last executing test programs: 15.644761915s ago: executing program 1 (id=3820): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x90f, 0x0) unshare(0x2e020080) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 13.885711936s ago: executing program 1 (id=3825): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket(0x400000000010, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x7c54, &(0x7f00000000c0)={0x0, 0x25b7, 0x0, 0x2, 0x1dd}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 13.758270917s ago: executing program 4 (id=3827): socket$unix(0x1, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x109) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 12.783703333s ago: executing program 1 (id=3829): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x412, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x400, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x0, 0xc4, 0xe4, 0x13, 0x1}}, {{0x9, 0x4, 0x6, 0x81, 0x10, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}, @generic={0x2, 0xf}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x44, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb24444"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000ec0)=ANY=[@ANYBLOB="050f1900020a1003020c000821f8000a1003020c0005030d00a34fa41a2242784d49c776c9f6a667b4cf76e0259a4bf0acc04935123246f0474b85092acafbafa2ae2dbb1c56e6faa264ef29c3f1884f03565855cf89b3da421c92e61fb9fcec6359764e789e93c714ac824a9f2218ebbed76c2a7182a663a1a72f89cc2dd35e8bc485f62c3467551a818a7b6c7a3258725fa3d54d0e4aa0a62bbfdeae505aaba1b5e8c62c2e278ffa2168c119bbbad936b65faf238988f55bf66b3c378ea29d111a4a0761e5b8cd9f9e53afabebd34613"], 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYRESHEX=r1]}, {0x7f, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7f039811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600a2a83e423e2e"]}, {0x0, 0x0}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 12.349842126s ago: executing program 4 (id=3832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x44000) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r5 = gettid() getdents64(0xffffffffffffffff, 0x0, 0xc0) sendmmsg$unix(r4, &(0x7f00000029c0)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="fb2cf897908ffd9858f764b41b799453dd7a2d8acd934a70c3457904db81f5cc4366840bec19591f58eb8912df49f4", 0x2f}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000580)="2c77beae59d4977b12f152de4f584b5b02c922f9b502ce813c740610644d4f92ea2b95d16e52448b9fa97999244c6bce1dc7ea7ca8f7c0bc5e0f299bd9bf179f230812dcdee6018aef42e66ff1120ae88d62b87eb9549d1afbc8626f5e6f7f56105819ea716e6749adb6fc44fee6edf59fb9fe9c9c3a284e98017532264d4b3414bf2b1c27b29fb723", 0x89}, {&(0x7f0000000640)="01ff83a5b26f1c1d4d74eda3cfd4a189b7bf1bdfb036dc580cc8f155090a344f1e284770fddff727836277fc08ccfab0fb659fafce61e30a002e18075fcdc39ef3d09a4415c11ab26fa0580b9feeaca47b0c36b6535c472290f3d8696e5699360c", 0x61}, {&(0x7f00000006c0)="cb6ecf781b6b3133b0fe653ed9a25d549c08d8990caeabdc901f68d8f04c6dc6515e8563108267f032881e6c814208436b57fffdb34b74c7f01c6f99dfc4730a4906b2501035d262f02fbf72f6a41351ca0db40e16eec5f8e0cac1144f825b704239b241b6ac673d3dfd1418caa631df7c9798d7d1c7647a88528f3c5c305572e65bbfbd94f945d4190defd96e823ea46380d8b764587a80e882b893800979b4cbfe9f04f027d491331cc91a2ecb0407d23384f4772abffd158f35ae3536f694e843d454b6baf7108f60aa10a631380371e972be1949b0a7e09f390a42b766f860174059e1d3c83493ce38", 0xeb}, {&(0x7f00000007c0)="4fd97401e92b028a54ef9835382aff748a551dd5fe90b1b356edbb67871598fdd775be819427697386a005d238503d9632a1c2ce38d4c604453c6c8eb8c0cf5501883fe6b162de3d0c35837cf8e1b1fb47e3c560234363375661e0493cc78568d753533eb942285f2e1010679c7e985d78af17474556fb32ee84a0a785d4baaa0c88e701e70c154d28792e90db6470150234a89f904ed9a049a0ee8e62f38aac", 0xa0}, {&(0x7f0000000880)="7b2c2e10d985e47d93a61326da515c6c4dfd81af2514d88f121e925398a89cbddddb7eeaf2b1c4d31a8cba2d39b492698ab13e491444bac578fe931eb48d06ed012d46c31d03a4c78ba4a9f79426d7bc70850ef9429748a956d260578dec7ab78c34670b818bec205c303adb92460149911f379fef2d24c43abeefe91b533a8cfa2d0b59a20860f7efb7a63ee06dd455b5a9188ae16f8f6c008234b6dc45", 0x9e}, {&(0x7f0000000940)="d83802de0ca509302cab916a9a16495a9821033748ab24302074eee8b29b400d83b4363ba0c5b879804821c954a3c122b7d5ad5993df0f76a57620f6b115b8f0e05104a70f7fa4097f762028705ee66d65f78f7d3e5b024cfc5da679596d8ca89c44994e6739bc5e2842b8feb60c4751cc3d63e23c75143d059db8392c1c6a205b136f751ef5a251266d14af09ebd6701e922a512fefc1e83256615f18302902618306ad8fcc", 0xa6}, {&(0x7f0000000a00)="5bc474277362adbfc24008f11cb2b764132c36388a589427ea6674c380cb62ea5369d142b7795690258ee012bf09e9765f05e09a1835ce8596615fec43b3f9e8f326dfb03c7e604ee4c650b397c0a2005dd776e3dfbec774c3613b88502ea60ac5ec1cd5a5184300ba0ccb139f74410c3b4ce0440f1833859bab5826e1e15c5a20e8783dd0703f9e34678d285b2c408f1945f83f1224564a214934f999b148c7e30c539874e3f0c4a7564ae37b0d5cca4fcc21b0b0", 0xb5}], 0x7, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x52c6ae6ab2ab1c72}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="e8a14574bb001770907b270a0dcd8efadfefd27579bb52729daa4ecd2e92401e7f3c0b822f84a4247fc0481f302584e2ea60c778139ce7021580789cfb8fd9fecb8a7d7a3699478a9967f9d4c98ed38a822aef9c7411b788d553f31f1245d0e26516d3b35687ba0ac76fbaa960bf42a10adf8079f37d779530339692d5268243d24c9167a04b2c9504f483297d224d7b410d2f7b6e960054148b151f136c0d01e71d08e1273ce0", 0xa7}, {&(0x7f0000000c80)="4191d5018eded604caa523406c40705ceb8844843e6283a6d770ee20804f3218a4144ffd33e5c2adebdcf649a1903a753986fe2f5b405bc199942df597187c9212e1f566262a4c56c2272ff90ffb25f4e1554976160a4d615e075a02b53c699da4bff4321679a697ae9ac41b222056babd9bd73d638e3be7e6bb8487d145c8156d0f8728caca6092dac5d27a158bb2b387962c0b7b7832490ac54f5828116f0c16e2564ea4a79ba278a8a4ff152c293fd38c40472650cdb599507d1b1d306423b936179acd49e9e24e9915c49b", 0xcd}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000000ad02b4ed0502ca65f59616373e68f0e27f3950aba088f58f54599290959acbe259d0ac5f861335037e91a16ad58734fe3f78a878f1a9ebeeb171ec29b4b225eea9607731cf6b00ac485378bb796a8c54c7f1085cc13a96d66d4c6b83c35bcaac14122482cccf412bffcff3c8749fb2cc708b4362c78a351e7e74ab930eb9d4eeb5903b9862a9c9899c1b96f06f2a443a7e908144e3fed6f1c46ad8fc80b27b37b9b0f5e45f805a9cb41d7f6ad2c1c0759824426b3a65f2d1dda870600c0f7124d408f38dd9b93ec550421891081be7116d9f39543aba126d27881afef6b59e4b666d485b933", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3], 0x140, 0x4000}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000001b00)="f0d547fcdab03dadd1cde3b73a682fb3cbba85d706b7df93aae1d7eb99518f71409d3ac0c7e92663bb32726c5a71ce31c22458c22bd27e5f323302deeacf3fcf573ef7b8249987742c5bfb43c88ab5d6d39b885569e487e598243d923e0415e5446a61592aa5749e04a0a4902cacaa7d3a454bd2344fa5b3f4e2fc47a167d77fb192f8ff81ffe3ad4d9e9307a9a5af6a4697b42bedfb34aa863d183e7e558fae5fbe635e8b8a0e6a743d5c8e2cee4ef8df85fbc9bf5e10876f0df0fad7f1d3af125a3275583ebea7506f76f8cf1c", 0xce}, {&(0x7f0000001c00)="6fb73d9fe9cb77b8af5f25f440121e8a6a1e195194c349ae410c053ffdf669d91610b5a465e91e6ac63965bfab82137ebd12848a0be1df497e81f4c0dbe5e88443f28b050302d61e24b0828a84398c96f665ff57f8af8141745d3c43ef7c8a23", 0x60}, {&(0x7f0000001d00)}, {&(0x7f0000001e00)="e0256379bfe41ae4f9d3ad1aee0dcda1e227fb1100080faee03bc49181c691520cbc8b912827288810a26e855e60bdc3d0417711085da039fb6d0b7d00e3237d2735f48627340c5eed813f11257ba4c49465ad4a0a3d14dd88587f69e83299599242629044025cdb7415eab20ad52d5d421938dd566341582392924240159caf6fa8ef8e824c39c6081aa0e17ef09a83f2f9f4b2444c17bff44d4c6a8b7d152918c2a75be6acf1dc", 0xa8}, {0x0}], 0x6, &(0x7f0000002100)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x8010}}, {{&(0x7f0000002140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000021c0)="a55139c3033d207ce7b6ccfc476d60a618f6560a4de7d979a1d19d", 0x1b}, {&(0x7f0000002200)="3f27205872e859d65b70a9cc3d79c229d6e75032bd295fbeed9e9368759b6acc761e91a3e1b8ba226cf27df33cda5a80d2be9a11f6e6740ab3ae41eba69102fcfaa7ec5363957cb820052953f37c09e151133ecdc428a7fda0326d5ddb225640831ab8e97047fa", 0x67}, {&(0x7f0000002300)="88bd426d752de9f58b4af4883bacd9ce1aa5d6958f7e7550713d20adb99f054a5c7ec438", 0x24}, {&(0x7f0000002340)="31feb124776806e09322df1195a6dec7c2e84ef90d0d5bd04f4881fbf8fc45e0ce098a004903a0e8f0add2f724cdc96b9e778bf2c29fc0fc46c5af40a53c627e17f997016ec02e1dc9d826d36fcc8a1d9773840023455f8aebeeb03f0992a3d30ffe8150bf23192e69a10e1d4c3990e37382f98b92fe30119d0422374f15e63f07315436aae083d0509199493fcdaa0263329b3a0bf65ccc", 0x98}, {&(0x7f0000002400)="d179348dc5d7ef8e5cf030bc92619f636cff139b952cfdc35e2e6b3ad141be52d9d9907e8045c51c2a03285181383377892eb5f2a7f60e13c8ca68286b0b47839df0ecc2188fd38d6feb66", 0x4b}, {0x0}, {&(0x7f0000002540)="3a44a8ac9c8acd49f1a777cd372b02f0e9e01e1fb8fa2ab3384345e87aec98691973d9eacbc532f22d80c090ae219d88592e8b44b6345c690e3e05e8fc0c9a05b63617041119ebc4ca2d9fc95b6d505902420af0f9faf241a30d3fdb0ae169ee37689f5ee53fbe8e2044e53805d1d36106651f7b518a5a5b13176e60a728e4893ec053d99465b3c1ceeb", 0x8a}], 0x7}}, {{&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002740)=[{0x0}], 0x1, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0xa0, 0x4844}}], 0x6, 0x4000000) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x0, 0x6, 0x10, &(0x7f0000000140)=""/16}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 11.56890167s ago: executing program 2 (id=3834): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x222201) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xfa11, 0xfdffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x39) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) openat$ppp(0xffffffffffffff9c, 0x0, 0x7c96c0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0xffff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 11.402247931s ago: executing program 0 (id=3835): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 9.95714447s ago: executing program 4 (id=3838): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_disconnect(r0) 9.412510883s ago: executing program 2 (id=3840): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$rose(r0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) 8.591956038s ago: executing program 0 (id=3841): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x144, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) 8.357357009s ago: executing program 2 (id=3842): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7.576848204s ago: executing program 0 (id=3843): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x303a00, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x7fffffff, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x60) r2 = socket(0x1d, 0x2, 0x6) bind$inet(r2, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.408567415s ago: executing program 2 (id=3845): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_uring_setup(0x1b7b, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xbc}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r2, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 6.850232189s ago: executing program 0 (id=3846): r0 = dup(0xffffffffffffffff) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}, {&(0x7f00000010c0)="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", 0x800}, {&(0x7f0000000600)="858d7fea4a28929b477ea8d50597d101703c320338922eaf0502b2a71a65f9fab9752bc75bde4826b26f5b9298d7097016a91b2a01c9ec44c13bf97147478940a56b59fddde2a28663c5893d458788fb8ecb6a9f0a193c687ab081c12e5219d1e6f64a4adf6ce6ab4fb519061ba4a50facbc1c4c59f3d0252df984080e6490cd27b57e664a6b8e87fe086ca9dc0691471240eb53addda118fe65796096dd4d91f263bde859c1d21f78ae6f3693e1e6a85f8b37e3c6d010020bf3bf1a3892c9c193465f", 0xc3}], 0x3, 0x0, 0x0, 0x20008884}], 0x1, 0xa4163e9b36674d35) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000100)) close(r3) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 6.764676969s ago: executing program 4 (id=3847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 6.72079657s ago: executing program 1 (id=3849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x44000) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r5 = gettid() getdents64(0xffffffffffffffff, 0x0, 0xc0) sendmmsg$unix(r4, &(0x7f00000029c0)=[{{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="fb2cf897908ffd9858f764b41b799453dd7a2d8acd934a70c3457904db81f5cc4366840bec19591f58eb8912df49f4", 0x2f}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000580)="2c77beae59d4977b12f152de4f584b5b02c922f9b502ce813c740610644d4f92ea2b95d16e52448b9fa97999244c6bce1dc7ea7ca8f7c0bc5e0f299bd9bf179f230812dcdee6018aef42e66ff1120ae88d62b87eb9549d1afbc8626f5e6f7f56105819ea716e6749adb6fc44fee6edf59fb9fe9c9c3a284e98017532264d4b3414bf2b1c27b29fb723", 0x89}, {&(0x7f0000000640)="01ff83a5b26f1c1d4d74eda3cfd4a189b7bf1bdfb036dc580cc8f155090a344f1e284770fddff727836277fc08ccfab0fb659fafce61e30a002e18075fcdc39ef3d09a4415c11ab26fa0580b9feeaca47b0c36b6535c472290f3d8696e5699360c", 0x61}, {&(0x7f00000006c0)="cb6ecf781b6b3133b0fe653ed9a25d549c08d8990caeabdc901f68d8f04c6dc6515e8563108267f032881e6c814208436b57fffdb34b74c7f01c6f99dfc4730a4906b2501035d262f02fbf72f6a41351ca0db40e16eec5f8e0cac1144f825b704239b241b6ac673d3dfd1418caa631df7c9798d7d1c7647a88528f3c5c305572e65bbfbd94f945d4190defd96e823ea46380d8b764587a80e882b893800979b4cbfe9f04f027d491331cc91a2ecb0407d23384f4772abffd158f35ae3536f694e843d454b6baf7108f60aa10a631380371e972be1949b0a7e09f390a42b766f860174059e1d3c83493ce38", 0xeb}, {&(0x7f00000007c0)="4fd97401e92b028a54ef9835382aff748a551dd5fe90b1b356edbb67871598fdd775be819427697386a005d238503d9632a1c2ce38d4c604453c6c8eb8c0cf5501883fe6b162de3d0c35837cf8e1b1fb47e3c560234363375661e0493cc78568d753533eb942285f2e1010679c7e985d78af17474556fb32ee84a0a785d4baaa0c88e701e70c154d28792e90db6470150234a89f904ed9a049a0ee8e62f38aac", 0xa0}, {&(0x7f0000000880)="7b2c2e10d985e47d93a61326da515c6c4dfd81af2514d88f121e925398a89cbddddb7eeaf2b1c4d31a8cba2d39b492698ab13e491444bac578fe931eb48d06ed012d46c31d03a4c78ba4a9f79426d7bc70850ef9429748a956d260578dec7ab78c34670b818bec205c303adb92460149911f379fef2d24c43abeefe91b533a8cfa2d0b59a20860f7efb7a63ee06dd455b5a9188ae16f8f6c008234b6dc45", 0x9e}, {&(0x7f0000000940)="d83802de0ca509302cab916a9a16495a9821033748ab24302074eee8b29b400d83b4363ba0c5b879804821c954a3c122b7d5ad5993df0f76a57620f6b115b8f0e05104a70f7fa4097f762028705ee66d65f78f7d3e5b024cfc5da679596d8ca89c44994e6739bc5e2842b8feb60c4751cc3d63e23c75143d059db8392c1c6a205b136f751ef5a251266d14af09ebd6701e922a512fefc1e83256615f18302902618306ad8fcc", 0xa6}, {&(0x7f0000000a00)="5bc474277362adbfc24008f11cb2b764132c36388a589427ea6674c380cb62ea5369d142b7795690258ee012bf09e9765f05e09a1835ce8596615fec43b3f9e8f326dfb03c7e604ee4c650b397c0a2005dd776e3dfbec774c3613b88502ea60ac5ec1cd5a5184300ba0ccb139f74410c3b4ce0440f1833859bab5826e1e15c5a20e8783dd0703f9e34678d285b2c408f1945f83f1224564a214934f999b148c7e30c539874e3f0c4a7564ae37b0d5cca4fcc21b0b0", 0xb5}], 0x7, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r5}}}], 0x20, 0x52c6ae6ab2ab1c72}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000bc0)="e8a14574bb001770907b270a0dcd8efadfefd27579bb52729daa4ecd2e92401e7f3c0b822f84a4247fc0481f302584e2ea60c778139ce7021580789cfb8fd9fecb8a7d7a3699478a9967f9d4c98ed38a822aef9c7411b788d553f31f1245d0e26516d3b35687ba0ac76fbaa960bf42a10adf8079f37d779530339692d5268243d24c9167a04b2c9504f483297d224d7b410d2f7b6e960054148b151f136c0d01e71d08e1273ce0", 0xa7}, {&(0x7f0000000c80)="4191d5018eded604caa523406c40705ceb8844843e6283a6d770ee20804f3218a4144ffd33e5c2adebdcf649a1903a753986fe2f5b405bc199942df597187c9212e1f566262a4c56c2272ff90ffb25f4e1554976160a4d615e075a02b53c699da4bff4321679a697ae9ac41b222056babd9bd73d638e3be7e6bb8487d145c8156d0f8728caca6092dac5d27a158bb2b387962c0b7b7832490ac54f5828116f0c16e2564ea4a79ba278a8a4ff152c293fd38c40472650cdb599507d1b1d306423b936179acd49e9e24e9915c49b", 0xcd}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3], 0x140, 0x4000}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{0x0}, {0x0}, {&(0x7f0000001b00)="f0d547fcdab03dadd1cde3b73a682fb3cbba85d706b7df93aae1d7eb99518f71409d3ac0c7e92663bb32726c5a71ce31c22458c22bd27e5f323302deeacf3fcf573ef7b8249987742c5bfb43c88ab5d6d39b885569e487e598243d923e0415e5446a61592aa5749e04a0a4902cacaa7d3a454bd2344fa5b3f4e2fc47a167d77fb192f8ff81ffe3ad4d9e9307a9a5af6a4697b42bedfb34aa863d183e7e558fae5fbe635e8b8a0e6a743d5c8e2cee4ef8df85fbc9bf5e10876f0df0fad7f1d3af125a3275583ebea7506f76f8cf1c", 0xce}, {&(0x7f0000001c00)="6fb73d9fe9cb77b8af5f25f440121e8a6a1e195194c349ae410c053ffdf669d91610b5a465e91e6ac63965bfab82137ebd12848a0be1df497e81f4c0dbe5e88443f28b050302d61e24b0828a84398c96f665ff57f8af8141745d3c43ef7c8a23", 0x60}, {&(0x7f0000001d00)}, {&(0x7f0000001e00)="e0256379bfe41ae4f9d3ad1aee0dcda1e227fb1100080faee03bc49181c691520cbc8b912827288810a26e855e60bdc3d0417711085da039fb6d0b7d00e3237d2735f48627340c5eed813f11257ba4c49465ad4a0a3d14dd88587f69e83299599242629044025cdb7415eab20ad52d5d421938dd566341582392924240159caf6fa8ef8e824c39c6081aa0e17ef09a83f2f9f4b2444c17bff44d4c6a8b7d152918c2a75be6acf1dc", 0xa8}, {0x0}], 