) entered disabled state [ 2206.301927][T29486] netlink: 'syz.2.5538': attribute type 10 has an invalid length. [ 2206.352248][T29486] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2206.714879][ C1] [ 2206.717237][ C1] ================================ [ 2206.722331][ C1] WARNING: inconsistent lock state [ 2206.727420][ C1] syzkaller #0 Tainted: G L [ 2206.733370][ C1] -------------------------------- [ 2206.738458][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 2206.745275][ C1] kworker/u8:6/145 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 2206.751671][ C1] ffff8880666ab760 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 2206.760947][ C1] {SOFTIRQ-ON-W} state was registered at: [ 2206.766636][ C1] lock_acquire+0xf0/0x2e0 [ 2206.771125][ C1] lock_sock_nested+0x48/0x100 [ 2206.775948][ C1] tcp_sock_set_nodelay+0x2a/0x180 [ 2206.781120][ C1] rds_tcp_listen_init+0x168/0x410 [ 2206.786292][ C1] rds_tcp_init_net+0x154/0x380 [ 2206.791221][ C1] ops_init+0x35c/0x5c0 [ 2206.795442][ C1] register_pernet_operations+0x343/0x830 [ 2206.801234][ C1] register_pernet_device+0x2a/0x80 [ 2206.806493][ C1] rds_tcp_init+0xcf/0x170 [ 2206.810972][ C1] do_one_initcall+0x250/0x8d0 [ 2206.815796][ C1] do_initcall_level+0x104/0x190 [ 2206.820796][ C1] do_initcalls+0x59/0xa0 [ 2206.825188][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 2206.830461][ C1] kernel_init+0x1d/0x1d0 [ 2206.834858][ C1] ret_from_fork+0x51e/0xb90 [ 2206.839518][ C1] ret_from_fork_asm+0x1a/0x30 [ 2206.844343][ C1] irq event stamp: 10389520 [ 2206.848810][ C1] hardirqs last enabled at (10389520): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 2206.859458][ C1] hardirqs last disabled at (10389519): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 2206.869668][ C1] softirqs last enabled at (10389454): [] __dev_queue_xmit+0x274/0x38a0 [ 2206.879624][ C1] softirqs last disabled at (10389455): [] do_softirq+0x76/0xd0 [ 2206.888795][ C1] [ 2206.888795][ C1] other info that might help us debug this: [ 2206.896825][ C1] Possible unsafe locking scenario: [ 2206.896825][ C1] [ 2206.904245][ C1] CPU0 [ 2206.907496][ C1] ---- [ 2206.910750][ C1] lock(k-sk_lock-AF_INET6); [ 2206.915402][ C1] [ 2206.918835][ C1] lock(k-sk_lock-AF_INET6); [ 2206.923658][ C1] [ 2206.923658][ C1] *** DEADLOCK *** [ 2206.923658][ C1] [ 2206.931773][ C1] 10 locks held by kworker/u8:6/145: [ 2206.937036][ C1] #0: ffff88807d511148 ((wq_completion)krds_cp_wq#4/0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 2206.948854][ C1] #1: ffffc90002e07c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 2206.961703][ C1] #2: ffff8880666ac4a0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 2206.971678][ C1] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 2206.981214][ C1] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 2206.990155][ C1] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 2206.999174][ C1] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 2207.008713][ C1] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 2207.017559][ C1] #8: ffff8880666ab6e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 2207.027274][ C1] #9: ffff8880666ab908 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 2207.037333][ C1] [ 2207.037333][ C1] stack backtrace: [ 2207.043210][ C1] CPU: 1 UID: 0 PID: 145 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2207.043226][ C1] Tainted: [L]=SOFTLOCKUP [ 2207.043230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2207.043239][ C1] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 2207.043262][ C1] Call Trace: [ 2207.043269][ C1] [ 2207.043276][ C1] dump_stack_lvl+0xe8/0x150 [ 2207.043291][ C1] print_usage_bug+0x28b/0x2e0 [ 2207.043306][ C1] mark_lock_irq+0x410/0x420 [ 2207.043321][ C1] mark_lock+0x115/0x190 [ 2207.043334][ C1] __lock_acquire+0x689/0x2cf0 [ 2207.043347][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2207.043364][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 2207.043379][ C1] lock_acquire+0xf0/0x2e0 [ 2207.043391][ C1] ? inet6_getname+0x15d/0x650 [ 2207.043403][ C1] lock_sock_nested+0x48/0x100 [ 2207.043415][ C1] ? inet6_getname+0x15d/0x650 [ 2207.043425][ C1] inet6_getname+0x15d/0x650 [ 2207.043434][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2207.043445][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 2207.043458][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2207.043472][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2207.043486][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2207.043497][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2207.043509][ C1] ? NF_HOOK+0x336/0x3c0 [ 2207.043522][ C1] ? ip6_input+0x16a/0x270 [ 2207.043535][ C1] ? NF_HOOK+0x336/0x3c0 [ 2207.043549][ C1] ? rds_recv_hs_exthdrs+0xc1/0x7c0 [ 2207.043561][ C1] ? tcp_write_xmit+0x16e8/0x6980 [ 2207.043573][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 2207.043586][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2207.043598][ C1] ? process_scheduled_works+0xb02/0x1830 [ 2207.043610][ C1] ? kthread+0x388/0x470 [ 2207.043619][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2207.043635][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 2207.043648][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2207.043660][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 2207.043675][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 2207.043689][ C1] __tcp_read_sock+0x196/0x970 [ 2207.043700][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2207.043711][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 2207.043722][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 2207.043732][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2207.043743][ C1] ? tcp_grow_window+0x4fc/0xc50 [ 2207.043755][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 2207.043773][ C1] ? tcp_urg+0x106/0x410 [ 2207.043787][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 2207.043801][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 2207.043814][ C1] ? ktime_get+0x45/0x200 [ 2207.043823][ C1] ? seqcount_lockdep_reader_access+0x40/0x100 [ 2207.043833][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 2207.043849][ C1] tcp_rcv_established+0xf45/0x2740 [ 2207.043866][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2207.043881][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 2207.043892][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 2207.043903][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 2207.043914][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2207.043926][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 2207.043941][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 2207.043950][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 2207.043961][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 2207.043971][ C1] ? raw6_local_deliver+0x116/0x950 [ 2207.043986][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 2207.043995][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 2207.044014][ C1] ip6_input_finish+0x191/0x370 [ 2207.044030][ C1] NF_HOOK+0x336/0x3c0 [ 2207.044043][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 2207.044054][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 2207.044068][ C1] ? NF_HOOK+0x9e/0x3c0 [ 2207.044081][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2207.044096][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 2207.044111][ C1] ip6_input+0x16a/0x270 [ 2207.044125][ C1] ? ip6_input+0x23/0x270 [ 2207.044139][ C1] NF_HOOK+0x336/0x3c0 [ 2207.044152][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 2207.044168][ C1] ? skb_orphan+0x4f/0xd0 [ 2207.044182][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2207.044196][ C1] ? NF_HOOK+0x9e/0x3c0 [ 2207.044209][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2207.044223][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2207.044238][ C1] ? process_backlog+0x3eb/0x1950 [ 2207.044250][ C1] process_backlog+0x7dd/0x1950 [ 2207.044266][ C1] __napi_poll+0xae/0x340 [ 2207.044276][ C1] ? skb_defer_free_flush+0x233/0x260 [ 2207.044287][ C1] net_rx_action+0x627/0xf70 [ 2207.044302][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2207.044316][ C1] ? sched_clock+0x3f/0x60 [ 2207.044329][ C1] handle_softirqs+0x22a/0x870 [ 2207.044342][ C1] ? do_softirq+0x76/0xd0 [ 2207.044355][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 2207.044370][ C1] do_softirq+0x76/0xd0 [ 2207.044382][ C1] [ 2207.044386][ C1] [ 2207.044390][ C1] __local_bh_enable_ip+0xf8/0x130 [ 2207.044402][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 2207.044416][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 2207.044434][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 2207.044450][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2207.044466][ C1] ? ip6_output+0x340/0x550 [ 2207.044480][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 2207.044495][ C1] ? ip6_output+0x126/0x550 [ 2207.044506][ C1] ip6_output+0x340/0x550 [ 2207.044519][ C1] ip6_xmit+0x1149/0x1980 [ 2207.044533][ C1] ? ip6_xmit+0x283/0x1980 [ 