last executing test programs: 10m28.199252596s ago: executing program 4 (id=315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0xec141f0fd55a1436, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0x104000ec9, 0x80300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x1c, r6, 0x62c21a4ade68aba1, 0x70bd2d, 0x25dfdbfb, {{0x32}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x20048050) 10m21.973754016s ago: executing program 4 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r8, 0x0, 0x0) syz_io_uring_setup(0x835, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9, 0x1a2, &(0x7f0000000000)="$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") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000340)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r9}) 10m18.992473844s ago: executing program 4 (id=330): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10m18.443845635s ago: executing program 4 (id=333): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x240140) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xfffffff8}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x32) socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup, r2, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r3, 0x4) 10m13.123659268s ago: executing program 4 (id=340): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff014}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) 10m12.774510544s ago: executing program 4 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, 0x0, 0x48020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000440)="5f6e81936367293cfa0c8e81856587dffb47c75bc6ddb166debce4a61d01c77238108d338789999f0b46f5d3a5e3c92c5b2eaae746474befe0121f464015849be069", 0x42}], 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 9m57.606029858s ago: executing program 32 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, 0x0, 0x48020) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000440)="5f6e81936367293cfa0c8e81856587dffb47c75bc6ddb166debce4a61d01c77238108d338789999f0b46f5d3a5e3c92c5b2eaae746474befe0121f464015849be069", 0x42}], 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1m8.334600856s ago: executing program 5 (id=2315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1m8.159844689s ago: executing program 5 (id=2317): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) syz_open_dev$dri(0x0, 0x2, 0x98240) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) ftruncate(r0, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r0, 0x0, 0x558410e9) r4 = syz_usbip_server_init(0x3) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000740)={{r4}, "5b1d81ce2d1f80dcfd39f0b26d75d4a6e1b9bdebc0077042d47bf85499d25bbf5e3e10cb2796b7728bc8b4be31410bf6d76f9bc43cad94b7f9369b850a3ceb9023350cdfd239cd78052dc7326c411f669f3287bd9f88122ef60b20b5623fde29e1ab250fca237a46040c48d5f163f5ab5c47e1559f593944440462fbc5b8f60113c5ffbd047d01de1f0067c6c6911617806cb3da138af0a124f424c4a7ffdaf4480dde063b3eccc799e2fb69f163589a7e67ab784c4f153acbb9d52fa4c9dd709879e0a23e7b4e5c2e002a163a007358fae4fe6cc10752d9af062e09e84bd35ddde51f7481aac82a0aa19ad6cd831d267181fbec0ee3d601a3b593e09245140d3f196f3632dec7e626fe80d2668f93a238f1c6fa5f36e60c273ab3314c0c298cd175413eaeea1e7e8353d362667aad2aebe1d19c5158a5d4478cf6be635383dc2d56b3303931be708b21778ef32e24bf27023c23fb0bd9839f9e0225ab8b0981fa1807999a494b478fc9c2bb21f0e64d10a758deb88c8d179aa41b83f3fbf90f4c668deef1f891d56c64bdea5c5af569266546b0003b0d3d4343e4ae711d44a04c774bc6ff2bdef1902ad3240119023af68918c3f0252475a888349797722d75b3b3030690c5b4dc6596740393a23377220f7aab24a4fb47e2aa19add7d189fe9e7ea4832ef4a5d2515f59e6c6e1a007d5c778e5e92eec1bf4b9ae2d1a88dbdf9fd939d52cdf4aaeecc18eaef1290fcb420447be2cff8bdbee6aa4d01dbb7f95124e88dcee7a0f1e7bd145a5e83202276f743632be258fd3bdcbd29a8120662b55b7d2d5af6cec27f876d6833aaaa8b25e49e66112f8d903b0747f0172ec0880dca8d16a437ce7d6bc8f51709b8031eb3bb804c7a00a8b1fc3881d5c8e7caf458c21737f7570ff18df4f634dc5fef1d17fe72aca9c86af8a0b08eac72648ea199f324518e9ceb4136b0a7651f09084e4d3d334eb4f1259d5fdb1df3664e043e4e61b98e2e66a6b2882f15e25fb8d1d8abd9408a25fca0af8e0c79139bb89a4473c21cd7f2926831a474971e03feee8096a5259b70e1f95cac6762301e6a0d6e914b4ceb424b5f686fdf0239f9072225a474b51852442191568c1f03277ce9aa74522a6853a7a5bb9dc1980dfd19114797a11ba4ae34153be25aadb2df0bc90e00d8fe9b8dd8750997458a1a01e9f46d7ad50a4e0b9866e90dc8b5769c84fb8e8ccce7f1840dadeff013147e691058e4172a3a330a029880e116fc19e7cc40d03617cf6b2b2bf890f7296ea84d63ba69b265dbdc5d71b4446a5d50ec6a049db1f27321864fb5af63bac8396ddf54b08111cdc554123c35154b26e3022dcf9117efdda6cce349a5ae99ebf6c00264a2d548c3efa516e738206cd9d755121f59c6af04a83fa9bf09f775d9db1ed94b1f3caac82d2cebb3763c65e2cf8e2fe848e3480b61859e2ed1025f5999b251be9dbcc732c78bed9482b9f0e3188ba12bee8d50d4a51e24bd91f7fabddc583d5ab45bcb7bfcecb2935c13e64f5c657b05a8fb2f81e95e93e8913a51d7f91a10f91c466a88675d2e7c9a345532385bc28fa7ee6b1e625d1bf03355a526b3a4892d81afaec138cac17cbb6cd69a60264a2109ba190fa7f92aaaf4804e05615aad07fec7c7898aeb5d7419247da45316ca43c67fc53f8336d31c4423dbd7c58497148fc3a690d932b5cd45da7af2c8409cafecbe4baed4699bd0b990ee404decba20ee44d3601a20dd9bfba1d71bb1bfb7dd68fb975ffbd70c16d8c625630ea3b5012c61b521b151f804b7aab7f4865d8367ecb92fdf19bbc9c6f4bcfd0d47de87382686207b5a1686b3cc20dd7d4cfff055ecec2e80c0f5f294571ad916d5784482f48a56916edb0ad56d100473c17810d7af282de853ff8f1ac4f0887d5d606459864fa0452d6a308d354d91c41807842e57bd81b773a9987dd4fa03576c2152e4a54c532026c4a14d9199d1c429eb1162d80601c9398c626738592e6ea85d3f5b68916b34b4463d3fe6d6daebb8406676060f90c61508b3d27db069f7ce5500beb13144cf7d9edf39f541fc914e521982931c808e926d4063bd45fd8f712150e58403d885d1ee7c24519ab7ea5a25b8fb01145c92db354cc63ce2db45c40f2362471b61733c4958b06b4313764f68a842b32ee4d6b7f10797786262e16255b243e90e76e5332bf7feec4fd3d00f65ae18501663c7484d603c52660cd44d5f64a33b25a01e25d7dd3ab4c3e4a06be7879e49a38f0ec1188a14cce2f9df92aab3200459e05b054fa2f5572ae3580b7d58ad4cde5b11dabb99019f94973b7669b611eb2ee05933513e2b37c5ed2bd31d4d3161f621084e5b8233359c57ae1c6745c5bea3820eb5ec2fbe7b1ea88ad41352e85688135483582ede6a48bed3f5d93982bc6087f81333855e06c2e2a24380d4a8ad2c4fb72c899f029faa78a035c78fab3231ddb94953e9fbc093e05da5cb525aafad03807f0c9960b4afa01935072db7c2c8add77e38b965faaa973e5c9e52e9d20c4af4aa0f559cd4471ad90ad68d380669bfce196dce5d71f3652b31fef59f0234ad5b5ecf0ca19fca8011ccb9968c6d23867df825e96bde3971ce93f53cddaec2859be531feb5f0da26e35410e8b3f00ec54050b91d31bf84e7703d16129fe924290a06cf16a7a244382b3682b57f336d59a528516f55327d01e43b76cfa30e19afa14f25f5953600dcb2a4279041bbb8978fd35920ff533a0019163d4ee4fddc8be5fe34f6e4bf039bf5eb387ce937f6dd30bec3e5642c0c0cc6db7a0791304e17fb91bbb16a581a2a4ec3a66589f5005c768bcdd7309c616ea29b472a57b1340b1745bbcb1254eef288bae516bafc0ad1c7c6bc3c70479f8b58599b7d33b7539eb2e0320b371664a255835d5d142b26dbc88379495aeed0d8693b2459104496e8422b59c17ba36f72d65c92e48992daba8f39caf35e4c47a4da3785b497a0c9b661b334fc165ea97f45cdb75773f90045b1e54de269f91450665c0c63abd2e4e58d4168509594226649d5ef69fbae50195c360ebdf2e786143780d4ab05959734a1e2988dc1bb3f514f439029fad8ae27d5792c50aa591ab148aa3bb5d9f54ac758985d6dfdd24d1992c3c95d434eee279125a12a4e1f926b977333e5c9b78308a7fc47d574f8b3377320919bf2b010975b5cdfd6e92035360d6c10e7c77016089ad21e011ccce41f8b09d11ce8fb4332b0f3657a4630fd69d6ac1ddd6d431f5f651ff58a96c8f6638131831e39a44f5ba1f66590120a0906e5e667f60a307aedf852228bd8f557810e20badf8b52224031a60555821f83cd2891aeed9436a66b398bc33ba80dec50e9d1653d77504e91349a7caae6c0e5d7cbe420a139703404efc13adac6a113fd6b3cd9347a0582a2fefb0fc5d298f95da848db7e6c305bab682b32a04dbd6797d0f1175118292c152cc7cbf46bfb3cfde534707dc8bd5e4a1d0777d25184700e056992efb5e8ca9b2811b59f1d72b9cd46b8e669367767e83e503c58cc8247cd922a28b31937112831096b9d07f1faa762e9e0349a0c6fb1e67142750cfa0cf7da24fc62a38007a5dbe4030d5456dd0d25b848b60ab5872920e5fa4a2959ccf3451f28f7056410501e28f559a692c5cd3f0b39244e77bc3aed5da7dfe82c2457ca9c4be1fb0a9ce169c62953284a53fa1c455b1290bf5d3985ed6127aa61121c880db869e9af186e21e5c84373379944aa855e98f4caeef18176a5a3c14b634b6b294144cc504c0c88690a95b997797d389f85e97900fdd4ce58bc8b69320bdfaa3b3d651146eaead5231e90fc956241df56a5af01d1ef8dd861c3e243157a82cbac9bf466d8f3102f5af9e1db75e4e65a01cd3ec29ace47dc80725b234fe903932612d2179690c42e3d1e3f3042a68f4e66c53e58b06bb31ad9872d58374349fb0303db1d4824453b02d1fcce27ab559215ead657fe57603e3951f0efa1606fd0ff159bf4f8ed185ec2004869cbb5546688f4e2be987cb84c55fe7a5269da38edd0a72be46f0f1787cd2490f01d6221b3eb741362010327c387d746201c59df03ed62341dd3e20e3ceb57a758a7dae8b895eb25acf8fe7d8e27705f0c79ab1a763da3883d342690e7f706c7adca425921d32f4b85374e445ebaf4e38b112877adf36f113bab412f8ad3ae4e9afd0f24715928c19bc7a21466a86ec69ed8e65c2334942d0f50731428451caaa338fd4676fc4dc564aadde2d16a25b092ff63501323463744553dbd32dc4644e42c9d815c7ea48f126341f8ff50ed6beca7ea777065c7dd5774c5987ae6cdf3289535388e7b70dc987b92315ca2e523814e25b0bf34f5a0bf22897f81f3d87f73a96eb728b7685c036ce12b789b1adccaa189477e9f4c0e29cfb0adb1a7f2f66c5d114d22de1541284410f598da32318b0d154c56a05e17a379a6ef1bc6952b9cfd298f974ca37cf9a50d12f4273580f1159b2ff7e19ce089cd491c96838116f1c236da25af61f1fff97f13ee9fc6eee3c2221ce57db51a461228a81a880e1d2def1b44cd09160fc098d4d71cebfb58bfad09873229c30260a435d40a3eebd20e282d90d181cd88f7fe51f49acde8ddf61674586fb8310a25b0a7665bdbffef580c6cabefa91ccf38422a0c05ff57bf86f00c47cc89d3c5c5fd4e272c0df1e9f15ef9b9de2614d9af46f2adfa3ed91108931800d51a6fd7b59b8bc18c4694c0a966248fc28c73b83b7d6a55fff45efbbf5cbd01dd3b997fe2a4310f6896ca5b2f7130d7be43cd94be8572db7748c55b3dbf970c4036a922995c994bf86ac700693662b7524176b605fad9e5286dc774dcfd5d0a8eace8a865d6cd6be5046f9f5ca67a01a8ecc44b7906858562950dd380cc0b24baccdb46510f0106d11320c70c55f3d6086991172b5939ec3fe1ce3e3977ce1f223f3d23d3b29701c2749343f08a85b22d1d5f600b6f11b3fb7a8de85ba94293de750a0acd1e8f39fb918586a8487fa62b8ef3b6316405062140cf7af080841a9f5eba586a8971a4dfb44df2ac96247d90e55b6f8d6811b4cf8ad480b2e7ab2cfe7253242a226b2ae316e98c59f5d99efd22efd482938e5d2bb20727b01cc637b308c3b81d793aad32464933284cee097081baabd3249d20505602b70319f8b14d86212519842dfdc2454bede072e81587c113419e2b8de5feed9e584e9ee721ec57e235d89f6a6be8f0dd3b2e3ba485b1e6f8fc1546f235f70fd13a40e5fdf890f4faee1b39a4472d659b7a2092093df2c01e039a620499d11354bbd421925a7656813490c24855b2c51d6b2b52f7556bd5bc26d8e0d59b38f80584699bba8d93ba0dd93d447bb8477c918fba82837843306709f43c227dd9b2807958ca555523e0a949c86a1c2f9e3f6ded6a0bc55113a55e8ae14f608e90cb0cfd9fa62d56a753f7cc13c33c2be3ab6cd2b8e0787caebbfb4b127c16f5e8cbe4df92de5e39473e2d059529f9da392b916f342cb8a5e0cfd80c0a4775409c9a05d0333494aa93445780a9214bc93e523004060cd3c6e7525fd06c1c22283c9b6644710873bd3ff7a8c8dd19fd1a3c83ae37ce731eb9ae50102db332e56a5037fc9c97db3d81c15b66db9046566adcb16b00ab71bdbc4c6e89b9739e152b9ff2b0d929c7ae59649be2a75023bdfd04a823cde236d8f49bfd0c873f6ab760b38a39ea58885d85f2447e220d964cba9f9897523ad3ad537a680586dfb2d9ee4d4540225bb5a73e451e76b819053303910a899cdf4c905"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) nanosleep(0x0, &(0x7f00000000c0)) 1m3.206694415s ago: executing program 5 (id=2344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000200)={'syzkaller0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1m2.839568282s ago: executing program 5 (id=2347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1}) 1m2.388902781s ago: executing program 5 (id=2350): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x40) 1m2.097986987s ago: executing program 5 (id=2352): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 46.042261438s ago: executing program 33 (id=2352): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 13.549071048s ago: executing program 3 (id=2530): r0 = socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/72, 0x48}, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{0x0}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x6, @loopback}, @in6={0xa, 0x4e23, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xda9, @mcast2, 0x9}], 0xfffffffffffffce4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x200001) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000380)={0xf0f002, 0x2}) 9.797233701s ago: executing program 3 (id=2534): unshare(0x22020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$I2C_SMBUS(r0, 0x720, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='P\r\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf258100000008000300", @ANYRES32, @ANYBLOB="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"], 0xd50}, 0x1, 0x0, 0x0, 0x844}, 0x24004000) 8.587663624s ago: executing program 3 (id=2539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 8.230558601s ago: executing program 3 (id=2543): r0 = socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/72, 0x48}, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{0x0}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x6, @loopback}, @in6={0xa, 0x4e23, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xda9, @mcast2, 0x9}], 0xfffffffffffffce4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x200001) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000380)={0xf0f002, 0x2}) 7.096411573s ago: executing program 3 (id=2552): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 6.477516745s ago: executing program 3 (id=2558): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000008000"], 0x50) 5.949439495s ago: executing program 1 (id=2562): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYBLOB="00000000eb478416a2", @ANYBLOB], 0x48) 5.643475571s ago: executing program 1 (id=2565): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141181) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5417, &(0x7f0000000740)={0x0, 0xc26a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f00000001c0)) fsopen(&(0x7f0000000000)='configfs\x00', 0x1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f6000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3.950874783s ago: executing program 1 (id=2576): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="000000000200"/28], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1a86f, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 3.723637178s ago: executing program 0 (id=2578): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x141) 3.291686166s ago: executing program 0 (id=2582): close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) 3.11004945s ago: executing program 6 (id=2584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) 2.960089593s ago: executing program 0 (id=2585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) 2.893997204s ago: executing program 1 (id=2586): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141181) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x5417, &(0x7f0000000740)={0x0, 0xc26a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f00000001c0)) fsopen(&(0x7f0000000000)='configfs\x00', 0x1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f600000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 2.719053418s ago: executing program 0 (id=2588): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x7ff, 0x1, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.700326938s ago: executing program 6 (id=2589): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.54433358s ago: executing program 2 (id=2590): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @union]}}, 0x0, 0x56}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.431477902s ago: executing program 6 (id=2591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.387806263s ago: executing program 1 (id=2592): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) 1.363802924s ago: executing program 0 (id=2593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc", @ANYBLOB, @ANYRES32=0x0], 0x50) 1.243555106s ago: executing program 2 (id=2594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0", 0x1a}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)}, {&(0x7f0000000300)="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", 0x8a2}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 1.194157297s ago: executing program 6 (id=2595): close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) 867.828933ms ago: executing program 2 (id=2596): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 727.149246ms ago: executing program 6 (id=2597): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r3, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB='E']) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 599.615599ms ago: executing program 2 (id=2598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) 405.858562ms ago: executing program 2 (id=2599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) 387.436483ms ago: executing program 6 (id=2600): socket$inet(0x10, 0x5, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000880), 0x0) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x29) r1 = open(0x0, 0x400, 0x43) chdir(0x0) r2 = fsopen(&(0x7f0000000280)='ext3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='sgurcj\xff\xfc6\xb6\xa8W:\x98\x9a,sn_\x1b\xc4\x00\x00\x00\x00\x00\x00\x00\xfc\xe9\x11O\x8a\xbe\xec\x7f9\x00\x00\x00\x00\x00\x00\xb6h\xc4\rdQ<\xbf\xb2v\x91\x05 hH\xf5rW\xbaG\xa540EP\xd2\xa2\xa2\xb0\xbe\xc7\'\xf2]\xf7b\x16\x1ad\x8d\xf8-\xed\xfe\x99\xae\xe7\x1dA\x15\x91zSY\x8fH$\xe9\xceQ_V\xaf&\x8a\r\xc5\xb0{\xb9\xa0\x86\xec \xd1/y\xe2Z\xf5\xc3\x04\x18m\xb6\x96\xdcBE\x8b\x958\xfb\xd8\xcf\xac\x1eU2\x12\xe4L\xb0,\xfe;\x80Q\xe5\xe7P\xeb\x18\xd8D\x05\\\xe9\x00\xf6\x99\x96\x14\x95\x14\xf6F\xa7\x17\xce\xf0\x97\x80S\xedx\xbe\x98)\xdbJ\xef\x82S\xe0\'a\x84\bM\xb2\t\xdc\x14)\xbd\x1a.