0x7, &(0x7f0000002100)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x8010}}, {{&(0x7f0000002140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000021c0)="a55139c3033d207ce7b6ccfc476d60a618f6560a4de7d979a1d19d", 0x1b}, {&(0x7f0000002200)="3f27205872e859d65b70a9cc3d79c229d6e75032bd295fbeed9e9368759b6acc761e91a3e1b8ba226cf27df33cda5a80d2be9a11f6e6740ab3ae41eba69102fcfaa7ec5363957cb820052953f37c09e151133ecdc428a7fda0326d5ddb225640831ab8e97047fa", 0x67}, {&(0x7f0000002300)="88bd426d752de9f58b4af4883bacd9ce1aa5d6958f7e7550713d20adb99f054a5c7ec438", 0x24}, {&(0x7f0000002340)="31feb124776806e09322df1195a6dec7c2e84ef90d0d5bd04f4881fbf8fc45e0ce098a004903a0e8f0add2f724cdc96b9e778bf2c29fc0fc46c5af40a53c627e17f997016ec02e1dc9d826d36fcc8a1d9773840023455f8aebeeb03f0992a3d30ffe8150bf23192e69a10e1d4c3990e37382f98b92fe30119d0422374f15e63f07315436aae083d0509199493fcdaa0263329b3a0bf65ccc", 0x98}, {&(0x7f0000002400)="d179348dc5d7ef8e5cf030bc92619f636cff139b952cfdc35e2e6b3ad141be52d9d9907e8045c51c2a03285181383377892eb5f2a7f60e13c8ca68286b0b47839df0ecc2188fd38d6feb66", 0x4b}, {0x0}, {&(0x7f0000002540)="3a44a8ac9c8acd49f1a777cd372b02f0e9e01e1fb8fa2ab3384345e87aec98691973d9eacbc532f22d80c090ae219d88592e8b44b6345c690e3e05e8fc0c9a05b63617041119ebc4ca2d9fc95b6d505902420af0f9faf241a30d3fdb0ae169ee37689f5ee53fbe8e2044e53805d1d36106651f7b518a5a5b13176e60a728e4893ec053d99465b3c1ceeb", 0x8a}], 0x7}}, {{&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002740)=[{0x0}], 0x1, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0xa0, 0x4844}}], 0x6, 0x4000000) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x0, 0x6, 0x10, &(0x7f0000000140)=""/16}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6.720190939s ago: executing program 4 (id=3850): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a00000005"], 0x64}}, 0x10000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 6.64965441s ago: executing program 3 (id=3851): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000400000008", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xfffc, 0x1008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) socket$inet_udp(0x2, 0x2, 0x0) 6.63154728s ago: executing program 4 (id=3852): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 5.661954596s ago: executing program 3 (id=3853): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0xd87, @loopback}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 4.691886832s ago: executing program 3 (id=3854): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(0x0, 0x22) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(r2, 0x1) accept4(r2, 0x0, 0x0, 0x80800) 3.818729667s ago: executing program 1 (id=3855): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.686190418s ago: executing program 0 (id=3856): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.611826428s ago: executing program 3 (id=3857): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x303, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1d0, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9e8c}, {0x6, 0x11, 0x725a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x340c8f4f}, {0x6, 0x11, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x12d3}, {0x6, 0x11, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x258d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000840)={0x2, r7}) 3.579003198s ago: executing program 1 (id=3858): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8, 0x3, r5}]}, 0x24}}, 0x0) socket$phonet(0x23, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x10) 3.566200028s ago: executing program 2 (id=3859): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) 2.653053974s ago: executing program 0 (id=3860): socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/disk', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="e625e5e1479260f9ffff44f308060401080006040001aaaaaaaaaaaae0000002bbbb0800000000852734ab446f6b7f1d8400001b94ad50123994491a3decd05c171bd0a8c2b0f43b6fed5cca7eb41f89d4553f26d8358e8a8c1db2848c43cfe1b777d0b6335825707b590d035f6f700b14be2182898f85e3649bcd8a21553669e269e07c7b04000000703ee6935055279278d2f5f0ef62a92be44e9fc06d8c765a"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 2.574191884s ago: executing program 2 (id=3861): r0 = socket(0x2a, 0x80000, 0x80000001) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x5, &(0x7f0000000080)={0x0, 0x31, 0x1, @tid=r1}, 0x0) write(r0, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f771", 0x20) socket(0x1e, 0x4, 0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = syz_open_procfs(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0), 0x4) getdents64(r3, 0x0, 0x0) exit(0x8) getdents(r3, 0x0, 0x3b) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) 536.562207ms ago: executing program 3 (id=3862): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000900)="f7", 0x1}], 0x1}}], 0x2, 0x40408e0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 3 (id=3863): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): ETDEV_CHANGE): batadv_slave_0: link becomes ready [ 827.279784][T10860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 827.340182][T15371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.422148][T15371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.458980][T15371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.489249][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 827.508621][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 827.574518][T15371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.595943][T15371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.626563][T15371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.670230][T15371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.734640][T11060] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 827.901566][T10860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.931749][T10860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.955581][T11060] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 827.973931][T11060] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 828.000910][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 828.021333][T11060] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 828.043221][T10860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.079126][T10860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.096472][T11060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 828.138294][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 828.163564][T11060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 828.217694][T11060] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 828.243184][T11060] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 828.265808][T11060] usb 5-1: Product: syz [ 828.275646][T11060] usb 5-1: Manufacturer: syz [ 828.306935][T11060] cdc_wdm 5-1:1.0: skipping garbage [ 828.327900][T15553] fuse: Bad value for 'group_id' [ 828.335217][T11060] cdc_wdm 5-1:1.0: skipping garbage [ 828.360117][T11060] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 828.375089][T11060] cdc_wdm 5-1:1.0: Unknown control protocol [ 828.619071][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 828.625714][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 828.632459][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 828.639087][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 828.645889][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 828.648601][T11060] usb 5-1: USB disconnect, device number 56 [ 828.652491][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 828.664445][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 829.388779][T15562] tmpfs: Unknown parameter 'usrquota' [ 832.449180][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 832.462326][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 832.471272][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 832.495143][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 832.504429][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 832.511665][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 832.659923][T14319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.778420][T14319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.663647][T14319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.840719][T10916] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 833.960158][T14319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.172024][T15609] tmpfs: Unknown parameter 'usrquota' [ 834.598036][T15139] Bluetooth: hci5: command 0x0409 tx timeout [ 834.645254][T15614] fuse: Bad value for 'group_id' [ 834.900903][T15574] chnl_net:caif_netlink_parms(): no params data found [ 835.450394][T14319] tipc: Left network mode [ 836.148317][T15574] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.158939][T15574] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.167531][T15574] device bridge_slave_0 entered promiscuous mode [ 836.214552][T15574] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.221838][T15574] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.231448][T15574] device bridge_slave_1 entered promiscuous mode [ 836.329227][T15574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.504681][T15574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.654129][T15139] Bluetooth: hci5: command 0x041b tx timeout [ 836.742884][T15649] ALSA: mixer_oss: invalid OSS volume '' [ 837.182464][T15574] team0: Port device team_slave_0 added [ 837.212276][T15574] team0: Port device team_slave_1 added [ 837.355369][T14319] bond2: (slave gretap1): Releasing backup interface [ 837.487634][ T26] audit: type=1107 audit(1762250258.133:91): pid=15652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 838.733513][T15139] Bluetooth: hci5: command 0x040f tx timeout [ 839.433450][T15574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.480823][T15574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.683139][T15574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.727484][T15660] tipc: Enabled bearer , priority 0 [ 839.812239][T15662] device syzkaller0 entered promiscuous mode [ 839.918038][T15574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.928650][T15574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.958106][T15574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.978334][T15661] tipc: Resetting bearer [ 840.036181][T14319] bond0: (slave wlan1): Releasing backup interface [ 840.051910][T15657] tipc: Resetting bearer [ 840.082320][T15657] tipc: Disabling bearer [ 840.187316][T15574] device hsr_slave_0 entered promiscuous mode [ 840.234900][T15574] device hsr_slave_1 entered promiscuous mode [ 840.279947][T15574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.287826][T15574] Cannot create hsr debugfs directory [ 840.376282][T15675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3040'. [ 840.813733][T15139] Bluetooth: hci5: command 0x0419 tx timeout [ 842.206199][T14319] device hsr_slave_0 left promiscuous mode [ 842.338867][T14319] device hsr_slave_1 left promiscuous mode [ 842.393556][T15705] ALSA: mixer_oss: invalid OSS volume '' [ 842.791312][T14319] device bridge_slave_1 left promiscuous mode [ 842.823568][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.918214][T14319] device bridge_slave_0 left promiscuous mode [ 842.942312][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.046601][T14319] device bridge0 left promiscuous mode [ 843.056957][T14319] device bond_slave_0 left promiscuous mode [ 843.063375][T14319] device bond_slave_1 left promiscuous mode [ 843.137645][T14319] device veth1_macvtap left promiscuous mode [ 843.162094][T14319] device veth0_macvtap left promiscuous mode [ 843.196540][T14319] device veth1_vlan left promiscuous mode [ 843.226991][T14319] device veth0_vlan left promiscuous mode [ 843.647102][T14319] bond16 (unregistering): Released all slaves [ 844.042167][T14319] bond15 (unregistering): Released all slaves [ 844.062679][T15727] serio: Serial port ttyS3 [ 844.565747][ T26] audit: type=1107 audit(1762250265.213:92): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 844.592992][T14319] bond14 (unregistering): Released all slaves [ 845.345915][T14319] bond13 (unregistering): Released all slaves [ 845.985512][T14319] bond12 (unregistering): Released all slaves [ 846.121028][T14319] bond11 (unregistering): Released all slaves [ 846.266803][T14319] bond10 (unregistering): Released all slaves [ 846.481179][T14319] bond9 (unregistering): Released all slaves [ 846.600821][T14319] bond8 (unregistering): Released all slaves [ 847.188207][T14319] bond7 (unregistering): Released all slaves [ 847.558622][T14319] bond6 (unregistering): Released all slaves [ 847.583516][T14319] bond1 (unregistering): (slave macvlan5): Removing an active aggregator [ 847.592759][T14319] bond1 (unregistering): (slave macvlan5): Releasing backup interface [ 847.751549][T14319] bond5 (unregistering): Released all slaves [ 847.766295][T14319] bond4 (unregistering): Released all slaves [ 847.776609][T14319] bond3 (unregistering): Released all slaves [ 847.788010][T14319] bond2 (unregistering): Released all slaves [ 847.922094][T14319] bond1 (unregistering): Released all slaves [ 848.526402][T14319] team0 (unregistering): Port device team_slave_1 removed [ 848.572855][T14319] team0 (unregistering): Port device team_slave_0 removed [ 848.622390][T14319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.669295][T14319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.132379][T14319] bond0 (unregistering): Released all slaves [ 849.711436][T15749] tipc: Enabling of bearer rejected, already enabled [ 849.954250][T15764] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 851.035058][T15770] bond18: (slave vxcan5): The slave device specified does not support setting the MAC address [ 851.407545][T15770] bond18: (slave vxcan5): Error -95 calling set_mac_address [ 851.669415][T15789] serio: Serial port ttyS3 [ 852.476198][T15774] device macvlan3 entered promiscuous mode [ 852.490635][T15774] device bond18 entered promiscuous mode [ 852.522422][T15774] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 852.551722][T15774] device bond18 left promiscuous mode [ 853.115758][T15802] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 853.384434][T15574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 853.412457][T15574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 853.452447][T14319] tipc: Left network mode [ 853.493471][T15574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 853.518179][T15574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 854.049530][T15574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.130463][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 854.142081][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 854.160483][T15574] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.214678][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 854.235179][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 854.586570][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.593793][T11790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.605300][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 854.955999][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 855.011508][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.018715][T11790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.030776][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 855.042128][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 855.066690][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 855.124171][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 855.169124][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 855.177818][T11790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 855.316698][T15826] tipc: Enabling of bearer rejected, failed to enable media [ 855.449988][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3067'. [ 856.264032][T15854] serio: Serial port ttyS3 [ 856.391124][T14319] bond7: (slave gretap1): Releasing active interface [ 856.584665][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 856.630073][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 857.005571][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 857.015491][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 857.133788][T14071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 857.142338][T14071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 857.629259][T15863] netlink: 'syz.2.3073': attribute type 1 has an invalid length. [ 857.707168][T15574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 857.751676][T15866] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address [ 857.764452][T15866] bond19: (slave vxcan5): Error -95 calling set_mac_address [ 