last executing test programs: 4m53.206625696s ago: executing program 3 (id=1427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, r0, 0x3, 0x80}, 0x50) 4m51.722975202s ago: executing program 3 (id=1432): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r3 = syz_clone(0xb220400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2000000) 4m48.892040335s ago: executing program 3 (id=1435): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x14) setrlimit(0xb, &(0x7f00000001c0)={0xfffffffffffffff8, 0x17168abc}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x0) 4m47.680561215s ago: executing program 3 (id=1439): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="f5201a6b6542be6cbad26e239346ffe3dbc7125e4eb0daba2e9ba73337e45b1a2c2828afbe1d99c856f2d7c9b91364a83e3c477d5e9569cf8787de2fd830003be5c3bbb4a246c4e13764c6e255ef511c263c70adb80380cc2b3247fb61ebddd2b945820fc646375953f1322be813b875bf64256ac7a8debe881f8352dc9fd70b9473bf07932110a5d1a94144b2ab0b4cd92458041eef085b29b5c115df0d7db2bea67006c66b64015fc980343e5ff451373afc63f2ae21d63cddeb3b0c53bbb4e0e31663f5b1b53de22517869df6114ac9047ee98a692b4f0e3e7cfc4e42368f217cc705f2bc5d10454ab30eda651c6ee29f0cc5a6ca7b384949955785844742121b5734a8cf3f3fe1d3e5c2085da26a028ba6c84d5cbce6afbe13cbb179d4c251e1d2d68e8c7d9c34eee698ceeb6e40aed55c62c45d8c7fcb2cfe95ce261238ca5c4458647ed7a001788e991e3d2ecfc77bedec164efda9e4a5d5f03043628fd8b5f906371c52e7de2e760b820dce5c3629610a48a036cd54f23ec3ef274f8da724f45c482505864c87359d4411cad79d7434c9a9d79323410b671880a344b933a47d735abd0e63308cf7f6e15790a50ccbcce072526952c763775066125af0fcde57ba3c514301aef17391c76adfc2419829a88e0d91b947d278cd03d94ce98ec639a6163eaa9755b1813685080ce588251fbd4240a7f65cdc1074503b0fe49b24996e52c6899ac90014d9a58566e841bcac357ed59f7e7274b6e94f7a526a5b420c5d6ababab7e7f8ba6ef6f3455a5aed80f4aaadb58fb38f725d524b4fd63238dc7936d62e81ef46bb7346d7f55c4fdbe7606b1053f6faf6d80612311823efe1e6522fd5bbb77c52c868362f263e56ea1447b612d681828561adefdd28fb855fd81f27e2698cc02bbcf7d653cf8dc9eea252f2b1f48c0d2ab70ece454daf9b5829d7106eb8ca8807eebd07d1bf6af6a4523577db893995778759e1be294aea8edb9226a9acbd44f98f60641f87195521491e621b10cc2032434f319e76743601a0bcc99fb3636389172a790e25260de7cb58961f9ad44d16c7604402bbca8cf82be528a64107c0dd114fd3458c0f1e97888c1c739dc678b43b202c603946cb5720a1e7331282a48afb12b461c41b6fd92b97c6960ac9f664f509b02c8267d722f372b007befada669d4cc36fb931763ffd8744b10e78cb849d40f88d190778a70f902faa4f34cae0b9e163b59b1bae96a933afecbc6a768f1d7ae20bf2771f28c1a3d333ae0b6f691d2f985e1ed6d0e1c29d7db36234b9bec18a1ee98b9ae90e4706d1c952f6059cc4d64bfc14152a88443f260d179c705df71e006a60981fefaa8a51c9c368680b830967b01b60734b9924335d7700b083bd7e87b3ad2f3d497e914368a15c5456d08861fb7513e96acb49935dc3f46fcaa297cdbdc759cb8a5a2515a482ca60440da8b7d5a8c79659d99e3892f9086b372d78622d3689267652c4dd60754cb8eb45028b0c237adff5ffaeaf78ed5a541c57feeb014a53e2a98042d5712d5f7a779b7a12bc120b8cf6df35b258fe1ad7ebdbee88d25355560fad504dce4bd878df5e43c55e765ac324dd8d65ce29c2a93f9e085bb51ff75dbbf314ed6aa3a36330fd146d28654c659f1c6c5089c3619be1c7707be835500fb15bf873ab35517b743207621346db75d16fb21624c04ceddda2d607642004f611db7414e1c593ef38c62e4d27a8b7833436609c284a46edc9b973e790aba0bf4c6bc0069ce9372c6c7b93d15740771ddf9c704338f4af870c649ecdaeab106b1242dbb74c284bfb5d87aa688d27befe1dc0d1019fde1842e89eee67e11f925672ebff47e4503e02fa989297e9461d540000b5e0ed2d957efc3b77a10181597c7fb2c94e62db50e46c46d10c1127573bae01166170467b7641d7e07dcd879f04b8dc08dcf460bef8e83aae33151a72eddf9ccac4eb95c48cb4008ba3fea542b2e3c6c4c07850cd4ca551536a20d18ed18852baaaf7339908583aae41f08f3c6f5811cd730e849dc8382e8bdf3519ab900d38a0a9822400d619b52a957b1bbe8384619e5d65588a2ca6bf068ca27fce9aa0448a60d04b3b230db3a939409ec7df45d70a944b34baaf0bf951d205667c8281e9e87468d1a2f6edf79a7d5df12a8564e56d3a952efa4c4be2b09be2c3d699b05268e8cfe998a9f37b8714c92647ada8a8129bc4084624c6f1059f834193deef961f5dbfe500c1bf781f45441984d52800d81d814a82ec4f859c7217146ac447c8462612574a1a8603148ed46bf3e195d417bbe43aa6bf83ea8fb525941ef8dd56149bd6fdcbf626609ddb699e40e83fa4792b39384eb0d1b78c97c6798537b192753caed3a5eaa4a33d54b473b43851cb282cd857ae11a4d34c6b53fc1c334f8ec42672295b88a326b65d338a70bb3d5d866ff55a9ce0345c7a890cd6dee36012c76d862802c9cbaf1abbab99dc898eb432f50474ae6c202121d19f8d0467fcb1279457accf9b777c75390756762dde795d94aaba4c1729f559adc33966fbf517fc91fae21bd8ef22e914bbe6bae774246749ad63d8d16f21c9aebc80a97be408443ae60af610dd3ad9964b2401e049b09dbb46f6126d3d534a7786bb3663719943111231d18e51ed534b1e28807c062280924e5d53a8a1316ca2b5936911a267d5b799fd7d8e5e725271d5b8eb90e3dd9ef9eb1400c68eb8f88622f548af7df4846758cfb74aeb48588d1820f504e97ae1d818feb7113175b04e7c0bae6239672c987253cdf0e9845119f3f200d40f586ab986312144c3525acb78a5784f5707217105bae651e0c000792f4e88c1a924d33fbe5474a71b1e193a8d3a6a65dc485f2a299e7d07a6cf621260dcfc5d