\x84P\x13M\x19\xf3L\xa4\xdd\x04\x7f7\xb8^\rA\xf3\xb4\x80\xe8\x15-\xf9\x93\xe8A\xe9?\xd8\xa0\xc7\x9d\xa1&6o\xa8\xeb\xd0\x9c\x93\x1f\xe7}\xaa\xbb\xa0\xf7\xebft\x91\x94W\x00\"\xb1\xac\xfa;\x84,K\xb8\xc0\x05hx3\xfe\xec\xf2\xa4G\x82\xa3\xa9\xaa\x0f6\x15\x1e', 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)) read$FUSE(r1, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x440d76672004366b}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="000429bd7000c4229065a5d7bdc782cf05c4fddbdf2505000000080005000100008084000380060004000200000006000400000000001400020064766d7270310000000000000000000014000600fe80000000000000000000000000003c1400020076657468315f6d616376746170000000060007004e22000008000500e000000108000500ffffffff14000600fc0000f17100000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) setpriority(0x2, 0x0, 0x7ff) 237.951946ms ago: executing program 0 (id=2601): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 97.286328ms ago: executing program 1 (id=2602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={0x0, r2}, 0x18) 0s ago: executing program 2 (id=2603): r0 = socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/72, 0x48}, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x6, @loopback}, @in6={0xa, 0x4e23, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xda9, @mcast2, 0x9}], 0xfffffffffffffce4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x200001) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000380)={0xf0f002, 0x2}) kernel console output (not intermixed with test programs): evice number 13 [ 254.124795][ T4499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.282670][ T5988] autofs4:pid:5988:autofs_fill_super: called with bogus options [ 255.178266][ T4499] tipc: Left network mode [ 255.208530][ T5999] loop1: detected capacity change from 0 to 256 [ 255.539366][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.676008][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.699823][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.736373][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.742817][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761492][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.881899][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.921042][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.940138][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.947416][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.004511][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.127957][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.155798][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.187560][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.194847][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.267130][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.426587][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.456821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.481328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.614360][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.636096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.647038][ T6022] gfs2: path_lookup on € returned error -2 [ 256.684092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.703112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.733417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.776181][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.803849][ T5869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.927828][ T6027] netlink: 'syz.0.398': attribute type 39 has an invalid length. [ 257.065061][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.091817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.290793][ T6016] loop2: detected capacity change from 0 to 32768 [ 257.424013][ T6016] overlayfs: missing 'workdir' [ 257.975904][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 258.809656][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.877334][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.393018][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.272521][ T4499] device hsr_slave_0 left promiscuous mode [ 260.350111][ T4499] device hsr_slave_1 left promiscuous mode [ 260.451682][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.510120][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.595703][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.654325][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.700506][ T4499] device bridge_slave_1 left promiscuous mode [ 260.739767][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.854996][ T4499] device bridge_slave_0 left promiscuous mode [ 260.861327][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.953570][ C1] sched: RT throttling activated [ 262.683740][ T6065] loop1: detected capacity change from 0 to 8 [ 262.817584][ T6077] overlayfs: missing 'lowerdir' [ 262.824646][ T4499] device veth1_macvtap left promiscuous mode [ 262.875056][ T4499] device veth0_macvtap left promiscuous mode [ 262.950238][ T4499] device veth1_vlan left promiscuous mode [ 262.972333][ T4499] device veth0_vlan left promiscuous mode [ 263.577060][ T6097] autofs4:pid:6097:autofs_fill_super: called with bogus options [ 264.510532][ T6109] gfs2: gfs2 mount does not exist [ 266.121642][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 266.187827][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 266.272258][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.340049][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.164492][ T4499] bond0 (unregistering): Released all slaves [ 267.273622][ T6122] tipc: Started in network mode [ 267.278630][ T6122] tipc: Node identity 4, cluster identity 4711 [ 267.317557][ T6122] tipc: Node number set to 4 [ 267.534588][ T6125] overlayfs: missing 'lowerdir' [ 268.188826][ T6146] autofs4:pid:6146:autofs_fill_super: called with bogus options [ 268.975211][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.994568][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.276574][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.330116][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.272753][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.290471][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.580132][ T5869] device veth0_vlan entered promiscuous mode [ 271.062407][ T5869] device veth1_vlan entered promiscuous mode [ 271.176523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.209010][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.298082][ T5869] device veth0_macvtap entered promiscuous mode [ 271.363152][ T5869] device veth1_macvtap entered promiscuous mode [ 271.476411][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.557530][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.588182][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.632755][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.673388][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.750895][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.789898][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.833065][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.889450][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.936334][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.960143][ T6177] overlayfs: missing 'workdir' [ 271.960627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.016473][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.061424][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.132921][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.193625][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.290077][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.331109][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.409271][ T5869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.463709][ T5869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.541164][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.629587][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.652285][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.735515][ T5869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.767636][ T5869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.797347][ T5869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.846043][ T5869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.449251][ T4499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.488931][ T4499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.580378][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.688562][ T4499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.702420][ T4499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.742582][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.206723][ T6212] autofs4:pid:6212:autofs_fill_super: called with bogus options [ 275.108468][ T4598] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 275.303687][ T4598] usb 6-1: Using ep0 maxpacket: 16 [ 278.396245][ T22] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 278.483058][ T22] hid-generic 0005:0007:0008.0002: item fetching failed at offset 1/2 [ 278.554534][ T22] hid-generic: probe of 0005:0007:0008.0002 failed with error -22 [ 278.850945][ T6248] overlayfs: missing 'workdir' [ 278.944069][ T6251] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 279.465865][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 280.581402][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 280.933985][ T4598] usb 6-1: unable to get BOS descriptor or descriptor too short [ 280.968935][ T4598] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 280.987636][ T4598] usb 6-1: chopping to 0 config(s) [ 280.992855][ T4598] usb 6-1: can't read configurations, error -32 [ 281.223753][ T4598] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 281.286211][ T6277] autofs4:pid:6277:autofs_fill_super: called with bogus options [ 281.443859][ T4598] usb 6-1: device descriptor read/64, error -32 [ 281.844039][ T4598] usb usb6-port1: attempt power cycle [ 282.775044][ T22] libceph: connect (1)[c::]:6789 error -101 [ 282.810382][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 282.865643][ T4765] libceph: connect (1)[c::]:6789 error -101 [ 282.871679][ T4765] libceph: mon0 (1)[c::]:6789 connect error [ 284.026262][ T4765] libceph: connect (1)[c::]:6789 error -101 [ 284.037408][ T4765] libceph: mon0 (1)[c::]:6789 connect error [ 284.254000][ T6279] ceph: No mds server is up or the cluster is laggy [ 284.605765][ T6306] overlayfs: missing 'workdir' [ 284.946638][ T6316] loop3: detected capacity change from 0 to 8 [ 285.979687][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 286.197448][ T6329] autofs4:pid:6329:autofs_fill_super: called with bogus options [ 287.013994][ T4765] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 287.203990][ T4765] usb 4-1: Using ep0 maxpacket: 16 [ 290.711274][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 292.014985][ T22] libceph: connect (1)[c::]:6789 error -101 [ 292.021177][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 292.087061][ T22] libceph: connect (1)[c::]:6789 error -101 [ 292.126408][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 292.293816][ T4765] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.310474][ T4765] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 292.367066][ T4765] usb 4-1: chopping to 0 config(s) [ 292.372309][ T4765] usb 4-1: can't read configurations, error -32 [ 292.484397][ T22] libceph: connect (1)[c::]:6789 error -101 [ 292.490419][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 292.591013][ T6371] ceph: No mds server is up or the cluster is laggy [ 292.653221][ T4765] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 292.834806][ T4765] usb 4-1: device descriptor read/64, error -32 [ 292.955379][ T4765] usb usb4-port1: attempt power cycle [ 293.018279][ T6386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.293765][ T4598] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 293.472164][ T6396] autofs4:pid:6396:autofs_fill_super: called with bogus options [ 293.937242][ T4598] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.011213][ T4598] usb 6-1: config 0 has no interfaces? [ 294.124333][ T4598] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.134103][ T4598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.150875][ T4598] usb 6-1: config 0 descriptor?? [ 297.504124][ T4329] usb 6-1: USB disconnect, device number 5 [ 298.271830][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 299.272029][ T6429] netlink: 165 bytes leftover after parsing attributes in process `syz.5.476'. [ 299.371954][ T6433] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 300.911501][ T6446] autofs4:pid:6446:autofs_fill_super: called with bogus options [ 301.475561][ T6427] loop2: detected capacity change from 0 to 32768 [ 301.538367][ T6427] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 301.814007][ T6451] netlink: 2444 bytes leftover after parsing attributes in process `syz.3.483'. [ 302.289955][ T5909] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 302.597537][ T6464] netlink: 'syz.0.482': attribute type 4 has an invalid length. [ 303.500316][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 303.975434][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 304.661343][ T6487] loop2: detected capacity change from 0 to 8 [ 306.308991][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.383949][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.429673][ T6480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.589140][ T6480] device bridge_slave_0 left promiscuous mode [ 306.619448][ T6480] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.892444][ T6499] autofs4:pid:6499:autofs_fill_super: called with bogus options [ 307.437565][ T6480] device bridge_slave_1 left promiscuous mode [ 307.485155][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.640847][ T6480] bond0: (slave bond_slave_0): Releasing backup interface [ 307.707921][ T6480] bond0: (slave bond_slave_1): Releasing backup interface [ 307.856590][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 308.090285][ T6480] team0: Port device team_slave_0 removed [ 308.150668][ T6480] team0: Port device team_slave_1 removed [ 308.169805][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.190527][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.205216][ T22] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 308.239983][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.256493][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.265802][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.310440][ T6480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.325314][ T22] usb 1-1: config 0 descriptor?? [ 308.346869][ T22] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 308.366010][ T6480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.519928][ T6484] team0: Mode changed to "loadbalance" [ 308.574463][ T6488] netlink: 'syz.5.490': attribute type 10 has an invalid length. [ 308.727451][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.765456][ T6488] team0: Port device bond0 added [ 308.799990][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.490'. [ 309.080156][ T6505] loop2: detected capacity change from 0 to 32768 [ 309.113937][ T6505] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 309.508651][ T6519] overlayfs: failed to get index nlink (file1/file7, err=-61) [ 309.617095][ T5909] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 309.645630][ T6492] team0 (unregistering): Port device bond0 removed [ 309.778193][ T6510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.786153][ T6510] IPv6: NLM_F_CREATE should be set when creating new route [ 309.793617][ T6510] IPv6: NLM_F_CREATE should be set when creating new route [ 310.209232][ T6534] serio: Serial port ptm0 [ 310.639753][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 311.374540][ T4329] usb 1-1: USB disconnect, device number 8 [ 312.056871][ T6550] overlayfs: overlapping lowerdir path [ 312.226681][ T6552] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 313.721630][ T6563] autofs4:pid:6563:autofs_fill_super: called with bogus options [ 315.185360][ T6588] netlink: 'syz.1.513': attribute type 1 has an invalid length. [ 315.360275][ T6564] loop3: detected capacity change from 0 to 32768 [ 315.432002][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.512'. [ 315.974147][ T6564] XFS (loop3): Mounting V5 Filesystem [ 316.068535][ T6589] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.081488][ T6589] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 316.133815][ T6589] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 316.267998][ T6608] 9pnet_virtio: no channels available for device syz [ 316.270948][ T6564] XFS (loop3): Ending clean mount [ 316.325646][ T6564] XFS (loop3): Quotacheck needed: Please wait. [ 316.406464][ T6564] XFS (loop3): Quotacheck: Done. [ 316.509886][ T6575] loop2: detected capacity