857.880142][T14319] bond0: (slave wlan1): Releasing backup interface [ 858.778473][T14319] bridge5: port 1(veth3) entered disabled state [ 858.908987][T14319] device hsr_slave_0 left promiscuous mode [ 859.018482][T14319] device hsr_slave_1 left promiscuous mode [ 859.047741][T14319] device bridge_slave_1 left promiscuous mode [ 859.078940][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.187540][T14319] device bridge_slave_0 left promiscuous mode [ 859.281158][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3078'. [ 859.862462][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.083691][T14319] device bond_slave_0 left promiscuous mode [ 860.089801][T14319] device bond_slave_1 left promiscuous mode [ 860.276993][T14319] device veth1_macvtap left promiscuous mode [ 860.327087][T14319] device veth0_macvtap left promiscuous mode [ 860.351583][T14319] device veth1_vlan left promiscuous mode [ 860.374564][T14319] device veth0_vlan left promiscuous mode [ 861.873208][T15932] usb usb5: usbfs: process 15932 (syz.0.3084) did not claim interface 0 before use [ 862.478116][T14319] bond17 (unregistering): Released all slaves [ 862.490019][T14319] bond16 (unregistering): Released all slaves [ 862.715607][T14319] bond15 (unregistering): Released all slaves [ 862.731027][T14319] bond14 (unregistering): Released all slaves [ 862.931704][T14319] bond13 (unregistering): Released all slaves [ 862.948586][T14319] bond12 (unregistering): Released all slaves [ 862.961888][T14319] bond11 (unregistering): Released all slaves [ 862.974563][T14319] bond10 (unregistering): Released all slaves [ 863.110681][T14319] bond9 (unregistering): Released all slaves [ 863.123235][T14319] bond8 (unregistering): Released all slaves [ 863.136815][T14319] bond7 (unregistering): Released all slaves [ 863.265436][T14319] bond6 (unregistering): Released all slaves [ 863.390807][T14319] bond5 (unregistering): Released all slaves [ 863.581309][T14319] bond4 (unregistering): Released all slaves [ 863.604809][T14319] bond1 (unregistering): (slave macvlan3): Removing an active aggregator [ 863.613804][T14319] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 863.819474][ T26] audit: type=1107 audit(1762250284.463:93): pid=15940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 863.871651][T14319] bond3 (unregistering): Released all slaves [ 864.472216][T14319] bond2 (unregistering): Released all slaves [ 865.209581][T14319] bond1 (unregistering): Released all slaves [ 866.699466][T15945] random: crng reseeded on system resumption [ 867.464426][T14319] team0 (unregistering): Port device team_slave_1 removed [ 867.563375][T14319] team0 (unregistering): Port device team_slave_0 removed [ 867.609926][T14319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.654994][T14319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.118984][T14319] bond0 (unregistering): Released all slaves [ 868.192738][T15914] tipc: Enabled bearer , priority 0 [ 868.217069][T15915] device syzkaller0 entered promiscuous mode [ 868.261186][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 868.270322][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'. [ 868.285834][T15949] netlink: 'syz.4.3088': attribute type 1 has an invalid length. [ 868.432039][T15950] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 868.498503][T15950] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 868.547578][T15951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3088'. [ 868.566509][T15952] device macvlan2 entered promiscuous mode [ 868.584858][T15952] device bond1 entered promiscuous mode [ 868.608146][T15952] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 868.750809][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3089'. [ 869.485965][T15952] device bond1 left promiscuous mode [ 869.577983][T15910] tipc: Resetting bearer [ 869.812485][T15910] tipc: Disabling bearer [ 869.936668][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.943111][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.077851][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 870.093810][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.102614][T15973] tipc: Enabling of bearer rejected, failed to enable media [ 870.161333][T15574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.222530][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 870.237380][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 870.297320][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 870.329629][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 870.389344][T15574] device veth0_vlan entered promiscuous mode [ 870.401781][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 870.418604][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 870.447560][T15574] device veth1_vlan entered promiscuous mode [ 870.567735][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 870.587706][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 870.654082][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 870.690727][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 870.707735][T15574] device veth0_macvtap entered promiscuous mode [ 870.752643][T15574] device veth1_macvtap entered promiscuous mode [ 870.823205][ T4332] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 870.853503][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.895264][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.994777][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.006029][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.018960][T15574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.026732][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 871.047845][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 871.875043][ T4332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.904162][ T4332] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 871.924887][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 871.935287][ T4332] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 871.956947][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 871.983858][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 872.003707][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.019130][ T4332] usb 5-1: Product: syz [ 872.029107][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.048603][ T4332] usb 5-1: Manufacturer: syz [ 872.062743][ T4332] usb 5-1: SerialNumber: syz [ 872.069887][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.116648][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.145247][T15574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.169655][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 872.188803][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 872.230971][T15574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.252520][T15574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.287575][T15574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.322031][T15574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.520497][T10679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.536393][T10679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.600701][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 872.619760][T14347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.645612][T14347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.688863][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 873.709531][T15694] usb 5-1: USB disconnect, device number 57 [ 875.959270][T16038] tipc: Enabled bearer , priority 0 [ 876.023648][T16040] device syzkaller0 entered promiscuous mode [ 876.199756][T16047] netlink: 'syz.3.3106': attribute type 1 has an invalid length. [ 876.221805][T15139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 876.233156][T15139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 876.242088][T15139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 876.270682][T15139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 876.280330][T15139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 876.287759][T15139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 876.394953][T16049] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 876.441729][T16049] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 876.523366][T16057] tmpfs: Unknown parameter 'usrquota' [ 876.587548][T16037] tipc: Resetting bearer [ 876.680207][T16060] serio: Serial port ttyS3 [ 876.695024][T16037] tipc: Disabling bearer [ 876.765736][T16053] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3106'. [ 876.802046][T16047] device macvlan2 entered promiscuous mode [ 876.814794][T16047] device bond1 entered promiscuous mode [ 876.868691][T16047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 877.063866][T16047] device bond1 left promiscuous mode [ 877.259291][T10074] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.421803][T10074] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.610849][T10074] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.753219][T10074] team0: Port device netdevsim0 removed [ 877.781453][T10074] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.823253][ T954] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 877.951429][T16050] chnl_net:caif_netlink_parms(): no params data found [ 878.053178][ T4311] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 878.334455][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 878.835854][ T954] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 878.848679][ T4311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.874833][ T954] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 878.889228][ T4311] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 879.072892][ T954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 879.465895][ T4311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 879.687951][ T954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 879.710292][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 879.730060][ T954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 879.754904][ T4311] usb 5-1: Product: syz [ 879.774349][ T4311] usb 5-1: Manufacturer: syz [ 879.795110][ T4311] usb 5-1: SerialNumber: syz [ 879.800344][ T954] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 879.870559][ T954] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 879.889091][ T954] usb 2-1: Product: syz [ 879.909342][ T954] usb 2-1: Manufacturer: syz [ 879.931030][ T954] cdc_wdm 2-1:1.0: skipping garbage [ 879.947095][ T954] cdc_wdm 2-1:1.0: skipping garbage [ 879.972514][ T954] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 879.991926][ T954] cdc_wdm 2-1:1.0: Unknown control protocol [ 880.028383][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.043328][T16050] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.084080][T16050] device bridge_slave_0 entered promiscuous mode [ 880.108653][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.133843][T16050] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.156716][T16050] device bridge_slave_1 entered promiscuous mode [ 880.201875][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 880.208506][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 880.216895][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 880.223502][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 880.233168][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 880.239791][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 880.246191][T15757] usb 2-1: USB disconnect, device number 65 [ 880.308445][T10074] tipc: Disabling bearer [ 880.314568][T10074] tipc: Left network mode [ 880.413385][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 881.059507][T16050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.468062][T15694] usb 5-1: USB disconnect, device number 58 [ 881.521044][T16050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.761832][T16134] tipc: Started in network mode [ 881.767007][T16134] tipc: Node identity ae3c04453209, cluster identity 4711 [ 881.774394][T16134] tipc: Enabled bearer , priority 0 [ 881.922916][T16137] device syzkaller0 entered promiscuous mode [ 881.940279][T16050] team0: Port device team_slave_0 added [ 882.030534][T16050] team0: Port device team_slave_1 added [ 882.041051][T16133] tipc: Resetting bearer [ 882.084298][T16133] tipc: Disabling bearer [ 882.161694][T16050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.198731][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.336999][T16050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.450500][T16050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.467155][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.504003][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 882.618743][T16050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.803987][T10074] device gretap0 left promiscuous mode [ 882.831027][T10074] bridge0: port 3(gretap0) entered disabled state [ 883.705273][T10074] bond2: (slave gretap1): Releasing backup interface [ 883.967523][T16050] device hsr_slave_0 entered promiscuous mode [ 884.082711][T16165] tmpfs: Unknown parameter 'usrquota' [ 884.338653][T16050] device hsr_slave_1 entered promiscuous mode [ 884.573200][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 885.191779][T10074] bond0: (slave wlan1): Releasing backup interface [ 885.283292][T15757] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 885.491213][T15757] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 885.510364][T15757] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 885.551432][T15757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 885.568678][T15757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 885.591694][T15757] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 885.645848][T15757] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 885.663279][T15757] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 885.678742][T15757] usb 4-1: Product: syz [ 885.693362][T15757] usb 4-1: Manufacturer: syz [ 885.729570][T15757] cdc_wdm 4-1:1.0: skipping garbage [ 885.749927][T15757] cdc_wdm 4-1:1.0: skipping garbage [ 885.811728][T15757] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 885.823602][T15757] cdc_wdm 4-1:1.0: Unknown control protocol [ 885.858175][T10074] device hsr_slave_0 left promiscuous mode [ 885.865226][T10074] device hsr_slave_1 left promiscuous mode [ 885.873877][T10074] device bridge_slave_1 left promiscuous mode [ 885.880191][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.923346][T10074] device bridge_slave_0 left promiscuous mode [ 885.963586][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.007255][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 886.013872][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 886.020796][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 886.027422][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 886.038071][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 886.044698][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 886.051073][ T4311] usb 4-1: USB disconnect, device number 57 [ 886.155673][T10074] device bond_slave_0 left promiscuous mode [ 886.161696][T10074] device bond_slave_1 left promiscuous mode [ 886.175807][T16191] input: syz0 as /devices/virtual/input/input49 [ 886.189576][T10074] device veth1_macvtap left promiscuous mode [ 886.197765][T10074] device veth0_macvtap left promiscuous mode [ 886.204772][T10074] device veth1_vlan left promiscuous mode [ 886.214926][T10074] device veth0_vlan left promiscuous mode [ 886.967913][T10074] bond10 (unregistering): Released all slaves [ 887.514820][T10074] bond9 (unregistering): Released all slaves [ 887.578003][T10074] bond8 (unregistering): Released all slaves [ 887.602195][T10074] bond7 (unregistering): Released all slaves [ 888.747102][T10074] bond6 (unregistering): Released all slaves [ 889.251507][T16217] tmpfs: Unknown parameter 'usrquota' [ 889.988519][T10074] bond5 (unregistering): Released all slaves [ 890.226000][T10074] bond4 (unregistering): Released all slaves [ 890.321066][T10074] bond3 (unregistering): Released all slaves [ 890.340072][T10074] bond2 (unregistering): Released all slaves [ 890.364947][T10074] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 890.375552][T10074] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 890.727971][T10074] bond1 (unregistering): Released all slaves [ 891.741241][T16241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3140'. [ 893.198886][T10074] team0 (unregistering): Port device team_slave_1 removed [ 893.306258][T10074] team0 (unregistering): Port device team_slave_0 removed [ 893.408069][T10074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.530584][T10074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.942535][T10074] bond0 (unregistering): Released all slaves [ 