last executing test programs: 18m24.670194096s ago: executing program 1 (id=1245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14010000", @ANYRES16, @ANYBLOB="cd3e0000000002000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3de5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d400001400050000000000000000000000000000000001140006"], 0x114}}, 0x0) 18m24.418525709s ago: executing program 1 (id=1246): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 18m24.281870191s ago: executing program 1 (id=1247): r0 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010f000040400e5ad600079", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e", @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYBLOB="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"], 0x50}}, 0x20008844) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000050a01080000000000000000000000020900020073797a3200000000"], 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x9, 0x202, 0x87, 0xfffffffe, 0x1}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000002980)) 18m20.892525545s ago: executing program 1 (id=1252): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000280)=0x4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) ioctl$FITRIM(r7, 0xff0a, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0xffffffff, 0x4, 0x0, 0x0, 0x20000000, 0x1}) 18m19.66333509s ago: executing program 1 (id=1257): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000280)=0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ioctl$FITRIM(r6, 0xff0a, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0xffffffff, 0x4, 0x0, 0x0, 0x20000000, 0x1}) 18m18.529758594s ago: executing program 1 (id=1261): r0 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010f000040400e5ad600079", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e", @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYBLOB="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"], 0x50}}, 0x20008844) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000050a01080000000000000000000000020900020073797a3200000000"], 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x9, 0x202, 0x87, 0xfffffffe, 0x1}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000002980)) 18m3.452005442s ago: executing program 32 (id=1261): r0 = gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010f000040400e5ad600079", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e", @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYBLOB="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"], 0x50}}, 0x20008844) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000050a01080000000000000000000000020900020073797a3200000000"], 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x6, 0x9, 0x202, 0x87, 0xfffffffe, 0x1}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000002980)) 17m3.832678856s ago: executing program 3 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x2d, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f0000000500), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'pim6reg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x94}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x7) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf2554000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) splice(r9, 0x0, r8, 0x0, 0x18, 0x9) 17m2.392359422s ago: executing program 3 (id=1380): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="20090100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m57.305586497s ago: executing program 3 (id=1390): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r4, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) 16m55.644775848s ago: executing program 3 (id=1393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x4, "abacd211119c871663376126aab5ab0006278ee042000000e4ffffffffffffff"}) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000000c0)=0x5) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2, 0x3, 0xff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 16m51.783877605s ago: executing program 3 (id=1398): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000059770c40c009030243d300"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="20090100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m48.679260352s ago: executing program 3 (id=1406): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x4, "abacd211119c871663376126aab5ab0006278ee042000000e4ffffffffffffff"}) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000000c0)=0x5) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2, 0x3, 0xff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 16m33.358086545s ago: executing program 33 (id=1406): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x4, "abacd211119c871663376126aab5ab0006278ee042000000e4ffffffffffffff"}) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000000c0)=0x5) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2, 0x3, 0xff) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) 3m4.102743447s ago: executing program 2 (id=2994): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x181001) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m2.87769245s ago: executing program 2 (id=2997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$key(0xf, 0x3, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 3m2.177304944s ago: executing program 2 (id=2998): syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x2, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}}}, 0x0) 3m2.057868047s ago: executing program 2 (id=2999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3m1.039499604s ago: executing program 2 (id=3001): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 3m0.901313924s ago: executing program 2 (id=3002): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xf) getpid() socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) 2m45.428720068s ago: executing program 34 (id=3002): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xf) getpid() socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) 51.598181513s ago: executing program 0 (id=3193): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x427e57d9, 0x470000) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) 49.657509643s ago: executing program 0 (id=3196): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r4) r6 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r6, r5, 0x0) r7 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="00d2b124cff53e5b8b86231f5e1ef2787f2ecbdc870dfd6aef049831274fc3dc6f1cb46d927a3d14a1d3c3138b300d194b96b0a423abad994ebcb9a4acb46b663f6294283923a8754db3db49f2f32ac8520af4b553dfd339c413562770fc41a751fc721dc73e94ac569c257a98a464cc8e982ea7b0ee1ce5f64fd7146cb69c7143c6", 0x82}], 0x1, &(0x7f0000000280)=[@dstopts={{0x28, 0x29, 0x37, {0x73, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}], 0x28}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2f6a89744f7c472fba59ac49566a467edfebb6b7a219a664b6ca56a6d58b46834678434fd9ab6e97c4deb5deb9900a830126b84e38997e3ce3a18a51d71355bd1ef6a5a0b51e59a28fa1b7e959d9dd502cbb91c51ce1b837a6268fbebcbb9f1c407110e594ea80489a2b1cfe508ee9976a634cdb10921aece904cd6be9a976ade47975e6f731d0385011ca25519003e5f07f596b244ac2d", 0x98}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="1dba8dcdb448c7e9a1ac3548faec7ceba8c4d30788213db0102451", 0x1b}, {&(0x7f0000000900)="165a5d8618cd99005f470a0988560aa6a40a7643f09a0d259fb3876ebe8c3a7eb8c6a4869e0e8b1db0347745a1c7f1482d8604d0e1207a6d", 0x38}], 0x2}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @mcast1, 0x9d}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@hoplimit={{0x14, 0x29, 0x34, 0xb}}, @rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0xa3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private0]}}}], 0xa0}}], 0x5, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 46.35974983s ago: executing program 0 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x1e, [0x91, 0x4, 0x2, 0x0, 0x31f3, 0x9, 0x4]}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 43.395694518s ago: executing program 0 (id=3199): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240)=0xffffffffffffffff, 0x12) 37.88910612s ago: executing program 0 (id=3200): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r4) r6 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r6, r5, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8c, @rand_addr=' \x01\x00', 0x24}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)="00d2b124cff53e5b8b86231f5e1ef2787f2ecbdc870dfd6aef049831274fc3dc6f1cb46d927a3d14a1d3c3138b300d194b96b0a423abad994ebcb9a4acb46b663f6294283923a8754db3db49f2f32ac8520af4b553dfd339c413562770fc41a751fc721dc73e94ac569c257a98a464cc8e982ea7b0ee1ce5f64fd7146cb69c7143c6", 0x82}], 0x1, &(0x7f0000000280)=[@dstopts={{0x30, 0x29, 0x37, {0x73, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2f6a89744f7c472fba59ac49566a467edfebb6b7a219a664b6ca56a6d58b46834678434fd9ab6e97c4deb5deb9900a830126b84e38997e3ce3a18a51d71355bd1ef6a5a0b51e59a28fa1b7e959d9dd502cbb91c51ce1b837a6268fbebcbb9f1c407110e594ea80489a2b1cfe508ee9976a634cdb10921aece904cd6be9a976ade47975e6f731d0385011ca25519003e5f07f596b244ac2d", 0x98}], 0x1}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @mcast1, 0x9d}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000009c0)}, {&(0x7f0000000a80)}, {&(0x7f0000000b80)="e8b499c4fb2c222394b9587fdeda4bb2a2586159a0533cf43a8f4e3d924e99831a207af9fe9c97e1834308dccc401b634bbc40a09e52812affb98f648c0ba713ab064c62412e9d0101cb8e592ace9a86937f30878edf3f244d8aa48e1cc483c789", 0x61}], 0x3, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0xb}}, @hoplimit={{0x14, 0x29, 0x34, 0xb}}, @rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0xa3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private0]}}}], 0xb8}}], 0x4, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 35.404058933s ago: executing program 0 (id=3202): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x1410, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.262804307s ago: executing program 4 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf250100000014000200776731000000000000000000000000002400"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 27.586929387s ago: executing program 4 (id=3205): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r4) r6 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r6, r5, 0x0) r7 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="00d2b124cff53e5b8b86231f5e1ef2787f2ecbdc870dfd6aef049831274fc3dc6f1cb46d927a3d14a1d3c3138b300d194b96b0a423abad994ebcb9a4acb46b663f6294283923a8754db3db49f2f32ac8520af4b553dfd339c413562770fc41a751fc721dc73e94ac569c257a98a464cc8e982ea7b0ee1ce5f64fd7146cb69c7143c6", 0x82}], 0x1, &(0x7f0000000280)=[@dstopts={{0x28, 0x29, 0x37, {0x73, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @pad1]}}}], 0x28}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2f6a89744f7c472fba59ac49566a467edfebb6b7a219a664b6ca56a6d58b46834678434fd9ab6e97c4deb5deb9900a830126b84e38997e3ce3a18a51d71355bd1ef6a5a0b51e59a28fa1b7e959d9dd502cbb91c51ce1b837a6268fbebcbb9f1c407110e594ea80489a2b1cfe508ee9976a634cdb10921aece904cd6be9a976ade47975e6f731d0385011ca25519003e5f07f596b244ac2d", 0x98}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="1dba8dcdb448c7e9a1ac3548faec7ceba8c4d30788213db0102451", 0x1b}, {&(0x7f0000000900)="165a5d8618cd99005f470a0988560aa6a40a7643f09a0d259fb3876ebe8c3a7eb8c6a4869e0e8b1db0347745a1c7f1482d8604d0e1207a6d", 0x38}], 0x2}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @mcast1, 0x9d}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@hoplimit={{0x14, 0x29, 0x34, 0xb}}, @rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0xa3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private0]}}}], 0xa0}}], 0x5, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 25.613592197s ago: executing program 4 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x1c, 0x35, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x7, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = getpid() prlimit64(r4, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 23.187280277s ago: executing program 4 (id=3207): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x11cc, 0x0) 19.480183176s ago: executing program 35 (id=3202): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x1410, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.343526313s ago: executing program 4 (id=3209): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000a00300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r4) r6 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r6, r5, 0x0) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8c, @rand_addr=' \x01\x00', 0x24}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000340)="00d2b124cff53e5b8b86231f5e1ef2787f2ecbdc870dfd6aef049831274fc3dc6f1cb46d927a3d14a1d3c3138b300d194b96b0a423abad994ebcb9a4acb46b663f6294283923a8754db3db49f2f32ac8520af4b553dfd339c413562770fc41a751fc721dc73e94ac569c257a98a464cc8e982ea7b0ee1ce5f64fd7146cb69c7143c6", 0x82}], 0x1, &(0x7f0000000280)=[@dstopts={{0x30, 0x29, 0x37, {0x73, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="e2f6a89744f7c472fba59ac49566a467edfebb6b7a219a664b6ca56a6d58b46834678434fd9ab6e97c4deb5deb9900a830126b84e38997e3ce3a18a51d71355bd1ef6a5a0b51e59a28fa1b7e959d9dd502cbb91c51ce1b837a6268fbebcbb9f1c407110e594ea80489a2b1cfe508ee9976a634cdb10921aece904cd6be9a976ade47975e6f731d0385011ca25519003e5f07f596b244ac2d", 0x98}], 0x1}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @mcast1, 0x9d}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000009c0)}, {&(0x7f0000000a80)}, {&(0x7f0000000b80)="e8b499c4fb2c222394b9587fdeda4bb2a2586159a0533cf43a8f4e3d924e99831a207af9fe9c97e1834308dccc401b634bbc40a09e52812affb98f648c0ba713ab064c62412e9d0101cb8e592ace9a86937f30878edf3f244d8aa48e1cc483c789", 0x61}], 0x3, &(0x7f0000000c40)=[@flowinfo={{0x14, 0x29, 0xb, 0xb}}, @hoplimit={{0x14, 0x29, 0x34, 0xb}}, @rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0xa3, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @private0]}}}], 0xb8}}], 0x4, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) 15.987363332s ago: executing program 4 (id=3210): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @random="3df000"}, 0x2, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}}) 0s ago: executing program 36 (id=3210): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @random="3df000"}, 0x2, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}}) kernel console output (not intermixed with test programs): : New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.188745][ T8392] usb 5-1: Product: syz [ 1115.188794][ T8392] usb 5-1: Manufacturer: syz [ 1115.188843][ T8392] usb 5-1: SerialNumber: syz [ 1115.308463][ T8392] usb 5-1: config 0 descriptor?? [ 1115.609546][ T8392] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1115.609560][ T8392] eb 00 00 00 00 00 00 00 [ 1115.609602][ T8392] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1115.802535][ T5889] usb 5-1: USB disconnect, device number 71 [ 1115.892148][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.892220][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.236307][T12565] Bluetooth: hci3: command tx timeout [ 1117.636254][T14540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.636449][T14540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.636680][T14540] bridge_slave_0: entered allmulticast mode [ 1117.675503][T14540] bridge_slave_0: entered promiscuous mode [ 1118.658829][T14540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.658930][T14540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.659105][T14540] bridge_slave_1: entered allmulticast mode [ 1118.671396][T14540] bridge_slave_1: entered promiscuous mode [ 1119.122865][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1119.122886][ T37] audit: type=1326 audit(1767237935.272:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237014][ T37] audit: type=1326 audit(1767237935.272:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237062][ T37] audit: type=1326 audit(1767237935.272:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237098][ T37] audit: type=1326 audit(1767237935.272:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237136][ T37] audit: type=1326 audit(1767237935.272:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237175][ T37] audit: type=1326 audit(1767237935.272:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237213][ T37] audit: type=1326 audit(1767237935.272:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237252][ T37] audit: type=1326 audit(1767237935.272:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237292][ T37] audit: type=1326 audit(1767237935.272:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1119.237332][ T37] audit: type=1326 audit(1767237935.272:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14628 comm="syz.2.