change from 0 to 32768 [ 316.567739][ T6575] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 317.115440][ T5959] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 317.176367][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.182738][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.881846][ T4275] XFS (loop3): Unmounting Filesystem [ 318.153655][ T4766] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 318.249122][ T6641] loop2: detected capacity change from 0 to 8 [ 320.154313][ T6634] overlayfs: unrecognized mount option "verity=on" or missing value [ 320.246888][ T6645] autofs4:pid:6645:autofs_fill_super: called with bogus options [ 321.250164][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 323.478481][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 323.478497][ T27] audit: type=1326 audit(1758407071.134:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 323.619705][ T27] audit: type=1326 audit(1758407071.134:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 323.684937][ T6669] loop1: detected capacity change from 0 to 32768 [ 323.771356][ T6669] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.786747][ T27] audit: type=1326 audit(1758407071.134:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 323.861191][ T6669] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 323.901784][ T27] audit: type=1326 audit(1758407071.134:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 323.912799][ T6669] BTRFS info (device loop1): using free space tree [ 324.958438][ T27] audit: type=1326 audit(1758407071.134:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 325.020112][ T27] audit: type=1326 audit(1758407071.134:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 325.042468][ T27] audit: type=1326 audit(1758407071.134:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 325.065338][ T27] audit: type=1326 audit(1758407071.134:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 325.090223][ T27] audit: type=1326 audit(1758407071.134:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 325.236792][ T27] audit: type=1326 audit(1758407071.134:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d18f8ec29 code=0x7fc00000 [ 325.290973][ T6669] BTRFS info (device loop1): enabling ssd optimizations [ 325.574583][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.502929][ T6724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 326.509968][ T6724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.522504][ T6724] vhci_hcd vhci_hcd.0: Device attached [ 326.626132][ T6732] autofs4:pid:6732:autofs_fill_super: called with bogus options [ 327.233865][ T4760] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 327.641895][ T6710] loop5: detected capacity change from 0 to 32768 [ 328.633593][ T6725] vhci_hcd: connection reset by peer [ 328.665754][ T41] vhci_hcd: stop threads [ 328.671347][ T41] vhci_hcd: release socket [ 328.685879][ T41] vhci_hcd: disconnect device [ 330.975134][ T6761] 9pnet_virtio: no channels available for device syz [ 330.983309][ T6761] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.539'. [ 331.569988][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'. [ 332.243824][ T6778] netlink: 'syz.5.542': attribute type 10 has an invalid length. [ 332.280495][ T6775] netlink: 'syz.5.542': attribute type 10 has an invalid length. [ 332.294015][ T6775] netlink: 2 bytes leftover after parsing attributes in process `syz.5.542'. [ 332.373741][ T4760] vhci_hcd: vhci_device speed not set [ 332.978822][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 332.978838][ T27] audit: type=1326 audit(1758407080.634:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc920785be7 code=0x7fc00000 [ 333.215027][ T27] audit: type=1326 audit(1758407080.674:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc92072ae09 code=0x7fc00000 [ 333.458696][ T6770] loop1: detected capacity change from 0 to 32768 [ 333.482884][ T27] audit: type=1326 audit(1758407080.674:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc92072aecf code=0x7fc00000 [ 333.543965][ T6770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.543 (6770) [ 333.699695][ T27] audit: type=1326 audit(1758407080.674:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 333.874408][ T27] audit: type=1326 audit(1758407080.674:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 333.934510][ T6770] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 333.973698][ T6770] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 334.002809][ T27] audit: type=1326 audit(1758407080.674:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 334.083637][ T6770] BTRFS info (device loop1): using free space tree [ 334.084173][ T6797] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 334.139711][ T27] audit: type=1326 audit(1758407080.674:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 334.284183][ T27] audit: type=1326 audit(1758407080.674:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 334.479612][ T6770] BTRFS info (device loop1): enabling ssd optimizations [ 334.513607][ T27] audit: type=1326 audit(1758407080.674:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 334.591282][ T27] audit: type=1326 audit(1758407080.674:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0x7fc00000 [ 334.887098][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 335.215155][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.590794][ T5909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5909) [ 336.303671][ T4329] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 336.498302][ T4329] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 336.523318][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.568894][ T4329] usb 2-1: Product: syz [ 336.594219][ T4329] usb 2-1: Manufacturer: syz [ 336.598990][ T4329] usb 2-1: SerialNumber: syz [ 336.650193][ T4329] usb 2-1: config 0 descriptor?? [ 336.846547][ T6823] loop0: detected capacity change from 0 to 32768 [ 338.787779][ T4329] usb 2-1: USB disconnect, device number 14 [ 339.164600][ T6864] netlink: 165 bytes leftover after parsing attributes in process `syz.0.556'. [ 340.024406][ T6875] loop3: detected capacity change from 0 to 8 [ 343.881530][ T6886] 9pnet_virtio: no channels available for device syz [ 344.816234][ T6902] device syzkaller0 entered promiscuous mode [ 345.662222][ T6909] loop5: detected capacity change from 0 to 32768 [ 345.933928][ T6909] XFS (loop5): Mounting V5 Filesystem [ 346.092455][ T6909] XFS (loop5): Ending clean mount [ 346.161129][ T6909] XFS (loop5): Quotacheck needed: Please wait. [ 346.484051][ T6909] XFS (loop5): Quotacheck: Done. [ 346.701247][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 346.768122][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 348.221272][ T5869] XFS (loop5): Unmounting Filesystem [ 349.124795][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 349.124809][ T27] audit: type=1800 audit(1758407096.774:135): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.577" name="bus" dev="ramfs" ino=39865 res=0 errno=0 [ 353.399117][ T7007] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 353.410762][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 353.549197][ T7010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.583'. [ 353.716592][ T7026] fuse: Bad value for 'fd' [ 357.718564][ T7050] netlink: 165 bytes leftover after parsing attributes in process `syz.1.590'. [ 358.266074][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 360.779044][ T7065] loop2: detected capacity change from 0 to 8 [ 363.992518][ T7085] delete_channel: no stack [ 365.492944][ T7100] comedi comedi0: Minor 127 is invalid! [ 367.087842][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.607'. [ 368.543830][ T7124] loop5: detected capacity change from 0 to 8 [ 368.553622][ T4760] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 370.427564][ T4760] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 370.445430][ T4760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.454233][ T4760] usb 2-1: Product: syz [ 370.458607][ T4760] usb 2-1: Manufacturer: syz [ 370.473700][ T4760] usb 2-1: SerialNumber: syz [ 370.537699][ T4760] usb 2-1: config 0 descriptor?? [ 370.816661][ T4760] usb 2-1: USB disconnect, device number 15 [ 372.170605][ T7151] netlink: 165 bytes leftover after parsing attributes in process `syz.5.616'. [ 373.397566][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 375.144259][ T7198] loop3: detected capacity change from 0 to 8 [ 377.361036][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.368350][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.863769][ T128] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 378.053843][ T128] usb 4-1: Using ep0 maxpacket: 8 [ 378.066064][ T128] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 378.078788][ T128] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.090626][ T128] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 378.112431][ T128] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 378.120280][ T128] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.131910][ T128] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 378.148188][ T128] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 378.155967][ T128] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.174937][ T128] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 378.194756][ T128] usb 4-1: string descriptor 0 read error: -22 [ 378.201289][ T128] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 378.210636][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.223238][ T128] adutux 4-1:168.0: interrupt endpoints not found [ 378.345879][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.353970][ T4656] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 378.400436][ T7160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.450771][ T4329] usb 4-1: USB disconnect, device number 8 [ 378.577607][ T4656] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 378.611476][ T4656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.622670][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.629970][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.637270][ T7160] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.652368][ T7160] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.662088][ T4656] usb 6-1: Product: syz [ 378.662112][ T4656] usb 6-1: Manufacturer: syz [ 378.662129][ T4656] usb 6-1: SerialNumber: syz [ 378.664622][ T4656] usb 6-1: config 0 descriptor?? [ 378.684463][ T7160] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.698789][ T7160] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.900841][ T4393] usb 6-1: USB disconnect, device number 7 [ 380.752287][ T7240] comedi comedi0: Minor 3 could not be opened [ 381.850041][ T7249] netlink: 165 bytes leftover after parsing attributes in process `syz.0.637'. [ 383.553961][ T4598] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 383.779315][ T4598] usb 1-1: Using ep0 maxpacket: 32 [ 383.797066][ T4598] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.805379][ T4598] usb 1-1: config 0 has no interface number 0 [ 383.811682][ T4598] usb 1-1: too many endpoints for config 0 interface 1 altsetting 4: 128, using maximum allowed: 30 [ 383.822811][ T4598] usb 1-1: config 0 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 383.838094][ T4598] usb 1-1: config 0 interface 1 has no altsetting 0 [ 383.949485][ T4598] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 383.980305][ T4598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.004350][ T4598] usb 1-1: Product: syz [ 384.008552][ T4598] usb 1-1: Manufacturer: syz [ 384.054167][ T4598] usb 1-1: SerialNumber: syz [ 384.088026][ T4598] usb 1-1: config 0 descriptor?? [ 384.118458][ T4598] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 384.177710][ T4598] usb 1-1: selecting invalid altsetting 1 [ 384.201958][ T7274] device syzkaller0 entered promiscuous mode [ 384.208193][ T4598] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 384.258050][ T4598] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.269903][ T4598] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 384.292012][ T4598] usb 1-1: media controller created [ 384.362427][ T4598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.503765][ T4598] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 384.527930][ T4598] zl10353_read_register: readreg error (reg=127, ret==-71) [ 384.543381][ T4598] usb 1-1: selecting invalid altsetting 0 [ 384.566928][ T4598] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 384.789001][ T4598] usb 1-1: USB disconnect, device number 9 [ 384.899634][ T7280] loop1: detected capacity change from 0 to 512 [ 384.963748][ T4600] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 384.975545][ T7280] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 385.022097][ T7280] EXT4-fs (loop1): Test dummy encryption mode enabled [ 385.334134][ T4600] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 385.850781][ T4600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.859214][ T4600] usb 3-1: Product: syz [ 385.863696][ T4600] usb 3-1: Manufacturer: syz [ 385.868470][ T4600] usb 3-1: SerialNumber: syz [ 385.875484][ T4600] usb 3-1: config 0 descriptor?? [ 385.905595][ T7280] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.645: casefold flag without casefold feature [ 385.995905][ T7280] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.645: couldn't read orphan inode 15 (err -117) [ 386.090323][ T7280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 386.110419][ T4600] usb 3-1: USB disconnect, device number 8 [ 386.745652][ T7308] netlink: 165 bytes leftover after parsing attributes in process `syz.3.651'. [ 386.933714][ T4270] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 387.130491][ T4270] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.165419][ T4270] usb 1-1: config 0 has no interfaces? [ 387.216996][ T4270] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.267522][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.313479][ T4270] usb 1-1: config 0 descriptor?? [ 391.283035][ T4600] usb 1-1: USB disconnect, device number 10 [ 391.704499][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 392.163605][ T4270] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 393.047696][ T4270] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 393.099283][ T4270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.138048][ T4270] usb 1-1: Product: syz [ 393.142304][ T4270] usb 1-1: Manufacturer: syz [ 393.173573][ T4270] usb 1-1: SerialNumber: syz [ 393.224220][ T4270] usb 1-1: config 0 descriptor?? [ 395.533814][ T7366] netlink: 165 bytes leftover after parsing attributes in process `syz.5.670'. [ 395.680795][ T4270] usb 1-1: USB disconnect, device number 11 [ 396.253964][ T4536] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 396.568240][ T4536] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.608410][ T4536] usb 2-1: config 0 has no interfaces? [ 396.637893][ T4536] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.675853][ T4536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.733829][ T4536] usb 2-1: config 0 descriptor?? [ 400.129195][ T4600] usb 2-1: USB disconnect, device number 16 [ 403.558920][ T7425] loop3: detected capacity change from 0 to 8 [ 404.053773][ T4600] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 404.367398][ T4600] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 404.383607][ T4600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.422840][ T4600] usb 3-1: Product: syz [ 404.437983][ T4600] usb 3-1: Manufacturer: syz [ 404.452195][ T4600] usb 3-1: SerialNumber: syz [ 404.482804][ T4600] usb 3-1: config 0 descriptor?? [ 404.491241][ T7448] netlink: 165 bytes leftover after parsing attributes in process `syz.3.688'. [ 405.663623][ T4600] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 405.866147][ T4600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.902932][ T4600] usb 6-1: config 0 has no interfaces? [ 405.923030][ T4600] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.949918][ T4600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.008253][ T4600] usb 6-1: config 0 descriptor?? [ 408.255004][ T4393] usb 3-1: USB disconnect, device number 9 [ 409.818011][ T4600] usb 6-1: USB disconnect, device number 8 [ 410.285009][ T7489] device syzkaller0 entered promiscuous mode [ 411.544554][ T7503] loop0: detected capacity change from 0 to 8 [ 411.781828][ T4274] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 412.393600][ T3652] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 412.581482][ T3652] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 412.620179][ T3652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.629648][ T4600] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 412.677954][ T3652] usb 2-1: Product: syz [ 412.705037][ T3652] usb 2-1: Manufacturer: syz [ 412.743286][ T3652] usb 2-1: SerialNumber: syz [ 412.764835][ T3652] usb 2-1: config 0 descriptor?? [ 412.826240][ T4600] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.861488][ T4600] usb 6-1: config 0 has no interfaces? [ 412.887604][ T4600] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.927037][ T4600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.009682][ T4600] usb 6-1: config 0 descriptor?? [ 416.206857][ T4316] usb 2-1: USB disconnect, device number 17 [ 416.451802][ T7557] netlink: 165 bytes leftover after parsing attributes in process `syz.2.708'. [ 416.710704][ T4316] usb 6-1: USB disconnect, device number 9 [ 419.006715][ T7600] fuse: Bad value for 'fd' [ 419.172072][ T7603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.719'. [ 420.249805][ T7595] netlink: 'syz.5.715': attribute type 10 has an invalid length. [ 420.493892][ T4324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 420.741363][ T4324] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 420.763766][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.802326][ T4324] usb 3-1: Product: syz [ 420.832824][ T4324] usb 3-1: Manufacturer: syz [ 420.853098][ T4324] usb 3-1: SerialNumber: syz [ 420.906007][ T4324] usb 3-1: config 0 descriptor?? [ 421.159022][ T4324] usb 3-1: USB disconnect, device number 10 [ 421.387359][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.049084][ T7647] binder: 7644:7647 ioctl c0046209 0 returned -22 [ 424.073766][ T7645] comedi comedi0: Minor 3 could not be opened [ 424.373753][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 425.643613][ T4598] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 425.845504][ T4598] usb 3-1: config 0 has no interfaces? [ 425.854006][ T4598] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 425.934586][ T4598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.942664][ T4598] usb 3-1: Product: syz [ 425.973855][ T4393] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 426.003856][ T4598] usb 3-1: Manufacturer: syz [ 426.018520][ T4598] usb 3-1: SerialNumber: syz [ 426.074241][ T4598] usb 3-1: config 0 descriptor?? [ 426.198225][ T4393] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 426.232247][ T4393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.261277][ T4393] usb 1-1: Product: syz [ 426.271288][ T4393] usb 1-1: Manufacturer: syz [ 426.276791][ T4393] usb 1-1: SerialNumber: syz [ 426.309648][ T4393] usb 1-1: config 0 descriptor?? [ 426.326379][ T7694] netlink: 76 bytes leftover after parsing attributes in process `syz.1.740'. [ 426.544649][ T4393] usb 1-1: USB disconnect, device number 12 [ 427.009961][ T7705] 9pnet_virtio: no channels available for device syz [ 427.440882][ T4324] usb 3-1: USB disconnect, device number 11 [ 428.160801][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 429.375130][ T7735] tipc: Can't bind to reserved service type 0 [ 430.310885][ T7744] 9pnet_virtio: no channels available for device syz [ 430.403141][ T7746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.754'. [ 430.773585][ T4598] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 430.968781][ T4598] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.991390][ T4598] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 431.015006][ T4598] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.051148][ T4598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.961339][ T7750] loop3: detected capacity change from 0 to 32768 [ 431.978881][ T7746] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.150919][ T7750] XFS (loop3): Mounting V5 Filesystem [ 433.074938][ T7770] lo speed is unknown, defaulting to 1000 [ 433.081724][ T7770] lo speed is unknown, defaulting to 1000 [ 433.103924][ T7770] lo speed is unknown, defaulting to 1000 [ 433.157434][ T7770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 433.214943][ T7770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.447367][ T7770] lo speed is unknown, defaulting to 1000 [ 433.477085][ T7750] XFS (loop3): Ending clean mount [ 433.484542][ T7770] lo speed is unknown, defaulting to 1000 [ 433.497477][ T7770] lo speed is unknown, defaulting to 1000 [ 433.515560][ T7770] lo speed is unknown, defaulting to 1000 [ 433.531177][ T7770] lo speed is unknown, defaulting to 1000 [ 434.215255][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 434.255172][ T7750] XFS (loop3): Quotacheck needed: Please wait. [ 435.119015][ T7750] XFS (loop3): Quotacheck: Done. [ 435.339038][ T4275] XFS (loop3): Unmounting Filesystem [ 435.608249][ T4393] usb 1-1: USB disconnect, device number 13 [ 435.903687][ T7794] 9pnet_virtio: no channels available for device syz [ 436.768595][ T7809] siw: device registration error -23 [ 436.952232][ T7814] device team0 entered promiscuous mode [ 436.957927][ T7814] device team_slave_0 entered promiscuous mode [ 436.965351][ T7814] device team_slave_1 entered promiscuous mode [ 438.926244][ T7855] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 439.149606][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.176801][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.189806][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.218014][ T7860] device bridge_slave_0 left promiscuous mode [ 439.225646][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.247667][ T7860] device bridge_slave_1 left promiscuous mode [ 439.257934][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.390765][ T7860] bond0: (slave bond_slave_0): Releasing backup interface [ 439.461630][ T7860] bond0: (slave bond_slave_1): Releasing backup interface [ 439.641974][ T7860] team0: Port device team_slave_0 removed [ 440.033806][ T7860] team0: Port device team_slave_1 removed [ 440.056238][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.062932][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.087634][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.097642][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.128553][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.147659][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.368204][ T7861] team0: Mode changed to "loadbalance" [ 440.770387][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 440.792584][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 440.807264][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 440.822193][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 440.836059][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 440.850523][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 440.893804][ T7885] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 440.900401][ T7885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 440.908303][ T7885] vhci_hcd vhci_hcd.0: Device attached [ 441.164066][ T7884] binder_alloc: 7882: binder_alloc_buf, no vma [ 441.481342][ T7886] vhci_hcd: connection closed [ 441.484097][ T5672] vhci_hcd: stop threads [ 441.554376][ T5672] vhci_hcd: release socket [ 441.637550][ T5672] vhci_hcd: disconnect device [ 442.541369][ T7892] device wireguard0 entered promiscuous mode [ 443.376737][ T7919] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.804'. [ 444.573565][ T4316] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 444.793580][ T4316] usb 6-1: Using ep0 maxpacket: 16 [ 445.223540][ T4393] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 446.137796][ T4393] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 446.156809][ T4393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.196726][ T4393] usb 3-1: Product: syz [ 446.201126][ T4393] usb 3-1: Manufacturer: syz [ 446.238899][ T4393] usb 3-1: SerialNumber: syz [ 446.265109][ T4393] usb 3-1: config 0 descriptor?? [ 446.289040][ T7956] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 446.295632][ T7956] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 446.432379][ T7956] vhci_hcd vhci_hcd.0: Device attached [ 446.516303][ T4598] usb 3-1: USB disconnect, device number 12 [ 446.793664][ T4393] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 447.092817][ T7957] vhci_hcd: connection reset by peer [ 447.101595][ T4497] vhci_hcd: stop threads [ 447.106958][ T4497] vhci_hcd: release socket [ 447.123981][ T4497] vhci_hcd: disconnect device [ 448.643368][ T7976] input: syz0 as /devices/virtual/input/input9 [ 449.272185][ T4316] usb 6-1: unable to get BOS descriptor or descriptor too short [ 449.323558][ T4316] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 449.339534][ T4316] usb 6-1: can't read configurations, error -71 [ 449.856165][ T7994] loop5: detected capacity change from 0 to 8 [ 450.724733][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 451.374804][ T8011] tipc: Started in network mode [ 451.379756][ T8011] tipc: Node identity 6e3a56229fe2, cluster identity 4711 [ 451.446282][ T8011] tipc: Enabled bearer , priority 0 [ 451.509840][ T8011] tipc: Resetting bearer [ 451.664152][ T8010] tipc: Disabling bearer [ 451.991282][ T4393] vhci_hcd: vhci_device speed not set [ 452.478301][ T8028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 452.484920][ T8028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 452.562234][ T8028] vhci_hcd vhci_hcd.0: Device attached [ 452.785106][ T8037] device syzkaller0 entered promiscuous mode [ 452.813626][ T4316] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 453.043792][ T4393] usb 33-1: device descriptor read/64, error -110 [ 454.683889][ T4316] usb 6-1: Using ep0 maxpacket: 8 [ 454.940319][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.952779][ T4316] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 454.962600][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.975104][ T4316] usb 6-1: config 0 descriptor?? [ 455.093674][ T4393] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 455.189562][ T4316] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 457.493224][ T7] usb 6-1: USB disconnect, device number 12 [ 458.200180][ T8029] vhci_hcd: connection reset by peer [ 458.207790][ T4396] vhci_hcd: stop threads [ 458.218141][ T4396] vhci_hcd: release socket [ 458.271046][ T4396] vhci_hcd: disconnect device [ 459.953865][ T8075] comedi comedi0: Minor 3 could not be opened [ 460.293667][ T4393] vhci_hcd: vhci_device speed not set [ 464.066549][ T8050] tipc: Enabled bearer , priority 0 [ 464.501741][ T4274] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 464.512307][ T4274] CPU: 1 PID: 4274 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 464.519935][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.530046][ T4274] Workqueue: hci0 hci_rx_work [ 464.534765][ T4274] Call Trace: [ 464.538237][ T4274] [ 464.541277][ T4274] dump_stack_lvl+0x168/0x22e [ 464.546256][ T4274] ? show_regs_print_info+0x12/0x12 [ 464.551473][ T4274] ? load_image+0x3b0/0x3b0 [ 464.556016][ T4274] sysfs_create_dir_ns+0x252/0x280 [ 464.561148][ T4274] ? hci_rx_work+0x3eb/0xd40 [ 464.565769][ T4274] ? sysfs_warn_dup+0xa0/0xa0 [ 464.570468][ T4274] ? do_raw_spin_unlock+0x11d/0x230 [ 464.575699][ T4274] kobject_add_internal+0x6b8/0xc80 [ 464.580987][ T4274] kobject_add+0x152/0x210 [ 464.585432][ T4274] ? kobject_init+0x1d0/0x1d0 [ 464.590164][ T4274] ? klist_children_get+0x50/0x50 [ 464.595249][ T4274] ? get_device_parent+0x121/0x3f0 [ 464.600478][ T4274] device_add+0x483/0xfb0 [ 464.604835][ T4274] ? kmem_cache_free+0xf7/0x290 [ 464.609719][ T4274] hci_conn_add_sysfs+0xd1/0x1e0 [ 464.614678][ T4274] le_conn_complete_evt+0xd1d/0x1320 [ 464.620004][ T4274] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 464.626374][ T4274] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 464.632030][ T4274] ? skb_pull_data+0xf7/0x200 [ 464.636740][ T4274] hci_le_conn_complete_evt+0x183/0x440 [ 464.642399][ T4274] ? hci_remote_host_features_evt+0x270/0x270 [ 464.648527][ T4274] hci_event_packet+0x791/0x1210 [ 464.653624][ T4274] ? bis_list+0x280/0x280 [ 464.657974][ T4274] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 464.663952][ T4274] ? kcov_remote_start+0x4c7/0x7e0 [ 464.669183][ T4274] ? msr_initialize_bdw+0x80/0xb0 [ 464.674252][ T4274] ? hci_send_to_monitor+0x9c/0x4a0 [ 464.679487][ T4274] hci_rx_work+0x3eb/0xd40 [ 464.683943][ T4274] ? _raw_spin_unlock+0x40/0x40 [ 464.688836][ T4274] ? process_one_work+0x7a1/0x1160 [ 464.693977][ T4274] process_one_work+0x898/0x1160 [ 464.698953][ T4274] ? worker_detach_from_pool+0x240/0x240 [ 464.704605][ T4274] ? _raw_spin_lock_irq+0xab/0xe0 [ 464.709653][ T4274] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 464.715220][ T4274] ? kthread_data+0x4b/0xc0 [ 464.719773][ T4274] worker_thread+0xaa2/0x1250 [ 464.724511][ T4274] kthread+0x29d/0x330 [ 464.728605][ T4274] ? worker_clr_flags+0x1a0/0x1a0 [ 464.733654][ T4274] ? kthread_blkcg+0xd0/0xd0 [ 464.738358][ T4274] ret_from_fork+0x1f/0x30 [ 464.742809][ T4274] [ 464.745980][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.754828][ T4274] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 464.768411][ T4274] Bluetooth: hci0: failed to register connection device [ 465.043566][ T8106] overlayfs: unrecognized mount option "obj_role=+!" or missing value [ 465.266959][ T8115] lo speed is unknown, defaulting to 1000 [ 465.343411][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 466.052478][ T8115] lo speed is unknown, defaulting to 1000 [ 466.127503][ T8115] lo speed is unknown, defaulting to 1000 [ 466.156929][ T8115] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 466.166522][ T8123] tipc: Enabling of bearer rejected, failed to enable media [ 466.274113][ T8115] lo speed is unknown, defaulting to 1000 [ 466.321529][ T8115] lo speed is unknown, defaulting to 1000 [ 466.349795][ T8115] lo speed is unknown, defaulting to 1000 [ 466.424425][ T8115] lo speed is unknown, defaulting to 1000 [ 466.447846][ T8115] lo speed is unknown, defaulting to 1000 [ 466.704252][ T8138] binder: BINDER_SET_CONTEXT_MGR already set [ 466.726976][ T8138] binder: 8137:8138 ioctl 4018620d 200000004a80 returned -16 [ 466.775142][ T8138] binder_alloc: 8137: binder_alloc_buf, no vma [ 467.347915][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 468.178741][ T8163] netlink: 165 bytes leftover after parsing attributes in process `syz.2.882'. [ 469.136179][ T27] audit: type=1326 audit(1758407216.794:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.3.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92078ec29 code=0xffff0000 [ 469.158475][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.303920][ T27] audit: type=1326 audit(1758407216.834:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8169 comm="syz.3.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fc9207c14e5 code=0xffff0000 [ 469.653272][ T8184] tipc: Enabled bearer , priority 0 [ 469.654180][ T8182] binder: BINDER_SET_CONTEXT_MGR already set [ 469.662375][ T8184] device syzkaller0 entered promiscuous mode [ 469.701441][ T8182] binder: 8181:8182 ioctl 4018620d 200000004a80 returned -16 [ 469.738520][ T8182] binder_alloc: 8181: binder_alloc_buf, no vma [ 469.767069][ T8183] tipc: Resetting bearer [ 469.931468][ T8183] tipc: Disabling bearer [ 470.933720][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 471.107622][ T8199] netlink: 2412 bytes leftover after parsing attributes in process `syz.1.895'. [ 471.636442][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 472.301731][ T8207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.898'. [ 474.601634][ T8230] tipc: Started in network mode [ 474.623999][ T8230] tipc: Node identity 86066295f5da, cluster identity 4711 [ 474.631303][ T8230] tipc: Enabled bearer , priority 0 [ 474.650268][ T8230] device syzkaller0 entered promiscuous mode [ 474.738387][ T8229] tipc: Resetting bearer [ 474.753874][ T4536] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 474.910064][ T8220] loop2: detected capacity change from 0 to 32768 [ 474.998055][ T8229] tipc: Disabling bearer [ 475.033174][ T8220] XFS (loop2): Mounting V5 Filesystem [ 475.094622][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 475.829556][ T4536] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 475.843511][ T4536] usb 2-1: config 0 has no interface number 0 [ 475.853559][ T4536] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 475.864437][ T4536] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 475.875638][ T4536] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 475.881539][ T8220] XFS (loop2): Ending clean mount [ 475.886413][ T4536] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.886466][ T4536] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 475.886492][ T4536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.923857][ T4536] usb 2-1: config 0 descriptor?? [ 475.944514][ T8228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.952162][ T8228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 476.010713][ T4536] ldusb 2-1:0.55: Interrupt in endpoint not found [ 476.054595][ T8220] XFS (loop2): Quotacheck needed: Please wait. [ 476.154931][ T8220] XFS (loop2): Quotacheck: Done. [ 476.205091][ T8268] netlink: 165 bytes leftover after parsing attributes in process `syz.0.914'. [ 476.253407][ T4277] XFS (loop2): Unmounting Filesystem [ 476.388980][ T8271] siw: device registration error -23 [ 476.490189][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.503074][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.560577][ T4536] usb 2-1: USB disconnect, device number 18 [ 476.923163][ T8277] loop5: detected capacity change from 0 to 8 [ 