898.485695][T16313] netlink: 'syz.1.3158': attribute type 1 has an invalid length. [ 898.550586][T16050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 898.688389][T16316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3158'. [ 898.763159][T16326] tmpfs: Unknown parameter 'usrquota' [ 899.340845][T16321] device macvlan2 entered promiscuous mode [ 899.352831][T16050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 899.367479][T16050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 899.378624][T16050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 899.691477][T16050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.723881][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.752269][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 899.812344][T16050] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.882845][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 899.912049][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 899.954600][T10680] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.961714][T10680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.994625][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 900.034259][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 900.073797][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 900.113562][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.120727][T14347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.197397][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 900.239884][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 900.288995][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 900.352608][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 900.424175][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 900.442729][T16050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 900.481878][T16050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 900.554851][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 900.577629][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 900.620728][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 900.690171][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 900.735974][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 900.778106][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.810534][T10680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 901.610068][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 901.628378][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 901.676102][T16050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.740097][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 901.761434][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 901.803215][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 901.825759][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 901.852185][T16050] device veth0_vlan entered promiscuous mode [ 901.868240][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 901.891489][T14347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 901.940094][T16050] device veth1_vlan entered promiscuous mode [ 902.033830][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 902.051553][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 902.078895][T16050] device veth0_macvtap entered promiscuous mode [ 902.574467][T16050] device veth1_macvtap entered promiscuous mode [ 902.637240][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.710468][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.745676][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.777013][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.801881][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.843152][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.889480][T16050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.935982][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 902.950855][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 902.998248][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 903.031986][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 903.072807][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.154107][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.223275][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.277336][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.320638][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.428057][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.475493][T16050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.500794][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 903.520696][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 903.564768][T16050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.599059][T16050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.657337][T16050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.715982][T16050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.760273][T16403] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 903.899419][T16404] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 903.942353][T16404] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 904.102554][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'. [ 904.111607][T16409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3173'. [ 904.777118][T16403] device macvlan2 entered promiscuous mode [ 904.804059][T16403] device bond2 entered promiscuous mode [ 904.810003][T16403] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 904.894380][T16403] device bond2 left promiscuous mode [ 905.227434][T16428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3176'. [ 905.824972][T15691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.838345][T15691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.867872][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 905.932980][T10074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.957410][T10074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.024945][T10834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 906.339328][T16445] lo speed is unknown, defaulting to 1000 [ 906.349084][T16445] lo speed is unknown, defaulting to 1000 [ 906.356238][T16445] lo speed is unknown, defaulting to 1000 [ 906.408081][T16445] infiniband syz2: set active [ 906.412996][T16445] infiniband syz2: added lo [ 906.427377][T15755] lo speed is unknown, defaulting to 1000 [ 906.465758][T16445] RDS/IB: syz2: added [ 906.470349][T16445] smc: adding ib device syz2 with port count 1 [ 906.476948][T16445] smc: ib device syz2 port 1 has pnetid [ 906.487933][T16445] lo speed is unknown, defaulting to 1000 [ 906.544468][T16445] lo speed is unknown, defaulting to 1000 [ 906.598429][T16445] lo speed is unknown, defaulting to 1000 [ 906.651683][T16445] lo speed is unknown, defaulting to 1000 [ 906.706605][T16445] lo speed is unknown, defaulting to 1000 [ 906.760204][T16445] lo speed is unknown, defaulting to 1000 [ 906.821385][T15755] lo speed is unknown, defaulting to 1000 [ 908.058501][T10074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.217055][T10074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.259669][T15139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 908.269923][T15139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 908.281477][T15139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 908.325080][T15139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 908.347397][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 908.354936][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 908.416161][T10074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.549721][T10074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.586960][T16467] lo speed is unknown, defaulting to 1000 [ 908.844109][T10074] tipc: Disabling bearer [ 908.858320][T10074] tipc: Left network mode [ 909.793251][ T14] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 909.949828][T16467] chnl_net:caif_netlink_parms(): no params data found [ 909.996917][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.027762][ T14] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 910.057043][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.105958][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.123711][T10074] bond1: (slave gretap1): Releasing backup interface [ 910.150029][ T14] usb 5-1: config 0 descriptor?? [ 910.404194][ T14] usb 5-1: string descriptor 0 read error: -71 [ 910.413427][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 910.420430][ T14] usb 5-1: USB disconnect, device number 59 [ 910.457728][T16467] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.515619][T16467] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.532447][T16467] device bridge_slave_0 entered promiscuous mode [ 910.677080][T10074] bond0: (slave wlan1): Releasing backup interface [ 910.715542][T16467] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.733704][T16467] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.768969][T16467] device bridge_slave_1 entered promiscuous mode [ 911.075501][T16467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.181417][T16467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.427787][T16467] team0: Port device team_slave_0 added [ 911.490677][T16467] team0: Port device team_slave_1 added [ 911.615333][T16467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.696365][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.733858][T16467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.768973][T10074] device hsr_slave_0 left promiscuous mode [ 911.803895][T10074] device hsr_slave_1 left promiscuous mode [ 911.853513][T10074] device bridge_slave_1 left promiscuous mode [ 911.863405][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.898438][T10074] device bridge_slave_0 left promiscuous mode [ 911.937099][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.137669][T10074] device veth1_macvtap left promiscuous mode [ 912.147582][T10074] device veth0_macvtap left promiscuous mode [ 912.197630][T10074] device veth1_vlan left promiscuous mode [ 912.209372][T10074] device veth0_vlan left promiscuous mode [ 912.493524][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 913.058642][T10074] bond19 (unregistering): Released all slaves [ 913.104785][T10074] bond18 (unregistering): Released all slaves [ 913.134940][T10074] bond17 (unregistering): Released all slaves [ 914.573458][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 915.070028][T10074] bond16 (unregistering): Released all slaves [ 915.087794][T10074] bond15 (unregistering): Released all slaves [ 915.314955][T10074] bond14 (unregistering): Released all slaves [ 915.458075][T10074] bond13 (unregistering): Released all slaves [ 915.471658][T10074] bond12 (unregistering): Released all slaves [ 915.482081][T10074] bond11 (unregistering): Released all slaves [ 915.492379][T10074] bond10 (unregistering): Released all slaves [ 915.507820][T10074] bond9 (unregistering): Released all slaves [ 915.518379][T10074] bond8 (unregistering): Released all slaves [ 915.530071][T10074] bond7 (unregistering): Released all slaves [ 915.667496][T10074] bond6 (unregistering): Released all slaves [ 915.678966][T10074] bond5 (unregistering): Released all slaves [ 915.827527][T10074] bond4 (unregistering): Released all slaves [ 915.960261][T10074] bond3 (unregistering): Released all slaves [ 915.971190][T10074] bond2 (unregistering): Released all slaves [ 915.981552][T10074] bond1 (unregistering): Released all slaves [ 916.539971][T10074] team0 (unregistering): Port device team_slave_1 removed [ 916.584735][T10074] team0 (unregistering): Port device team_slave_0 removed [ 916.628563][T10074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.675853][T10074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.743274][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 917.145760][T10074] bond0 (unregistering): Released all slaves [ 917.218546][T16467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.225946][T16467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.252361][T16467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.596049][T16467] device hsr_slave_0 entered promiscuous mode [ 917.624323][T16467] device hsr_slave_1 entered promiscuous mode [ 917.654315][T16467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.661962][T16467] Cannot create hsr debugfs directory [ 917.853165][T16277] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 918.103267][T16277] usb 1-1: Using ep0 maxpacket: 32 [ 918.355826][T16277] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 918.356277][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 918.364753][T16277] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 918.381817][T16277] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 918.392975][T16277] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 918.422116][T16277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.476274][T16277] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 918.511413][T16277] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 918.547761][T16277] usb 1-1: Product: syz [ 918.563244][T16277] usb 1-1: Manufacturer: syz [ 918.582429][T16277] usb 1-1: SerialNumber: syz [ 918.606488][T16277] usb 1-1: config 0 descriptor?? [ 918.645448][T16277] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 918.724122][T16277] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 919.019703][T16594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3215'. [ 920.200062][T16467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 920.218328][T16467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 920.250357][T16467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 920.277287][T16467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 920.646597][T16467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.667546][ T14] usb 1-1: USB disconnect, device number 57 [ 920.674672][T10379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 920.682587][T10379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 920.719190][ T14] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 920.760375][T16467] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.911775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 920.934125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 920.958414][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.965622][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.070353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 921.097151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 921.607204][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.614617][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.776805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 921.854584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 921.879872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 921.910158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 921.951759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 921.982524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 922.006447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 922.039858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 922.079285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 922.196198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 922.290642][T16649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3226'. [ 922.860034][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 922.931859][T16651] fuse: Unknown parameter 'group_i00000000000000000000' [ 923.004261][T10074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 923.046993][T16467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 925.256852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 925.265047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 925.475426][T16467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.529660][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 925.540239][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 925.562566][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 925.572327][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 925.583306][T16467] device veth0_vlan entered promiscuous mode [ 925.591336][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 925.600219][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 925.614063][T16467] device veth1_vlan entered promiscuous mode [ 925.655552][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 925.681630][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 925.723888][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 925.735539][T14940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 925.750719][T16467] device veth0_macvtap entered promiscuous mode [ 925.777438][T16467] device veth1_macvtap entered promiscuous