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62c677df90 code=0x7ffc0000 [ 1119.735200][T14639] Device name cannot be null; rc = [-22] [ 1120.599731][T14540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.624842][T14540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.626175][ T5889] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1120.786117][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 1120.796806][ T5889] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1120.796835][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.796854][ T5889] usb 1-1: Product: syz [ 1120.796867][ T5889] usb 1-1: Manufacturer: syz [ 1120.796881][ T5889] usb 1-1: SerialNumber: syz [ 1120.867612][ T5889] usb 1-1: config 0 descriptor?? [ 1121.202784][T14280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1121.289645][T14540] team0: Port device team_slave_0 added [ 1121.293798][T14280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1121.453406][T14540] team0: Port device team_slave_1 added [ 1121.453656][T14280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1121.483276][ T5889] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1121.483315][ T5889] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1121.483397][ T5889] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1121.777996][T14280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1121.817716][ T5889] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 1121.843515][ T5889] usb 1-1: USB disconnect, device number 25 [ 1122.004675][T14540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.004687][T14540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.004701][T14540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.072978][T14540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.072990][T14540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.073012][T14540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.887726][ T1419] bridge_slave_1: left allmulticast mode [ 1123.887754][ T1419] bridge_slave_1: left promiscuous mode [ 1123.887993][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.956932][ T1419] bridge_slave_0: left allmulticast mode [ 1123.956952][ T1419] bridge_slave_0: left promiscuous mode [ 1123.957133][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.156854][ T1419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.326611][ T1419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.428131][ T1419] bond0 (unregistering): Released all slaves [ 1126.832567][T14540] hsr_slave_0: entered promiscuous mode [ 1126.834141][T14540] hsr_slave_1: entered promiscuous mode [ 1126.835187][T14540] debugfs: 'hsr0' already exists in 'hsr' [ 1126.835210][T14540] Cannot create hsr debugfs directory [ 1128.456259][ T1419] hsr_slave_0: left promiscuous mode [ 1128.486603][ T1419] hsr_slave_1: left promiscuous mode [ 1128.487562][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.510526][ T1419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.193941][T14726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2536'. [ 1131.016159][ T8392] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1131.068146][ T1419] team0 (unregistering): Port device team_slave_1 removed [ 1131.186125][ T8392] usb 1-1: Using ep0 maxpacket: 32 [ 1131.189888][ T8392] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1131.189905][ T8392] usb 1-1: config 0 has no interface number 0 [ 1131.195715][ T8392] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1131.195733][ T8392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.195743][ T8392] usb 1-1: Product: syz [ 1131.195751][ T8392] usb 1-1: Manufacturer: syz [ 1131.195758][ T8392] usb 1-1: SerialNumber: syz [ 1131.284369][ T8392] usb 1-1: config 0 descriptor?? [ 1131.295419][ T8392] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1131.295447][ T8392] usb 1-1: selecting invalid altsetting 1 [ 1131.295456][ T8392] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1131.321917][ T8392] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1131.322226][ T8392] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1131.322257][ T8392] usb 1-1: media controller created [ 1131.355871][ T8392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1131.366295][ T1419] team0 (unregistering): Port device team_slave_0 removed [ 1132.458642][ T8392] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1132.461112][ T8392] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1132.496230][T14728] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1132.563495][T14740] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 1132.618855][ T8392] usb 1-1: USB disconnect, device number 26 [ 1132.781821][T14280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.218633][T14749] Device name cannot be null; rc = [-22] [ 1133.317918][T14750] overlayfs: failed to resolve './bus': -2 [ 1133.916606][T14754] fuse: Bad value for 'rootmode' [ 1133.961979][T14280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.998387][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.998596][ T9406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.023818][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.024049][ T9406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.762051][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1137.019014][T14787] comedi: valid board names for 8255 driver are: [ 1137.019200][T14787] 8255 [ 1137.019426][T14787] comedi: valid board names for vmk80xx driver are: [ 1137.019558][T14787] vmk80xx [ 1137.019681][T14787] comedi: valid board names for usbduxsigma driver are: [ 1137.019692][T14787] usbduxsigma [ 1137.019889][T14787] comedi: valid board names for usbduxfast driver are: [ 1137.019899][T14787] usbduxfast [ 1137.019905][T14787] comedi: valid board names for usbdux driver are: [ 1137.019913][T14787] usbdux [ 1137.019920][T14787] comedi: valid board names for ni6501 driver are: [ 1137.019928][T14787] ni6501 [ 1137.020338][T14787] comedi: valid board names for dt9812 driver are: [ 1137.020396][T14787] dt9812 [ 1137.020558][T14787] comedi: valid board names for ni_labpc_cs driver are: [ 1137.020634][T14787] ni_labpc_cs [ 1137.020788][T14787] comedi: valid board names for ni_daq_700 driver are: [ 1137.020850][T14787] ni_daq_700 [ 1137.020938][T14787] comedi: valid board names for labpc_pci driver are: [ 1137.021052][T14787] labpc_pci [ 1137.021121][T14787] comedi: valid board names for adl_pci9118 driver are: [ 1137.021358][T14787] pci9118dg [ 1137.021598][T14787] pci9118hg [ 1137.021613][T14787] pci9118hr [ 1137.021798][T14787] comedi: valid board names for 8255_pci driver are: [ 1137.022047][T14787] 8255_pci [ 1137.022054][T14787] comedi: valid board names for s526 driver are: [ 1137.022063][T14787] s526 [ 1137.022312][T14787] comedi: valid board names for multiq3 driver are: [ 1137.022468][T14787] multiq3 [ 1137.022537][T14787] comedi: valid board names for pcmuio driver are: [ 1137.022773][T14787] pcmuio48 [ 1137.022910][T14787] pcmuio96 [ 1137.022918][T14787] comedi: valid board names for pcmmio driver are: [ 1137.022925][T14787] pcmmio [ 1137.022930][T14787] comedi: valid board names for pcmda12 driver are: [ 1137.022939][T14787] pcmda12 [ 1137.022945][T14787] comedi: valid board names for pcmad driver are: [ 1137.022953][T14787] pcmad12 [ 1137.022959][T14787] pcmad16 [ 1137.022965][T14787] comedi: valid board names for ni_labpc driver are: [ 1137.022972][T14787] lab-pc-1200 [ 1137.022978][T14787] lab-pc-1200ai [ 1137.022984][T14787] lab-pc+ [ 1137.022990][T14787] comedi: valid board names for atmio16 driver are: [ 1137.023144][T14787] atmio16 [ 1137.023261][T14787] atmio16d [ 1137.023495][T14787] comedi: valid board names for ni_at_ao driver are: [ 1137.023565][T14787] at-ao-6 [ 1137.023572][T14787] at-ao-10 [ 1137.023708][T14787] comedi: valid board names for ni_at_a2150 driver are: [ 1137.023771][T14787] ni_at_a2150 [ 1137.023832][T14787] comedi: valid board names for adq12b driver are: [ 1137.023891][T14787] adq12b [ 1137.023952][T14787] comedi: valid board names for mpc624 driver are: [ 1137.024012][T14787] mpc624 [ 1137.024072][T14787] comedi: valid board names for c6xdigio driver are: [ 1137.024103][T14787] c6xdigio [ 1137.024241][T14787] comedi: valid board names for aio_iiro_16 driver are: [ 1137.024251][T14787] aio_iiro_16 [ 1137.024257][T14787] comedi: valid board names for aio_aio12_8 driver are: [ 1137.024266][T14787] aio_aio12_8 [ 1137.024302][T14787] aio_ai12_8 [ 1137.024363][T14787] aio_ao12_4 [ 1137.024423][T14787] comedi: valid board names for fl512 driver are: [ 1137.024486][T14787] fl512 [ 1137.024546][T14787] comedi: valid board names for dmm32at driver are: [ 1137.024611][T14787] dmm32at [ 1137.024670][T14787] comedi: valid board names for dt282x driver are: [ 1137.024730][T14787] dt2821 [ 1137.024761][T14787] dt2821-f [ 1137.024825][T14787] dt2821-g [ 1137.024884][T14787] dt2823 [ 1137.024943][T14787] dt2824-pgh [ 1137.025002][T14787] dt2824-pgl [ 1137.025061][T14787] dt2825 [ 1137.025120][T14787] dt2827 [ 1137.025302][T14787] dt2828 [ 1137.025368][T14787] dt2829 [ 1137.025425][T14787] dt21-ez [ 1137.025484][T14787] dt23-ez [ 1137.025543][T14787] dt24-ez [ 1137.025579][T14787] dt24-ez-pgl [ 1137.025682][T14787] comedi: valid board names for dt2817 driver are: [ 1137.025745][T14787] dt2817 [ 1137.025804][T14787] comedi: valid board names for dt2815 driver are: [ 1137.025871][T14787] dt2815 [ 1137.025931][T14787] comedi: valid board names for dt2814 driver are: [ 1137.026049][T14787] dt2814 [ 1137.026106][T14787] comedi: valid board names for dt2811 driver are: [ 1137.026165][T14787] dt2811-pgh [ 1137.026220][T14787] dt2811-pgl [ 1137.026277][T14787] comedi: valid board names for dt2801 driver are: [ 1137.026418][T14787] dt2801 [ 1137.026425][T14787] comedi: valid board names for das6402 driver are: [ 1137.026434][T14787] das6402-12 [ 1137.026441][T14787] das6402-16 [ 1137.026556][T14787] comedi: valid board names for das1800 driver are: [ 1137.026622][T14787] das-1701st [ 1137.026679][T14787] das-1701st-da [ 1137.026739][T14787] das-1702st [ 1137.026845][T14787] das-1702st-da [ 1137.026906][T14787] das-1702hr [ 1137.026976][T14787] das-1702hr-da [ 1137.027199][T14787] das-1701ao [ 1137.027523][T14787] das-1702ao [ 1137.027705][T14787] das-1801st [ 1137.027720][T14787] das-1801st-da [ 1137.027830][T14787] das-1802st [ 1137.027901][T14787] das-1802st-da [ 1137.028124][T14787] das-1802hr [ 1137.028354][T14787] das-1802hr-da [ 1137.028616][T14787] das-1801hc [ 1137.028730][T14787] das-1802hc [ 1137.028801][T14787] das-1801ao [ 1137.028960][T14787] das-1802ao [ 1137.029031][T14787] comedi: valid board names for das800 driver are: [ 1137.029190][T14787] das-800 [ 1137.029260][T14787] cio-das800 [ 1137.029415][T14787] das-801 [ 1137.029486][T14787] cio-das801 [ 1137.029720][T14787] das-802 [ 1137.029727][T14787] cio-das802 [ 1137.029733][T14787] cio-das802/16 [ 1137.029878][T14787] comedi: valid board names for isa-das08 driver are: [ 1137.029936][T14787] isa-das08 [ 1137.029987][T14787] das08-pgm [ 1137.030100][T14787] das08-pgh [ 1137.030169][T14787] das08-pgl [ 1137.030324][T14787] das08-aoh [ 1137.030393][T14787] das08-aol [ 1137.030550][T14787] das08-aom [ 1137.030624][T14787] das08/jr-ao [ 1137.030835][T14787] das08jr-16-ao [ 1137.030844][T14787] pc104-das08 [ 1137.030850][T14787] das08jr/16 [ 1137.031073][T14787] comedi: valid board names for das16m1 driver are: [ 1137.031104][T14787] das16m1 [ 1137.031132][T14787] comedi: valid board names for dac02 driver are: [ 1137.031375][T14787] dac02 [ 1137.031607][T14787] comedi: valid board names for rti802 driver are: [ 1137.031904][T14787] rti802 [ 1137.032090][T14787] comedi: valid board names for rti800 driver are: [ 1137.032313][T14787] rti800 [ 1137.032471][T14787] rti815 [ 1137.032541][T14787] comedi: valid board names for pcm3724 driver are: [ 1137.032703][T14787] pcm3724 [ 1137.032774][T14787] comedi: valid board names for pcl818 driver are: [ 1137.033016][T14787] pcl818l [ 1137.033238][T14787] pcl818h [ 1137.033310][T14787] pcl818hd [ 1137.033535][T14787] pcl818hg [ 1137.033768][T14787] pcl818 [ 1137.033931][T14787] pcl718 [ 1137.034106][T14787] pcm3718 [ 1137.034289][T14787] comedi: valid board names for pcl816 driver are: [ 1137.034452][T14787] pcl816 [ 1137.034523][T14787] pcl814b [ 1137.034679][T14787] comedi: valid board names for pcl812 driver are: [ 1137.034736][T14787] pcl812 [ 1137.034904][T14787] pcl812pg [ 1137.034973][T14787] acl8112pg [ 1137.035195][T14787] acl8112dg [ 1137.035348][T14787] acl8112hg [ 1137.035486][T14787] a821pgl [ 1137.035502][T14787] a821pglnda [ 1137.035509][T14787] a821pgh [ 1137.035618][T14787] a822pgl [ 1137.035688][T14787] a822pgh [ 1137.035843][T14787] a823pgl [ 1137.035913][T14787] a823pgh [ 1137.036100][T14787] pcl813 [ 1137.036172][T14787] pcl813b [ 1137.036255][T14787] acl8113 [ 1137.036370][T14787] iso813 [ 1137.036440][T14787] acl8216 [ 1137.036679][T14787] a826pg [ 1137.036688][T14787] comedi: valid board names for pcl730 driver are: [ 1137.036799][T14787] pcl730 [ 1137.036858][T14787] iso730 [ 1137.036893][T14787] acl7130 [ 1137.036900][T14787] pcm3730 [ 1137.037009][T14787] pcl725 [ 1137.037080][T14787] p8r8dio [ 1137.037375][T14787] acl7225b [ 1137.037564][T14787] p16r16dio [ 1137.037723][T14787] pcl733 [ 1137.037793][T14787] pcl734 [ 1137.037949][T14787] opmm-1616-xt [ 1137.038020][T14787] pearl-mm-p [ 1137.038175][T14787] ir104-pbf [ 1137.038244][T14787] comedi: valid board names for pcl726 driver are: [ 1137.038475][T14787] pcl726 [ 1137.038491][T14787] pcl727 [ 1137.038680][T14787] pcl728 [ 1137.038750][T14787] acl6126 [ 1137.038913][T14787] acl6128 [ 1137.038984][T14787] comedi: valid board names for pcl724 driver are: [ 1137.039212][T14787] pcl724 [ 1137.039368][T14787] pcl722 [ 1137.039438][T14787] pcl731 [ 1137.039521][T14787] acl7122 [ 1137.039607][T14787] acl7124 [ 1137.039708][T14787] pet48dio [ 1137.039871][T14787] pcmio48 [ 1137.039941][T14787] onyx-mm-dio [ 1137.040171][T14787] comedi: valid board names for pcl711 driver are: [ 1137.040337][T14787] pcl711 [ 1137.040408][T14787] pcl711b [ 1137.040651][T14787] acl8112hg [ 1137.040659][T14787] acl8112dg [ 1137.040667][T14787] comedi: valid board names for amplc_pc263 driver are: [ 1137.040869][T14787] pc263 [ 1137.040909][T14787] comedi: valid board names for amplc_pc236 driver are: [ 1137.040920][T14787] pc36at [ 1137.041029][T14787] comedi: valid board names for amplc_dio200 driver are: [ 1137.041087][T14787] pc212e [ 1137.041249][T14787] pc214e [ 1137.041319][T14787] pc215e [ 1137.041475][T14787] pc218e [ 1137.041544][T14787] pc272e [ 1137.041755][T14787] comedi: valid board names for comedi_parport driver are: [ 1137.041765][T14787] comedi_parport [ 1137.041771][T14787] comedi: valid board names for comedi_test driver are: [ 1137.041779][T14787] comedi_test [ 1137.041786][T14787] comedi: valid board names for comedi_bond driver are: [ 1137.041969][T14787] comedi_bond [ 1137.335860][T14540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1137.382573][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1137.395769][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1137.397389][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1137.401838][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1137.420343][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1137.425472][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1137.430685][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.430742][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1137.430768][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1137.430795][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1137.430817][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.432312][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1137.432337][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1137.432355][ T43] usb 1-1: Manufacturer: syz [ 1137.537842][T14540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1137.551786][ T43] usb 1-1: config 0 descriptor?? [ 1137.900078][T14786] mkiss: ax0: crc mode is auto. [ 1138.249826][T14793] netlink: 'syz.2.2554': attribute type 1 has an invalid length. [ 1138.252660][T14793] overlayfs: failed to resolve './bus': -2 [ 1138.377282][ T43] rc_core: IR keymap rc-hauppauge not found [ 1138.377306][ T43] Registered IR keymap rc-empty [ 1138.377482][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.396228][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.491464][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1138.493606][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 1138.532085][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.566720][T14540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1138.567098][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.590480][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.621525][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.636139][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.656298][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.676245][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.696279][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.726611][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.746268][ T43] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1138.775119][ T43] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1138.775353][ T43] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1138.821512][ T43] usb 1-1: USB disconnect, device number 27 [ 1139.078105][T14540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1139.486538][ T5816] Bluetooth: hci2: command tx timeout [ 1141.174770][T14824] overlayfs: missing 'lowerdir' [ 1141.439338][T14540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.645347][ T5816] Bluetooth: hci2: command tx timeout [ 1142.529199][T14540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.659435][ T8392] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1142.670654][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.670854][ T1791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.680398][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.680529][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.774984][T14783] chnl_net:caif_netlink_parms(): no params data found [ 1142.812161][ T8392] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.812178][ T8392] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.813409][ T8392] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1142.813435][ T8392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1142.813451][ T8392] usb 5-1: SerialNumber: syz [ 1143.810810][ T5816] Bluetooth: hci2: command tx timeout [ 1143.841747][ T8392] usb 5-1: 0:2 : does not exist [ 1143.841857][ T8392] usb 5-1: unit 255 not found! [ 1143.908069][T14856] overlayfs: missing 'lowerdir' [ 1143.910002][ T8392] usb 5-1: USB disconnect, device number 72 [ 1143.938610][ T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1143.998183][T14854] udevd[14854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.116102][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1144.119920][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1144.119946][ T43] usb 1-1: config 0 has no interface number 0 [ 1144.122254][ T43] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1144.122279][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.122297][ T43] usb 1-1: Product: syz [ 1144.122310][ T43] usb 1-1: Manufacturer: syz [ 1144.122323][ T43] usb 1-1: SerialNumber: syz [ 1144.187263][ T43] usb 1-1: config 0 descriptor?? [ 1144.202603][ T43] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1144.202630][ T43] usb 1-1: selecting invalid altsetting 1 [ 1144.202648][ T43] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1144.240429][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1144.241056][ T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1144.241107][ T43] usb 1-1: media controller created [ 1144.287719][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.393880][ T43] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1144.393941][ T43] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1144.399171][ T3606] bridge_slave_1: left allmulticast mode [ 1144.399199][ T3606] bridge_slave_1: left promiscuous mode [ 1144.399436][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.436850][ T43] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1145.343146][ T43] usb 1-1: USB disconnect, device number 28 [ 1145.359936][ T3606] bridge_slave_0: left allmulticast mode [ 1145.359964][ T3606] bridge_slave_0: left promiscuous mode [ 1145.360131][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.889073][ T5816] Bluetooth: hci2: command tx timeout [ 1146.618503][T14882] overlayfs: missing 'workdir' [ 1147.216182][ T5938] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1147.379532][ T5938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.379550][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1147.380962][ T5938] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1147.380981][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1147.380991][ T5938] usb 5-1: SerialNumber: syz [ 1147.635181][ T5938] usb 5-1: 0:2 : does not exist [ 1147.635289][ T5938] usb 5-1: unit 255 not found! [ 1147.704711][ T5938] usb 5-1: USB disconnect, device number 73 [ 1147.829650][T14854] udevd[14854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1149.254656][ T5888] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1149.406440][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1149.409084][ T5888] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1149.409109][ T5888] usb 3-1: config 0 has no interface number 0 [ 1149.414889][ T5888] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1149.414917][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.414936][ T5888] usb 3-1: Product: syz [ 1149.414949][ T5888] usb 3-1: Manufacturer: syz [ 1149.414963][ T5888] usb 3-1: SerialNumber: syz [ 1149.520502][ T5888] usb 3-1: config 0 descriptor?? [ 1149.532680][ T5888] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1149.532697][ T5888] usb 3-1: selecting invalid altsetting 1 [ 1149.532705][ T5888] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1149.535557][ T5888] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1149.535860][ T5888] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1149.535888][ T5888] usb 3-1: media controller created [ 1149.631069][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1150.161481][ T3606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.238569][ T3606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.285349][ T3606] bond0 (unregistering): Released all slaves [ 1150.543770][T14783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.543976][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.544184][T14783] bridge_slave_0: entered allmulticast mode [ 1150.548027][T14783] bridge_slave_0: entered promiscuous mode [ 1150.570468][T14783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.570694][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.571020][T14783] bridge_slave_1: entered allmulticast mode [ 1150.574053][T14783] bridge_slave_1: entered promiscuous mode [ 1150.769073][ T5888] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1150.769161][ T5888] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1150.813050][T14894] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1150.929636][ T5888] usb 3-1: USB disconnect, device number 73 [ 1150.998620][ T3606] hsr_slave_0: left promiscuous mode [ 1151.036209][ T3606] hsr_slave_1: left promiscuous mode [ 1151.037339][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.087067][ T3606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.756107][ T5888] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1154.957576][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 1154.960228][ T5888] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.960257][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1154.960279][ T5888] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1154.960290][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.963955][ T5888] usb 1-1: config 0 descriptor?? [ 1155.015017][ T5888] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1155.466128][ T5888] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1155.679938][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.679965][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1155.682102][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1155.682121][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.682130][ T5888] usb 3-1: Product: syz [ 1155.682137][ T5888] usb 3-1: Manufacturer: syz [ 1155.682145][ T5888] usb 3-1: SerialNumber: syz [ 1155.816861][ T3606] team0 (unregistering): Port device team_slave_1 removed [ 1156.439493][ T3606] team0 (unregistering): Port device team_slave_0 removed [ 1158.216736][ T5888] usb 3-1: cannot find UAC_HEADER [ 1158.319138][ T5888] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1158.322360][ T5888] usb 3-1: USB disconnect, device number 74 [ 1158.363091][T14854] udevd[14854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.705350][T14783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.718663][T14783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.785732][ T5888] usb 1-1: USB disconnect, device number 29 [ 1161.024133][T14783] team0: Port device team_slave_0 added [ 1161.033761][T14783] team0: Port device team_slave_1 added [ 1162.601028][ T5888] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1163.656431][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1163.660693][ T5888] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1163.660719][ T5888] usb 1-1: config 0 has no interface number 0 [ 1163.665556][ T5888] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1163.665584][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.665604][ T5888] usb 1-1: Product: syz [ 1163.665617][ T5888] usb 1-1: Manufacturer: syz [ 1163.665630][ T5888] usb 1-1: SerialNumber: syz [ 1163.711116][ T5888] usb 1-1: config 0 descriptor?? [ 1163.722474][ T5888] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1163.722501][ T5888] usb 1-1: selecting invalid altsetting 1 [ 1163.722516][ T5888] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1163.739892][ T5888] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1163.740295][ T5888] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1163.740351][ T5888] usb 1-1: media controller created [ 1163.797902][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.832507][T14783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.832522][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.832547][T14783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.909789][ T5888] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1163.909846][ T5888] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1163.917408][ T5888] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1164.050109][ T5888] usb 1-1: USB disconnect, device number 30 [ 1165.244990][T14783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.245002][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.245017][T14783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.635654][T14783] hsr_slave_0: entered promiscuous mode [ 1165.649489][T14783] hsr_slave_1: entered promiscuous mode [ 1165.651332][T14783] debugfs: 'hsr0' already exists in 'hsr' [ 1165.651350][T14783] Cannot create hsr debugfs directory [ 1165.697892][T14540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.856103][ T5888] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1166.016136][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 1166.020398][ T5888] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.020426][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1166.020459][ T5888] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1166.020480][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.031237][ T5888] usb 3-1: config 0 descriptor?? [ 1166.071729][ T5888] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1166.164547][T14985] fuse: Unknown parameter 'user_i00000000000000000000' [ 1168.086345][T14540] veth0_vlan: entered promiscuous mode [ 1168.739472][ T8392] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1168.958030][ T8392] usb 1-1: Using ep0 maxpacket: 32 [ 1168.980956][ T5938] usb 3-1: USB disconnect, device number 75 [ 1168.998304][ T8392] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.998322][ T8392] usb 1-1: config 0 has no interface number 0 [ 1169.040181][ T8392] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1169.040212][ T8392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.040230][ T8392] usb 1-1: Product: syz [ 1169.040243][ T8392] usb 1-1: Manufacturer: syz [ 1169.040257][ T8392] usb 1-1: SerialNumber: syz [ 1169.089129][ T8392] usb 1-1: config 0 descriptor?? [ 1169.094149][ T8392] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1169.094174][ T8392] usb 1-1: selecting invalid altsetting 1 [ 1169.094190][ T8392] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1169.139535][ T8392] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1169.139940][ T8392] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1169.139983][ T8392] usb 1-1: media controller created [ 1169.186534][ T8392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.210725][T12565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1170.225629][T12565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1170.252318][T12565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1170.277622][T12565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1170.299457][ T8392] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1170.299561][ T8392] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1170.316449][T14999] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1170.330661][T12565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1170.439541][ T8392] usb 1-1: USB disconnect, device number 31 [ 1171.030315][T15022] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1172.899701][ T5816] Bluetooth: hci3: command tx timeout [ 1173.009963][T15044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2623'. [ 1175.192589][ T5816] Bluetooth: hci3: command tx timeout [ 1175.256157][ T5938] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1175.317600][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1175.588751][ T5938] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1175.588780][ T5938] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1175.588800][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1175.589660][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1175.589688][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1175.592360][ T5938] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1175.592388][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1175.592408][ T5938] usb 5-1: Product: syz [ 1175.592421][ T5938] usb 5-1: Manufacturer: syz [ 1175.729857][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 1175.729869][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 1175.735035][ T5938] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1175.735048][ T5938] cdc_wdm 5-1:1.0: Unknown control protocol [ 1175.952604][ T5938] usb 5-1: USB disconnect, device number 74 [ 1176.192883][T14783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1176.492016][T14783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1176.527713][T14783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1176.612502][T14783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1177.247292][ T5816] Bluetooth: hci3: command tx timeout [ 1177.337602][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.337645][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.748527][ T58] bridge_slave_1: left allmulticast mode [ 1177.748555][ T58] bridge_slave_1: left promiscuous mode [ 1177.748810][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.976913][ T58] bridge_slave_0: left allmulticast mode [ 1177.976933][ T58] bridge_slave_0: left promiscuous mode [ 1177.977129][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.778974][T15105] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1179.940781][ T5816] Bluetooth: hci3: command tx timeout [ 1180.243146][T15127] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20004 [ 1180.586096][ T43] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1180.787989][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1180.788012][ T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1180.788033][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1180.788045][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.794055][T15127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1180.799715][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1182.039258][T15138] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1182.676807][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.756724][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.778945][ T58] bond0 (unregistering): Released all slaves [ 1182.823158][T15009] chnl_net:caif_netlink_parms(): no params data found [ 1184.366387][ T58] hsr_slave_0: left promiscuous mode [ 1184.386110][ T58] hsr_slave_1: left promiscuous mode [ 1184.387047][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.427280][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.456192][ T43] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1184.492252][ T5888] usb 3-1: USB disconnect, device number 76 [ 1184.543831][ T58] veth0_vlan: left promiscuous mode [ 1184.606086][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1184.608396][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.608468][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1184.608493][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1184.608513][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1184.608535][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.609962][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1184.609988][ T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1184.610007][ T43] usb 5-1: Manufacturer: syz [ 1184.669916][ T43] usb 5-1: config 0 descriptor?? [ 1185.416117][ T43] rc_core: IR keymap rc-hauppauge not found [ 1185.416131][ T43] Registered IR keymap rc-empty [ 1185.416230][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.436558][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.465692][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1185.471337][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 1185.526329][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.549922][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.566257][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.596671][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.616146][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.636152][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.656235][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.676486][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.696135][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.721714][ T43] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1185.751382][ T43] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1185.751398][ T43] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1185.812297][T12243] usb 5-1: USB disconnect, device number 75 [ 1186.789293][T15171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1187.428186][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1187.787384][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1193.832863][T15009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.832986][T15009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.833178][T15009] bridge_slave_0: entered allmulticast mode [ 1193.835411][T15009] bridge_slave_0: entered promiscuous mode [ 1194.047654][T15009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.047772][T15009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.048002][T15009] bridge_slave_1: entered allmulticast mode [ 1194.051930][T15009] bridge_slave_1: entered promiscuous mode [ 1195.370944][ T5888] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1195.432080][T15009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.444912][T15009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.540886][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.540913][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.540935][ T5888] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1195.540947][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.546192][ T5888] usb 5-1: config 0 descriptor?? [ 1196.668619][T15009] team0: Port device team_slave_0 added [ 1196.688753][ T5888] uclogic 0003:5543:0005.000C: item fetching failed at offset 5/7 [ 1196.689570][ T5888] uclogic 0003:5543:0005.000C: parse failed [ 1196.689676][ T5888] uclogic 0003:5543:0005.000C: probe with driver uclogic failed with error -22 [ 1196.726891][T15009] team0: Port device team_slave_1 added [ 1196.896984][ T5888] usb 5-1: USB disconnect, device number 76 [ 1197.121649][T15009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.121666][T15009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.121709][T15009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.125122][T15009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.125135][T15009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.125160][T15009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.675401][T15009] hsr_slave_0: entered promiscuous mode [ 1197.685674][T15009] hsr_slave_1: entered promiscuous mode [ 1197.692803][T15009] debugfs: 'hsr0' already exists in 'hsr' [ 1197.692829][T15009] Cannot create hsr debugfs directory [ 1198.186171][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1198.225142][T12565] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1198.246441][T12565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1198.248036][T12565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1198.249785][T12565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1198.250616][T12565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1198.349282][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1198.353229][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.353255][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1198.380665][ T43] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1198.380683][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.380694][ T43] usb 3-1: Product: syz [ 1198.380701][ T43] usb 3-1: Manufacturer: syz [ 1198.380708][ T43] usb 3-1: SerialNumber: syz [ 1198.384495][ T43] usb 3-1: config 0 descriptor?? [ 1198.713243][T15262] fuse: Unknown parameter 'use00000000000000000000' [ 1200.286164][T12565] Bluetooth: hci2: command tx timeout [ 1201.071176][ T43] usb 3-1: USB disconnect, device number 77 [ 1202.972966][T12565] Bluetooth: hci2: command tx timeout [ 1203.146605][T15292] fuse: Unknown parameter 'user_i00000000000000000000' [ 1205.025131][T12565] Bluetooth: hci2: command tx timeout [ 1205.704500][T15255] chnl_net:caif_netlink_parms(): no params data found [ 1205.724998][ T58] bridge_slave_1: left allmulticast mode [ 1205.725025][ T58] bridge_slave_1: left promiscuous mode [ 1205.725247][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.820931][ T58] bridge_slave_0: left allmulticast mode [ 1205.820962][ T58] bridge_slave_0: left promiscuous mode [ 1205.821229][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.088583][T12565] Bluetooth: hci2: command tx timeout [ 1210.130939][T15374] fuse: Unknown parameter '00000000000000000000003' [ 1210.373936][ T5938] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1210.396953][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.276798][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.288709][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.288747][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.288783][ T5938] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1211.288804][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.303012][ T5938] usb 1-1: config 0 descriptor?? [ 1211.399670][ T58] bond0 (unregistering): Released all slaves [ 1211.909242][ T5938] usbhid 1-1:0.0: can't add hid device: -71 [ 1211.909322][ T5938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1211.912514][ T5938] usb 1-1: USB disconnect, device number 32 [ 1213.763255][T15405] fuse: Unknown parameter '00000000000000000000003' [ 1213.887865][ T58] hsr_slave_0: left promiscuous mode [ 1213.906604][ T58] hsr_slave_1: left promiscuous mode [ 1213.907294][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.946679][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.555020][T15427] fuse: Unknown parameter '00000000000000000000003' [ 1215.826866][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1216.208646][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1217.907919][T15448] Device name cannot be null; rc = [-22] [ 1221.234173][T15468] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 1221.365892][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.376695][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.376933][T15255] bridge_slave_0: entered allmulticast mode [ 1221.379526][T15255] bridge_slave_0: entered promiscuous mode [ 1221.450240][T15255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.450335][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.450499][T15255] bridge_slave_1: entered allmulticast mode [ 1221.452447][T15255] bridge_slave_1: entered promiscuous mode [ 1221.894970][T15255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.970959][T15255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.126062][ T5888] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1223.175522][T15009] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1223.227620][T15255] team0: Port device team_slave_0 added [ 1223.227885][T15009] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1223.294839][T15255] team0: Port device team_slave_1 added [ 1223.295116][T15009] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1223.306050][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1223.317526][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.319421][ T5888] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 1223.319447][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1223.319467][ T5888] usb 1-1: Manufacturer: syz [ 1223.319481][ T5888] usb 1-1: SerialNumber: syz [ 1223.324381][ T5888] usb 1-1: config 0 descriptor?? [ 1223.476550][T15009] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1223.600487][T15255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.600498][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.600512][T15255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.603763][T15255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.603780][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.603799][T15255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.709676][T15486] overlayfs: failed to resolve './bus': -2 [ 1223.828155][T15495] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 1225.053567][ T5888] usb 1-1: USB disconnect, device number 33 [ 1225.244591][T15255] hsr_slave_0: entered promiscuous mode [ 1225.245496][T15255] hsr_slave_1: entered promiscuous mode [ 1225.256329][T15255] debugfs: 'hsr0' already exists in 'hsr' [ 1225.256356][T15255] Cannot create hsr debugfs directory [ 1225.436275][T12243] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1225.586449][T12243] usb 3-1: Using ep0 maxpacket: 32 [ 1225.588306][T12243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.588336][T12243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.588381][T12243] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1225.588404][T12243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.649613][T12243] usb 3-1: config 0 descriptor?? [ 1227.126521][T12243] usbhid 3-1:0.0: can't add hid device: -71 [ 1227.126606][T12243] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1227.141051][T15525] ptrace attach of "./syz-executor exec"[15524] was attempted by "./syz-executor exec"[15525] [ 1227.778247][T12243] usb 3-1: USB disconnect, device number 78 [ 1228.809587][T12243] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1228.956077][T12243] usb 3-1: device descriptor read/64, error -71 [ 1229.072190][T15009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.568492][T12243] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1230.700155][T12243] usb 3-1: device descriptor read/64, error -71 [ 1230.806700][T12243] usb usb3-port1: attempt power cycle [ 1232.994125][T15255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1233.244758][T15556] netlink: set zone limit has 4 unknown bytes [ 1233.346729][T15255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1233.401778][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1233.417806][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1233.420955][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1233.423838][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1233.425082][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1233.527868][T15255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1236.739681][ T5816] Bluetooth: hci3: command tx timeout [ 1236.946398][T15255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1237.382979][T12243] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1237.606622][T12243] usb 3-1: Using ep0 maxpacket: 32 [ 1237.845582][T12243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.845661][T12243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.872725][T12243] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1237.872801][T12243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.146069][T12243] usb 3-1: config 0 descriptor?? [ 1238.570785][T12243] usbhid 3-1:0.0: can't add hid device: -71 [ 1238.570912][T12243] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1238.619642][T12243] usb 3-1: USB disconnect, device number 82 [ 1238.676278][ T5938] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1238.782270][ T5816] Bluetooth: hci3: command tx timeout [ 1238.783082][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.783149][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.869177][ T5938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.869204][ T5938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1238.874286][ T5938] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1238.874314][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.874333][ T5938] usb 1-1: Product: syz [ 1238.874346][ T5938] usb 1-1: Manufacturer: syz [ 1238.874360][ T5938] usb 1-1: SerialNumber: syz [ 1239.202525][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 1239.221625][ T5938] usb 1-1: cannot find UAC_HEADER [ 1239.328422][ T5938] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1239.346142][ T5938] usb 1-1: USB disconnect, device number 34 [ 1240.443144][T15590] udevd[15590]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.491811][ T5816] Bluetooth: hci3: command tx timeout [ 1243.354720][T15557] chnl_net:caif_netlink_parms(): no params data found [ 1243.402061][ T6494] bridge_slave_1: left allmulticast mode [ 1243.402092][ T6494] bridge_slave_1: left promiscuous mode [ 1243.402354][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.496932][ T6494] bridge_slave_0: left allmulticast mode [ 1243.496952][ T6494] bridge_slave_0: left promiscuous mode [ 1243.497121][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.566784][ T5816] Bluetooth: hci3: command tx timeout [ 1243.889150][ T7944] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1243.896175][ T5888] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1244.032749][ T7944] usb 1-1: device descriptor read/64, error -71 [ 1244.046059][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1244.061707][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.061738][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.061775][ T5888] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1244.061796][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.074873][ T5888] usb 5-1: config 0 descriptor?? [ 1244.356734][ T7944] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1244.542878][ T7944] usb 1-1: device descriptor read/64, error -71 [ 1244.543378][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 1244.543454][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1244.548411][ T5888] usb 5-1: USB disconnect, device number 77 [ 1244.656436][ T7944] usb usb1-port1: attempt power cycle [ 1245.046124][ T7944] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1245.066735][ T7944] usb 1-1: device descriptor read/8, error -71 [ 1245.074968][T15649] overlayfs: failed to resolve './file0': -2 [ 1245.358153][ T7944] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1245.376892][ T7944] usb 1-1: device descriptor read/8, error -71 [ 1246.152018][ T7944] usb usb1-port1: unable to enumerate USB device [ 1246.576228][T14677] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1246.728834][T14677] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.728861][T14677] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1246.730431][T14677] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1246.730458][T14677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1246.730476][T14677] usb 5-1: SerialNumber: syz [ 1247.532226][T14677] usb 5-1: 0:2 : does not exist [ 1247.532321][T14677] usb 5-1: unit 255 not found! [ 1247.719868][T14677] usb 5-1: USB disconnect, device number 78 [ 1247.771455][T15590] udevd[15590]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.986235][ T7944] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1248.006799][ T6494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.111419][ T6494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.148337][ T7944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.148364][ T7944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.150693][ T7944] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1248.150722][ T7944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.150734][ T7944] usb 1-1: Product: syz [ 1248.150741][ T7944] usb 1-1: Manufacturer: syz [ 1248.150748][ T7944] usb 1-1: SerialNumber: syz [ 1248.212370][ T6494] bond0 (unregistering): Released all slaves [ 1248.469161][T15255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.711983][ T7944] usb 1-1: cannot find UAC_HEADER [ 1248.858342][ T7944] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1248.861820][ T7944] usb 1-1: USB disconnect, device number 39 [ 1248.898604][T15590] udevd[15590]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.916094][ T8766] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1249.248292][ T8766] usb 3-1: Using ep0 maxpacket: 32 [ 1249.250671][ T8766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.250701][ T8766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.250739][ T8766] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1249.250761][ T8766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.258490][ T8766] usb 3-1: config 0 descriptor?? [ 1250.144618][ T6494] hsr_slave_0: left promiscuous mode [ 1250.266161][ T6494] hsr_slave_1: left promiscuous mode [ 1250.267188][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.270643][ T8766] usbhid 3-1:0.0: can't add hid device: -71 [ 1250.270772][ T8766] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1250.281583][ T8766] usb 3-1: USB disconnect, device number 83 [ 1250.450177][T15688] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 1250.606931][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.926390][T15618] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1251.086239][T15618] usb 1-1: device descriptor read/64, error -71 [ 1251.491053][T15618] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1252.426078][T15618] usb 1-1: device descriptor read/64, error -71 [ 1252.467647][ T6494] team0 (unregistering): Port device team_slave_1 removed [ 1252.537720][T15618] usb usb1-port1: attempt power cycle [ 1252.636611][ T6494] team0 (unregistering): Port device team_slave_0 removed [ 1253.010896][T15618] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1253.888821][T15618] usb 1-1: device descriptor read/8, error -71 [ 1255.144052][T15557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.144121][T15557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.144228][T15557] bridge_slave_0: entered allmulticast mode [ 1255.149171][T15557] bridge_slave_0: entered promiscuous mode [ 1255.173979][T15557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.186054][T15557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.192784][T15557] bridge_slave_1: entered allmulticast mode [ 1255.195870][T15557] bridge_slave_1: entered promiscuous mode [ 1255.247438][T15255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.507500][T15557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.527092][T13401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.534423][T13401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.555287][T15557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.712116][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.712321][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.806136][T12243] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1256.922922][T15557] team0: Port device team_slave_0 added [ 1256.925780][T15557] team0: Port device team_slave_1 added [ 1256.946223][T12243] usb 1-1: device descriptor read/64, error -71 [ 1257.178488][T12243] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1257.366066][T12243] usb 1-1: device descriptor read/64, error -71 [ 1257.477734][T12243] usb usb1-port1: attempt power cycle [ 1258.222895][T15557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.222907][T15557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.222922][T15557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.236190][T12243] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1258.259415][T12243] usb 1-1: device descriptor read/8, error -71 [ 1258.313355][T15557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.313373][T15557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.313399][T15557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.516150][T12243] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1258.536837][T12243] usb 1-1: device descriptor read/8, error -71 [ 1258.598635][T15557] hsr_slave_0: entered promiscuous mode [ 1258.601385][T15557] hsr_slave_1: entered promiscuous mode [ 1258.605322][T15557] debugfs: 'hsr0' already exists in 'hsr' [ 1258.605347][T15557] Cannot create hsr debugfs directory [ 1258.646576][T12243] usb usb1-port1: unable to enumerate USB device [ 1259.503377][T15759] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1259.743509][T12565] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1259.762076][T12565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1259.763656][T12565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1259.765887][T12565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1259.796768][T12565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1260.936976][T15777] mmap: syz.4.2834 (15777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1261.710214][T15787] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2838'. [ 1261.806861][T12565] Bluetooth: hci2: command tx timeout [ 1261.825408][T15790] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1263.886649][T12565] Bluetooth: hci2: command tx timeout [ 1265.859101][T15764] chnl_net:caif_netlink_parms(): no params data found [ 1265.966469][T12565] Bluetooth: hci2: command tx timeout [ 1267.149516][T15829] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1267.222390][ T58] bridge_slave_1: left allmulticast mode [ 1267.222418][ T58] bridge_slave_1: left promiscuous mode [ 1267.224390][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.339212][ T58] bridge_slave_0: left allmulticast mode [ 1267.339232][ T58] bridge_slave_0: left promiscuous mode [ 1267.339393][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.046535][T12565] Bluetooth: hci2: command tx timeout [ 1268.616438][ T8392] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1268.796092][ T8392] usb 5-1: Using ep0 maxpacket: 16 [ 1268.802179][ T8392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.802238][ T8392] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1268.802260][ T8392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.850172][ T8392] usb 5-1: config 0 descriptor?? [ 1270.495600][ T8392] macally 0003:060B:0001.000D: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 1272.076464][ T7944] usb 5-1: USB disconnect, device number 79 [ 1272.165326][T15861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1272.786753][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.866632][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.928161][ T58] bond0 (unregistering): Released all slaves [ 1272.973959][T15557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1273.292490][T15557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1273.403800][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.404222][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.404785][T15764] bridge_slave_0: entered allmulticast mode [ 1273.712479][T15764] bridge_slave_0: entered promiscuous mode [ 1274.312482][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.313007][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.313822][T15764] bridge_slave_1: entered allmulticast mode [ 1274.359057][T15764] bridge_slave_1: entered promiscuous mode [ 1274.469529][T15557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1274.979764][ T58] hsr_slave_0: left promiscuous mode [ 1274.997469][ T58] hsr_slave_1: left promiscuous mode [ 1274.998162][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.019675][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.050502][T15892] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1276.855988][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1277.360066][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1281.453110][T15557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1281.572002][T15923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1281.651004][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.684344][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.948471][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 1282.948889][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 1283.845690][T15764] team0: Port device team_slave_0 added [ 1283.951912][T15764] team0: Port device team_slave_1 added [ 1285.518584][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.518601][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.518625][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.558676][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.558692][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.558718][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.808114][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 1285.808152][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2892'. [ 1286.674069][T15975] dvmrp0: entered allmulticast mode [ 1286.679527][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1286.679540][ T37] audit: type=1326 audit(1767238105.948:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679567][ T37] audit: type=1326 audit(1767238105.948:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679589][ T37] audit: type=1326 audit(1767238105.948:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679614][ T37] audit: type=1326 audit(1767238105.948:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679635][ T37] audit: type=1326 audit(1767238105.948:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679658][ T37] audit: type=1326 audit(1767238105.948:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679680][ T37] audit: type=1326 audit(1767238105.948:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679701][ T37] audit: type=1326 audit(1767238105.948:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.679723][ T37] audit: type=1326 audit(1767238105.948:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62c677df90 code=0x7ffc0000 [ 1286.679745][ T37] audit: type=1326 audit(1767238105.948:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15974 comm="syz.2.