79c9243618f57507ca025baa53b3e684667f33dfb8ab9065cc548ad5c881bceb5d937462ea850fc197f5ae8c9489815b2cff853895e987e684195a094d8460ee52ef9d8f6fa0ba01092f0cdffcc7a682ca3125058ce9ed0064d7d0a868b0419b49ded3d93f0c7e1d700288350ff4c130cf6e0b507ce6064623294536c8fc4011b9b40299bfe02144806411d5b36997db26033a5ddeecd6bf3faefd3ca0a6cb70b0561106b2dabb06cf88bb6fa283e43dcd2fa1f33063183e15450385ba6fed4436502211d3181351db793a76ae11ebde2b23f340b7522748a4602ec469b88eb7f3d1325baa536ab8096c58c6f2b4863a541f618112643e194a5873cdae4172bb3005743782d8af22dbf23ab60e7d0f4ceb3ef0c46e23e1ecee1839558bc5c146dd97aba7651dfd2401fb8aec4eda71b1b15a2570130f0f5ff489ad4355a708a6eafa9752eb5c9f7a83f43c3e3b317e7e68133573f585fc27c5cfc0d90016f5be8594e1cfac36b24570cebb5be46d3f5917441ccadc355536b8b9b455b87667edd802b77178251afdefe9a4b5f0ff7e59fa5cf9b449e18bc4bf8154f15913128a2584f7d60a3c09f467233783690df422d3d9982200eb604ec2ef50830bba6f82e8b91823808fac0b07bc0e51a671c32dea0f2f9aa2cfbbc91cdf54b719b6009ce750bab1680cac77398b2a619d550161fa70e7e8b86fb535f8797fca75708efba7f0d95da4ac235d9de68a50c998a72c0c2da90f511ea456f776c881b8416b894cd835ad13c62b035ef4d220a66c86c1c00de534690e42d064bf4fff946af98aec3f9490d6f0586e891d272a4bfb776ab84bd693af6526c4b09beab2460634d929bcc61cf75b041f067e7b503ecd6a80934e169ebb0ac926a85b53cb1d7b63eee6abcd9e250834da6e4da23b3b3d90c2f726861760ca14b78d5e895eb7fa2e8b39f724a0371412b1c94c6a42f1beeae2328e353971531bddcda730b6a0d90f7c58e3ce5953cf5a6c9e3fd657c92fe4b5b8b0b659353944afa5c69c309527d6d4039e78c675c8d2f527fbcb2b765864fed987f785221862bd7deb66e6676ddebdd19cf4cb26869f562928dc98088bb69281615fc6a2dafc466e70ff9ea1a411e1a3ba3f94ed7d429796afc9f0c95da19a4db691c36407985e5f08473dd8afd9de88b2c26b6ebd2ea35177238e18dfc36d579a80074c06f5cca60cf6d64d27eeb121c6c8e5e09aa3165c101068cb748694695e803540d947f33740d30616001448173ef57bbcb82fcb213348a2a58e2d14480b1ce1ad346729631b91f7e343e37abd8e787274ff4598acc99cc58f3578979e6e6a1926333bd8818a256b58e67c6f77145ee26f24998cab89021423e03326c175adaa8ea905122553948ece311cbcb770222e7f4f373398497c8c301480d031fc53c2a7018d91777cec253e89e28a82d15e01c12c0ccae1b56ecff35b90b19769bff4b786d4624679abe852780e9e4b9985e0564ee604027dc2a60f65d2fcf1d354e163a8465f77eb67e2a6c9fa89ea0768f9cf117fd1ea8969e592da11d34f6f9b7adb24f3261dd14199fea6da6b5d31f825b3706492b3305cbf6ef553fadfcad51a0484f09a8d2491c8a937fdd36d9e0b94fb6bdca6e80a6079739cc1d455fd735e89fe89938a7132dc0c9f181953dd9cf2d106a3f1478b46ddf35aae9bc6932227d79ac4f534967be2cbc30fa254658b61752b534257fc10bd8db219ec394b41e7fe541f9086ce19d28e13d2b3c384745fc88ed0cb5ef414e23e8782f99307c49121a733875e9fb9c8559d8ad6bab256dde2bfdee4286c1419b80acf55dd09da71116c0fa902d8e89465c313c311f272a11cd17417372dc74e01f3ba1a9afd8bcb9fad57cde63ad59a6999caaa359e6e5b4216dd3b0bc8d310e28c8a1232cefcbd5070d0537097e370433bc1017b7b1c4efa694a25b4385bccbdf79affb0b6d203b3cefe637fd6f7b51f5ec297471c874a57145b254bd14b89fe62709c94ca3cae304739294c7b4a871768e11cb7a2db0aaeff4abbd00c70b4d4e5e8f8c6d34afe3d619404e20ccf628f7902c17ab1200644fe465751587800d59acb3abd1f8ad9cbd8bfa64c94c44fb3086fd21c046d7430a1faadbd9b1625ee70c1071bede890f1c07113aed9b1a35ab0fb823e2cb38d2ee6376800f63d28326ec3be129333e1024d17c46198e329779a79f4ee69b56374268fefdd29995e411052bcc92318c636aa9fa634f3e537712f720a52cd95d5472cdd6b4eb66bd1ed2c41cb37c615eb486855671d964ba46ee44eb61ffcb0b22b20632ce3222e4c3037f348d5dec196f9e2bcc2335284f5529e4de9e6b4b84fc559de63357bc8ca0a00c16bdea79372b13abb251fd4bc52f1f732811b65b4c51715da133b20caba229244060fdec0ad4c47fdf1963b6aa1acf998585c59867b5afcd08958dceb9937a97e87b2153f45970ca77e5524c5160c69963717630795e3a4768e2521617bc211926e5cb08edea70cae99c6d7eff4c1e041c7ab0d3473d6ceb3cbc24a9f45c5818896463360490911b1fb77a24aa3b394e3ee1155ea2fbc6686db2c715670dc9187b33f3051b4b894b616bdf7fb287113c315413d83e0540676fe9a48d523bef3280611165fb77c7bb33c0a087fc06e7702fc7d8ea4f7aa264c7ed332af03ae3e392bc0f96ec11e3bca6604ccb7941043fb043b4880de676efaf3f0fba185e90db8e8e6718058fd1d26c49d0a163264d4aaf7094d02d6898f75c6edf2e49edf7b0a645018220535e8694baa1e910df6e493c0812c2cbb16966cb22af208279947f9490f2f5d3a49596050604f920af8fa41c5a339609659f331f24fa0aec3787d052a02541137dd1ccdc30970a879e4a42e491137bb3cddf2c87ea6368bc4d9aad9089af50b71d56bd296d891ac2fbec84303486739a44850680353efa2203d7fcfa00d9cd81433adcad3e6aac009784b63a3b7aca58155b24274b2d41de998321bdf0229ce74a0c61a24d74ceb30d4ba766632c4a48d9db4e3b3334830b12f3136158fb16fa745c2ebad16b65b279d28332894755de3e7ae2aa88f9e2af8a46200c427540eb68907152ee7d53212b55c170ab67c47c884db89757b09dc035ea59fe2be1f384b3edef6925c399753832d32296100ca4e2699154d6ed86bc145e92d699e43c2269ed359a004aee75ac5e730dffec87f239328bc95cc281a9c0bba661f6d36ac11d1151851c70cf39fbbabff2190b619294db73008e3d32acb0b29aa3d28d1e50784dbe35eb911d838bd710336612170666ea5f42b72c32be4d83c4ff61987acd1b1f0cebe281806af8ad4b6e7041c31bcb8a93cf0f44826821b0bb9c053468b4d8d034