477.512294][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 478.008833][ T8295] tipc: Enabled bearer , priority 0 [ 478.031845][ T8295] device syzkaller0 entered promiscuous mode [ 478.175219][ T8292] tipc: Resetting bearer [ 478.269828][ T8292] tipc: Disabling bearer [ 478.658118][ T8307] siw: device registration error -23 [ 479.007364][ T8315] overlayfs: failed to resolve './file0': -2 [ 479.607794][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 479.870887][ T8328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 479.888700][ T8299] loop2: detected capacity change from 0 to 32768 [ 480.086349][ T8299] XFS (loop2): Mounting V5 Filesystem [ 480.099266][ T8339] tipc: Started in network mode [ 480.123085][ T8339] tipc: Node identity a29561fe446b, cluster identity 4711 [ 480.174374][ T8339] tipc: Enabled bearer , priority 0 [ 480.181282][ T8299] XFS (loop2): Ending clean mount [ 480.202632][ T8299] XFS (loop2): Quotacheck needed: Please wait. [ 480.219553][ T8344] device syzkaller0 entered promiscuous mode [ 480.295496][ T8339] tipc: Resetting bearer [ 480.315877][ T8338] tipc: Resetting bearer [ 480.328278][ T8299] XFS (loop2): Quotacheck: Done. [ 480.424483][ T8338] tipc: Disabling bearer [ 480.747182][ T8361] overlayfs: failed to resolve './file0': -2 [ 480.922172][ T8365] netlink: 165 bytes leftover after parsing attributes in process `syz.3.948'. [ 482.036359][ T4277] XFS (loop2): Unmounting Filesystem [ 482.389842][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 483.692615][ T8393] siw: device registration error -23 [ 483.739771][ T8393] device team0 entered promiscuous mode [ 483.781238][ T8393] device team_slave_0 entered promiscuous mode [ 483.793871][ T8396] overlayfs: failed to resolve './file0': -2 [ 483.799721][ T8393] device team_slave_1 entered promiscuous mode [ 485.000370][ T8404] loop5: detected capacity change from 0 to 8 [ 485.307927][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 486.358572][ T8420] device bridge0 entered promiscuous mode [ 486.646490][ T8408] loop2: detected capacity change from 0 to 32768 [ 486.712739][ T8430] overlayfs: failed to resolve './file0': -2 [ 486.801979][ T8408] XFS (loop2): Mounting V5 Filesystem [ 487.300763][ T8408] XFS (loop2): Ending clean mount [ 487.352578][ T8408] XFS (loop2): Quotacheck needed: Please wait. [ 487.681995][ T8446] comedi comedi0: Minor 3 could not be opened [ 488.116739][ T8408] XFS (loop2): Quotacheck: Done. [ 488.647091][ T4277] XFS (loop2): Unmounting Filesystem [ 488.970081][ T8455] fuse: Bad value for 'fd' [ 489.235945][ T8461] netlink: 165 bytes leftover after parsing attributes in process `syz.3.979'. [ 492.536872][ T8503] fuse: Bad value for 'fd' [ 492.814029][ T8504] binder: BINDER_SET_CONTEXT_MGR already set [ 492.820084][ T8504] binder: 8495:8504 ioctl 4018620d 200000004a80 returned -16 [ 494.344229][ T8489] loop5: detected capacity change from 0 to 32768 [ 496.796634][ T8555] siw: device registration error -23 [ 497.596539][ T8560] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1010'. [ 500.376404][ T8591] siw: device registration error -23 [ 501.498172][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.504706][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.208444][ T8620] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1031'. [ 503.657533][ T8624] binder_alloc: 8623: binder_alloc_buf, no vma [ 505.381576][ T8645] loop3: detected capacity change from 0 to 8 [ 507.804982][ T8658] binder_alloc: 8657: binder_alloc_buf, no vma [ 509.192175][ T8679] siw: device registration error -23 [ 510.022433][ T8688] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1055'. [ 510.654923][ T8697] binder_alloc: 8696: binder_alloc_buf, no vma [ 512.638915][ T8683] lo speed is unknown, defaulting to 1000 [ 514.185717][ T8719] siw: device registration error -23 [ 515.169928][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 516.381055][ T8753] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1079'. [ 516.649049][ T8761] binder: BINDER_SET_CONTEXT_MGR already set [ 516.657136][ T8761] binder: 8760:8761 ioctl 4018620d 200000000100 returned -16 [ 516.835683][ T8761] binder: BINDER_SET_CONTEXT_MGR already set [ 516.843207][ T8761] binder: 8760:8761 ioctl 4018620d 200000004a80 returned -16 [ 517.461973][ T8777] loop2: detected capacity change from 0 to 8 [ 519.464925][ T8778] siw: device registration error -23 [ 522.105415][ T8795] tipc: Enabled bearer , priority 0 [ 522.124918][ T8795] device syzkaller0 entered promiscuous mode [ 522.178645][ T8795] tipc: Resetting bearer [ 522.207915][ T8794] tipc: Resetting bearer [ 522.382108][ T8794] tipc: Disabling bearer [ 522.398087][ T8803] binder: BINDER_SET_CONTEXT_MGR already set [ 522.429619][ T8803] binder: 8802:8803 ioctl 4018620d 200000000100 returned -16 [ 522.447651][ T8803] binder: BINDER_SET_CONTEXT_MGR already set [ 522.473097][ T8803] binder: 8802:8803 ioctl 4018620d 200000004a80 returned -16 [ 524.075627][ T8826] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1104'. [ 524.206250][ T8828] binder: BINDER_SET_CONTEXT_MGR already set [ 524.212311][ T8828] binder: 8827:8828 ioctl 4018620d 200000000040 returned -16 [ 524.493659][ T8830] device wg2 entered promiscuous mode [ 525.114587][ T8846] tipc: Enabled bearer , priority 0 [ 525.644103][ T8849] binder: BINDER_SET_CONTEXT_MGR already set [ 525.670517][ T8849] binder: 8848:8849 ioctl 4018620d 200000000100 returned -16 [ 525.753745][ T8849] binder: BINDER_SET_CONTEXT_MGR already set [ 525.759808][ T8849] binder: 8848:8849 ioctl 4018620d 200000004a80 returned -16 [ 526.097627][ T8857] overlayfs: failed to resolve './file1': -2 [ 526.261915][ T7] tipc: Node number set to 3875430910 [ 527.120509][ T8876] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1123'. [ 528.363692][ T8885] overlayfs: failed to resolve './file1': -2 [ 530.776214][ T8913] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1137'. [ 532.373928][ T8842] device syzkaller0 entered promiscuous mode [ 532.429216][ T8847] tipc: Resetting bearer [ 532.450073][ T8841] tipc: Resetting bearer [ 532.527805][ T8841] tipc: Disabling bearer [ 532.875321][ T8918] loop5: detected capacity change from 0 to 8 [ 534.657120][ T8919] overlayfs: failed to resolve './file1': -2 [ 536.952222][ T8978] binder: BINDER_SET_CONTEXT_MGR already set [ 536.966450][ T8978] binder: 8977:8978 ioctl 4018620d 200000000100 returned -16 [ 536.996281][ T8978] binder: BINDER_SET_CONTEXT_MGR already set [ 537.029121][ T8978] binder: 8977:8978 ioctl 4018620d 200000004a80 returned -16 [ 537.808994][ T8994] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1162'. [ 540.700552][ T9008] binder: BINDER_SET_CONTEXT_MGR already set [ 540.708619][ T9008] binder: 9007:9008 ioctl 4018620d 200000000100 returned -16 [ 540.731137][ T9008] binder: BINDER_SET_CONTEXT_MGR already set [ 540.741644][ T9008] binder: 9007:9008 ioctl 4018620d 200000004a80 returned -16 [ 541.007379][ T8957] tipc: Started in network mode [ 541.012330][ T8957] tipc: Node identity 8e139c480e57, cluster identity 4711 [ 541.047203][ T8957] tipc: Enabled bearer , priority 0 [ 541.091566][ T8959] device syzkaller0 entered promiscuous mode [ 541.116902][ T8974] tipc: Resetting bearer [ 541.132572][ T9002] device team0 entered promiscuous mode [ 541.249978][ T8949] tipc: Resetting bearer [ 541.394449][ T8949] tipc: Disabling bearer [ 542.727915][ T9042] binder: BINDER_SET_CONTEXT_MGR already set [ 542.813876][ T9042] binder: 9041:9042 ioctl 4018620d 200000000100 returned -16 [ 542.891237][ T9042] binder: BINDER_SET_CONTEXT_MGR already set [ 542.956715][ T9043] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 542.959517][ T9042] binder: 9041:9042 ioctl 4018620d 200000004a80 returned -16 [ 542.963287][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 543.096978][ T9043] vhci_hcd vhci_hcd.0: Device attached [ 543.353657][ T3652] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 543.401179][ T9068] tipc: Enabled bearer , priority 0 [ 543.434900][ T9068] device syzkaller0 entered promiscuous mode [ 544.346955][ T9068] tipc: Resetting bearer [ 544.366785][ T9066] tipc: Resetting bearer [ 544.497499][ T9049] vhci_hcd: connection reset by peer [ 544.503217][ T6852] vhci_hcd: stop threads [ 544.512046][ T6852] vhci_hcd: release socket [ 544.516856][ T7] tipc: Node number set to 1943822997 [ 544.528478][ T9066] tipc: Disabling bearer [ 544.552955][ T6852] vhci_hcd: disconnect device [ 545.150361][ T9096] siw: device registration error -23 [ 545.204051][ T9096] device team0 entered promiscuous mode [ 545.223857][ T9096] device team_slave_0 entered promiscuous mode [ 545.267509][ T9096] device team_slave_1 entered promiscuous mode [ 546.804447][ T9122] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.1210'. [ 547.763629][ T9124] comedi comedi0: Minor 3 could not be opened [ 548.457838][ T3652] vhci_hcd: vhci_device speed not set [ 549.308985][ T9146] siw: device registration error -23 [ 550.073958][ T4536] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 550.173338][ T9155] tipc: Enabled bearer , priority 0 [ 550.181264][ T9155] device syzkaller0 entered promiscuous mode [ 550.208859][ T9155] tipc: Resetting bearer [ 550.224100][ T9154] tipc: Resetting bearer [ 550.264566][ T4536] usb 4-1: Using ep0 maxpacket: 16 [ 550.291886][ T9154] tipc: Disabling bearer [ 550.696210][ T9167] comedi comedi0: Minor 3 could not be opened [ 551.505143][ T9169] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.1225'. [ 552.815498][ T9188] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 552.822094][ T9188] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.928189][ T9193] device syzkaller0 left promiscuous mode [ 552.951218][ T9188] vhci_hcd vhci_hcd.0: Device attached [ 553.213595][ T7] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 553.265159][ T9190] vhci_hcd: connection reset by peer [ 553.271013][ T4396] vhci_hcd: stop threads [ 553.276036][ T4396] vhci_hcd: release socket [ 553.295259][ T4396] vhci_hcd: disconnect device [ 553.788521][ T9198] tap0: tun_chr_ioctl cmd 1074025677 [ 553.822424][ T9198] tap0: linktype set to 768 [ 554.803600][ T9204] comedi comedi0: Minor 3 could not be opened [ 555.344041][ T4536] usb 4-1: unable to get BOS descriptor or descriptor too short [ 555.402147][ T4536] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 555.443953][ T4536] usb 4-1: chopping to 0 config(s) [ 555.449153][ T4536] usb 4-1: can't read configurations, error -32 [ 555.673796][ T4536] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 555.883537][ T4536] usb 4-1: device descriptor read/64, error -32 [ 556.003803][ T4536] usb usb4-port1: attempt power cycle [ 557.076577][ T9213] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.1239'. [ 558.383850][ T7] vhci_hcd: vhci_device speed not set [ 559.262929][ T9242] overlayfs: missing 'lowerdir' [ 559.922221][ T9261] siw: device registration error -23 [ 560.747179][ T9263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 560.753761][ T9263] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 560.794095][ T9263] vhci_hcd vhci_hcd.0: Device attached [ 561.063722][ T7] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 561.106629][ T9265] vhci_hcd: connection reset by peer [ 561.112271][ T6852] vhci_hcd: stop threads [ 561.120450][ T6852] vhci_hcd: release socket [ 561.144582][ T6852] vhci_hcd: disconnect device [ 562.477816][ T9290] overlayfs: missing 'lowerdir' [ 562.938350][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.944769][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.385253][ T9303] siw: device registration error -23 [ 565.470742][ T9329] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 565.477326][ T9329] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 565.558252][ T9329] vhci_hcd vhci_hcd.0: Device attached [ 566.087275][ T9330] vhci_hcd: connection closed [ 566.087524][ T4396] vhci_hcd: stop threads [ 566.103469][ T4396] vhci_hcd: release socket [ 566.144157][ T4396] vhci_hcd: disconnect device [ 566.213664][ T7] vhci_hcd: vhci_device speed not set [ 568.327178][ T9349] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1282'. [ 570.277901][ T9374] binder: BINDER_SET_CONTEXT_MGR already set [ 570.310329][ T9374] binder: 9373:9374 ioctl 4018620d 200000004a80 returned -16 [ 570.403603][ T9375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 570.410194][ T9375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 570.775773][ T9375] vhci_hcd vhci_hcd.0: Device attached [ 571.063704][ T125] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 571.415703][ T9378] vhci_hcd: connection reset by peer [ 571.463750][ T9] vhci_hcd: stop threads [ 571.538270][ T9] vhci_hcd: release socket [ 571.553949][ T9] vhci_hcd: disconnect device [ 571.943122][ T9406] loop1: detected capacity change from 0 to 8 [ 575.401364][ T9428] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1308'. [ 576.613653][ T9437] comedi comedi0: Minor 3 could not be opened [ 577.233654][ T125] vhci_hcd: vhci_device speed not set [ 578.201803][ T9450] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 578.208436][ T9450] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 578.238290][ T9450] vhci_hcd vhci_hcd.0: Device attached [ 578.286684][ T9454] binder: 9453:9454 ioctl 4018620d 0 returned -22 [ 578.509002][ T4600] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 578.815880][ T9451] vhci_hcd: connection reset by peer [ 578.821646][ T5561] vhci_hcd: stop threads [ 578.836571][ T5561] vhci_hcd: release socket [ 578.871041][ T5561] vhci_hcd: disconnect device [ 580.923184][ T9481] binder: 9480:9481 ioctl 4018620d 0 returned -22 [ 581.245284][ T9495] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 581.251876][ T9495] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.278954][ T9495] vhci_hcd vhci_hcd.0: Device attached [ 581.553717][ T4536] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 582.040219][ T9496] vhci_hcd: connection reset by peer [ 582.046088][ T4577] vhci_hcd: stop threads [ 582.050430][ T4577] vhci_hcd: release socket [ 582.083233][ T4577] vhci_hcd: disconnect device [ 582.424291][ T9521] binder: 9520:9521 ioctl 4018620d 0 returned -22 [ 583.338005][ T9531] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 583.663559][ T4600] vhci_hcd: vhci_device speed not set [ 585.333628][ T125] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 585.570776][ T125] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 585.633303][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.735429][ T125] usb 4-1: Product: syz [ 585.797025][ T125] usb 4-1: Manufacturer: syz [ 585.870157][ T125] usb 4-1: SerialNumber: syz [ 585.992963][ T125] usb 4-1: config 0 descriptor?? [ 586.223205][ T125] usb 4-1: USB disconnect, device number 12 [ 586.944240][ T4536] vhci_hcd: vhci_device speed not set [ 587.835868][ T9583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1365'. [ 587.926747][ T9590] tipc: Enabled bearer , priority 0 [ 587.954800][ T9590] device syzkaller0 entered promiscuous mode [ 588.048634][ T9590] tipc: Resetting bearer [ 588.938300][ T9589] tipc: Resetting bearer [ 588.966257][ T9589] tipc: Disabling bearer [ 589.112012][ T9599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 589.118592][ T9599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 589.145918][ T9599] vhci_hcd vhci_hcd.0: Device attached [ 589.260850][ T9601] vhci_hcd: connection closed [ 589.261062][ T4580] vhci_hcd: stop threads [ 589.275641][ T4580] vhci_hcd: release socket [ 589.327206][ T4580] vhci_hcd: disconnect device [ 589.353733][ T4536] vhci_hcd: vhci_device speed not set [ 591.013540][ T125] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 592.778251][ T125] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 592.809939][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.828886][ T125] usb 6-1: Product: syz [ 592.840041][ T125] usb 6-1: Manufacturer: syz [ 592.845358][ T125] usb 6-1: SerialNumber: syz [ 592.868076][ T125] usb 6-1: config 0 descriptor?? [ 593.158790][ T125] usb 6-1: USB disconnect, device number 13 [ 597.614024][ T9678] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 597.620719][ T9678] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 597.658778][ T9683] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 597.693755][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1393'. [ 597.716988][ T9678] vhci_hcd vhci_hcd.0: Device attached [ 597.729417][ T9685] loop2: detected capacity change from 0 to 512 [ 597.749583][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.760810][ T9679] vhci_hcd: connection closed [ 597.761002][ T41] vhci_hcd: stop threads [ 597.777816][ T9685] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 597.789545][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.796725][ T9683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.811721][ T41] vhci_hcd: release socket [ 597.833011][ T41] vhci_hcd: disconnect device [ 597.839197][ T9685] EXT4-fs (loop2): Test dummy encryption mode enabled [ 597.973057][ T9685] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1394: casefold flag without casefold feature [ 598.140680][ T9685] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1394: couldn't read orphan