mode [ 925.798342][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.810660][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.821170][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.831721][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.842004][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.852586][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.871098][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.881818][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.894203][T16467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.905921][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.916781][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.934074][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.945150][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.009106][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.021387][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.073256][T16467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.188323][T16467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.188475][T16696] tmpfs: Unknown parameter 'usrquota' [ 926.295184][T16467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.313397][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 926.324184][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 926.351591][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 926.394823][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.434063][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 926.464365][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 926.519346][T16467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.563196][T16467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.603164][T16467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.636097][T16467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.363825][T10923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.372018][T10923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.522813][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 928.163342][T16719] usb usb5: usbfs: process 16719 (syz.3.3241) did not claim interface 0 before use [ 928.716608][T10044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.743114][T10044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.914101][T14071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 929.109695][T16732] fuse: Unknown parameter 'group_id00000000000000000000' [ 929.776344][ T4281] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 929.786575][ T4281] Bluetooth: hci2: Injecting HCI hardware error event [ 929.802392][ T4280] Bluetooth: hci2: hardware error 0x00 [ 931.336974][ T52] block nbd2: Attempted send on invalid socket [ 931.343926][ T52] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 931.357266][ T52] gfs2: error 10 reading superblock [ 931.378668][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.394891][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.853248][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 932.058794][T16781] serio: Serial port ttyS3 [ 932.891024][T16784] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 933.108605][T16787] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 933.253748][ T93] block nbd3: Attempted send on invalid socket [ 933.263240][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.303409][ T93] block nbd3: Attempted send on invalid socket [ 933.313422][ T93] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.345359][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 933.416438][ T93] block nbd3: Attempted send on invalid socket [ 933.493311][ T93] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.510150][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 933.602225][ T93] block nbd3: Attempted send on invalid socket [ 933.608492][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.624384][T16787] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 933.631941][ T52] block nbd3: Attempted send on invalid socket [ 933.638312][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.655824][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 933.679644][ T52] block nbd3: Attempted send on invalid socket [ 933.685971][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.698681][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 933.737608][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 933.751993][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 933.757163][ T93] block nbd3: Attempted send on invalid socket [ 933.767311][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.776941][ T52] block nbd3: Attempted send on invalid socket [ 933.783462][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.798318][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 933.823509][ T93] block nbd3: Attempted send on invalid socket [ 933.830269][ T93] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 933.841145][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 933.873996][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 933.980512][T16797] device macvlan2 entered promiscuous mode [ 933.999012][T16798] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 934.025878][T16797] device bond2 entered promiscuous mode [ 934.035713][T16798] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 934.059413][T16797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 934.131847][T16797] device bond2 left promiscuous mode [ 934.228070][T16810] fuse: Unknown parameter 'group_id00000000000000000000' [ 937.994757][T16850] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 938.046604][T16856] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 938.108797][T16856] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 938.134919][T16856] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 938.257933][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 938.313932][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 938.368766][T16856] device macvlan2 entered promiscuous mode [ 938.381572][T16856] device bond1 entered promiscuous mode [ 938.388098][T16856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 938.411351][T16856] device bond1 left promiscuous mode [ 938.627154][T16867] fuse: Unknown parameter 'group_id00000000000000000000' [ 939.933237][ T4281] Bluetooth: hci5: command 0x201b tx timeout [ 942.013034][T16899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3281'. [ 946.426079][T16937] usb usb5: usbfs: process 16937 (syz.0.3296) did not claim interface 0 before use [ 946.625286][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 946.634315][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 946.728679][T16941] tmpfs: Unknown parameter 'usrquota' [ 949.601646][T16983] tmpfs: Unknown parameter 'usrquota' [ 950.030760][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3308'. [ 952.764632][T17021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 956.035533][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3327'. [ 959.023206][T17091] usb usb5: usbfs: process 17091 (syz.2.3340) did not claim interface 0 before use [ 959.523199][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 959.532100][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 959.774065][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 960.063723][T17111] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 962.842706][ T93] nbd_handle_cmd: 3 callbacks suppressed [ 962.842728][ T93] block nbd1: Attempted send on invalid socket [ 962.856034][ T93] blk_print_req_error: 3 callbacks suppressed [ 962.856047][ T93] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 962.876957][ T93] block nbd1: Attempted send on invalid socket [ 962.884666][ T93] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 962.902275][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 962.925838][ T52] block nbd1: Attempted send on invalid socket [ 962.932122][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 962.941566][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 962.972967][ T52] block nbd1: Attempted send on invalid socket [ 962.980383][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 962.993991][ T52] block nbd1: Attempted send on invalid socket [ 963.000303][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.025071][T17136] usb usb5: usbfs: process 17136 (syz.0.3354) did not claim interface 0 before use [ 963.040223][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'. [ 963.049787][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 963.069369][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 963.114910][ T52] block nbd1: Attempted send on invalid socket [ 963.121352][ T52] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.134039][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 963.157567][ T52] block nbd1: Attempted send on invalid socket [ 963.164392][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.175984][ T52] block nbd1: Attempted send on invalid socket [ 963.182337][ T52] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.192275][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 963.203442][ T52] block nbd1: Attempted send on invalid socket [ 963.209854][ T52] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.220823][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 963.233292][ T52] block nbd1: Attempted send on invalid socket [ 963.239633][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 963.250593][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 963.261844][T17133] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 963.271696][T17133] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 966.849910][T17161] fuse: Bad value for 'user_id' [ 967.368019][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 967.407184][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 967.431920][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 967.467441][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 967.502546][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 967.536400][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 967.572337][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 967.593862][T17175] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 967.610888][T17175] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 969.193683][T17186] usb usb5: usbfs: process 17186 (syz.1.3369) did not claim interface 0 before use [ 969.463172][T17186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 969.472052][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 969.814358][ T26] audit: type=1107 audit(1762250390.453:94): pid=17185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 977.098577][T17224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3375'. [ 977.818445][ T93] nbd_handle_cmd: 14 callbacks suppressed [ 977.818465][ T93] block nbd1: Attempted send on invalid socket [ 977.818483][ T93] blk_print_req_error: 14 callbacks suppressed [ 977.818492][ T93] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 977.818541][ T93] gfs2: error 10 reading superblock [ 980.643223][ T22] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 981.183199][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 981.190015][ T22] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 981.211630][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 981.231922][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 981.243461][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 1024 [ 981.263120][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 981.289150][ T22] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 981.313485][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.397443][ T22] usb 1-1: Product: syz [ 981.401659][ T22] usb 1-1: Manufacturer: syz [ 981.437778][ T22] usb 1-1: SerialNumber: syz [ 981.484463][ T22] usb 1-1: config 0 descriptor?? [ 981.490076][T17250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 981.519055][T17250] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 981.582703][T17257] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 981.605605][ T22] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 981.612726][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 981.612768][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 981.662246][T17257] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.670033][T17257] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.732536][T17257] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.739685][T17257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.747059][T17257] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.754158][T17257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.826806][T15752] usb 1-1: USB disconnect, device number 58 [ 981.834412][T15752] mcba_usb 1-1:0.0 can0: device disconnected [ 981.898996][T17257] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 983.322742][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3393'. [ 984.495746][ T4280] Bluetooth: hci0: command 0x0405 tx timeout [ 991.976971][T17333] input: syz0 as /devices/virtual/input/input50 [ 992.547555][T17335] ALSA: mixer_oss: invalid OSS volume 'VOL' [ 992.818843][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.825592][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.233520][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3413'. [ 993.330657][T17354] tmpfs: Unknown parameter 'usrquota' [ 1000.078908][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 1004.033217][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1004.042102][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1005.852729][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1007.080809][T17458] serio: Serial port ttyS3 [ 1007.526108][ T52] block nbd2: Attempted send on invalid socket [ 1007.532706][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.548287][ T52] block nbd2: Attempted send on invalid socket [ 1007.557628][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.567157][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1007.577692][ T52] block nbd2: Attempted send on invalid socket [ 1007.583890][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.593446][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1007.603884][ T52] block nbd2: Attempted send on invalid socket [ 1007.610102][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.619714][ T52] block nbd2: Attempted send on invalid socket [ 1007.626102][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.635671][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1007.645654][ T52] block nbd2: Attempted send on invalid socket [ 1007.651829][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.662089][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1007.672278][ T52] block nbd2: Attempted send on invalid socket [ 1007.678504][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.688216][ T52] block nbd2: Attempted send on invalid socket [ 1007.694594][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.704418][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1007.714561][ T52] block nbd2: Attempted send on invalid socket [ 1007.720724][ T52] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.730319][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1007.740463][ T52] block nbd2: Attempted send on invalid socket [ 1007.746681][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.756289][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1007.766510][T17466] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1007.776059][T17466] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1009.238971][ T26] audit: type=1326 audit(1762250429.883:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.4.3452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ef918f6c9 code=0x0 [ 1009.607993][T17491] serio: Serial port ttyS3 [ 1011.601199][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1011.611390][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1011.621686][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1011.631412][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1011.641552][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1011.652257][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1011.662323][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1011.672187][T17506] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1011.681740][T17506] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1013.438558][T17532] serio: Serial port ttyS3 [ 1016.582235][ T52] nbd_handle_cmd: 14 callbacks suppressed [ 1016.582256][ T52] block nbd4: Attempted send on invalid socket [ 1016.596652][ T52] blk_print_req_error: 14 callbacks suppressed [ 1016.596663][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.612342][ T52] block