c084ba1c8dfcad9fac6ec379da5425492dc6f770000000050bd9a930ead9e4faf5b557eebe4461320476a7ae12b0dcc9d171f6d2737b824db7259e62915779dc5e8a08bc69c0c68784202aa3462bdff06af76bdf9f106dd6228211534c4433717947dfaca4b7b61a21d706217e3718b5ccac40c3c4692bd59f222d0c2e98af1ff1919256d7b0540ed69b11f212a9598c7499ba634d1677ecf17517e207d40baed5aa0e25b7e70b6b16f6d6f0c36a146db0644ababd31bc50f5039b3bc4f12b603da2675e121b09fe92c69548dfb9df18d0e50c1387280b7bb1366bf5bbabfcef5557a05ce24df1a02f22f791e06c5e3e21e5fd6db7f2c90ffb83b154b0fd9866c46609dc10b274954caf80e83693f5581f23fd765a18aa4e294bbf7a8721015ea6a6e1ba64f79f6609924d43757fd0752024af79e296415b42de3428f14d9d89f84c2e076a0821cc8921fff677ec7b91178bcbd755ece28477a6bd01fd429d824ddfb62edcdab7c4495edc5a3d27826ea4bddaeacfa7cb17632cee0095ca55d3973812033d96ec5e5ed6880b3a998b4998fb7441e11dd060515bdbfd5aa32aac6ae1fceb8e92d7e8985949946a458ca2f69637de6b92410986f8fa5ba4b1598d8383fdbff2e004dee71500302e3e9270371b39237260bde0888702c7b2bcff69192bd381cfe59b197b9dbe5e2eee27b64c17e95a1dade453a6f29dc8bef1bdd34a92a5275972a2cb18f6f553f99c6098f50198b68cd35d2877d9cdd15074422b43b03170f23138dda44b62b5e161705405d2e9a007f8cc9ec7920d1a6e947ccc57b1a51a728fe1afcb84115fe48be15c894cce96391ab3cdc1bd9aa4cf58213c15d1a849c3f38c8ee34b208766129bbb493558c139f2bfc39df29fc73422127823fc9c993f20d9df9e0acaf0b1729437458e0a857ebfe4a373fd491952a475e9c391b7ee02b79554807c0f12293aa385a3c6b18bfbfc690a7aa9bc85d8adb705eac642ec8611ac62d09d2a6892cd671629d457c2191eb5940114113ed8cd4e8411d96200d3d66f947baa7915610c396402d38f109837d29c8e937fb6223a9d0d605a3d91312908fb5a7df36122c35f7e47855d526915c3a7cea432ca4524fcae3b5c6fbad196c1efef0d129d9b3f9d23104fc3c8a90dbcea0400311e51de50c5abb62fcbedf998ebc1cf23fd76bcc2aea2451f6d0d3b8fdd337ce8d24d7ce2a5b29318df58adb0006d4295c138b4b03060134802626e31a5da92b5a7a8677132523affbdc8d958b955eb4615370497429cd3767f2f708c2cadc233bc3e5efc8c837385749da08c6dd573e3b105ce459d659f790dcaf53c1d0b4d8e0c64b6bce15559e59e66b3b0b2695703e9bd5b1c5bb3c5b1028441391f8fbeadc032e890fe5e3be78569056d147a891f4bc85406e78f962b532eb436b0e047a7d3c88bb89455ffbf1da360207af5d827e9fbbedd8393a828a92382329ff444d9a8128c40e302453550426de4babcdee45108e79533b9747fd21b8f775a76e1d4d54a8a98a65ee3c183be34172877c26e600c89949ced85004d69c24d4fee6f87d2ff24900d41577c78dfbff698d438c0e26ebe15d7b75b49a5b2a5c627da3b13f6458aeff3f0a1944a339b4be5e13d58a71928bb77053beaf7b68568205b62f5a4a9b3c0fef441ede90f012047b0cf2228481fab85d94219ce9f417e4e2b6018b319270a6b6f0de93d0147842f582bd4e41f00720626be2b2f9116875ea4f92e380bcfc33058505ee0336e10c71a5abf6f32c72fe68c68c166454db8e101b3a271f04e4dda8947743e0ac408c73cff69c10e7c015c6b078bab0a1c7aab14a26df087b2b4c859e684aebadff5033d1ebd6c6589a27ac75a075e6ef801f5dece0dbd1e477bb70d2b8553a88b13e304e00735e183feab89edf469cb90c0a5bbf778809a9996f4e72b16417672cd97bdd1c0baa64ea2d782aea9d58ea357b54d06f316076b5c413417061b3c7485b534fcc8bf25d2adf043b47a3d47f0755fe6225bba7569fe672d3507c8e15f7139ef7f606c616c52733413befb248eee53c4a9a16f952ac56e18e221626c4f51eb90c1314167c9677a7eb7004b9b42fd6ec21dd38d5b9032c441166be3f8e9dfed39fb0e654ca3126003decf8e50bf8ace994e16fdbe3f53a36a11ed6f06d1bb8e54f574a83035eba379f2453f2346d11414cafbde87cb5d66b650a5e25ebaced402188c1b4b941e788e1af908fff3ef84c1dadef0550687f0b6aeef6063dc1c8c8efe09d611253efb4d288ea407ef3c043aacc3dfc19a18449b38fb97d9fc0bb67de3e1744f782d3a9d1fc449c3a902b1ec8789e336f731a51cc7fefc43736e04942167fbfdac9f15c5b3f921aaa3df0c9709c21339ce890cd4054828615f18fd12548258440a06dbec3d72719b3e9f5f9967525f90f16993cab09c9eab2b27b29c959c002dbb028cc96297d40822772c16b4b786cc57cd581c02f143d6e728eeac1ab4eca6170748002c0e2269611a2b402f9fa8190d9216b1e1b7de8f81074b8dbb665f0d69c52cf573d07ca0752fd6fe7da88dcf4a915ab1533f5686b766393fe9bf1aeef9d17414d1803708e61973dd205097eb1ed466c8dcfb2c7710caf9df713a11c774fd0469880534ae2ccd1e40216ffa145f0fc832b166896810a678f3a47dd24bc2e6835c16e405a444971068dbd47926f430871121be8f19c8ac4fd0a9e3ff7cd961f90f24265de455694cc291de76437953ac314b1791acbe96d3fcae4fa397287a02eac86f13c931f4d4f49ad52cf1db0efdf7027ee8e468d64d316a2208ae33d8fc3274861b41f2e064c99fbba37b7a0c46a3df8dc4589de7ac28df63ed697a48011c863049345c371f10f7d53a56947e348d07e4ff71eaaaf9aaa09bf1147b80d62a60dcec6d7dd4cbf52f2b0b89d2c7de1f16d63ccc0260b0982fcf105736b50001c19eda998426284713670aab21ce128a80b57920d8c3436edb859d4afd7ed835985b5bec01df5447e66ee8511b28671646e71c0669ab2203c4c9a020000279ba87f089d04924cb33ff82f59da9399ce3f20932c073289938e4e7101d357cce920a2aae72f94d6e1aaf9a3905f4da18a7ee849a39f0d1e83adc67ffab826490d4bfff1f80e8c2c180b08e013daf6d054be660390fc4f872b8d60f14951f05ac0dcb4c4281f71ac2d4cb4d68ffdfe8f5c43160d99ea0077486219bb9400a8fc1faacf12878379a7ea5eae2adbbe2871c1664bea1985d594963935019446d605a61ff79802e114a34610d002cf27e0f4b96c6ff880785307161813f48b68c6f9130a6faee6f332e77755fb68b68248ec113030575b1c262c2430c000d11b269ce4e98a32eea3af