inode 15 (err -117) [ 598.778952][ T9685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 599.268023][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 599.443669][ T3652] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 600.061659][ T3652] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 600.074829][ T3652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.083232][ T3652] usb 1-1: Product: syz [ 600.088685][ T3652] usb 1-1: Manufacturer: syz [ 600.094136][ T3652] usb 1-1: SerialNumber: syz [ 600.108159][ T3652] usb 1-1: config 0 descriptor?? [ 600.324233][ T7] usb 1-1: USB disconnect, device number 14 [ 602.491266][ T9726] siw: device registration error -23 [ 606.303964][ T125] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 606.497614][ T125] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 606.507298][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.516130][ T125] usb 1-1: Product: syz [ 606.520688][ T125] usb 1-1: Manufacturer: syz [ 606.526479][ T125] usb 1-1: SerialNumber: syz [ 606.548895][ T125] usb 1-1: config 0 descriptor?? [ 606.765808][ T125] usb 1-1: USB disconnect, device number 15 [ 610.694045][ T125] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 611.597132][ T125] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 611.613190][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.623339][ T125] usb 6-1: Product: syz [ 611.641975][ T125] usb 6-1: Manufacturer: syz [ 611.656656][ T125] usb 6-1: SerialNumber: syz [ 611.686379][ T125] usb 6-1: config 0 descriptor?? [ 611.918099][ T125] usb 6-1: USB disconnect, device number 14 [ 612.133596][ T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 612.463637][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 612.510133][ T9831] comedi comedi0: Minor 3 could not be opened [ 616.692819][ T9875] comedi comedi0: Minor 3 could not be opened [ 617.575425][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 617.633519][ T7] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 617.641171][ T7] usb 2-1: chopping to 0 config(s) [ 617.653519][ T7] usb 2-1: can't read configurations, error -32 [ 620.341103][ T9921] comedi comedi0: Minor 3 could not be opened [ 620.587189][ T9926] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1464'. [ 622.023511][ T3652] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 622.194478][ T9942] lo speed is unknown, defaulting to 1000 [ 622.243492][ T3652] usb 6-1: Using ep0 maxpacket: 16 [ 624.060970][ T9955] comedi comedi0: Minor 3 could not be opened [ 624.456674][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.688013][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.253628][ T3652] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.313839][ T3652] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 627.646621][ T9991] comedi comedi0: Minor 3 could not be opened [ 627.761575][ T3652] usb 6-1: chopping to 0 config(s) [ 627.790627][ T3652] usb 6-1: can't read configurations, error -32 [ 627.973715][ T3652] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 628.156777][ T3652] usb 6-1: device descriptor read/64, error -32 [ 628.278593][T10009] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1493'. [ 628.287929][ T3652] usb usb6-port1: attempt power cycle [ 628.739280][T10017] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1497'. [ 631.083741][ T4324] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 631.283910][ T4324] usb 6-1: Using ep0 maxpacket: 16 [ 632.483700][T10080] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1523'. [ 632.744588][T10086] device macvlan1 entered promiscuous mode [ 632.840266][T10084] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1524'. [ 636.063560][ T4324] usb 6-1: unable to get BOS descriptor or descriptor too short [ 636.092355][ T4324] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 636.129553][ T4324] usb 6-1: can't read configurations, error -71 [ 636.175384][T10135] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1543'. [ 636.788233][T10153] loop3: detected capacity change from 0 to 512 [ 636.830074][T10153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 636.878038][T10153] EXT4-fs (loop3): Test dummy encryption mode enabled [ 636.977756][T10153] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1552: casefold flag without casefold feature [ 637.126628][T10153] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1552: couldn't read orphan inode 15 (err -117) [ 637.169066][T10159] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1551'. [ 637.188638][T10153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 638.071912][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 638.680317][T10186] fuse: Unknown parameter 'grou00000000000000000000' [ 638.775076][T10191] syz.2.1566[10191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.775243][T10191] syz.2.1566[10191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.008392][T10194] loop3: detected capacity change from 0 to 512 [ 639.124907][T10194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.158033][T10194] EXT4-fs (loop3): Test dummy encryption mode enabled [ 639.190964][T10194] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1569: casefold flag without casefold feature [ 639.233974][T10194] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1569: couldn't read orphan inode 15 (err -117) [ 639.311260][T10194] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 639.426475][T10209] netlink: 'syz.5.1574': attribute type 10 has an invalid length. [ 639.955220][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 640.039502][T10223] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 640.046088][T10223] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 640.082609][T10223] vhci_hcd vhci_hcd.0: Device attached [ 640.277040][T10230] fuse: Unknown parameter 'grou00000000000000000000' [ 640.403535][ T125] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 640.527877][T10238] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1581'. [ 640.690021][T10224] vhci_hcd: connection reset by peer [ 640.718710][ T4577] vhci_hcd: stop threads [ 640.723026][ T4577] vhci_hcd: release socket [ 640.750965][ T4577] vhci_hcd: disconnect device [ 641.318842][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 641.675775][T10253] loop3: detected capacity change from 0 to 512 [ 641.735938][T10253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 641.770942][T10253] EXT4-fs (loop3): Test dummy encryption mode enabled [ 641.839294][T10253] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1589: casefold flag without casefold feature [ 641.980747][T10253] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1589: couldn't read orphan inode 15 (err -117) [ 641.981432][T10253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 642.096574][T10263] siw: device registration error -23 [ 643.365528][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 643.537613][T10274] fuse: Unknown parameter 'grou00000000000000000000' [ 643.966461][T10285] device syzkaller0 entered promiscuous mode [ 645.526154][T10301] netlink: 'syz.5.1606': attribute type 1 has an invalid length. [ 645.562953][T10301] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.1606'. [ 645.573779][ T125] vhci_hcd: vhci_device speed not set [ 645.595386][T10308] netlink: 'syz.5.1606': attribute type 12 has an invalid length. [ 645.596388][T10302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 645.609809][T10302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 645.624104][T10302] vhci_hcd vhci_hcd.0: Device attached [ 645.642740][T10309] fuse: Unknown parameter 'group_i00000000000000000000' [ 645.776377][T10312] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1608'. [ 645.898276][ T4393] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 645.916635][T10303] vhci_hcd: connection closed [ 645.942122][ T4580] vhci_hcd: stop threads [ 645.973532][ T4580] vhci_hcd: release socket [ 645.988488][ T4580] vhci_hcd: disconnect device [ 646.368731][T10322] siw: device registration error -23 [ 648.934401][T10344] device syzkaller0 entered promiscuous mode [ 650.113819][T10351] fuse: Unknown parameter 'group_i00000000000000000000' [ 650.323012][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1621'. [ 651.013789][ T4393] vhci_hcd: vhci_device speed not set [ 651.569143][T10372] loop2: detected capacity change from 0 to 512 [ 651.592009][T10372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 651.682638][T10372] EXT4-fs (loop2): Test dummy encryption mode enabled [ 651.729405][T10372] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1627: casefold flag without casefold feature [ 651.767784][T10372] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1627: couldn't read orphan inode 15 (err -117) [ 651.808469][T10372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 652.361624][T10390] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 652.368223][T10390] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 652.414734][T10390] vhci_hcd vhci_hcd.0: Device attached [ 652.455317][T10393] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1632'. [ 652.476403][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 652.703636][ T4536] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 652.956960][T10399] fuse: Unknown parameter 'group_i00000000000000000000' [ 653.185473][T10391] vhci_hcd: connection reset by peer [ 653.191219][ T4580] vhci_hcd: stop threads [ 653.221437][ T4580] vhci_hcd: release socket [ 653.244212][ T4580] vhci_hcd: disconnect device [ 656.094197][T10437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 656.100786][T10437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 656.160164][T10437] vhci_hcd vhci_hcd.0: Device attached [ 656.716316][T10438] vhci_hcd: connection closed [ 656.720360][ T46] vhci_hcd: stop threads [ 656.735037][ T46] vhci_hcd: release socket [ 656.747076][ T46] vhci_hcd: disconnect device [ 657.823976][ T4536] vhci_hcd: vhci_device speed not set [ 658.219134][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1621'. [ 658.229671][T10429] device syzkaller0 left promiscuous mode [ 659.238693][T10482] device syzkaller0 entered promiscuous mode [ 661.272579][T10480] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 661.279167][T10480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 661.354909][T10480] vhci_hcd vhci_hcd.0: Device attached [ 661.653499][ T4316] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 661.966385][T10484] vhci_hcd: connection reset by peer [ 661.971976][ T46] vhci_hcd: stop threads [ 661.982228][ T46] vhci_hcd: release socket [ 662.010625][ T46] vhci_hcd: disconnect device [ 663.702675][T10529] binder: 10528:10529 ioctl c0306201 0 returned -14 [ 664.688247][T10547] fuse: Bad value for 'fd' [ 665.470716][T10561] binder: 10560:10561 ioctl c0306201 0 returned -14 [ 665.846778][T10571] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1698'. [ 665.871634][T10572] binder: 10570:10572 ioctl 4018620d 0 returned -22 [ 666.773838][ T4316] vhci_hcd: vhci_device speed not set [ 667.378261][T10583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1703'. [ 668.786980][T10594] binder: 10593:10594 ioctl c0306201 0 returned -14 [ 669.232698][T10600] binder: 10599:10600 ioctl 4018620d 0 returned -22 [ 671.117899][T10491] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 671.145952][T10606] netlink: 'syz.2.1712': attribute type 10 has an invalid length. [ 671.178714][T10606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1712'. [ 671.219905][T10606] device dummy0 entered promiscuous mode [ 671.227674][T10606] bridge0: port 1(dummy0) entered blocking state [ 671.239873][T10606] bridge0: port 1(dummy0) entered disabled state [ 671.248865][T10606] bridge0: port 1(dummy0) entered blocking state [ 671.255426][T10606] bridge0: port 1(dummy0) entered forwarding state [ 671.415571][T10616] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1714'. [ 673.712481][T10658] siw: device registration error -23 [ 674.932188][T10672] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1738'. [ 674.980343][T10672] openvswitch: netlink: Flow key attr not present in new flow. [ 676.904715][T10738] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 676.925697][T10738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1770'. [ 676.942605][T10738] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.952090][T10738] bridge0: port 3(team0) entered blocking state [ 676.962715][T10738] bridge0: port 3(team0) entered disabled state [ 676.972275][T10738] bridge0: port 3(team0) entered blocking state [ 676.978751][T10738] bridge0: port 3(team0) entered forwarding state [ 676.988889][T10741] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1771'. [ 677.774750][T10763] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 677.807943][T10763] netlink: 'syz.1.1782': attribute type 2 has an invalid length. [ 677.851625][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 678.013973][T10768] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 678.100761][T10768] bridge0: port 1(dummy0) entered disabled state [ 678.230690][T10768] device dummy0 left promiscuous mode [ 679.872569][T10768] bridge0: port 1(dummy0) entered disabled state [ 679.992138][T10768] device dummy0 entered promiscuous mode [ 680.032601][T10768] team0: Port device dummy0 added [ 681.507567][T10812] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.1800'. [ 682.941529][ T4283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 683.795228][T10859] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.1818'. [ 685.817292][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.823791][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.034271][T10847] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 686.914315][T10892] device syzkaller0 entered promiscuous mode [ 687.523885][T10847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 687.534358][T10847] CPU: 0 PID: 10847 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 687.542045][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.552154][T10847] Workqueue: hci4 hci_rx_work [ 687.556900][T10847] Call Trace: [ 687.560221][T10847] [ 687.563188][T10847] dump_stack_lvl+0x168/0x22e [ 687.567919][T10847] ? show_regs_print_info+0x12/0x12 [ 687.573205][T10847] ? load_image+0x3b0/0x3b0 [ 687.577781][T10847] sysfs_create_dir_ns+0x252/0x280 [ 687.582948][T10847] ? hci_rx_work+0x3eb/0xd40 [ 687.587598][T10847] ? sysfs_warn_dup+0xa0/0xa0 [ 687.592420][T10847] ? do_raw_spin_unlock+0x11d/0x230 [ 687.597682][T10847] kobject_add_internal+0x6b8/0xc80 [ 687.602933][T10847] kobject_add+0x152/0x210 [ 687.607397][T10847] ? kobject_init+0x1d0/0x1d0 [ 687.612135][T10847] ? klist_children_get+0x50/0x50 [ 687.617204][T10847] ? get_device_parent+0x121/0x3f0 [ 687.622370][T10847] device_add+0x483/0xfb0 [ 687.626780][T10847] ? kmem_cache_free+0xf7/0x290 [ 687.631702][T10847] hci_conn_add_sysfs+0xd1/0x1e0 [ 687.636698][T10847] le_conn_complete_evt+0xd1d/0x1320 [ 687.642057][T10847] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 687.648355][T10847] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 687.654050][T10847] ? skb_pull_data+0xf7/0x200 [ 687.658800][T10847] hci_le_conn_complete_evt+0x183/0x440 [ 687.664498][T10847] ? hci_remote_host_features_evt+0x270/0x270 [ 687.670625][T10847] hci_event_packet+0x791/0x1210 [ 687.675636][T10847] ? bis_list+0x280/0x280 [ 687.680024][T10847] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 687.685983][T10847] ? kcov_remote_start+0x4c7/0x7e0 [ 687.691146][T10847] ? msr_initialize_bdw+0x80/0xb0 [ 687.696232][T10847] ? hci_send_to_monitor+0x9c/0x4a0 [ 687.701475][T10847] hci_rx_work+0x3eb/0xd40 [ 687.705956][T10847] ? _raw_spin_unlock+0x40/0x40 [ 687.710968][T10847] ? process_one_work+0x7a1/0x1160 [ 687.716123][T10847] process_one_work+0x898/0x1160 [ 687.721107][T10847] ? worker_detach_from_pool+0x240/0x240 [ 687.726766][T10847] ? _raw_spin_lock_irq+0xab/0xe0 [ 687.731833][T10847] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 687.737236][T10847] ? kthread_data+0x4b/0xc0 [ 687.741789][T10847] worker_thread+0xaa2/0x1250 [ 687.746513][T10847] ? __kthread_parkme+0x162/0x1c0 [ 687.751584][T10847] kthread+0x29d/0x330 [ 687.755684][T10847] ? worker_clr_flags+0x1a0/0x1a0 [ 687.760731][T10847] ? kthread_blkcg+0xd0/0xd0 [ 687.765358][T10847] ret_from_fork+0x1f/0x30 [ 687.769818][T10847] [ 687.778670][T10847] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 687.793710][T10847] Bluetooth: hci4: failed to register connection device [ 687.806664][T10847] Bluetooth: hci4: link tx timeout [ 687.811852][T10847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 687.819720][T10847] Bluetooth: hci4: link tx timeout [ 687.824904][T10847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 688.914057][T10847] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 690.639124][T10973] siw: device registration error -23 [ 691.886815][T10947] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 692.344228][T10980] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.1869'. [ 693.893624][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 693.958781][T11003] siw: device registration error -23 [ 697.817908][T11056] netlink: 'syz.5.1901': attribute type 1 has an invalid length. [ 697.826045][T11056] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1901'. [ 698.324547][ T4316] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 698.578826][ T4316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.604515][ T4316] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.666869][ T4316] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 698.677639][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.692877][ T4316] usb 6-1: Product: syz [ 698.697346][ T4316] usb 6-1: Manufacturer: syz [ 698.701973][ T4316] usb 6-1: SerialNumber: syz [ 698.716016][ T4316] usb 6-1: config 0 descriptor?? [ 698.942230][ T4536] usb 6-1: USB disconnect, device number 20 [ 699.673844][T11003] bridge0: port 3(team0) entered disabled state [ 700.428635][T11111] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.1923'. [ 701.561557][T11118] siw: device registration error -23 [ 701.595223][ T3652] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 701.805497][ T3652] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 701.827768][ T3652] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 701.863449][ T3652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.889020][ T3652] usb 3-1: Product: syz [ 701.923504][ T3652] usb 3-1: Manufacturer: syz [ 701.949019][ T3652] usb 3-1: SerialNumber: syz [ 701.994271][ T3652] usb 3-1: config 0 descriptor?? [ 702.222974][ T4393] usb 3-1: USB disconnect, device number 13 [ 702.315777][T11146] netlink: 2412 bytes leftover after parsing attributes in process `syz.1.1937'. [ 702.837015][T11147] siw: device registration error -23 [ 703.211936][T11158] netlink: 'syz.5.1942': attribute type 1 has an invalid length. [ 703.234718][T11158] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1942'. [ 703.789931][T11179] netlink: 2412 bytes leftover after parsing attributes in process `syz.2.1953'. [ 704.003699][ T4316] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 704.172084][T11182] siw: device registration error -23 [ 704.241073][ T4316] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.346611][ T4316] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 704.470794][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.563696][ T4316] usb 1-1: Product: syz [ 704.614907][ T4316] usb 1-1: Manufacturer: syz [ 704.665817][ T4316] usb 1-1: SerialNumber: syz [ 704.784117][ T4316] usb 1-1: config 0 descriptor?? [ 704.830126][T11185] netlink: 'syz.5.1957': attribute type 1 has an invalid length. [ 704.889242][T11185] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1957'. [ 705.078940][ T4316] usb 1-1: USB disconnect, device number 16 [ 705.511928][T11211] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.1969'. [ 706.317975][T11219] lo speed is unknown, defaulting to 1000 [ 706.624636][T11228] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 706.632446][T11228] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1976'. [ 707.128231][T11249] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.1985'. [ 707.193675][ T4316] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 708.055879][ T4316] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.091113][ T4316] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 708.123888][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.147947][ T4316] usb 3-1: Product: syz [ 708.155623][ T4316] usb 3-1: Manufacturer: syz [ 708.160357][ T4316] usb 3-1: SerialNumber: syz [ 708.194261][ T4316] usb 3-1: config 0 descriptor?? [ 708.280075][T11265] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 708.310435][T11265] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1995'. [ 708.407341][ T4316] usb 3-1: USB disconnect, device number 14 [ 708.814183][T11284] netlink: 2412 bytes leftover after parsing attributes in process `syz.1.2004'. [ 710.404677][T11314] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.2018'. [ 711.233592][ T3652] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 711.448633][ T3652] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 711.463494][ T3652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.489416][ T3652] usb 3-1: Product: syz [ 711.505505][ T3652] usb 3-1: Manufacturer: syz [ 711.520380][ T3652] usb 3-1: SerialNumber: syz [ 711.554506][ T3652] usb 3-1: config 0 descriptor?? [ 711.765217][ T3652] usb 3-1: USB disconnect, device number 15 [ 711.958616][T11349] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.2035'. [ 712.773083][T11351] syz.3.2038[11351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 712.773242][T11351] syz.3.2038[11351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.526071][T11384] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.2050'. [ 713.673482][ T3652] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 714.467462][ T3652] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 714.483773][ T3652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.502192][ T3652] usb 1-1: Product: syz [ 714.518089][ T3652] usb 1-1: Manufacturer: syz [ 714.522845][ T3652] usb 1-1: SerialNumber: syz [ 714.558783][ T3652] usb 1-1: config 0 descriptor?? [ 714.773062][ T3652] usb 1-1: USB disconnect, device number 17 [ 715.587935][T11417] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.2065'. [ 718.477591][T11390] lo speed is unknown, defaulting to 1000 [ 718.489187][T11414] lo speed is unknown, defaulting to 1000 [ 719.039288][T11429] device syzkaller0 entered promiscuous mode [ 722.618732][T11454] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.2078'. [ 725.010609][T11463] netlink: 'syz.5.2082': attribute type 1 has an invalid length. [ 725.034584][T11463] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2082'. [ 725.648890][T11485] netlink: 2412 bytes leftover after parsing attributes in process `syz.1.2090'. [ 727.600557][T11522] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.2104'. [ 730.257727][T11567] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.2121'. [ 730.414339][T11573] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 730.422225][T11573] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2125'. [ 733.629017][T11609] netlink: 2412 bytes leftover after parsing attributes in process `syz.0.2136'. [ 734.883680][T11623] comedi comedi0: Minor 3 could not be opened [ 735.812122][ T4536] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 736.005242][ T4536] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 736.020201][ T4536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.029809][ T4536] usb 4-1: Product: syz [ 736.039838][ T4536] usb 4-1: Manufacturer: syz [ 736.045306][ T4536] usb 4-1: SerialNumber: syz [ 736.062171][ T4536] usb 4-1: config 0 descriptor?? [ 736.288425][ T4536] usb 4-1: USB disconnect, device number 13 [ 737.169607][T11659] comedi comedi0: Minor 3 could not be opened [ 739.392599][T11687] siw: device registration error -23 [ 739.497073][T11688] comedi comedi0: Minor 3 could not be opened [ 739.688262][T11596] device syzkaller0 entered promiscuous mode [ 740.465735][T11709] netlink: 2412 bytes leftover after parsing attributes in process `syz.5.2182'. [ 740.622782][T11712] siw: device registration error -23 [ 741.250621][T11721] device syzkaller0 left promiscuous mode [ 742.359663][T11748] siw: device registration error -23 [ 742.546755][T11757] device syzkaller0 entered promiscuous mode [ 743.904142][T11777] comedi comedi0: Minor 3 could not be opened [ 744.300037][T11791] siw: device registration error -23 [ 747.256855][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.261643][T10847] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 747.263252][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.353083][T11832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 747.359666][T11832] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 747.379618][T11832] vhci_hcd vhci_hcd.0: Device attached [ 747.653133][ T4270] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 748.083694][T11833] vhci_hcd: connection reset by peer [ 748.102312][ T4580] vhci_hcd: stop threads [ 748.111099][ T4580] vhci_hcd: release socket [ 748.130025][ T4580] vhci_hcd: disconnect device [ 748.824427][T11844] netlink: 'syz.3.2229': attribute type 1 has an invalid length. [ 748.832244][T11844] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2229'. [ 749.550115][ T4274] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 750.327854][T11875] netlink: 'syz.5.2241': attribute type 1 has an invalid length. [ 750.336670][T11875] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2241'. [ 750.356726][T11871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 750.363302][T11871] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 750.383220][T11871] vhci_hcd vhci_hcd.0: Device attached [ 750.653483][ T4536] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 750.719192][T11888] siw: device registration error -23 [ 750.932598][T11894] fuse: Unknown parameter '0x0000000000000004' [ 751.147873][T11898] device syzkaller0 entered promiscuous mode [ 752.411218][T11876] vhci_hcd: connection reset by peer [ 752.417491][ T6852] vhci_hcd: stop threads [ 752.488238][ T6852] vhci_hcd: release socket [ 752.644225][ T6852] vhci_hcd: disconnect device [ 752.773503][ T4270] vhci_hcd: vhci_device speed not set [ 753.711176][ T4274] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 754.429288][T11926] siw: device registration error -23 [ 754.911356][T11933] fuse: Unknown parameter '0x0000000000000004' [ 755.819493][ T4536] vhci_hcd: vhci_device speed not set [ 756.176408][ T4274] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 757.236633][T11959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 757.243336][T11959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 757.277954][T11959] vhci_hcd vhci_hcd.0: Device attached [ 757.552080][ T4606] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 757.918247][T11960] vhci_hcd: connection reset by peer [ 757.924604][ T5561] vhci_hcd: stop threads [ 757.928934][ T5561] vhci_hcd: release socket [ 757.943778][ T5561] vhci_hcd: disconnect device [ 758.313024][T11969] fuse: Unknown parameter '0x0000000000000004' [ 759.020183][T11989] siw: device registration error -23 [ 759.062985][T11991] netlink: 'syz.5.2286': attribute type 1 has an invalid length. [ 759.102955][T11991] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2286'. [ 759.376268][T11996] device syzkaller0 entered promiscuous mode [ 762.699031][ T4606] vhci_hcd: vhci_device speed not set [ 763.345938][T12027] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 763.352524][T12027] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 763.428343][T12027] vhci_hcd vhci_hcd.0: Device attached [ 763.449350][T12033] siw: device registration error -23 [ 763.693520][ T3652] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 763.799447][T12037] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 763.810937][T12037] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2300'. [ 764.776594][T12028] vhci_hcd: connection reset by peer [ 764.793445][ T46] vhci_hcd: stop threads [ 764.797892][ T46] vhci_hcd: release socket [ 764.808046][ T46] vhci_hcd: disconnect device [ 766.047252][T12062] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 766.055381][T12062] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2311'. [ 767.817750][T12079] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 767.824424][T12079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 767.848879][T12079] vhci_hcd vhci_hcd.0: Device attached [ 768.275490][T12084] siw: device registration error -23 [ 768.309056][T12087] lo speed is unknown, defaulting to 1000 [ 768.582766][T12097] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 768.601158][T12080] vhci_hcd: connection closed [ 768.601558][ T41] vhci_hcd: stop threads [ 768.628457][T12097] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2323'. [ 768.645841][ T41] vhci_hcd: release socket [ 768.660625][ T41] vhci_hcd: disconnect device [ 768.853626][ T3652] vhci_hcd: vhci_device speed not set [ 770.049109][T12116] siw: device registration error -23 [ 771.209819][T12128] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 771.253793][T12128] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2338'. [ 772.357822][T12138] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2340'. [ 772.894982][T12153] tap0: tun_chr_ioctl cmd 1074025681 [ 772.933946][T12150] siw: device registration error -23 [ 773.740726][T12166] device syzkaller0 entered promiscuous mode [ 775.016691][T12180] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 775.023275][T12180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 775.078155][T12180] vhci_hcd vhci_hcd.0: Device attached [ 775.323659][ T4393] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 775.407208][T12193] siw: device registration error -23 [ 775.470303][T12181] vhci_hcd: connection reset by peer [ 775.476415][ T9] vhci_hcd: stop threads [ 775.480839][ T9] vhci_hcd: release socket [ 775.497097][ T9] vhci_hcd: disconnect device [ 778.393091][T12215] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2367'. [ 780.453609][ T4393] vhci_hcd: vhci_device speed not set [ 782.163456][T12241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 782.170044][T12241] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 782.190831][T12245] vhci_hcd: connection closed [ 782.229195][T12241] vhci_hcd vhci_hcd.0: Device attached [ 782.244527][ T4580] vhci_hcd: stop threads [ 782.248841][ T4580] vhci_hcd: release socket [ 782.253280][ T4580] vhci_hcd: disconnect device [ 783.425986][T12263] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2384'. [ 788.250315][T12295] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 788.256932][T12295] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 788.333423][T12295] vhci_hcd vhci_hcd.0: Device attached [ 788.553486][ T7] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 790.609443][T12302] lo speed is unknown, defaulting to 1000 [ 790.632907][T12296] vhci_hcd: connection reset by peer [ 790.638629][ T4577] vhci_hcd: stop threads [ 790.642934][ T4577] vhci_hcd: release socket [ 790.683727][ T4577] vhci_hcd: disconnect device [ 791.350902][T10847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.365885][T10847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 791.384023][T10847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 791.394422][T10847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 791.402199][T10847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 791.409908][T10847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 791.434182][T12324] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2404'. [ 791.476503][T12322] lo speed is unknown, defaulting to 1000 [ 792.225900][T12322] chnl_net:caif_netlink_parms(): no params data found [ 793.503910][T10847] Bluetooth: hci2: command 0x0409 tx timeout [ 793.514789][T12322] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.573609][T12322] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.613104][T12322] device bridge_slave_0 entered promiscuous mode [ 793.653491][ T7] vhci_hcd: vhci_device speed not set [ 793.837431][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.893074][T12322] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.912072][T12322] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.965945][T12322] device bridge_slave_1 entered promiscuous mode [ 794.053616][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.386374][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.448929][T12322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.572236][T12368] siw: device registration error -23 [ 794.667244][T12372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 794.673916][T12372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 794.703074][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.777298][T12322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.836997][T12372] vhci_hcd vhci_hcd.0: Device attached [ 794.994127][T12322] team0: Port device team_slave_0 added [ 795.087347][T12322] team0: Port device team_slave_1 added [ 795.113580][ T4270] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 795.252702][T12373] vhci_hcd: connection reset by peer [ 795.267943][ T6852] vhci_hcd: stop threads [ 795.275296][ T6852] vhci_hcd: release socket [ 795.280798][ T6852] vhci_hcd: disconnect device [ 795.354632][T12322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.377805][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.484491][T12322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.529773][T12322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.568578][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.595597][T10847] Bluetooth: hci2: command 0x041b tx timeout [ 796.416193][T12322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.885267][ T9] tipc: Left network mode [ 796.935881][T12322] device hsr_slave_0 entered promiscuous mode [ 797.005383][T12406] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2428'. [ 797.018209][T12322] device hsr_slave_1 entered promiscuous mode [ 797.050949][T12409] siw: device