2207.044545][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 2207.044558][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 2207.044571][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 2207.044580][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 2207.044589][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 2207.044598][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 2207.044616][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 2207.044631][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 2207.044645][ C1] tcp_write_xmit+0x16e8/0x6980 [ 2207.044665][ C1] __tcp_push_pending_frames+0x97/0x380 [ 2207.044679][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 2207.044689][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2207.044702][ C1] rds_send_xmit+0x207e/0x28d0 [ 2207.044720][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 2207.044734][ C1] rds_send_worker+0x7d/0x2e0 [ 2207.044747][ C1] ? process_scheduled_works+0xa25/0x1830 [ 2207.044760][ C1] process_scheduled_works+0xb02/0x1830 [ 2207.044776][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2207.044790][ C1] ? assign_work+0x3d5/0x5e0 [ 2207.044802][ C1] worker_thread+0xa50/0xfc0 [ 2207.044820][ C1] kthread+0x388/0x470 [ 2207.044829][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2207.044850][ C1] ? __pfx_kthread+0x10/0x10 [ 2207.044866][ C1] ret_from_fork+0x51e/0xb90 [ 2207.044888][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2207.044906][ C1] ? __switch_to+0xc7d/0x1450 [ 2207.044922][ C1] ? __pfx_kthread+0x10/0x10 [ 2207.044935][ C1] ret_from_fork_asm+0x1a/0x30 [ 2207.044960][ C1] [ 2207.699679][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 2207.708427][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 145, name: kworker/u8:6 [ 2207.717524][ C1] preempt_count: 303, expected: 0 [ 2207.722517][ C1] RCU nest depth: 5, expected: 0 [ 2207.727434][ C1] INFO: lockdep is turned off. [ 2207.732173][ C1] Preemption disabled at: [ 2207.732179][ C1] [] __dev_queue_xmit+0x281/0x38a0 [ 2207.743143][ C1] CPU: 1 UID: 0 PID: 145 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2207.743159][ C1] Tainted: [L]=SOFTLOCKUP [ 2207.743163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2207.743171][ C1] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 2207.743188][ C1] Call Trace: [ 2207.743196][ C1] [ 2207.743202][ C1] dump_stack_lvl+0xe8/0x150 [ 2207.743216][ C1] __might_resched+0x378/0x4d0 [ 2207.743230][ C1] ? __dev_queue_xmit+0x281/0x38a0 [ 2207.743246][ C1] lock_sock_nested+0x5d/0x100 [ 2207.743258][ C1] inet6_getname+0x15d/0x650 [ 2207.743268][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2207.743280][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 2207.743292][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2207.743306][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2207.743320][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 2207.743331][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 2207.743343][ C1] ? NF_HOOK+0x336/0x3c0 [ 2207.743356][ C1] ? ip6_input+0x16a/0x270 [ 2207.743369][ C1] ? NF_HOOK+0x336/0x3c0 [ 2207.743382][ C1] ? rds_recv_hs_exthdrs+0xc1/0x7c0 [ 2207.743394][ C1] ? tcp_write_xmit+0x16e8/0x6980 [ 2207.743406][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 2207.743419][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 2207.743430][ C1] ? process_scheduled_works+0xb02/0x1830 [ 2207.743443][ C1] ? kthread+0x388/0x470 [ 2207.743452][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2207.743467][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 2207.743481][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 2207.743492][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 2207.743507][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 2207.743521][ C1] __tcp_read_sock+0x196/0x970 [ 2207.743533][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 2207.743544][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 2207.743554][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 2207.743565][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 2207.743576][ C1] ? tcp_grow_window+0x4fc/0xc50 [ 2207.743588][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 2207.743606][ C1] ? tcp_urg+0x106/0x410 [ 2207.743619][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 2207.743634][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 2207.743647][ C1] ? ktime_get+0x45/0x200 [ 2207.743656][ C1] ? seqcount_lockdep_reader_access+0x40/0x100 [ 2207.743666][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 