403630e83aeaaed1420c9fd66eadcf34d6d1fbe457c5216481ddaf6b397912630999fbc5298eab15ab3cce9de7741367264a4e30a61ff7f1d5e7e64290218d9f6f5c9898cd23ee1ac35ab8d3691bf3df31cef54c161bdf3093390ad2322b6f71f22199ac68c5eab4aa7523b4957202751b675fe82c9d42432c92c2fec148da6e5514e9d5f2618d5a616cdbc4a560b3e36eb6cb8baca3251d8e819ea8f552f07ecca0664e7ef22a3a6c11d023eade70f1b872cf58e89c625f561e4858877e39d324dd448b041e4435b676ce0e86de9045e8b9e8305ae60cb7a41c01ce2318af7f9fa011d24aac2b2d31360ce7b437c46df5756d94d1005a0359b57534c49d1e8e173ba183666a19ff6e6c63388250985249eb40f0f981a2bc34e8196e9c468b1bf329c4ac9cf5f19e46734b1238f99f1e6d8c95ecca9cfafc15c756bb4780b675ec9781bfdb583bd91a7df33ed49daec1d65d14f26d7cfadb9e1de06e922939e924b034e4d128cd66a2f7a87c9399c622922e6e33af68c5115053f42c519a054e295b5f8e420630dc116bb2562ac87a6402e4635bd6c6b95943820f86acd5f48ac519b06f1b0bf1c7a70d69e84c95600e017a67e64536197447b810c21cf86a9d09c37aaf6cc39333b414844ce883cec0ffb23e36d5560e9ff6922a9237a6503c72346ebebf57e59c13e7320f670e1826c802b9cc674b55284ddb061e6e38b16c58532497709028ccc4c000604d4a72b3255170a217ac411ea68e64fb3b63653b985abc42bf21629775a05812ef159992320c3cb93805bbebb250e2f9f92b2c8795c388fea24de5e70d45f8ad1764a6e39a1d588191f77fd7bd0408252c784deef806464edc1b4d3de83df34f1b615e10ba20948ca9f28c4f435163e1f5a6fdd0bc8ef397c25b7d704e1ff1dca065022b99778c05ad39f806c3f7ae4278b768eac09b7d317ec5e07db3fc5579a29fb42658ba66c68afb3b8401b2e09c13bc0652309b26cfab2febc3e96a6da6341e6e860468aca74caf06bfc576124594c3f123d5e987319862b0700bd257cff3ea8abff23ebf1a62e575741db2902761578de5c72f4d37bf9186c2391dfff0fcdf2969df27ac0c34d3f07feb0d1887de871e96916add75c15ce2f795749ceadacca94df5808a1629ccd906b3776e7c2a9e94393243de87656432ec21be389731be9821fc035859fffd503f9c8279bd4a36f3be1e3ba0beecaaf6ee44203d8b76c4ca97da38f63fd07ed7812601ab9095a77d52397ecc31819b91d3c28f639bda94c46a5d527abe34bc579338a4db395c57dbeec31a37685ee8121284b63583e026783e47d58deaad78a17e9a946ae7a3db89d8d78d9f37ee5861de7ca92e7335dade99819ecfd63770413b17de97bf403a6d97e163f7eead7d8c182b77cc3d0e0f28f30839445ef751bcf4f21b5803a4e8754fd9a3addb2553ad1d81879addbdc2668e5f2e15926ed805ce7b4ae01be9677c322d59d619cfc806a4946f59010aac481e49d0a0b2ccd0fbd88abf07d4912a081c81633f4a6e0e68eceee686d58a43c45d3bec1046d3bb8d7fc727dda7cfe22af174219bc8e928ca15ff9ce2c707bcea190f8fdeb86a2dc99d7ca81b78efdb0062f1967bb66132164d227e149aa52f39af5e763705373c864323a5885dc6061b5a2ee5501d0b1aa465d93052f29d033a750b1b9cc85fddc0cf168ddc62fb2d1570458d246906fbb689bc8ee3864901eb43f96c19482a7ba7a52fe08b241a32aa9a2774359132b5e1905a08ba37244265070f6d69a428a5834f10d9ba45f476f9e88e856ac223d8cf6ff04894faa2590ecd0a3f6938d661d8aecf6223ae99c414962a86fdc1c2599cee39e9f0153a57ed809bd90023c8d688cc1aa7b5eec5fcd01d07d00100", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0xffffffffffffffff, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x9, 0x10000, 0x8000, 0xffffffff, r2, r3, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m42.319501499s ago: executing program 3 (id=1443): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x20000, 0x40) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 4m40.983894213s ago: executing program 3 (id=1446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x400401, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file0\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x400, 0x12) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x440040d0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 4m25.630486018s ago: executing program 32 (id=1446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x400401, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file0\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x400, 0x12) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x440040d0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 4m10.468140225s ago: executing program 0 (id=1551): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x400023, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0x1ff, 0x0, {0x5, 0x0, 0x7, 0x0, 0x9, 0x80000000003, 0x2fbc, 0x800000, 0x0, 0xc000, 0x0, r2, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe7d, {0x5, 0x3, 0x2, 0x800000000400000, 0x81, 0x8, {0x4, 0x8000000000000000, 0x6, 0x80000000004, 0x400000000000, 0x5, 0x6, 0xfffffffd, 0x1, 0xa000, 0x7f, r2, r3, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m10.280728737s ago: executing program 0 (id=1552): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc82, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x13, "000000000047562c38f5ae896b00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xc631, 0x8, 0x2007, 0xb, 0x18, "e303201bb6000180000000000000ffe74400"}) r1 = syz_open_pts(r0, 0x400) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x3) 4m9.949753433s ago: executing program 0 