registration error -23 [ 797.063185][T12322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.082761][T12322] Cannot create hsr debugfs directory [ 797.653526][T10847] Bluetooth: hci2: command 0x040f tx timeout [ 798.933258][T12322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 799.185067][T12322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 799.206918][T12322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 799.290268][T12322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 799.733541][T10847] Bluetooth: hci2: command 0x0419 tx timeout [ 800.331013][ T4270] vhci_hcd: vhci_device speed not set [ 800.814504][T12471] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 800.821103][T12471] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.831965][T12471] vhci_hcd vhci_hcd.0: Device attached [ 801.094590][T11893] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 801.565344][T12472] vhci_hcd: connection reset by peer [ 801.577676][ T11] vhci_hcd: stop threads [ 801.598499][ T11] vhci_hcd: release socket [ 801.644150][ T11] vhci_hcd: disconnect device [ 806.158481][ T9] device hsr_slave_0 left promiscuous mode [ 806.193587][ T9] device hsr_slave_1 left promiscuous mode [ 806.223522][T11893] vhci_hcd: vhci_device speed not set [ 806.274185][ T9] device veth1_macvtap left promiscuous mode [ 806.280290][ T9] device veth0_macvtap left promiscuous mode [ 806.313538][ T9] device veth1_vlan left promiscuous mode [ 806.319427][ T9] device veth0_vlan left promiscuous mode [ 806.642827][T12517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 806.649418][T12517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 806.789939][T12517] vhci_hcd vhci_hcd.0: Device attached [ 807.173494][ T4393] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 807.932165][T12518] vhci_hcd: connection reset by peer [ 807.938163][ T46] vhci_hcd: stop threads [ 807.942563][ T46] vhci_hcd: release socket [ 807.975316][ T46] vhci_hcd: disconnect device [ 808.702662][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.709124][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.165156][T12593] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 811.171746][T12593] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 811.182913][T12593] vhci_hcd vhci_hcd.0: Device attached [ 811.443864][ T4600] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 812.219098][T12594] vhci_hcd: connection closed [ 812.228791][ T41] vhci_hcd: stop threads [ 812.263822][ T41] vhci_hcd: release socket [ 812.300307][ T41] vhci_hcd: disconnect device [ 812.514017][ T9] bond0 (unregistering): Released all slaves [ 812.858282][ T4393] vhci_hcd: vhci_device speed not set [ 813.178295][T12322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.305058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 813.313038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 813.370355][T12322] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.411960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 813.464792][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 813.514076][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.521239][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.541127][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 813.593800][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 813.644119][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 813.671738][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.678950][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.744446][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.775477][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.812393][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.841498][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 813.859262][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.878344][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 813.899102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.917937][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.958746][T12322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.025442][T12322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 814.074813][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 814.097183][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 814.155285][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 814.211002][T12649] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 814.217579][T12649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 814.289100][T12649] vhci_hcd vhci_hcd.0: Device attached [ 814.939471][T12650] vhci_hcd: connection reset by peer [ 814.945196][ T4396] vhci_hcd: stop threads [ 814.949496][ T4396] vhci_hcd: release socket [ 814.973438][ T4396] vhci_hcd: disconnect device [ 815.577114][T12322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.603793][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 815.623703][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 815.688407][T12683] lo speed is unknown, defaulting to 1000 [ 817.333693][ T4600] vhci_hcd: vhci_device speed not set [ 817.678887][T12713] lo speed is unknown, defaulting to 1000 [ 817.883729][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 817.915934][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 818.029751][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 818.039579][T12732] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 818.046419][T12732] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 818.049386][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 818.096341][T12322] device veth0_vlan entered promiscuous mode [ 818.125152][T12732] vhci_hcd vhci_hcd.0: Device attached [ 818.130829][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 818.160885][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 818.202544][T12322] device veth1_vlan entered promiscuous mode [ 818.290524][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 818.302888][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 818.334079][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 818.353411][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 818.364503][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 818.393727][ T4316] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 819.236795][T12733] vhci_hcd: connection reset by peer [ 819.256226][ T5672] vhci_hcd: stop threads [ 819.260553][ T5672] vhci_hcd: release socket [ 819.287527][ T5672] vhci_hcd: disconnect device [ 820.830768][T12739] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2522'. [ 820.846557][T12322] device veth0_macvtap entered promiscuous mode [ 820.895243][T12322] device veth1_macvtap entered promiscuous mode [ 821.001067][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.058120][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.099242][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.158102][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.200634][T12322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.259743][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 821.280572][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 821.340873][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.377324][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.428334][T12322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 821.449316][T12322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.476643][T12322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.620428][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 821.634619][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 821.671347][T12322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.685099][T12322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.710366][T12322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.747939][T12322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.575023][ T4316] vhci_hcd: vhci_device speed not set [ 823.590700][ T7] usb 2-1: device descriptor read/64, error -110 [ 823.886013][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 825.916645][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.944801][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.012572][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 826.071117][T12788] netlink: 2412 bytes leftover after parsing attributes in process `syz.3.2534'. [ 826.290192][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.354403][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.664811][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 827.314540][T12807] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2540'. [ 827.583183][T12814] siw: device registration error -23 [ 827.617833][T12814] device team0 entered promiscuous mode [ 827.639601][T12814] device team_slave_0 entered promiscuous mode [ 827.673985][T12814] device team_slave_1 entered promiscuous mode [ 828.552626][T12826] comedi comedi0: Minor 3 could not be opened [ 828.899981][T12850] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2554'. [ 829.362756][T12860] siw: device registration error -23 [ 829.497186][T12859] siw: device registration error -23 [ 830.212603][T12886] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2567'. [ 830.487167][T12894] tap0: tun_chr_ioctl cmd 2147767521 [ 832.212518][T12916] siw: device registration error -23 [ 834.819050][T12974] device syzkaller0 left promiscuous mode [ 834.838690][T12974] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 835.813625][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 835.825424][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 835.833844][ C0] CPU: 0 PID: 12988 Comm: syz.6.2600 Not tainted syzkaller #0 [ 835.841310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.851535][ C0] RIP: 0010:fq_codel_enqueue+0xd2d/0x1590 [ 835.857380][ C0] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 b8 c9 81 f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 95 c9 81 f9 48 ba 00 00 00 00 00 fc [ 835.877012][ C0] RSP: 0018:ffffc90000007500 EFLAGS: 00010246 [ 835.883106][ C0] RAX: 0000000000000000 RBX: 1ffff92000000efc RCX: 1ffff1100eea245a [ 835.891111][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 835.899093][ C0] RBP: ffffc90000007650 R08: dffffc0000000000 R09: fffffbfff215c47a [ 835.907097][ C0] R10: fffffbfff215c47a R11: 1ffffffff215c479 R12: 0000000000000000 [ 835.915078][ C0] R13: ffff888047350000 R14: 0000000000000000 R15: 0000000000000000 [ 835.923057][ C0] FS: 00007f0ae680c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 835.932031][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.938619][ C0] CR2: 0000200000002000 CR3: 0000000034c01000 CR4: 00000000003506f0 [ 835.946857][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.954850][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.963025][ C0] Call Trace: [ 835.966305][ C0] [ 835.969167][ C0] ? INET_ECN_set_ce+0x960/0x960 [ 835.974231][ C0] cbs_enqueue_soft+0x1a8/0x270 [ 835.979091][ C0] dev_qdisc_enqueue+0x4c/0x2b0 [ 835.983958][ C0] __dev_queue_xmit+0xf8e/0x3760 [ 835.988914][ C0] ? __dev_queue_xmit+0x26f/0x3760 [ 835.994038][ C0] ? tipc_net+0x45/0x270 [ 835.998325][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 836.003642][ C0] ? tipc_net+0x205/0x270 [ 836.008018][ C0] ? tipc_crypto_xmit+0x1df/0x2440 [ 836.013153][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 836.018210][ C0] ? eth_header+0x117/0x200 [ 836.022783][ C0] ? llc_sysctl_exit+0x60/0x60 [ 836.027736][ C0] tipc_l2_send_msg+0x30f/0x3d0 [ 836.032601][ C0] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 836.037818][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 836.043117][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 836.048445][ C0] tipc_disc_timeout+0x568/0x6b0 [ 836.053412][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 836.058914][ C0] call_timer_fn+0x1a0/0x670 [ 836.063622][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 836.068879][ C0] ? call_timer_fn+0xc1/0x670 [ 836.073569][ C0] ? __run_timers+0x7c0/0x7c0 [ 836.078275][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 836.083521][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 836.088735][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 836.093947][ C0] __run_timers+0x525/0x7c0 [ 836.098461][ C0] ? detach_timer+0x350/0x350 [ 836.103145][ C0] ? lock_chain_count+0x20/0x20 [ 836.108015][ C0] run_timer_softirq+0x63/0xf0 [ 836.112808][ C0] handle_softirqs+0x2a1/0x920 [ 836.117586][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 836.122458][ C0] ? do_softirq+0x200/0x200 [ 836.126985][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 836.132207][ C0] __irq_exit_rcu+0x12f/0x220 [ 836.136905][ C0] ? irq_exit_rcu+0x20/0x20 [ 836.141423][ C0] irq_exit_rcu+0x5/0x20 [ 836.145694][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 836.151361][ C0] [ 836.154302][ C0] [ 836.157235][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.163223][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 836.169037][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 c0 00 c9 08 e8 8b b1 2e 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 836.188668][ C0] RSP: 0018:ffffc900038a76d8 EFLAGS: 00000286 [ 836.194741][ C0] RAX: 4c3d16221c8bfa00 RBX: 0000000000000000 RCX: 4c3d16221c8bfa00 [ 836.202716][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adefca0 [ 836.210690][ C0] RBP: ffffc900038a7730 R08: dffffc0000000000 R09: ffffed10171c7559 [ 836.218677][ C0] R10: ffffed10171c7559 R11: 1ffff110171c7558 R12: ffff888055b45940 [ 836.226654][ C0] R13: dffffc0000000000 R14: ffff88801e6c8000 R15: ffff8880b8e3b590 [ 836.234656][ C0] ? finish_task_switch+0x265/0x8f0 [ 836.239889][ C0] __schedule+0x10f4/0x40b0 [ 836.244405][ C0] ? __sched_text_start+0x8/0x8 [ 836.249350][ C0] schedule+0xb9/0x180 [ 836.253424][ C0] schedule_timeout+0x15c/0x280 [ 836.258292][ C0] ? console_conditional_schedule+0x40/0x40 [ 836.264195][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 836.270182][ C0] ? update_process_times+0x1b0/0x1b0 [ 836.275571][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 836.280780][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 836.285984][ C0] ? snd_rawmidi_write+0x346/0xb00 [ 836.291104][ C0] snd_rawmidi_write+0x391/0xb00 [ 836.296055][ C0] ? aa_file_perm+0x117/0xec0 [ 836.300757][ C0] ? snd_rawmidi_read+0x6b0/0x6b0 [ 836.305796][ C0] ? do_task_dead+0xd0/0xd0 [ 836.310413][ C0] ? __might_fault+0xa6/0x120 [ 836.315103][ C0] ? end_current_label_crit_section+0x14b/0x170 [ 836.321372][ C0] ? common_file_perm+0x171/0x1c0 [ 836.326415][ C0] ? fsnotify_perm+0x5a/0x550 [ 836.331096][ C0] ? security_file_permission+0x75/0xa0 [ 836.336673][ C0] do_iter_write+0x497/0xaf0 [ 836.341286][ C0] ? vfs_iter_write+0xa0/0xa0 [ 836.345974][ C0] ? __import_iovec+0x315/0x500 [ 836.350852][ C0] ? import_iovec+0x6f/0xa0 [ 836.355571][ C0] do_writev+0x24e/0x410 [ 836.359882][ C0] ? do_readv+0x3e0/0x3e0 [ 836.364237][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 836.370317][ C0] ? lock_chain_count+0x20/0x20 [ 836.375197][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 836.380409][ C0] do_syscall_64+0x4c/0xa0 [ 836.384828][ C0] ? clear_bhb_loop+0x60/0xb0 [ 836.389506][ C0] ? clear_bhb_loop+0x60/0xb0 [ 836.394203][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.400111][ C0] RIP: 0033:0x7f0ae598ec29 [ 836.404548][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.424187][ C0] RSP: 002b:00007f0ae680c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 836.432615][ C0] RAX: ffffffffffffffda RBX: 00007f0ae5bd5fa0 RCX: 00007f0ae598ec29 [ 836.440594][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 836.448571][ C0] RBP: 00007f0ae5a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 836.456576][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.464548][ C0] R13: 00007f0ae5bd6038 R14: 00007f0ae5bd5fa0 R15: 00007ffd8eb90cd8 [ 836.472530][ C0] [ 836.475556][ C0] Modules linked in: [ 836.479557][ C0] ---[ end trace 0000000000000000 ]--- [ 836.485213][ C0] RIP: 0010:fq_codel_enqueue+0xd2d/0x1590 [ 836.490962][ C0] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 b8 c9 81 f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 95 c9 81 f9 48 ba 00 00 00 00 00 fc [ 836.510593][ C0] RSP: 0018:ffffc90000007500 EFLAGS: 00010246 [ 836.516681][ C0] RAX: 0000000000000000 RBX: 1ffff92000000efc RCX: 1ffff1100eea245a [ 836.524673][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 836.532656][ C0] RBP: ffffc90000007650 R08: dffffc0000000000 R09: fffffbfff215c47a [ 836.540678][ C0] R10: fffffbfff215c47a R11: 1ffffffff215c479 R12: 0000000000000000 [ 836.548700][ C0] R13: ffff888047350000 R14: 0000000000000000 R15: 0000000000000000 [ 836.556692][ C0] FS: 00007f0ae680c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 836.565639][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.572312][ C0] CR2: 0000200000002000 CR3: 0000000034c01000 CR4: 00000000003506f0 [ 836.580377][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 836.588369][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 836.596400][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 836.603886][ C0] Kernel Offset: disabled [ 836.608217][ C0] Rebooting in 86400 seconds..