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c677f749 code=0x7ffc0000 [ 1286.721063][T15764] hsr_slave_0: entered promiscuous mode [ 1286.770915][T15764] hsr_slave_1: entered promiscuous mode [ 1286.771870][T15764] debugfs: 'hsr0' already exists in 'hsr' [ 1286.771892][T15764] Cannot create hsr debugfs directory [ 1287.464402][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2897'. [ 1288.556105][ T5938] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1289.454599][ T5938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.454625][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1289.467293][ T5938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1289.467320][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.467339][ T5938] usb 5-1: Product: syz [ 1289.467352][ T5938] usb 5-1: Manufacturer: syz [ 1289.467366][ T5938] usb 5-1: SerialNumber: syz [ 1289.745210][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1289.745253][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1290.053853][ T5938] usb 5-1: cannot find UAC_HEADER [ 1290.168575][ T5938] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1290.174509][ T5938] usb 5-1: USB disconnect, device number 80 [ 1290.252745][T15996] udevd[15996]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.332101][T15557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.632361][T15557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.656648][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.656864][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.703301][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.713541][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.095615][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.107494][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.116644][T16024] netlink: 'syz.4.2907': attribute type 2 has an invalid length. [ 1291.130116][T16022] bridge0: entered allmulticast mode [ 1292.124136][T15557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.630421][T15764] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1292.675684][T15764] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1292.895591][T15764] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1292.931317][T15764] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1293.863554][T15764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.909779][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.935244][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.946928][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.975760][ T1402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.996601][ T1402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.090644][T16047] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 1294.199473][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1294.202769][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1294.204173][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1294.232290][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1294.233219][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1294.440770][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1294.440810][T16057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1296.368437][ T5816] Bluetooth: hci3: command tx timeout [ 1298.547549][ T5816] Bluetooth: hci3: command tx timeout [ 1298.961733][T15764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.500289][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'. [ 1299.500332][T16095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2922'. [ 1299.716324][ T58] bridge_slave_1: left allmulticast mode [ 1299.716352][ T58] bridge_slave_1: left promiscuous mode [ 1299.716605][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.827713][ T58] bridge_slave_0: left allmulticast mode [ 1299.827742][ T58] bridge_slave_0: left promiscuous mode [ 1299.828008][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.253844][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.253916][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.606206][ T5816] Bluetooth: hci3: command tx timeout [ 1302.180647][T16114] overlayfs: failed to resolve './bus': -2 [ 1302.726313][T12565] Bluetooth: hci3: command tx timeout [ 1305.290280][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.350787][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.378097][ T58] bond0 (unregistering): Released all slaves [ 1305.508290][T16049] chnl_net:caif_netlink_parms(): no params data found [ 1305.758340][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1305.758381][T16139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1306.336084][ T58] hsr_slave_0: left promiscuous mode [ 1306.358896][ T58] hsr_slave_1: left promiscuous mode [ 1306.360016][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.407097][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.104206][T16163] overlayfs: failed to resolve './bus': -2 [ 1311.186501][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 1312.428018][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1312.856764][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1315.499214][T16190] tipc: Started in network mode [ 1315.499237][T16190] tipc: Node identity e0000002, cluster identity 4711 [ 1315.499270][T16190] tipc: Enabling of bearer rejected, failed to enable media [ 1316.900582][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.900806][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.900985][T16049] bridge_slave_0: entered allmulticast mode [ 1316.902612][T16049] bridge_slave_0: entered promiscuous mode [ 1317.000283][T16203] overlayfs: failed to resolve './bus': -2 [ 1317.587216][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.587348][T16049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.587581][T16049] bridge_slave_1: entered allmulticast mode [ 1317.590203][T16049] bridge_slave_1: entered promiscuous mode [ 1317.639987][T15764] veth0_vlan: entered promiscuous mode [ 1318.002341][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1318.442810][T15764] veth1_vlan: entered promiscuous mode [ 1318.469977][T16049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.661047][T16049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.177278][T16049] team0: Port device team_slave_0 added [ 1319.252959][T16049] team0: Port device team_slave_1 added [ 1319.376128][ T5938] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1319.393412][T15764] veth0_macvtap: entered promiscuous mode [ 1319.531465][T16049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.531482][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.531508][T16049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.533805][T16049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.533819][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.533845][T16049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.569353][ T5938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.569377][ T5938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.570669][ T5938] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1319.570693][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1319.570712][ T5938] usb 1-1: SerialNumber: syz [ 1319.644695][T15764] veth1_macvtap: entered promiscuous mode [ 1319.800995][ T5938] usb 1-1: 0:2 : does not exist [ 1319.848098][ T5938] usb 1-1: USB disconnect, device number 48 [ 1319.894775][T16229] udevd[16229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.077934][T16049] hsr_slave_0: entered promiscuous mode [ 1320.078730][T16049] hsr_slave_1: entered promiscuous mode [ 1320.079255][T16049] debugfs: 'hsr0' already exists in 'hsr' [ 1320.079271][T16049] Cannot create hsr debugfs directory [ 1321.689286][T12565] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1321.709557][T12565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1321.715023][T12565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1321.798951][T16245] netlink: 'syz.2.2958': attribute type 1 has an invalid length. [ 1321.817647][T16245] overlayfs: failed to resolve './bus': -2 [ 1322.276183][T12565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1322.283478][T12565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1322.453242][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 1324.441658][ T5816] Bluetooth: hci2: command tx timeout [ 1325.120246][T16285] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 1325.139071][T16285] overlayfs: failed to resolve './bus': -2 [ 1326.608478][ T5816] Bluetooth: hci2: command tx timeout [ 1327.406236][T16049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1328.186139][T16049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1328.478704][T16049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1329.012968][ T5816] Bluetooth: hci2: command tx timeout [ 1329.309822][T16049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1330.270718][T16240] chnl_net:caif_netlink_parms(): no params data found [ 1331.107635][ T5816] Bluetooth: hci2: command tx timeout [ 1331.452375][ T58] bridge_slave_1: left allmulticast mode [ 1331.452406][ T58] bridge_slave_1: left promiscuous mode [ 1331.452653][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.537339][ T58] bridge_slave_0: left allmulticast mode [ 1331.537368][ T58] bridge_slave_0: left promiscuous mode [ 1331.537611][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.775115][T16386] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 1336.056029][ T8392] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1336.242851][ T8392] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1336.242886][ T8392] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1336.242920][ T8392] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1336.242931][ T8392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.285368][T16386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1336.303924][ T8392] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1336.456803][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.516702][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.565352][ T58] bond0 (unregistering): Released all slaves [ 1337.982862][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.984017][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.984147][T16240] bridge_slave_0: entered allmulticast mode [ 1337.985827][T16240] bridge_slave_0: entered promiscuous mode [ 1338.136650][ T58] hsr_slave_0: left promiscuous mode [ 1338.158498][ T58] hsr_slave_1: left promiscuous mode [ 1338.160569][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.186559][ T8392] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1338.187454][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.261908][ T58] veth1_macvtap: left promiscuous mode [ 1338.261973][ T58] veth0_macvtap: left promiscuous mode [ 1338.278003][ T58] veth1_vlan: left promiscuous mode [ 1338.278123][ T58] veth0_vlan: left promiscuous mode [ 1338.316024][ T8392] usb 1-1: device descriptor read/64, error -71 [ 1338.556121][ T8392] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1338.746146][ T8392] usb 1-1: device descriptor read/64, error -71 [ 1338.867596][ T8392] usb usb1-port1: attempt power cycle [ 1338.868096][T12243] usb 5-1: USB disconnect, device number 81 [ 1339.386670][ T8392] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1339.444574][ T8392] usb 1-1: device descriptor read/8, error -71 [ 1339.756139][ T8392] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1339.779925][ T8392] usb 1-1: device descriptor read/8, error -71 [ 1339.903585][ T8392] usb usb1-port1: unable to enumerate USB device [ 1343.666164][ T7944] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1343.832469][ T7944] usb 1-1: device descriptor read/64, error -71 [ 1343.950252][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 1344.973880][ T7944] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1345.186890][ T7944] usb 1-1: device descriptor read/64, error -71 [ 1345.314814][ T7944] usb usb1-port1: attempt power cycle [ 1345.759627][ T7944] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1346.001010][ T7944] usb 1-1: device descriptor read/8, error -71 [ 1346.052925][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1346.475920][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1346.526978][ T7944] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1346.688447][ T7944] usb 1-1: device descriptor read/8, error -71 [ 1346.801720][ T7944] usb usb1-port1: unable to enumerate USB device [ 1351.116089][ T8392] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1351.246174][ T8392] usb 5-1: device descriptor read/64, error -71 [ 1352.479496][ T8392] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1353.329655][ T8392] usb 5-1: device descriptor read/64, error -71 [ 1353.436822][ T8392] usb usb5-port1: attempt power cycle [ 1353.806166][ T8392] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1353.844065][ T8392] usb 5-1: device descriptor read/8, error -71 [ 1354.608749][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.608876][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.609113][T16240] bridge_slave_1: entered allmulticast mode [ 1354.611611][T16240] bridge_slave_1: entered promiscuous mode [ 1354.875976][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.880120][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.128210][T16240] team0: Port device team_slave_0 added [ 1355.468115][T16499] 9p: Bad value for 'wfdno' [ 1355.507365][T16240] team0: Port device team_slave_1 added [ 1355.589776][T12565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1355.602901][T12565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1355.604357][T12565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1355.615046][T12565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1355.622920][T12565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1356.613723][T16512] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1356.619932][T16512] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1356.632050][T16512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1356.645842][T16512] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1356.648371][T16512] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1357.391190][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.391208][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.391231][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.401682][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.401697][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.401723][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.456069][T12565] Bluetooth: hci3: command tx timeout [ 1358.675800][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 1358.675830][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 1358.686118][T16512] Bluetooth: hci5: command tx timeout [ 1358.996050][T14677] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1359.043722][T16240] hsr_slave_0: entered promiscuous mode [ 1359.044528][T16240] hsr_slave_1: entered promiscuous mode [ 1359.045084][T16240] debugfs: 'hsr0' already exists in 'hsr' [ 1359.045100][T16240] Cannot create hsr debugfs directory [ 1359.137622][T14677] usb 5-1: device descriptor read/64, error -71 [ 1359.376121][T14677] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1359.518003][T14677] usb 5-1: device descriptor read/64, error -71 [ 1359.626832][T14677] usb usb5-port1: attempt power cycle [ 1359.966089][T14677] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1359.987030][T14677] usb 5-1: device descriptor read/8, error -71 [ 1360.079333][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.226422][T14677] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1360.248952][T14677] usb 5-1: device descriptor read/8, error -71 [ 1360.356756][T14677] usb usb5-port1: unable to enumerate USB device [ 1360.654831][T16512] Bluetooth: hci3: command tx timeout [ 1361.142260][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.251247][T16512] Bluetooth: hci5: command tx timeout [ 1362.377559][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.377629][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.541892][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.961551][T12565] Bluetooth: hci5: command tx timeout [ 1363.961644][T16512] Bluetooth: hci3: command tx timeout [ 1365.377281][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.704856][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3045'. [ 1365.976182][T16512] Bluetooth: hci3: command tx timeout [ 1365.976216][T16512] Bluetooth: hci5: command tx timeout [ 1366.079850][T16510] chnl_net:caif_netlink_parms(): no params data found [ 1366.184866][T16578] ptrace attach of "./syz-executor exec"[16580] was attempted by "./syz-executor exec"[16578] [ 1366.961993][T16502] chnl_net:caif_netlink_parms(): no params data found [ 1367.147068][ T8392] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1367.336027][ T8392] usb 5-1: device descriptor read/64, error -71 [ 1367.706129][ T8392] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1367.846062][ T8392] usb 5-1: device descriptor read/64, error -71 [ 1367.983142][ T8392] usb usb5-port1: attempt power cycle [ 1369.564696][ T8392] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1369.576685][ T8392] usb 5-1: device descriptor read/8, error -71 [ 1369.593662][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.594152][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.594404][T16510] bridge_slave_0: entered allmulticast mode [ 1369.623753][T16510] bridge_slave_0: entered promiscuous mode [ 1369.826065][ T8392] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1369.852834][ T8392] usb 5-1: device descriptor read/8, error -71 [ 1369.922017][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.922146][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.922348][T16510] bridge_slave_1: entered allmulticast mode [ 1369.946300][T16510] bridge_slave_1: entered promiscuous mode [ 1369.967486][ T8392] usb usb5-port1: unable to enumerate USB device [ 1370.145166][T16502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.145316][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.145566][T16502] bridge_slave_0: entered allmulticast mode [ 1370.168658][T16502] bridge_slave_0: entered promiscuous mode [ 1371.056002][ T7944] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1371.211076][ T7944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.211102][ T7944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.211123][ T7944] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1371.211135][ T7944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.217135][ T7944] usb 1-1: config 0 descriptor?? [ 1371.263758][T16502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.264161][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.267026][T16502] bridge_slave_1: entered allmulticast mode [ 1371.278799][T16502] bridge_slave_1: entered promiscuous mode [ 1371.518302][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.592332][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.803680][T16502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.895534][ T7944] usbhid 1-1:0.0: can't add hid device: -71 [ 1371.895650][ T7944] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1371.921579][ T7944] usb 1-1: USB disconnect, device number 57 [ 1372.004335][T16502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.309647][T16613] ptrace attach of "./syz-executor exec"[16615] was attempted by "./syz-executor exec"[16613] [ 1372.783002][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3055'. [ 1372.783038][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 1373.800012][T16510] team0: Port device team_slave_0 added [ 1373.929630][T16510] team0: Port device team_slave_1 added [ 1373.944068][T16502] team0: Port device team_slave_0 added [ 1374.022145][T16502] team0: Port device team_slave_1 added [ 1374.022231][T16240] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1374.076115][ T5938] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1374.226037][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 1374.228728][T16240] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1374.229748][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.229788][ T5938] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1374.229800][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.232552][ T5938] usb 5-1: config 0 descriptor?? [ 1374.303600][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.303617][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.303641][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.421126][T16240] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1374.441926][ T5938] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1374.471989][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.472005][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.472031][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.548301][T16502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.548312][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.548327][T16502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.548638][T16240] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1375.125450][T16502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.125468][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.125495][T16502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.576375][ T7944] usb 5-1: USB disconnect, device number 94 [ 1376.524599][T16510] hsr_slave_0: entered promiscuous mode [ 1376.525708][T16510] hsr_slave_1: entered promiscuous mode [ 1376.528799][T16510] debugfs: 'hsr0' already exists in 'hsr' [ 1376.528823][T16510] Cannot create hsr debugfs directory [ 1376.533751][ T58] bridge_slave_1: left allmulticast mode [ 1376.533775][ T58] bridge_slave_1: left promiscuous mode [ 1376.534005][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.586767][ T58] bridge_slave_0: left allmulticast mode [ 1376.586786][ T58] bridge_slave_0: left promiscuous mode [ 1376.586957][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.656024][ T7944] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1376.684343][ T58] bridge_slave_1: left allmulticast mode [ 1376.684362][ T58] bridge_slave_1: left promiscuous mode [ 1376.684530][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.940420][ T7944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.940440][ T7944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.940463][ T7944] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1376.940475][ T7944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.134161][ T58] bridge_slave_0: left allmulticast mode [ 1377.134221][ T58] bridge_slave_0: left promiscuous mode [ 1377.135266][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.650627][ T7944] usb 1-1: config 0 descriptor?? [ 1377.770022][T16657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1377.770047][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1378.266429][ T7944] usbhid 1-1:0.0: can't add hid device: -71 [ 1378.266547][ T7944] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1378.273002][ T7944] usb 1-1: USB disconnect, device number 58 [ 1378.756990][ T58] dvmrp0 (unregistering): left allmulticast mode [ 1381.998956][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.018330][ T58] bond0 (unregistering): Released all slaves [ 1382.396571][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.477198][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.539182][ T58] bond0 (unregistering): Released all slaves [ 1382.591522][T16502] hsr_slave_0: entered promiscuous mode [ 1382.592302][T16502] hsr_slave_1: entered promiscuous mode [ 1382.592884][T16502] debugfs: 'hsr0' already exists in 'hsr' [ 1382.592900][T16502] Cannot create hsr debugfs directory [ 1383.042125][T16512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1383.054421][T16512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1383.062582][T16512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1383.065043][T16512] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1383.070674][T16512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1384.235332][ T7944] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1384.389820][ T7944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.389846][ T7944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.394453][ T7944] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1384.394481][ T7944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1384.394499][ T7944] usb 5-1: SerialNumber: syz [ 1384.610847][ T7944] usb 5-1: 0:2 : does not exist [ 1384.652481][ T7944] usb 5-1: USB disconnect, device number 95 [ 1384.699454][T16685] udevd[16685]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.167529][T16512] Bluetooth: hci1: command tx timeout [ 1386.671417][ T58] hsr_slave_0: left promiscuous mode [ 1386.716462][ T58] hsr_slave_1: left promiscuous mode [ 1386.717464][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.717488][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.747627][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.747654][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.976030][ T58] hsr_slave_0: left promiscuous mode [ 1387.247023][T16512] Bluetooth: hci1: command tx timeout [ 1387.651038][ T58] hsr_slave_1: left promiscuous mode [ 1387.679045][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.993227][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.329505][T16512] Bluetooth: hci1: command tx timeout [ 1389.657782][ T58] veth1_macvtap: left promiscuous mode [ 1389.657890][ T58] veth0_macvtap: left promiscuous mode [ 1389.658172][ T58] veth1_vlan: left promiscuous mode [ 1389.658345][ T58] veth0_vlan: left promiscuous mode [ 1391.706147][T16512] Bluetooth: hci1: command tx timeout [ 1393.416233][ T7944] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1393.570474][ T7944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.570502][ T7944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1393.572062][ T7944] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1393.572088][ T7944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1393.572114][ T7944] usb 5-1: SerialNumber: syz [ 1393.920470][ T7944] usb 5-1: 0:2 : does not exist [ 1393.988644][ T7944] usb 5-1: USB disconnect, device number 96 [ 1394.057718][T16743] udevd[16743]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1401.177589][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1402.156656][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1405.783044][T16807] ptrace attach of "./syz-executor exec"[16808] was attempted by "./syz-executor exec"[16807] [ 1406.927103][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1407.086928][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1409.366109][T16510] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1410.292496][T16510] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1410.446368][T16510] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1411.285064][T16846] ptrace attach of "./syz-executor exec"[16847] was attempted by "./syz-executor exec"[16846] [ 1411.501683][T16510] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1412.143783][T16856] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1412.658183][T16675] chnl_net:caif_netlink_parms(): no params data found [ 1416.331386][T16675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.331548][T16675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.331739][T16675] bridge_slave_0: entered allmulticast mode [ 1416.334197][T16675] bridge_slave_0: entered promiscuous mode [ 1416.408046][T16675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.408246][T16675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.408458][T16675] bridge_slave_1: entered allmulticast mode [ 1416.411037][T16675] bridge_slave_1: entered promiscuous mode [ 1416.708987][T16675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.718321][T16675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.944677][T16675] team0: Port device team_slave_0 added [ 1416.948399][T16675] team0: Port device team_slave_1 added [ 1417.609855][T16675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.609873][T16675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.609900][T16675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.686853][T16675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.686866][T16675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.686881][T16675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.866111][ T5938] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1417.908820][T12565] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1418.003344][T12565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1418.006793][T12565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1418.008674][T12565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1418.010353][T12565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1418.045779][ T5938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.045804][ T5938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1418.050355][ T5938] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1418.050383][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1418.050401][ T5938] usb 1-1: SerialNumber: syz [ 1418.440960][ T5938] usb 1-1: 0:2 : does not exist [ 1418.441014][ T5938] usb 1-1: unit 5 not found! [ 1418.505619][ T5938] usb 1-1: USB disconnect, device number 59 [ 1418.573719][T16829] udevd[16829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.798923][T16512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1418.815289][T16512] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1418.816909][T16512] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1418.818147][T16512] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1418.818958][T16512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1418.910745][T16675] hsr_slave_0: entered promiscuous mode [ 1418.912235][T16675] hsr_slave_1: entered promiscuous mode [ 1418.913173][T16675] debugfs: 'hsr0' already exists in 'hsr' [ 1418.913197][T16675] Cannot create hsr debugfs directory [ 1420.236049][T16512] Bluetooth: hci2: command tx timeout [ 1420.842154][T16923] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1420.852269][T16512] Bluetooth: hci3: command tx timeout [ 1422.286324][T16512] Bluetooth: hci2: command tx timeout [ 1422.926803][T16512] Bluetooth: hci3: command tx timeout [ 1423.089152][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.089238][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.391188][T16512] Bluetooth: hci2: command tx timeout [ 1425.326495][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 1425.326524][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 1425.326674][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 1425.606087][T16512] Bluetooth: hci3: command tx timeout [ 1426.810625][T16512] Bluetooth: hci2: command tx timeout [ 1427.647962][T16512] Bluetooth: hci3: command tx timeout [ 1428.685942][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1428.686016][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1428.690124][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 1430.653426][T14677] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1431.343324][T14677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.343358][T14677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.343379][T14677] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1431.343423][T14677] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1431.343444][T14677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.360765][T14677] usb 1-1: config 0 descriptor?? [ 1431.946133][T14677] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1431.969991][T16906] chnl_net:caif_netlink_parms(): no params data found [ 1432.070241][T16901] chnl_net:caif_netlink_parms(): no params data found [ 1432.416966][T14677] usb 1-1: USB disconnect, device number 60 [ 1432.879726][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1432.879801][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1432.880386][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1435.229892][T17051] ptrace attach of ""[17052] was attempted by "./syz-executor exec"[17051] [ 1436.902595][ T58] bridge_slave_1: left allmulticast mode [ 1436.902624][ T58] bridge_slave_1: left promiscuous mode [ 1436.902911][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.256007][ T5938] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1437.419038][ T5938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.419064][ T5938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1437.421035][ T5938] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1437.421061][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1437.421080][ T5938] usb 1-1: SerialNumber: syz [ 1437.561811][ T58] bridge_slave_0: left allmulticast mode [ 1437.561840][ T58] bridge_slave_0: left promiscuous mode [ 1437.562214][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.720159][ T5938] usb 1-1: 0:2 : does not exist [ 1437.720249][ T5938] usb 1-1: unit 5 not found! [ 1437.770386][ T5938] usb 1-1: USB disconnect, device number 61 [ 1437.844042][T17032] udevd[17032]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1438.074380][ T58] bridge_slave_1: left allmulticast mode [ 1438.074410][ T58] bridge_slave_1: left promiscuous mode [ 1438.074650][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.608156][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1438.608231][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1438.608752][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1439.804327][ T58] bridge_slave_0: left allmulticast mode [ 1439.804356][ T58] bridge_slave_0: left promiscuous mode [ 1439.804594][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.409805][T17093] ptrace attach of ""[17089] was attempted by "./syz-executor exec"[17093] [ 1448.804044][T12565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1448.829945][T12565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1448.834139][T12565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1448.854453][T12565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1448.855141][T12565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1449.367978][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1449.368007][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1449.368084][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 1451.027537][T16512] Bluetooth: hci5: command tx timeout [ 1453.086397][T16512] Bluetooth: hci5: command tx timeout [ 1455.076533][T17128] ptrace attach of "./syz-executor exec"[17129] was attempted by "./syz-executor exec"[17128] [ 1455.166052][T16512] Bluetooth: hci5: command tx timeout [ 1457.257449][T16512] Bluetooth: hci5: command tx timeout [ 1468.088581][T17160] ptrace attach of "./syz-executor exec"[17161] was attempted by "./syz-executor exec"[17160] [ 1472.355738][T17175] ptrace attach of "./syz-executor exec"[17177] was attempted by "./syz-executor exec"[17175] [ 1483.497636][T17193] ptrace attach of "./syz-executor exec"[17191] was attempted by "./syz-executor exec"[17193] [ 1484.658190][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.658263][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.497133][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.524738][T12565] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1486.783847][T12565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1486.796303][T12565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1486.798161][T12565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1486.799456][T12565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1486.875953][ T7944] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1487.118165][ T7944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.118199][ T7944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.118219][ T7944] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1487.118261][ T7944] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1487.118283][ T7944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.184685][ T7944] usb 5-1: config 0 descriptor?? [ 1488.042799][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.045501][T12565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1488.059062][ T7944] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1488.276900][T12565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1488.306612][T12565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1488.451899][T12565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1488.453021][T12565] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1488.861963][T16512] Bluetooth: hci6: command tx timeout [ 1490.073894][ C0] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 1490.500939][T17180] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 1490.541531][T16512] Bluetooth: hci7: command tx timeout [ 1490.846219][ T58] bond0 (unregistering): Released all slaves [ 1490.926094][T16512] Bluetooth: hci6: command tx timeout [ 1492.453751][ T989] usb 5-1: USB disconnect, device number 97 [ 1492.651290][T16512] Bluetooth: hci7: command tx timeout [ 1493.188623][T16512] Bluetooth: hci6: command tx timeout [ 1494.129234][T17218] ptrace attach of "./syz-executor exec"[17219] was attempted by "./syz-executor exec"[17218] [ 1494.685964][T16512] Bluetooth: hci7: command tx timeout [ 1495.246099][T16512] Bluetooth: hci6: command tx timeout [ 1496.768872][T16512] Bluetooth: hci7: command tx timeout [ 1499.936141][T15618] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1501.285977][T15618] usb 5-1: Using ep0 maxpacket: 8 [ 1501.337267][T15618] usb 5-1: device descriptor read/all, error -71 [ 1503.629656][T17232] ptrace attach of "./syz-executor exec"[17234] was attempted by "./syz-executor exec"[17232] [ 1504.078342][T12565] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1504.206420][T12565] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1504.214491][T12565] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1504.217235][T12565] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1504.235283][T12565] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1506.373977][T16512] Bluetooth: hci8: command tx timeout [ 1507.086238][T16512] Bluetooth: hci1: command 0x0406 tx timeout [ 1508.446068][T16512] Bluetooth: hci8: command tx timeout [ 1510.526136][T12565] Bluetooth: hci8: command tx timeout [ 1511.615789][T16512] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1511.622232][T16512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1511.649852][T16512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1511.651169][T16512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1511.665436][T16512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1512.605994][T16512] Bluetooth: hci8: command tx timeout [ 1513.727555][T16512] Bluetooth: hci0: command tx timeout [ 1515.884132][T16512] Bluetooth: hci0: command tx timeout [ 1517.965913][T16512] Bluetooth: hci0: command tx timeout [ 1520.046237][T16512] Bluetooth: hci0: command tx timeout [ 1532.257478][T12565] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1532.278515][T12565] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1532.281017][T12565] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1532.313473][T12565] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1532.314290][T12565] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1534.536173][T12565] Bluetooth: hci9: command tx timeout [ 1536.606155][T12565] Bluetooth: hci9: command tx timeout [ 1538.685956][T12565] Bluetooth: hci9: command tx timeout [ 1540.766069][T12565] Bluetooth: hci9: command tx timeout [ 1543.086062][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.486027][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 1545.972130][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.972202][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.807138][T16512] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1548.810910][T16512] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1548.839400][T16512] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1549.407831][T16512] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1549.409335][T16512] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1549.897916][T12565] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1549.911654][T12565] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1549.913222][T12565] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1549.914389][T12565] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1549.915213][T12565] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1551.485983][T12565] Bluetooth: hci10: command tx timeout [ 1552.448703][T12565] Bluetooth: hci11: command tx timeout [ 1554.526110][T12565] Bluetooth: hci11: command tx timeout [ 1554.950785][T12565] Bluetooth: hci10: command tx timeout [ 1556.605922][T12565] Bluetooth: hci11: command tx timeout [ 1557.145971][T12565] Bluetooth: hci10: command tx timeout [ 1558.685939][T12565] Bluetooth: hci11: command tx timeout [ 1559.166030][T12565] Bluetooth: hci10: command tx timeout [ 1564.999170][T16512] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1565.020789][T16512] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1565.023162][T16512] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1565.029427][T16512] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1565.030286][T16512] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1567.086007][T12565] Bluetooth: hci12: command tx timeout [ 1569.342315][T12565] Bluetooth: hci12: command tx timeout [ 1571.406066][T12565] Bluetooth: hci12: command tx timeout [ 1573.485940][T16512] Bluetooth: hci12: command tx timeout [ 1573.965942][ T5816] Bluetooth: hci5: command 0x0406 tx timeout [ 1577.815663][ T5816] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1577.836147][ T5816] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1577.863806][ T5816] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1577.865095][ T5816] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1577.882553][ T5816] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1580.146065][ T5816] Bluetooth: hci13: command tx timeout [ 1582.205961][ T5816] Bluetooth: hci13: command tx timeout [ 1584.286143][ T5816] Bluetooth: hci13: command tx timeout [ 1586.365921][ T5816] Bluetooth: hci13: command tx timeout [ 1593.064901][T12565] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1593.113705][T12565] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1593.124843][T12565] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1593.127486][T12565] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1593.128287][T12565] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1595.259452][ T5816] Bluetooth: hci14: command tx timeout [ 1597.326007][ T5816] Bluetooth: hci14: command tx timeout [ 1597.822442][ T38] INFO: task kworker/0:14:8392 blocked for more than 143 seconds. [ 1597.822476][ T38] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1597.822488][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1597.822497][ T38] task:kworker/0:14 state:D stack:20248 pid:8392 tgid:8392 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1597.822547][ T38] Workqueue: events switchdev_deferred_process_work [ 1597.822738][ T38] Call Trace: [ 1597.822748][ T38] [ 1597.822769][ T38] __schedule+0x145f/0x5070 [ 1597.822853][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1597.822927][ T38] ? __pfx___schedule+0x10/0x10 [ 1597.822971][ T38] rt_mutex_schedule+0x77/0xf0 [ 1597.823004][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1597.823055][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1597.823096][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1597.823122][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1597.823146][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1597.823181][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1597.823215][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1597.823233][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1597.823257][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 1597.823288][ T38] switchdev_deferred_process_work+0xe/0x20 [ 1597.823307][ T38] process_scheduled_works+0xad1/0x1770 [ 1598.015916][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1598.015948][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1598.015983][ T38] worker_thread+0x8a0/0xda0 [ 1598.016017][ T38] ? __kthread_parkme+0x7b/0x200 [ 1598.016048][ T38] kthread+0x711/0x8a0 [ 1598.016074][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1598.016095][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.016117][ T38] ? rt_spin_unlock+0x150/0x200 [ 1598.016146][ T38] ? rt_spin_unlock+0x161/0x200 [ 1598.016167][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.016194][ T38] ret_from_fork+0x510/0xa50 [ 1598.016256][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1598.016275][ T38] ? __switch_to+0xc9e/0x1480 [ 1598.016306][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.016331][ T38] ret_from_fork_asm+0x1a/0x30 [ 1598.016396][ T38] [ 1598.016434][ T38] INFO: task syz-executor:16675 blocked for more than 143 seconds. [ 1598.016451][ T38] Tainted: G L syzkaller #0 [ 1598.016462][ T38] "echo 0 > /proc/sys/kerne[ 1598.016462][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1598.016472][ T38] task:syz-executor state:D stack:22392 pid:16675 tgid:16675 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1598.016522][ T38] Call Trace: [ 1598.016528][ T38] [ 1598.016540][ T38] __schedule+0x145f/0x5070 [ 1598.016578][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1598.016633][ T38] ? __pfx___schedule+0x10/0x10 [ 1598.016676][ T38] rt_mutex_schedule+0x77/0xf0 [ 1598.016703][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1598.016728][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1598.016775][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1598.016802][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1598.016826][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1598.016865][ T38] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1598.016985][ T38] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1598.017003][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1598.017025][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1598.017047][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1598.017067][ T38] rtnl_net_dev_lock+0x257/0x2f0 [ 1598.017091][ T38] unregister_netdevice_notifier_dev_net+0x8f/0x420 [ 1598.017118][ T38] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 1598.017142][ T38] ? __pfx_mntput_no_expire_slowpath+0x10/0x10 [ 1598.017194][ T38] ? mntput_no_expire+0x1c/0x1c0 [ 1598.017220][ T38] ? rcu_is_watching+0x15/0xb0 [ 1598.017247][ T38] ? mntput_no_expire+0x1c/0x1c0 [ 1598.017277][ T38] nsim_destroy+0xd9/0x680 [ 1598.017359][ T38] ? nsim_dev_reload_destroy+0x288/0x490 [ 1598.017384][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 1598.017409][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 1598.017432][ T38] ? nsim_drv_remove+0x50/0x160 [ 1598.017458][ T38] nsim_drv_remove+0x58/0x160 [ 1598.017479][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1598.017528][ T38] device_release_driver_internal+0x46f/0x800 [ 1598.017609][ T38] bus_remove_device+0x355/0x450 [ 1598.017667][ T38] device_del+0x515/0x8e0 [ 1598.017699][ T38] ? __pfx_device_del+0x10/0x10 [ 1598.017721][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1598.017741][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1598.017772][ T38] device_unregister+0x21/0x100 [ 1598.017795][ T38] del_device_store+0x2aa/0x360 [ 1598.017820][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1598.017841][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1598.017885][ T38] ? sysfs_kf_write+0x166/0x260 [ 1598.017913][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1598.017937][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1598.017966][ T38] vfs_write+0x5d5/0xb40 [ 1598.017999][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1598.018023][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1598.018046][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1598.018070][ T38] ? kmem_cache_free+0x18f/0x8d0 [ 1598.018109][ T38] ? do_sys_openat2+0x15a/0x200 [ 1598.018145][ T38] ksys_write+0x14b/0x260 [ 1598.018174][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1598.018211][ T38] do_syscall_64+0xec/0xf80 [ 1598.018258][ T38] ? rcu_is_watching+0x15/0xb0 [ 1598.018276][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.018311][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1598.018335][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.018355][ T38] RIP: 0033:0x7fa7eb0ae1ff [ 1598.018377][ T38] RSP: 002b:00007ffe81546d50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1598.018398][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa7eb0ae1ff [ 1598.018414][ T38] RDX: 0000000000000001 RSI: 00007ffe81546da0 RDI: 0000000000000005 [ 1598.018427][ T38] RBP: 00007fa7eb1352cb R08: 0000000000000000 R09: 00007ffe81546ba7 [ 1598.018441][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1598.018454][ T38] R13: 00007ffe81546da0 R14: 00007fa7ebe34620 R15: 0000000000000003 [ 1598.018487][ T38] [ 1598.018502][ T38] INFO: task syz-executor:16901 blocked for more than 143 seconds. [ 1598.018520][ T38] Tainted: G L syzkaller #0 [ 1598.018531][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1598.018541][ T38] task:syz-executor state:D stack:22392 pid:16901 tgid:16901 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1598.018589][ T38] Call Trace: [ 1598.018596][ T38] [ 1598.018609][ T38] __schedule+0x145f/0x5070 [ 1598.018665][ T38] ? __pfx___schedule+0x10/0x10 [ 1598.018709][ T38] rt_mutex_schedule+0x77/0xf0 [ 1598.018737][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1598.018767][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1598.018809][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1598.018835][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1598.018861][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1598.018897][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 1598.018956][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 1598.018983][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 1598.019002][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1598.019032][ T38] rtnl_newlink+0x8ec/0x1c90 [ 1598.019066][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1598.019090][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.019123][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.019205][ T38] ? kernel_text_address+0xa5/0xe0 [ 1598.019234][ T38] ? __kernel_text_address+0xd/0x40 [ 1598.019261][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1598.019296][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1598.019321][ T38] ? arch_stack_walk+0xfc/0x150 [ 1598.019349][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1598.019386][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1598.019407][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1598.019433][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1598.019453][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1598.019474][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.019513][ T38] netlink_rcv_skb+0x208/0x470 [ 1598.019607][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1598.019631][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1598.019666][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.019698][ T38] netlink_unicast+0x846/0xa10 [ 1598.019730][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1598.019757][ T38] ? __alloc_skb+0x198/0x3a0 [ 1598.019804][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1598.019827][ T38] ? skb_put+0x11b/0x210 [ 1598.019852][ T38] netlink_sendmsg+0x805/0xb30 [ 1598.019888][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.019921][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1598.019951][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.019977][ T38] __sock_sendmsg+0x21c/0x270 [ 1598.020069][ T38] __sys_sendto+0x3c7/0x520 [ 1598.020094][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1598.020147][ T38] ? rcu_is_watching+0x15/0xb0 [ 1598.020173][ T38] __x64_sys_sendto+0xde/0x100 [ 1598.020199][ T38] do_syscall_64+0xec/0xf80 [ 1598.020218][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.020237][ T38] ? trace_irq_disable+0x37/0x100 [ 1598.020265][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1598.020289][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.020308][ T38] RIP: 0033:0x7fd29d3215dc [ 1598.020324][ T38] RSP: 002b:00007fff2e92a9b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1598.020344][ T38] RAX: ffffffffffffffda RBX: 00007fd29e0a4620 RCX: 00007fd29d3215dc [ 1598.020360][ T38] RDX: 000000000000006c RSI: 00007fd29e0a4670 RDI: 0000000000000003 [ 1598.020374][ T38] RBP: 0000000000000000 R08: 00007fff2e92aa04 R09: 000000000000000c [ 1598.020387][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1598.020400][ T38] R13: 0000000000000000 R14: 00007fd29e0a4670 R15: 0000000000000000 [ 1598.020432][ T38] [ 1598.020441][ T38] INFO: task syz-executor:16906 blocked for more than 143 seconds. [ 1598.020457][ T38] Tainted: G L syzkaller #0 [ 1598.020468][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1598.020477][ T38] task:syz-executor state:D stack:19832 pid:16906 tgid:16906 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1598.020522][ T38] Call Trace: [ 1598.020530][ T38] [ 1598.020542][ T38] __schedule+0x145f/0x5070 [ 1598.020597][ T38] ? __pfx___schedule+0x10/0x10 [ 1598.020642][ T38] rt_mutex_schedule+0x77/0xf0 [ 1598.020670][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1598.020695][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1598.020737][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1598.020769][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1598.020795][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1598.020831][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 1598.020857][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 1598.020884][ T38] ? rtnl_newlink+0x8ec/0x1c90 [ 1598.020903][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1598.020933][ T38] rtnl_newlink+0x8ec/0x1c90 [ 1598.020966][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1598.020990][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.021021][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.021103][ T38] ? kernel_text_address+0xa5/0xe0 [ 1598.021131][ T38] ? __kernel_text_address+0xd/0x40 [ 1598.021158][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1598.021182][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1598.021205][ T38] ? arch_stack_walk+0xfc/0x150 [ 1598.021234][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1598.021271][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1598.021291][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1598.021317][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1598.021339][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1598.021360][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.021399][ T38] netlink_rcv_skb+0x208/0x470 [ 1598.021425][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1598.021449][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1598.021485][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.021517][ T38] netlink_unicast+0x846/0xa10 [ 1598.021549][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1598.021570][ T38] ? __alloc_skb+0x198/0x3a0 [ 1598.021592][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1598.021614][ T38] ? skb_put+0x11b/0x210 [ 1598.021639][ T38] netlink_sendmsg+0x805/0xb30 [ 1598.021674][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.021707][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1598.021731][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.021761][ T38] __sock_sendmsg+0x21c/0x270 [ 1598.021792][ T38] __sys_sendto+0x3c7/0x520 [ 1598.021816][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1598.021869][ T38] ? rcu_is_watching+0x15/0xb0 [ 1598.021895][ T38] __x64_sys_sendto+0xde/0x100 [ 1598.021920][ T38] do_syscall_64+0xec/0xf80 [ 1598.021939][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.021958][ T38] ? trace_irq_disable+0x37/0x100 [ 1598.021978][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1598.022001][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.022020][ T38] RIP: 0033:0x7f8314a615dc [ 1598.022036][ T38] RSP: 002b:00007fff5be498c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1598.022056][ T38] RAX: ffffffffffffffda RBX: 00007f83157e4620 RCX: 00007f8314a615dc [ 1598.022071][ T38] RDX: 000000000000006c RSI: 00007f83157e4670 RDI: 0000000000000003 [ 1598.022085][ T38] RBP: 0000000000000000 R08: 00007fff5be49914 R09: 000000000000000c [ 1598.022099][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1598.022111][ T38] R13: 0000000000000000 R14: 00007f83157e4670 R15: 0000000000000000 [ 1598.022143][ T38] [ 1598.022156][ T38] INFO: task syz-executor:17106 blocked for more than 143 seconds. [ 1598.022172][ T38] Tainted: G L syzkaller #0 [ 1598.022184][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1598.022193][ T38] task:syz-executor state:D stack:26968 pid:17106 tgid:17106 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1598.022243][ T38] Call Trace: [ 1598.022250][ T38] [ 1598.022262][ T38] __schedule+0x145f/0x5070 [ 1598.022317][ T38] ? __pfx___schedule+0x10/0x10 [ 1598.022361][ T38] rt_mutex_schedule+0x77/0xf0 [ 1598.022389][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1598.022413][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1598.022455][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1598.022482][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1598.022508][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1598.022543][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.022614][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.022642][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.022661][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1598.022691][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.022714][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1598.022740][ T38] ? arch_stack_walk+0xfc/0x150 [ 1598.022771][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1598.022811][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1598.022831][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1598.022857][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1598.022878][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1598.022900][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.022939][ T38] netlink_rcv_skb+0x208/0x470 [ 1598.022964][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1598.022988][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1598.023024][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1598.023056][ T38] netlink_unicast+0x846/0xa10 [ 1598.023087][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1598.023109][ T38] ? __alloc_skb+0x198/0x3a0 [ 1598.023130][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1598.023153][ T38] ? skb_put+0x11b/0x210 [ 1598.023178][ T38] netlink_sendmsg+0x805/0xb30 [ 1598.023212][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.023246][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1598.023270][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1598.023296][ T38] __sock_sendmsg+0x21c/0x270 [ 1598.023345][ T38] __sys_sendto+0x3c7/0x520 [ 1598.023370][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1598.023418][ T38] ? exc_page_fault+0x71/0xd0 [ 1598.023440][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 1598.023467][ T38] __x64_sys_sendto+0xde/0x100 [ 1598.023492][ T38] do_syscall_64+0xec/0xf80 [ 1598.023512][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.023529][ T38] ? trace_irq_disable+0x37/0x100 [ 1598.023549][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1598.023573][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.023592][ T38] RIP: 0033:0x7f8d673b15dc [ 1598.023608][ T38] RSP: 002b:00007fff9737ed70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1598.023628][ T38] RAX: ffffffffffffffda RBX: 00007f8d68134620 RCX: 00007f8d673b15dc [ 1598.023643][ T38] RDX: 0000000000000028 RSI: 00007f8d68134670 RDI: 0000000000000003 [ 1598.023657][ T38] RBP: 0000000000000000 R08: 00007fff9737edc4 R09: 000000000000000c [ 1598.023671][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1598.023683][ T38] R13: 0000000000000000 R14: 00007f8d68134670 R15: 0000000000000000 [ 1598.023715][ T38] [ 1598.023741][ T38] [ 1598.023741][ T38] Showing all locks held in the system: [ 1598.023755][ T38] 4 locks held by pr/legacy/17: [ 1598.023770][ T38] 3 locks held by rcuc/1/28: [ 1598.023781][ T38] 5 locks held by ksoftirqd/1/30: [ 1598.023793][ T38] 1 lock held by khungtaskd/38: [ 1598.023804][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1598.023871][ T38] 5 locks held by kworker/u8:3/58: [ 1598.023883][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1598.023931][ T38] #1: ffffc9000124fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1598.023977][ T38] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 1598.024051][ T38] #3: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1598.024096][ T38] #4: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1598.024144][ T38] 5 locks held by kworker/u8:4/65: [ 1598.024165][ T38] 3 locks held by kworker/u8:7/1108: [ 1598.024177][ T38] #0: ffff88814d2e9938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1598.024225][ T38] #1: ffffc90004b4fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1598.024273][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1598.024406][ T38] 2 locks held by udevd/5169: [ 1598.024419][ T38] 2 locks held by getty/5560: [ 1598.024430][ T38] #0: ffff888034e600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1598.024526][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1598.024572][ T38] 8 locks held by sshd-session/5787: [ 1598.024584][ T38] 2 locks held by syz-executor/5788: [ 1598.024599][ T38] 3 locks held by kworker/0:14/8392: [ 1598.024610][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1598.024656][ T38] #1: ffffc90003a97bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1598.024703][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1598.024758][ T38] 3 locks held by kworker/u8:13/13401: [ 1598.024770][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1598.024823][ T38] #1: ffffc90003d47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1598.024869][ T38] #2: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1598.024919][ T38] 1 lock held by syz.0.2323/13905: [ 1598.024930][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1598.025032][ T38] 7 locks held by syz-executor/16675: [ 1598.025045][ T38] #0: ffff888035404480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1598.025098][ T38] #1: ffff888049f8e878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1598.025146][ T38] #2: ffff88814336ce18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1598.025197][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1598.025244][ T38] #4: ffff88805b8f50d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1598.025293][ T38] #5: ffff88801e3c9300 (&devlink->lock_key#20){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1598.025346][ T38] #6: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1598.025393][ T38] 2 locks held by syz-executor/16901: [ 1598.025405][ T38] #0: ffffffff8e021d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1598.025456][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1598.025501][ T38] 2 locks held by syz-executor/16906: [ 1598.025512][ T38] #0: ffffffff8e021d88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1598.025563][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1598.025609][ T38] 1 lock held by syz-executor/17106: [ 1598.025621][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.025667][ T38] 1 lock held by syz-executor/17197: [ 1598.025678][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.025724][ T38] 1 lock held by syz-executor/17206: [ 1598.025735][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374088][ T38] 1 lock held by syz-executor/17235: [ 1598.374103][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374152][ T38] 1 lock held by syz.4.3210/17239: [ 1598.374164][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x30e/0x450 [ 1598.374299][ T38] 1 lock held by syz-executor/17242: [ 1598.374311][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374355][ T38] 1 lock held by syz-executor/17247: [ 1598.374366][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374413][ T38] 1 lock held by syz-executor/17256: [ 1598.374433][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374479][ T38] 1 lock held by syz-executor/17258: [ 1598.374490][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374536][ T38] 1 lock held by syz-executor/17261: [ 1598.374548][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374593][ T38] 1 lock held by syz-executor/17267: [ 1598.374605][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374651][ T38] 1 lock held by syz-executor/17270: [ 1598.374662][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1598.374774][ T38] [ 1598.374780][ T38] ============================================= [ 1598.374780][ T38] [ 1598.374790][ T38] NMI backtrace for cpu 1 [ 1598.374821][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1598.374848][ T38] Tainted: [L]=SOFTLOCKUP [ 1598.374855][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1598.374868][ T38] Call Trace: [ 1598.374876][ T38] [ 1598.374886][ T38] dump_stack_lvl+0xe8/0x150 [ 1598.374914][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1598.374984][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1598.375009][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1598.375036][ T38] sys_info+0x135/0x170 [ 1598.375158][ T38] watchdog+0xf95/0xfe0 [ 1598.375192][ T38] ? watchdog+0x20a/0xfe0 [ 1598.375219][ T38] kthread+0x711/0x8a0 [ 1598.375248][ T38] ? __pfx_watchdog+0x10/0x10 [ 1598.375268][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.375290][ T38] ? rt_spin_unlock+0x150/0x200 [ 1598.375319][ T38] ? rt_spin_unlock+0x161/0x200 [ 1598.375341][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.375366][ T38] ret_from_fork+0x510/0xa50 [ 1598.375390][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1598.375409][ T38] ? __switch_to+0xc9e/0x1480 [ 1598.375473][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.375499][ T38] ret_from_fork_asm+0x1a/0x30 [ 1598.375541][ T38] [ 1598.375570][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1598.375602][ C0] NMI backtrace for cpu 0 [ 1598.375621][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1598.375646][ C0] Tainted: [L]=SOFTLOCKUP [ 1598.375653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1598.375664][ C0] RIP: 0010:__unwind_start+0x566/0x760 [ 1598.375697][ C0] Code: 8b 27 41 80 3c 36 00 74 12 4c 89 ef e8 03 d9 ad 00 48 be 00 00 00 00 00 fc ff df 49 8b 45 00 48 8b 54 24 10 4c 39 e2 0f 93 c1 <48> 39 c2 0f 92 c2 20 ca 80 fa 01 75 3e 48 8b 54 24 20 4c 39 e2 0f [ 1598.375713][ C0] RSP: 0018:ffffc90000156b08 EFLAGS: 00000206 [ 1598.375730][ C0] RAX: ffffc90000158000 RBX: ffffc90000156b68 RCX: 0000000000000001 [ 1598.375744][ C0] RDX: ffffc90000156bf0 RSI: dffffc0000000000 RDI: ffff88801b69dac0 [ 1598.375758][ C0] RBP: 1ffff9200002ad6e R08: ffffc90000156bf0 R09: 0000000000000000 [ 1598.375775][ C0] R10: ffffc90000156bb8 R11: fffff5200002ad79 R12: ffffc90000150000 [ 1598.375788][ C0] R13: ffffc90000156b78 R14: 1ffff9200002ad6f R15: ffffc90000156b70 [ 1598.375801][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1598.375815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1598.375828][ C0] CR2: 00007ffe81176f8c CR3: 000000003d6ba000 CR4: 00000000003526f0 [ 1598.375845][ C0] Call Trace: [ 1598.375852][ C0] [ 1598.375864][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1598.375886][ C0] arch_stack_walk+0xe4/0x150 [ 1598.375911][ C0] ? stack_trace_save+0x9c/0xe0 [ 1598.375933][ C0] stack_trace_save+0x9c/0xe0 [ 1598.375952][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1598.375972][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1598.375997][ C0] kasan_save_track+0x3e/0x80 [ 1598.376058][ C0] ? __slab_alloc+0xc6/0x1f0 [ 1598.376077][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1598.376102][ C0] kmem_cache_alloc_node_noprof+0x23c/0x6f0 [ 1598.376125][ C0] ? kmalloc_reserve+0xbd/0x290 [ 1598.376144][ C0] ? __alloc_skb+0x1dc/0x3a0 [ 1598.376165][ C0] kmalloc_reserve+0xbd/0x290 [ 1598.376184][ C0] ? __alloc_skb+0x198/0x3a0 [ 1598.376202][ C0] __alloc_skb+0x204/0x3a0 [ 1598.376222][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 1598.376323][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1598.376347][ C0] ? nft_log_eval+0x470/0xab0 [ 1598.376432][ C0] ? synproxy_pernet+0x45/0x270 [ 1598.376454][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 1598.376476][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1598.376496][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1598.376564][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1598.376583][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1598.376604][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1598.376625][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1598.376651][ C0] nft_do_chain+0x40c/0x1920 [ 1598.376677][ C0] ? lock_acquire+0x107/0x340 [ 1598.376703][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1598.376739][ C0] nft_do_chain_inet+0x25d/0x340 [ 1598.376780][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1598.376803][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1598.376851][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1598.376871][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1598.376890][ C0] nf_hook_slow+0xc5/0x220 [ 1598.376915][ C0] NF_HOOK+0x206/0x3a0 [ 1598.376937][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1598.376958][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1598.376978][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1598.376998][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1598.377022][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1598.377045][ C0] ? skb_dst+0x4f/0xd0 [ 1598.377066][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1598.377089][ C0] NF_HOOK+0x30c/0x3a0 [ 1598.377110][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1598.377132][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1598.377151][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1598.377173][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1598.377199][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1598.377218][ C0] __netif_receive_skb+0x143/0x380 [ 1598.377263][ C0] ? process_backlog+0x272/0x8f0 [ 1598.377282][ C0] process_backlog+0x315/0x8f0 [ 1598.377305][ C0] __napi_poll+0xae/0x520 [ 1598.377323][ C0] net_rx_action+0x64a/0xdb0 [ 1598.377349][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1598.377376][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1598.377401][ C0] handle_softirqs+0x1df/0x650 [ 1598.377424][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1598.377445][ C0] run_ktimerd+0x69/0x100 [ 1598.377466][ C0] smpboot_thread_fn+0x542/0xa60 [ 1598.377487][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1598.377511][ C0] kthread+0x711/0x8a0 [ 1598.377536][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1598.377556][ C0] ? __pfx_kthread+0x10/0x10 [ 1598.377577][ C0] ? rt_spin_unlock+0x150/0x200 [ 1598.377601][ C0] ? rt_spin_unlock+0x161/0x200 [ 1598.377622][ C0] ? __pfx_kthread+0x10/0x10 [ 1598.377645][ C0] ret_from_fork+0x510/0xa50 [ 1598.377665][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1598.377691][ C0] ? __switch_to+0xc9e/0x1480 [ 1598.377717][ C0] ? __pfx_kthread+0x10/0x10 [ 1598.377740][ C0] ret_from_fork_asm+0x1a/0x30 [ 1598.377772][ C0] [ 1598.380583][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1598.380608][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1598.380636][ T38] Tainted: [L]=SOFTLOCKUP [ 1598.380644][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1598.380657][ T38] Call Trace: [ 1598.380665][ T38] [ 1598.380674][ T38] vpanic+0x1e0/0x670 [ 1598.380706][ T38] panic+0xb9/0xc0 [ 1598.380730][ T38] ? __pfx_panic+0x10/0x10 [ 1598.380756][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1598.380783][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1598.380813][ T38] watchdog+0xfdf/0xfe0 [ 1598.380839][ T38] ? watchdog+0x20a/0xfe0 [ 1598.380867][ T38] kthread+0x711/0x8a0 [ 1598.380896][ T38] ? __pfx_watchdog+0x10/0x10 [ 1598.380917][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.380939][ T38] ? rt_spin_unlock+0x150/0x200 [ 1598.380968][ T38] ? rt_spin_unlock+0x161/0x200 [ 1598.380991][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.381017][ T38] ret_from_fork+0x510/0xa50 [ 1598.381041][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1598.381060][ T38] ? __switch_to+0xc9e/0x1480 [ 1598.381091][ T38] ? __pfx_kthread+0x10/0x10 [ 1598.381117][ T38] ret_from_fork_asm+0x1a/0x30 [ 1598.381158][ T38] [ 1598.381518][ T38] Kernel Offset: disabled