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r7, &(0x7f0000000240)) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) r9 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000001400)={0xa, @vbi={0x0, 0x0, 0x34565348, 0x0, [0x2], [0x0, 0xf]}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', 0x0) sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f00000007c0)=[@rights={{0x20, 0x1, 0x1, [r4, r5, r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, r0]}}, @rights={{0x34, 0x1, 0x1, [r5, r1, r5, r9, r0, r0, r1, r10, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3, r11}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xf0, 0x40882}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 4m8.353655938s ago: executing program 0 (id=1555): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x2, 0xfff8, '@\x00V', 0x1, 0xf}) 4m8.198850904s ago: executing program 0 (id=1557): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="04000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000007e923b0ad9"], 0x80}}, 0x44) 4m7.988166398s ago: executing program 0 (id=1558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 3m51.862758652s ago: executing program 33 (id=1558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 3m44.249537748s ago: executing program 2 (id=1593): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'8255\x00', [0x4f24, 0xc, 0xfff, 0x3, 0x5, 0xcc5, 0xf, 0x800007, 0x0, 0x9, 0x2, 0x80000001, 0xffffbffd, 0x1, 0x0, 0x0, 0x0, 0x40, 0x3fb, 0x2, 0x96, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0xd0, 0xffffffff, 0x1, 0xfce]}) 3m43.82382901s ago: executing program 2 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'C'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3m42.572352929s ago: executing program 2 (id=1596): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) 3m41.113770568s ago: executing program 2 (id=1598): r0 = socket$inet(0x2, 0x3, 0xd) socket(0x1e, 0x5, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000ac0)=""/4096, &(0x7f0000000180)=0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r1, r1, 0x0, 0x7f03) r2 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x6b, 0xa238, 0x7, 0x6, 0x2, 0x81}) 3m40.914997171s ago: executing program 2 (id=1599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180), 0x4) 3m37.645048958s ago: executing program 2 (id=1603): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r2, @ANYBLOB="200001", @ANYRESOCT=r0, @ANYRES64=r2], 0x38}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x100}}, 0x0) bind$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) 3m22.040381693s ago: executing program 34 (id=1603): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r2, @ANYBLOB="200001", @ANYRESOCT=r0, @ANYRES64=r2], 0x38}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x100}}, 0x0) bind$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) 6.632003011s ago: executing program 1 (id=1959): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, 0x0, 0x4}, 0x94) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 6.211257664s ago: executing program 1 (id=1961): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x7, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.017180003s ago: executing program 1 (id=1963): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, r0) 4.903683984s ago: executing program 1 (id=1964): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 4.772120932s ago: executing program 1 (id=1965): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090100", 0x10) 4.591389205s ago: executing program 1 (id=1966): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$cgroup(0x0, 0x0, 0x0, 0x4000, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.345092407s ago: executing program 4 (id=1967): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 3.137965425s ago: executing program 4 (id=1968): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r3, 0x80047437, 0x0) 1.788185085s ago: executing program 4 (id=1969): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.211615103s ago: executing program 4 (id=1970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) dup3(r2, r1, 0x0) finit_module(r2, 0x0, 0x0) 1.111298551s ago: executing program 4 (id=1971): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x58, &(0x7f0000000180)}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 0s ago: executing program 4 (id=1972): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x19, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): Trace: [ 296.876896][ T9522] [ 296.876901][ T9522] dump_stack_lvl+0x189/0x250 [ 296.876923][ T9522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.876937][ T9522] ? __pfx__printk+0x10/0x10 [ 296.876947][ T9522] ? find_vma+0xe7/0x160 [ 296.876968][ T9522] fixup_user_fault+0x661/0x720 [ 296.876985][ T9522] fault_in_user_writeable+0x72/0xe0 [ 296.876998][ T9522] futex_lock_pi+0x765/0xa70 [ 296.877016][ T9522] ? __pfx_futex_lock_pi+0x10/0x10 [ 296.877045][ T9522] ? __pfx_futex_wake_mark+0x10/0x10 [ 296.877067][ T9522] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 296.877084][ T9522] do_futex+0x292/0x420 [ 296.877094][ T9522] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.877112][ T9522] ? __pfx_do_futex+0x10/0x10 [ 296.877128][ T9522] __se_sys_futex+0x36f/0x400 [ 296.877143][ T9522] ? __pfx___se_sys_futex+0x10/0x10 [ 296.877155][ T9522] ? rcu_is_watching+0x15/0xb0 [ 296.877172][ T9522] ? __x64_sys_futex+0x21/0xf0 [ 296.877185][ T9522] do_syscall_64+0xfa/0x3b0 [ 296.877194][ T9522] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.877208][ T9522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.877218][ T9522] ? clear_bhb_loop+0x60/0xb0 [ 296.877230][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.877240][ T9522] RIP: 0033:0x7f7c8bf9eec9 [ 296.877253][ T9522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.877262][ T9522] RSP: 002b:00007f7c8a1dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.877279][ T9522] RAX: ffffffffffffffda RBX: 00007f7c8c1f6090 RCX: 00007f7c8bf9eec9 [ 296.877287][ T9522] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 296.877294][ T9522] RBP: 00007f7c8c021f91 R08: 0000000000000000 R09: 0000000000000000 [ 296.877300][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.877306][ T9522] R13: 00007f7c8c1f6128 R14: 00007f7c8c1f6090 R15: 00007ffcf5e7ac08 [ 296.877324][ T9522] [ 299.330884][ T9519] syz.4.1275 (9519) used greatest stack depth: 16760 bytes left [ 300.732006][ T9573] sp0: Synchronizing with TNC [ 302.043394][ T9584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1296'. [ 302.043683][ T9583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1296'. [ 303.024019][ T9599] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 303.583008][ T5935] IPVS: starting estimator thread 0... [ 303.752130][ T9600] IPVS: using max 7 ests per chain, 16800 per kthread [ 304.061925][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 304.417955][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 304.669893][ T5935] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 304.669921][ T5935] usb 1-1: config 0 has no interface number 0 [ 304.669953][ T5935] usb 1-1: config 0 interface 85 has no altsetting 0 [ 304.699676][ T5935] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 304.699705][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.699725][ T5935] usb 1-1: Product: syz [ 304.699738][ T5935] usb 1-1: Manufacturer: syz [ 304.699752][ T5935] usb 1-1: SerialNumber: syz [ 304.837896][ T5935] usb 1-1: config 0 descriptor?? [ 304.855995][ T5935] appletouch 1-1:0.85: Could not find int-in endpoint [ 304.856031][ T5935] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 304.857459][ T5935] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 305.513840][ T9618] IPv6: Can't replace route, no match found [ 306.158327][ T5935] usb 1-1: USB disconnect, device number 3 [ 306.298020][ T9622] IPVS: length: 108 != 24 [ 306.613224][ T9625] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 308.982845][ T9628] loop9: detected capacity change from 0 to 7 [ 312.187592][ T9665] Invalid logical block size (16384) [ 316.031664][ T9700] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 317.292300][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.292367][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.717896][ T9716] trusted_key: syz.2.1336 sent an empty control message without MSG_MORE. [ 319.056098][ T9727] overlayfs: missing 'lowerdir' [ 322.572332][ T9745] fuse: Bad value for 'fd' [ 330.203470][ T9820] mmap: syz.1.1369 (9820) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 330.448394][ T9818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.448410][ T9818] IPv6: NLM_F_CREATE should be set when creating new route [ 330.448464][ T9818] IPv6: NLM_F_CREATE should be set when creating new route [ 330.448493][ T9818] IPv6: NLM_F_CREATE should be set when creating new route [ 333.303926][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 333.568079][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 333.708155][ T9848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.868520][ T9867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.444955][ T9883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.445192][ T9883] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 337.600352][ T9883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.600742][ T9883] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 337.664362][ T9883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.664458][ T9883] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 337.707073][ T9883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.707155][ T9883] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 337.759691][ T9883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.759754][ T9883] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 339.511820][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 339.671868][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 339.705850][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 339.753402][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 339.919739][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 341.007711][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.603229][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 341.741571][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.762012][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 341.762050][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 341.831844][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 341.954222][ T6123] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.002064][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 342.133127][ T6123] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 342.133159][ T6123] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 342.133182][ T6123] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 342.187094][ T6123] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 342.187123][ T6123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.187142][ T6123] usb 1-1: Product: syz [ 342.187155][ T6123] usb 1-1: Manufacturer: syz [ 342.187168][ T6123] usb 1-1: SerialNumber: syz [ 342.279652][ T6123] usb 1-1: config 0 descriptor?? [ 342.501993][ T9924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.502213][ T9924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.509616][ T6123] usb 1-1: ucan: probing device on interface #0 [ 343.027239][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.451156][ T6123] usb 1-1: ucan: could not read protocol version, ret=-71 [ 343.451182][ T6123] usb 1-1: ucan: probe failed; try to update the device firmware [ 343.523802][ T6123] usb 1-1: USB disconnect, device number 4 [ 343.679108][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.919258][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.225110][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.353865][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.125335][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.247285][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.983431][ T9994] fuse: Unknown parameter 'user_id00000000000000000000' [ 352.529933][T10029] 9pnet_fd: Insufficient options for proto=fd [ 352.872001][T10033] lo speed is unknown, defaulting to 1000 [ 352.874598][T10033] lo speed is unknown, defaulting to 1000 [ 352.943909][T10033] lo speed is unknown, defaulting to 1000 [ 353.075358][T10033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.329853][T10033] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 353.462528][T10033] lo speed is unknown, defaulting to 1000 [ 353.465429][T10033] lo speed is unknown, defaulting to 1000 [ 353.468156][T10033] lo speed is unknown, defaulting to 1000 [ 353.470862][T10033] lo speed is unknown, defaulting to 1000 [ 353.473628][T10033] lo speed is unknown, defaulting to 1000 [ 353.778755][T10039] fuse: Bad value for 'fd' [ 360.613634][T10066] bridge0: port 3(syz_tun) entered blocking state [ 360.613781][T10066] bridge0: port 3(syz_tun) entered disabled state [ 360.614635][T10066] syz_tun: entered allmulticast mode [ 360.619134][T10066] syz_tun: entered promiscuous mode [ 360.626496][T10066] bridge0: port 3(syz_tun) entered blocking state [ 360.626812][T10066] bridge0: port 3(syz_tun) entered forwarding state [ 360.631652][T10066] netlink: 'syz.3.1446': attribute type 10 has an invalid length. [ 360.632431][T10066] bridge0: port 3(syz_tun) entered disabled state [ 360.633138][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.635912][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.649563][T10066] bridge0: port 3(syz_tun) entered blocking state [ 360.649778][T10066] bridge0: port 3(syz_tun) entered forwarding state [ 360.650153][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.650333][T10066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.650677][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.650877][T10066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.659074][T10066] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 360.669966][T10066] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 360.833740][T10068] 9pnet_fd: Insufficient options for proto=fd [ 361.310684][ T37] audit: type=1800 