2207.743681][ C1] tcp_rcv_established+0xf45/0x2740 [ 2207.743698][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2207.743713][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 2207.743724][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 2207.743735][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 2207.743747][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 2207.743759][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 2207.743774][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 2207.743783][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 2207.743794][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 2207.743804][ C1] ? raw6_local_deliver+0x116/0x950 [ 2207.743819][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 2207.743828][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 2207.743847][ C1] ip6_input_finish+0x191/0x370 [ 2207.743863][ C1] NF_HOOK+0x336/0x3c0 [ 2207.743876][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 2207.743888][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 2207.743902][ C1] ? NF_HOOK+0x9e/0x3c0 [ 2207.743915][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2207.743928][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 2207.743945][ C1] ip6_input+0x16a/0x270 [ 2207.743958][ C1] ? ip6_input+0x23/0x270 [ 2207.743972][ C1] NF_HOOK+0x336/0x3c0 [ 2207.743985][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 2207.743996][ C1] ? skb_orphan+0x4f/0xd0 [ 2207.744009][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2207.744023][ C1] ? NF_HOOK+0x9e/0x3c0 [ 2207.744036][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2207.744050][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2207.744065][ C1] ? process_backlog+0x3eb/0x1950 [ 2207.744077][ C1] process_backlog+0x7dd/0x1950 [ 2207.744096][ C1] __napi_poll+0xae/0x340 [ 2207.744107][ C1] ? skb_defer_free_flush+0x233/0x260 [ 2207.744118][ C1] net_rx_action+0x627/0xf70 [ 2207.744132][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2207.744146][ C1] ? sched_clock+0x3f/0x60 [ 2207.744159][ C1] handle_softirqs+0x22a/0x870 [ 2207.744173][ C1] ? do_softirq+0x76/0xd0 [ 2207.744186][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 2207.744200][ C1] do_softirq+0x76/0xd0 [ 2207.744213][ C1] [ 2207.744216][ C1] [ 2207.744220][ C1] __local_bh_enable_ip+0xf8/0x130 [ 2207.744232][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 2207.744247][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 2207.744264][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 2207.744280][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2207.744297][ C1] ? ip6_output+0x340/0x550 [ 2207.744310][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 2207.744325][ C1] ? ip6_output+0x126/0x550 [ 2207.744337][ C1] ip6_output+0x340/0x550 [ 2207.744349][ C1] ip6_xmit+0x1149/0x1980 [ 2207.744363][ C1] ? ip6_xmit+0x283/0x1980 [ 2207.744375][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 2207.744389][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 2207.744401][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 2207.744410][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 2207.744419][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 2207.744428][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 2207.744445][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 2207.744461][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 2207.744474][ C1] tcp_write_xmit+0x16e8/0x6980 [ 2207.744495][ C1] __tcp_push_pending_frames+0x97/0x380 [ 2207.744508][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 2207.744518][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 2207.744530][ C1] rds_send_xmit+0x207e/0x28d0 [ 2207.744548][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 2207.744562][ C1] rds_send_worker+0x7d/0x2e0 [ 2207.744575][ C1] ? process_scheduled_works+0xa25/0x1830 [ 2207.744587][ C1] process_scheduled_works+0xb02/0x1830 [ 2207.744604][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2207.744618][ C1] ? assign_work+0x3d5/0x5e0 [ 2207.744630][ C1] worker_thread+0xa50/0xfc0 [ 2207.744648][ C1] kthread+0x388/0x470 [ 2207.744657][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2207.744669][ C1] ? __pfx_kthread+0x10/0x10 [ 2207.744678][ C1] ret_from_fork+0x51e/0xb90 [ 2207.744691][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2207.744703][ C1] ? __switch_to+0xc7d/0x1450 [ 2207.744715][ C1] ? __pfx_kthread+0x10/0x10 [ 2207.744724][ C1] ret_from_fork_asm+0x1a/0x30 [ 2207.744741][ C1]