nbd4: Attempted send on invalid socket [ 1016.618893][ T52] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.628228][T17554] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1016.638051][ T52] block nbd4: Attempted send on invalid socket [ 1016.644288][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.653787][T17554] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1016.663775][ T52] block nbd4: Attempted send on invalid socket [ 1016.670439][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.679887][ T52] block nbd4: Attempted send on invalid socket [ 1016.686180][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.695582][T17554] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1016.705398][ T52] block nbd4: Attempted send on invalid socket [ 1016.711571][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.720989][T17554] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1016.730857][ T52] block nbd4: Attempted send on invalid socket [ 1016.737145][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.746558][ T52] block nbd4: Attempted send on invalid socket [ 1016.752728][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.762215][T17554] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1016.772615][ T52] block nbd4: Attempted send on invalid socket [ 1016.778855][ T52] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1016.788259][T17554] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1016.797859][T17554] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1018.849330][T11167] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 1018.880384][T11167] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1020.064359][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1020.073311][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'. [ 1020.210885][T17574] fido_id[17574]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1020.567484][T15752] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1021.095123][T15752] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1021.113225][T15752] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1021.153554][T15752] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1021.184467][T15752] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.217065][T15752] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1021.258839][T15752] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1021.267410][T15752] usb 1-1: Product: syz [ 1021.271916][T15752] usb 1-1: Manufacturer: syz [ 1021.304914][T15752] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1022.053535][T15752] usb 1-1: USB disconnect, device number 59 [ 1023.270183][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1023.279135][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1023.503213][T11167] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1023.984482][T11167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1023.984501][T11167] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1023.984514][T11167] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1023.986165][T11167] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1023.986191][T11167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1023.986210][T11167] usb 5-1: Product: syz [ 1023.986223][T11167] usb 5-1: Manufacturer: syz [ 1023.986231][T11167] usb 5-1: SerialNumber: syz [ 1024.193793][T11167] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1024.394951][ T954] usb 5-1: USB disconnect, device number 60 [ 1024.396554][ T954] usblp0: removed [ 1025.850079][ T52] block nbd4: Attempted send on invalid socket [ 1025.856366][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1025.865860][ T52] block nbd4: Attempted send on invalid socket [ 1025.872048][ T52] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1025.881580][T17656] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1025.891907][ T52] block nbd4: Attempted send on invalid socket [ 1025.898140][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1025.907580][T17656] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1025.917577][ T52] block nbd4: Attempted send on invalid socket [ 1025.923919][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1025.933363][ T52] block nbd4: Attempted send on invalid socket [ 1025.939654][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1025.949101][T17656] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1025.958864][ T52] block nbd4: Attempted send on invalid socket [ 1025.965212][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1025.974640][T17656] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1025.984646][ T52] block nbd4: Attempted send on invalid socket [ 1025.991269][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1026.000762][ T52] block nbd4: Attempted send on invalid socket [ 1026.006991][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1026.016434][T17656] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1026.026107][ T52] block nbd4: Attempted send on invalid socket [ 1026.032287][ T52] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1026.041815][T17656] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1026.051369][T17656] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1026.123217][T15744] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1026.269869][T17662] serio: Serial port ttyS3 [ 1026.335065][T15744] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1026.801416][T15744] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1026.843169][T15744] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1026.863343][T15744] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.897676][T15744] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1026.934046][T15744] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1026.942579][T15744] usb 1-1: Product: syz [ 1026.947234][T15744] usb 1-1: Manufacturer: syz [ 1026.978955][T15744] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1027.505234][T15744] usb 1-1: USB disconnect, device number 60 [ 1027.643223][T11167] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1028.064572][T11167] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1028.086680][T11167] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1028.129670][T11167] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.256393][T11167] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1028.373398][T11167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1028.418713][T11167] usb 3-1: Product: syz [ 1028.586332][T11167] usb 3-1: Manufacturer: syz [ 1028.603596][T11167] usb 3-1: SerialNumber: syz [ 1029.316896][T11167] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1029.410554][ T52] block nbd0: Attempted send on invalid socket [ 1029.416928][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.426462][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1029.436379][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1029.447080][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1029.456885][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1029.526927][T11167] usb 3-1: USB disconnect, device number 45 [ 1029.566910][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1029.577478][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1029.587728][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1029.597476][T17701] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1029.607075][T17701] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1030.206390][T11167] usblp0: removed [ 1030.355873][T17710] serio: Serial port ttyS3 [ 1031.293148][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 1031.379004][T15746] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1031.386748][ T93] nbd_handle_cmd: 11 callbacks suppressed [ 1031.386765][ T93] block nbd0: Attempted send on invalid socket [ 1031.401662][ T93] blk_print_req_error: 11 callbacks suppressed [ 1031.401686][ T93] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1031.419404][ T93] gfs2: error 10 reading superblock [ 1031.675354][T15746] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1031.743506][T15746] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1031.772859][T15746] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1032.159443][T15746] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1032.259450][T15746] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1032.285912][T15746] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1032.299234][T15746] usb 4-1: Product: syz [ 1032.306400][T15746] usb 4-1: Manufacturer: syz [ 1033.021921][T15746] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1033.180907][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1033.239371][ T4311] usb 4-1: USB disconnect, device number 58 [ 1033.431448][T17749] serio: Serial port ttyS3 [ 1033.966908][ T52] block nbd3: Attempted send on invalid socket [ 1033.973700][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1033.983250][ T52] block nbd3: Attempted send on invalid socket [ 1033.989470][ T52] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1033.998786][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1034.008710][ T52] block nbd3: Attempted send on invalid socket [ 1034.015030][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.024341][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1034.034401][ T52] block nbd3: Attempted send on invalid socket [ 1034.040669][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.050173][ T52] block nbd3: Attempted send on invalid socket [ 1034.056357][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.065711][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1034.076129][ T52] block nbd3: Attempted send on invalid socket [ 1034.082286][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.091882][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1034.102505][ T52] block nbd3: Attempted send on invalid socket [ 1034.108744][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.118108][ T52] block nbd3: Attempted send on invalid socket [ 1034.124362][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.134589][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1034.144288][ T52] block nbd3: Attempted send on invalid socket [ 1034.150588][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1034.160021][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1034.170004][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1034.180275][T17751] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1034.189859][T17751] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1037.043786][ T14] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1037.774040][ T14] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1039.203850][ T14] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1039.345441][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1039.491015][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1039.771685][ T14] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1039.834232][ T14] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1039.897694][ T14] usb 4-1: can't set config #1, error -71 [ 1039.908990][ T14] usb 4-1: USB disconnect, device number 59 [ 1040.245565][T17813] serio: Serial port ttyS3 [ 1040.560249][T17820] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 1040.792798][T17824] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1041.830608][T17824] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1041.850356][T17820] device macvlan2 entered promiscuous mode [ 1041.991135][T17820] device bond3 entered promiscuous mode [ 1042.003273][T17820] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1042.014236][T17820] device bond3 left promiscuous mode [ 1042.134927][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 1042.533151][ T954] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1042.768305][ T954] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1042.833404][ T954] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1044.350977][ T954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1044.428675][ T954] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1044.542223][ T954] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1044.608511][ T954] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1044.678222][ T954] usb 3-1: Product: syz [ 1044.709135][ T954] usb 3-1: Manufacturer: syz [ 1044.807954][ T954] cdc_wdm 3-1:1.0: skipping garbage [ 1044.928654][T17857] serio: Serial port ttyS3 [ 1045.610172][ T954] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1045.653436][ T954] usb 3-1: USB disconnect, device number 46 [ 1048.313901][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1048.328338][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1048.336707][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1049.323211][T15746] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1050.041937][T15746] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1051.583293][T15746] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1051.593764][T15746] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.377610][T15746] usb 4-1: string descriptor 0 read error: -71 [ 1052.405466][T15746] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1052.473266][T15746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1052.525322][T15746] usb 4-1: can't set config #1, error -71 [ 1052.567876][T15746] usb 4-1: USB disconnect, device number 60 [ 1053.473122][T15752] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1053.733327][T15752] usb 5-1: Using ep0 maxpacket: 16 [ 1053.740882][T15752] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1053.842611][T15752] usb 5-1: config 1 has no interface number 1 [ 1053.859659][T15752] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1053.892332][T15752] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1053.929252][T15752] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.968126][T15752] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1053.985788][T15752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.994796][T15752] usb 5-1: Product: syz [ 1054.000020][T15752] usb 5-1: Manufacturer: syz [ 1054.008495][T15752] usb 5-1: SerialNumber: syz [ 1054.257461][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.263839][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.438539][T15752] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1054.643156][ T4311] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1054.874958][ T4311] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1054.883731][ T4311] usb 4-1: config 0 has no interface number 0 [ 1054.889850][ T4311] usb 4-1: config 0 interface 49 altsetting 0 has an invalid endpoint with address 0x29, skipping [ 1054.905191][ T4311] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1054.914614][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.924031][ T4311] usb 4-1: Product: syz [ 1054.928277][ T4311] usb 4-1: Manufacturer: syz [ 1054.932908][ T4311] usb 4-1: SerialNumber: syz [ 1054.942250][ T4311] usb 4-1: config 0 descriptor?? [ 1054.948732][T17956] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1055.003242][T15744] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1055.177066][ T4311] qmi_wwan: probe of 4-1:0.49 failed with error -22 [ 1055.194791][T15744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1055.205310][ T4311] usb 4-1: USB disconnect, device number 61 [ 1055.239594][T15744] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1055.252794][T15744] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.278643][T15744] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1055.298445][T15744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1055.309978][T15744] usb 1-1: Product: syz [ 1055.314248][T15744] usb 1-1: Manufacturer: syz [ 1055.319090][T15744] usb 1-1: SerialNumber: syz [ 1055.512934][T15752] usb 5-1: USB disconnect, device number 61 [ 1055.541275][T15744] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1055.565100][T17926] udevd[17926]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.735220][T15744] usb 1-1: USB disconnect, device number 61 [ 1055.754825][T15744] usblp0: removed [ 1056.766645][T17984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1058.485009][T17984] syz.4.3604 (17984) used greatest stack depth: 18176 bytes left [ 1060.433309][ T954] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1061.064867][ T954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1061.101024][ T954] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1061.175289][ T954] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.247483][T18031] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 1061.277716][ T954] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1061.326950][ T954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1061.390363][T18033] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1061.415245][ T954] usb 4-1: Product: syz [ 1061.441330][ T954] usb 4-1: Manufacturer: syz [ 1061.468452][ T954] usb 4-1: SerialNumber: syz [ 1061.532823][T18033] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1061.635114][T18031] device macvlan2 entered promiscuous mode [ 1061.668938][T18031] device bond1 entered promiscuous mode [ 1061.685908][T18031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1061.702140][T18031] device bond1 left promiscuous mode [ 1061.732312][ T954] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1061.873747][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3619'. [ 1061.952121][T11060] usb 4-1: USB disconnect, device number 62 [ 1062.003273][T11060] usblp0: removed [ 1062.847105][ T93] nbd_handle_cmd: 3 callbacks suppressed [ 1062.847126][ T93] block nbd3: Attempted send on invalid socket [ 1062.859339][ T93] blk_print_req_error: 3 callbacks suppressed [ 1062.859353][ T93] I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1062.877201][ T93] gfs2: error 10 reading superblock [ 1064.064751][T18076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.790258][ T26] audit: type=1107 audit(1762250485.433:96): pid=18071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1064.971846][T18087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1065.132560][T18087] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1066.655198][ T52] block nbd2: Attempted send on invalid socket [ 1066.661477][ T52] I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1066.671224][ T52] gfs2: error 10 reading superblock [ 1069.433262][T16277] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1069.593192][T16277] usb 4-1: device descriptor read/64, error -71 [ 1069.929229][T18154] Bluetooth: MGMT ver 1.22 [ 1069.936241][T16277] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1070.103298][T16277] usb 4-1: device descriptor read/64, error -71 [ 1070.524649][T15744] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1070.603333][T16277] usb usb4-port1: attempt power cycle [ 1070.702359][ T26] audit: type=1107 audit(1762250491.343:97): pid=18156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1070.794982][T15744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1070.812912][T15744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.830178][T15744] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1070.861819][T15744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.899884][T15744] usb 1-1: config 0 descriptor?? [ 1071.047300][T16277] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1071.086837][T16277] usb 4-1: device descriptor read/8, error -71 [ 1071.189982][T18145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.199263][T18145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.254381][T15744] usbhid 1-1:0.0: can't add hid device: -71 [ 1071.267992][T15744] usbhid: probe of 1-1:0.0 failed with error -71 [ 1071.300542][T15744] usb 1-1: USB disconnect, device number 62 [ 1071.363122][T16277] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1071.423855][T16277] usb 4-1: device descriptor read/8, error -71 [ 1071.558891][T16277] usb usb4-port1: unable to enumerate USB device [ 1071.720392][T18171] netlink: 'syz.1.3656': attribute type 1 has an invalid length. [ 1071.765619][T18171] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1071.786490][T18171] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 1071.812968][T18175] device macvlan2 entered promiscuous mode [ 1071.820495][T18175] device bond2 entered promiscuous mode [ 1071.826895][T18175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1071.835872][T18175] device bond2 left promiscuous mode [ 1072.438556][T18181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1072.528842][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3661'. [ 1076.052606][T18237] netlink: 'syz.3.3679': attribute type 1 has an invalid length. [ 1077.421521][T18238] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1077.442457][ T26] audit: type=1107 audit(1762250498.083:98): pid=18242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1077.934476][T18238] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1077.999148][T18249] device macvlan2 entered promiscuous mode [ 1078.041847][T18249] device bond4 entered promiscuous mode [ 1078.053742][T18249] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1078.083028][T18249] device bond4 left promiscuous mode [ 1078.663182][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1079.793188][ T93] block nbd3: Attempted send on invalid socket [ 1079.848434][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1079.950808][ T93] block nbd3: Attempted send on invalid socket [ 1080.052648][ T93] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1080.268985][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1080.443388][ T52] block nbd3: Attempted send on invalid socket [ 1080.449598][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1080.463366][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1080.491198][ T52] block nbd3: Attempted send on invalid socket [ 1080.497510][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1080.953487][ T52] block nbd3: Attempted send on invalid socket [ 1080.959704][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1080.969726][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1081.004034][ T93] block nbd3: Attempted send on invalid socket [ 1081.010218][ T93] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.042318][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1081.057328][ T93] block nbd3: Attempted send on invalid socket [ 1081.063622][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.078776][ T52] block nbd3: Attempted send on invalid socket [ 1081.085303][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.097683][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1081.123534][ T52] block nbd3: Attempted send on invalid socket [ 1081.129742][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.160977][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1081.249251][ T93] block nbd3: Attempted send on invalid socket [ 1081.255526][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.274610][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1081.350775][T18283] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1081.392182][T18283] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1081.579557][T18306] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 1081.603538][T18306] netlink: 'syz.0.3703': attribute type 2 has an invalid length. [ 1081.922866][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3704'. [ 1082.058921][T18309] sg_write: data in/out 768/168 bytes for SCSI command 0x96-- guessing data in; [ 1082.058921][T18309] program syz.2.3700 not setting count and/or reply_len properly [ 1082.929287][T11060] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1082.961726][T11060] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1083.142129][T18326] fido_id[18326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1084.883185][T11060] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1085.043586][T11060] usb 5-1: device descriptor read/64, error -71 [ 1085.411037][T11060] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1086.173197][T11060] usb 5-1: device descriptor read/64, error -71 [ 1086.268272][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 1086.297412][T11060] usb usb5-port1: attempt power cycle [ 1086.723906][T11060] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1086.804926][T11060] usb 5-1: device descriptor read/8, error -71 [ 1087.363148][T11060] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1087.423932][T11060] usb 5-1: device descriptor read/8, error -71 [ 1087.560645][T11060] usb usb5-port1: unable to enumerate USB device [ 1090.537128][ T93] nbd_handle_cmd: 2 callbacks suppressed [ 1090.537149][ T93] block nbd1: Attempted send on invalid socket [ 1090.549258][ T93] blk_print_req_error: 2 callbacks suppressed [ 1090.549270][ T93] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1090.565285][ T93] gfs2: error 10 reading superblock [ 1091.767458][ T4281] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 1092.573234][T16872] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1092.830477][T18433] 9pnet_fd: p9_fd_create_tcp (18433): problem connecting socket to 127.0.0.1 [ 1093.373404][T16872] usb 4-1: device descriptor read/64, error -71 [ 1094.467161][T16872] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1094.643380][T16872] usb 4-1: device descriptor read/64, error -71 [ 1094.773377][T16872] usb usb4-port1: attempt power cycle [ 1095.093140][T15752] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1095.413273][ T26] audit: type=1326 audit(1762250516.053:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1095.436112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1096.160485][ T26] audit: type=1326 audit(1762250516.053:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.256846][T15752] usb 2-1: Using ep0 maxpacket: 8 [ 1096.266000][T15752] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1096.298084][T15752] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.410640][ T26] audit: type=1326 audit(1762250516.323:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.442219][ T26] audit: type=1326 audit(1762250516.323:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.471370][T15752] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.482582][ T26] audit: type=1326 audit(1762250516.323:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.523968][ T26] audit: type=1326 audit(1762250516.583:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.567404][T15752] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.572629][ T26] audit: type=1326 audit(1762250516.583:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.671163][T15752] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.705350][ T26] audit: type=1326 audit(1762250516.583:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18450 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e98f6c9 code=0x7ffc0000 [ 1096.728064][T15752] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1096.752757][T15752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.990798][T15752] usb 2-1: usb_control_msg returned -32 [ 1097.003230][T15752] usbtmc 2-1:16.0: can't read capabilities [ 1097.047449][T15752] usb 2-1: USB disconnect, device number 66 [ 1097.189028][T18471] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1098.844097][ T52] block nbd3: Attempted send on invalid socket [ 1098.850349][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1098.860639][ T93] block nbd3: Attempted send on invalid socket [ 1098.867036][ T93] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1098.876676][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1098.968107][ T93] block nbd3: Attempted send on invalid socket [ 1098.974406][ T93] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1098.983938][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1099.045335][ T52] block nbd3: Attempted send on invalid socket [ 1099.051658][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.364531][T18490] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 1099.373451][ T93] block nbd3: Attempted send on invalid socket [ 1099.379706][ T93] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.389415][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1099.404272][ T52] block nbd3: Attempted send on invalid socket [ 1099.411598][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.422150][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1099.456554][ T93] block nbd3: Attempted send on invalid socket [ 1099.462774][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.472825][ T93] block nbd3: Attempted send on invalid socket [ 1099.479067][ T93] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.488467][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1099.505150][ T52] block nbd3: Attempted send on invalid socket [ 1099.513645][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.523397][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1099.589571][ T93] block nbd3: Attempted send on invalid socket [ 1099.595904][ T93] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1099.641942][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1099.702668][T18487] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1099.712631][T18487] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1100.592298][T18515] netlink: 'syz.0.3763': attribute type 1 has an invalid length. [ 1100.661190][T18515] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1100.718881][T18515] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1100.732987][T18517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1100.751006][T18517] device macvlan2 entered promiscuous mode [ 1100.764825][T18517] device bond2 entered promiscuous mode [ 1100.783762][T18517] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1100.815217][T18517] device bond2 left promiscuous mode [ 1103.300421][ T52] gfs2: error 10 reading superblock [ 1104.691734][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'. [ 1105.158888][T18565] netlink: 'syz.4.3778': attribute type 1 has an invalid length. [ 1105.281105][T18567] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1105.303315][T18567] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1105.799594][T18565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3778'. [ 1105.831823][T18576] device macvlan2 entered promiscuous mode [ 1105.924173][T18576] device bond3 entered promiscuous mode [ 1105.977916][T18576] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1106.032197][T18576] device bond3 left promiscuous mode [ 1107.288683][T18588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1107.556903][T18588] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1108.653283][ T4281] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1108.661937][ T4281] Bluetooth: hci4: Injecting HCI hardware error event [ 1108.671507][ T4280] Bluetooth: hci4: hardware error 0x00 [ 1109.331360][ T52] nbd_handle_cmd: 3 callbacks suppressed [ 1109.331374][ T52] block nbd4: Attempted send on invalid socket [ 1109.344721][ T52] blk_print_req_error: 3 callbacks suppressed [ 1109.344735][ T52] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1109.360501][ T52] gfs2: error 10 reading superblock [ 1109.733436][T16872] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1110.303265][T16872] usb 1-1: Using ep0 maxpacket: 16 [ 1110.673512][T16872] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1110.695863][T16872] usb 1-1: config 0 has no interface number 0 [ 1110.703188][T16872] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1110.733323][ T4280] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1110.766757][T16872] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1110.802088][T16872] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1110.811660][T16872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.820328][T16872] usb 1-1: Product: syz [ 1110.824647][T16872] usb 1-1: Manufacturer: syz [ 1110.829328][T16872] usb 1-1: SerialNumber: syz [ 1110.852913][T16872] usb 1-1: config 0 descriptor?? [ 1110.859450][T18605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1110.868171][T18605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1111.287262][T18605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1111.298145][T18605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1112.580066][T16872] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1112.811960][T16872] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1112.828813][T16872] asix: probe of 1-1:0.251 failed with error -32 [ 1113.208452][ T26] audit: type=1107 audit(1762250533.853:107): pid=18632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1114.012830][T16872] usb 1-1: USB disconnect, device number 63 [ 1114.039949][ T93] block nbd4: Attempted send on invalid socket [ 1114.046409][ T93] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.058314][ T93] block nbd4: Attempted send on invalid socket [ 1114.065061][ T93] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.097677][T18647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1114.118589][ T52] block nbd4: Attempted send on invalid socket [ 1114.125227][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.137906][T18647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1114.169764][ T93] block nbd4: Attempted send on invalid socket [ 1114.176442][ T93] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.194648][ T93] block nbd4: Attempted send on invalid socket [ 1114.200926][ T93] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.211708][T18647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1114.270946][ T52] block nbd4: Attempted send on invalid socket [ 1114.277659][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.290305][T18647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1114.302680][ T93] block nbd4: Attempted send on invalid socket [ 1114.309039][ T93] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.319128][ T93] block nbd4: Attempted send on invalid socket [ 1114.325451][ T93] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.335307][T18647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1114.353170][ T14] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1114.388946][ T93] block nbd4: Attempted send on invalid socket [ 1114.395239][ T93] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.405075][T18647] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1114.446274][T18647] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1114.546901][ T14] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1114.563591][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1114.577118][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1114.592324][ T14] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1114.601127][ T14] usb 3-1: Product: syz [ 1114.609806][ T14] usb 3-1: Manufacturer: syz [ 1114.618959][ T14] usb 3-1: SerialNumber: syz [ 1114.629584][ T14] usb 3-1: config 0 descriptor?? [ 1114.641266][ T14] usb 3-1: selecting invalid altsetting 0 [ 1114.994187][T18648] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1115.734942][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.741862][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.105162][T15757] usb 3-1: USB disconnect, device number 47 [ 1118.269573][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 1120.876203][T18718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1121.031889][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 1122.703247][ T93] block nbd4: Attempted send on invalid socket [ 1122.710628][ T93] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1122.722455][ T93] gfs2: error 10 reading superblock [ 1124.317526][T18766] netlink: 'syz.2.3834': attribute type 1 has an invalid length. [ 1125.553521][T18779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1126.010169][T15741] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1126.084269][T11167] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1126.206591][T15741] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1126.219337][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.250283][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1126.268854][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1126.277538][T11167] usb 4-1: Using ep0 maxpacket: 16 [ 1126.389538][T11167] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1126.401639][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.414083][T11167] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1126.429009][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1126.443373][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1126.464036][T11167] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1126.474492][T11167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.475870][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.499004][T11167] usb 4-1: Product: syz [ 1126.504664][T11167] usb 4-1: Manufacturer: syz [ 1126.509548][T11167] usb 4-1: SerialNumber: syz [ 1126.516006][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1126.565073][T11167] usb 4-1: config 0 descriptor?? [ 1126.572232][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1126.582578][T11167] mcba_usb 4-1:0.0: Can't find endpoints [ 1126.598281][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.649329][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1126.706940][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1126.732095][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.742770][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1126.938373][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1126.961606][T16872] usb 4-1: USB disconnect, device number 70 [ 1126.984244][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1126.995351][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.006840][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1127.014955][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.024319][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.036250][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1127.044532][T15741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1127.053811][T15741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1127.065731][T15741] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1127.079463][T15741] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1127.088858][T15741] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1127.097325][T15741] usb 5-1: Product: syz [ 1127.106347][T15741] usb 5-1: Manufacturer: syz [ 1127.110951][T15741] usb 5-1: SerialNumber: syz [ 1127.117134][T15741] usb 5-1: config 0 descriptor?? [ 1127.210085][T15741] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1128.075275][T11060] usb 5-1: USB disconnect, device number 66 [ 1128.124400][T11060] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1128.948819][T18813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1129.220949][T11060] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1129.954913][T11060] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1129.998115][T11060] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1130.017257][T11060] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1130.027648][T11060] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1130.038934][T11060] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1130.051802][T11060] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1130.071696][T11060] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1130.220065][T11060] usb 3-1: Product: syz [ 1130.231902][T11060] usb 3-1: Manufacturer: syz [ 1130.952332][T11060] cdc_wdm 3-1:1.0: skipping garbage [ 1130.957975][T11060] cdc_wdm 3-1:1.0: skipping garbage [ 1130.968977][T11060] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1130.975082][T11060] cdc_wdm 3-1:1.0: Unknown control protocol [ 1131.259569][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1131.266276][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1131.272518][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1131.279272][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1131.286104][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1131.292728][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1131.299639][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1131.306274][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1131.312699][ T22] usb 3-1: USB disconnect, device number 48 [ 1134.806121][T18863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3858'. [ 1253.173080][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1253.179745][ C1] rcu: 1-...!: (10500 ticks this GP) idle=7214/0/0x1 softirq=83810/83810 fqs=0 [ 1253.190523][ C1] (t=10500 jiffies g=131121 q=52 ncpus=2) [ 1253.196364][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g131121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1253.208789][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=83328 [ 1253.216767][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g131121 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1253.228400][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1253.238381][ C1] rcu: RCU grace-period kthread stack dump: [ 1253.244266][ C1] task:rcu_preempt state:I stack:27200 pid:16 ppid:2 flags:0x00004000 [ 1253.253503][ C1] Call Trace: [ 1253.256790][ C1] [ 1253.259725][ C1] __schedule+0x10ec/0x40b0 [ 1253.264260][ C1] ? __sched_text_start+0x8/0x8 [ 1253.269226][ C1] ? __mod_timer+0x91e/0xd00 [ 1253.273852][ C1] schedule+0xb9/0x180 [ 1253.277949][ C1] schedule_timeout+0x15c/0x280 [ 1253.282816][ C1] ? console_conditional_schedule+0x40/0x40 [ 1253.288721][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1253.294803][ C1] ? update_process_times+0x1b0/0x1b0 [ 1253.300254][ C1] ? prepare_to_swait_event+0x335/0x350 [ 1253.305818][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 1253.310682][ C1] ? rcu_gp_kthread+0x380/0x380 [ 1253.315555][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1253.321567][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 1253.326358][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1253.331224][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1253.336448][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1253.341667][ C1] rcu_gp_kthread+0x95/0x380 [ 1253.346334][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1253.351460][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1253.357372][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1253.362435][ C1] kthread+0x29d/0x330 [ 1253.366539][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1253.371687][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1253.376300][ C1] ret_from_fork+0x1f/0x30 [ 1253.380742][ C1] [ 1253.383766][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1253.390115][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1253.397151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1253.407212][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1253.412425][ C1] Code: 48 89 df e8 b7 3b af f7 e9 4c ff ff ff e8 dd 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 97 d4 64 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1253.432055][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1253.438134][ C1] RAX: 8aa8cbf58f6fcd00 RBX: ffffffff8a21ce97 RCX: 8aa8cbf58f6fcd00 [ 1253.446115][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0580 RDI: ffffffff8adef760 [ 1253.454100][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6afa [ 1253.462092][ C1] R10: ffffed10171e6afa R11: 1ffff110171e6af9 R12: 0000000000000001 [ 1253.470076][ C1] R13: dffffc0000000000 R14: ffff888017731dc0 R15: 1ffffffff1c3ed96 [ 1253.478129][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1253.487070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1253.493674][ C1] CR2: 00005555743335c8 CR3: 000000002e386000 CR4: 00000000003506e0 [ 1253.501664][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1253.509660][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1253.517644][ C1] Call Trace: [ 1253.520929][ C1] [ 1253.523864][ C1] default_idle_call+0x84/0xc0 [ 1253.528653][ C1] do_idle+0x1fc/0x570 [ 1253.532739][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1253.537953][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1253.543173][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1253.548822][ C1] ? schedule_idle+0x57/0x90 [ 1253.553423][ C1] cpu_startup_entry+0x3f/0x60 [ 1253.558205][ C1] start_secondary+0xe4/0xf0 [ 1253.562808][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1253.568737][ C1] [ 1253.571801][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1253.577111][ C0] NMI backtrace for cpu 0 [ 1253.577120][ C0] CPU: 0 PID: 18870 Comm: syz.3.3863 Not tainted syzkaller #0 [ 1253.577135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1253.577144][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 1253.577165][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 1f ea f7 02 66 2e 0f 1f 84 00 00 00 00 00 [ 1253.577178][ C0] RSP: 0018:ffffc90000007e38 EFLAGS: 00000046 [ 1253.577191][ C0] RAX: 000000000005a603 RBX: 000000000005a603 RCX: 0000000000000838 [ 1253.577201][ C0] RDX: 0000000000000000 RSI: 000000000005a603 RDI: 0000000000000838 [ 1253.577210][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1c3ed56 [ 1253.577221][ C0] R10: fffffbfff1c3ed56 R11: 1ffffffff1c3ed55 R12: dffffc0000000000 [ 1253.577232][ C0] R13: 00000000100064a9 R14: ffffffff8c5e4b40 R15: dffffc0000000000 [ 1253.577243][ C0] FS: 00007fb880cd26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1253.577257][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1253.577268][ C0] CR2: 0000200000001880 CR3: 000000005d5f7000 CR4: 00000000003506f0 [ 1253.577281][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1253.577289][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1253.577299][ C0] Call Trace: [ 1253.577306][ C0] [ 1253.577311][ C0] lapic_next_event+0x5b/0x70 [ 1253.577332][ C0] clockevents_program_event+0x1bc/0x310 [ 1253.577352][ C0] hrtimer_interrupt+0x59d/0x9c0 [ 1253.577378][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1253.577399][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1253.577419][ C0] [ 1253.577423][ C0] [ 1253.577428][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1253.577445][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1253.577466][ C0] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 8f 41 f7 48 89 df e8 e6 54 42 f7 e8 31 48 65 f7 fb bf 01 00 00 00 76 cd 35 f7 65 8b 05 f7 84 e0 75 85 c0 74 02 5b c3 e8 44 96 de [ 1253.577478][ C0] RSP: 0018:ffffc90003e57b98 EFLAGS: 00000282 [ 1253.577489][ C0] RAX: 815675b5787e1f00 RBX: ffff88805c666f00 RCX: 815675b5787e1f00 [ 1253.577500][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0580 RDI: 0000000000000001 [ 1253.577510][ C0] RBP: ffff88805c667398 R08: dffffc0000000000 R09: ffffed100b8ccde1 [ 1253.577522][ C0] R10: ffffed100b8ccde1 R11: 1ffff1100b8ccde0 R12: 1ffff1100b8cce73 [ 1253.577533][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 1253.577550][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1253.577569][ C0] get_signal+0x1163/0x1350 [ 1253.577605][ C0] arch_do_signal_or_restart+0xb7/0x1240 [ 1253.577626][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 1253.577646][ C0] ? load_gs_index+0x120/0x120 [ 1253.577661][ C0] ? get_sigframe_size+0x10/0x10 [ 1253.577687][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1253.577708][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1253.577727][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1253.577746][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1253.577765][ C0] do_syscall_64+0x58/0xa0 [ 1253.577780][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1253.577795][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1253.577811][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1253.577826][ C0] RIP: 0033:0x7fb87fd8f6c7 [ 1253.577845][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1253.577856][ C0] RSP: 002b:00007fb880cd20e8 EFLAGS: 00000246 [ 1253.577867][ C0] RAX: 00000000000000ca RBX: 00007fb87ffe6098 RCX: 00007fb87fd8f6c9 [ 1253.577877][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb87ffe6098 [ 1253.577887][ C0] RBP: 00007fb87ffe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.577896][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.577905][ C0] R13: 00007fb87ffe6128 R14: 00007ffe77bf8260 R15: 00007ffe77bf8348 [ 1253.577921][ C0] [ 1253.578107][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1253.979181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1253.989254][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1253.994295][ C1] Code: 48 89 df e8 b7 3b af f7 e9 4c ff ff ff e8 dd 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 97 d4 64 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1254.013912][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 1254.019987][ C1] RAX: 8aa8cbf58f6fcd00 RBX: ffffffff8a21ce97 RCX: 8aa8cbf58f6fcd00 [ 1254.027973][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c0580 RDI: ffffffff8adef760 [ 1254.035952][ C1] RBP: ffffc90000177f20 R08: dffffc0000000000 R09: ffffed10171e6afa [ 1254.043928][ C1] R10: ffffed10171e6afa R11: 1ffff110171e6af9 R12: 0000000000000001 [ 1254.051901][ C1] R13: dffffc0000000000 R14: ffff888017731dc0 R15: 1ffffffff1c3ed96 [ 1254.059885][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1254.068820][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1254.075415][ C1] CR2: 00005555743335c8 CR3: 000000002e386000 CR4: 00000000003506e0 [ 1254.083434][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1254.091410][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1254.099386][ C1] Call Trace: [ 1254.102668][ C1] [ 1254.105600][ C1] default_idle_call+0x84/0xc0 [ 1254.110391][ C1] do_idle+0x1fc/0x570 [ 1254.114486][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1254.119693][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1254.124903][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1254.130572][ C1] ? schedule_idle+0x57/0x90 [ 1254.135193][ C1] cpu_startup_entry+0x3f/0x60 [ 1254.139977][ C1] start_secondary+0xe4/0xf0 [ 1254.144590][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 1254.150596][ C1]