audit(1758717265.294:21): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1442" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 361.821620][T10066] infiniband syz1: set active [ 361.821640][T10066] infiniband syz1: added syz_tun [ 361.826648][T10066] syz1: rxe_create_cq: returned err = -12 [ 361.826722][T10066] infiniband syz1: Couldn't create ib_mad CQ [ 361.827162][T10066] infiniband syz1: Couldn't open port 1 [ 362.021032][T10086] IPv6: Can't replace route, no match found [ 362.341539][T10066] RDS/IB: syz1: added [ 362.350504][T10066] smc: adding ib device syz1 with port count 1 [ 362.350825][T10066] smc: ib device syz1 port 1 has pnetid [ 363.449632][T10093] fuse: Bad value for 'fd' [ 363.814251][ T5859] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 363.816443][ T5859] Bluetooth: hci1: unexpected event for opcode 0x042d [ 363.918686][T10097] fuse: Unknown parameter 'group_id00000000000000000000' [ 364.994139][T10113] 9pnet_fd: Insufficient options for proto=fd [ 365.034901][T10116] team0: No ports can be present during mode change [ 365.036988][T10116] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 365.120876][T10116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.145991][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 365.173067][T10116] team0: Port device bond0 added [ 365.197345][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 365.351635][T10124] fuse: Unknown parameter 'use00000000000000000000' [ 367.559753][T10118] team0 (unregistering): Port device team_slave_0 removed [ 367.616216][T10118] team0 (unregistering): Port device team_slave_1 removed [ 367.666523][T10118] team0 (unregistering): Port device bond0 removed [ 367.835234][ T5859] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 367.835352][ T5859] Bluetooth: hci1: Injecting HCI hardware error event [ 367.838474][ T5859] Bluetooth: hci1: hardware error 0x00 [ 368.243494][T10151] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 368.421976][T10147] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 368.669602][T10161] fuse: Unknown parameter 'use00000000000000000000' [ 368.685175][ T37] audit: type=1800 audit(1758717272.684:22): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1477" name="/" dev="9p" ino=65538 res=0 errno=0 [ 369.911868][ T5859] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 373.525033][T10204] netlink: 'syz.4.1491': attribute type 12 has an invalid length. [ 374.367954][T10204] ieee80211 phy13: Failed to add default virtual iface [ 378.119076][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.139005][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.143051][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.144363][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.156257][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.166967][T10066] bridge0: port 3(syz_tun) entered disabled state [ 378.530179][T10066] syz_tun (unregistering): left allmulticast mode [ 378.530201][T10066] syz_tun (unregistering): left promiscuous mode [ 378.530273][T10066] bridge0: port 3(syz_tun) entered disabled state [ 378.716997][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.717073][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.748983][ T6330] smc: removing ib device syz1 [ 378.958218][ T9] syz1: Port: 1 Link DOWN [ 379.748921][T10278] batadv_slave_1: entered promiscuous mode [ 379.795880][T10278] batman_adv: batadv0: Adding interface: macsec1 [ 379.799916][T10278] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.799953][T10278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.799975][T10278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.799990][T10278] batman_adv: batadv0: Interface activated: macsec1 [ 379.898549][T10253] lo speed is unknown, defaulting to 1000 [ 380.231917][ T5859] Bluetooth: hci4: command tx timeout [ 380.755569][T10287] fuse: Bad value for 'fd' [ 382.311922][ T5859] Bluetooth: hci4: command tx timeout [ 384.391855][ T5859] Bluetooth: hci4: command tx timeout [ 385.662168][T10331] netlink: 'syz.2.1533': attribute type 8 has an invalid length. [ 386.497472][ T5859] Bluetooth: hci4: command tx timeout [ 386.606887][T10253] chnl_net:caif_netlink_parms(): no params data found [ 387.723389][T10351] input: syz0 as /devices/virtual/input/input6 [ 387.771891][ T984] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 387.990845][ T984] usb 1-1: config 0 has no interfaces? [ 387.990881][ T984] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.990893][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.325246][ T984] usb 1-1: config 0 descriptor?? [ 390.937469][ T5930] usb 1-1: USB disconnect, device number 5 [ 391.032610][T10385] fuse: Bad value for 'fd' [ 391.385141][ T1408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.393827][ T1408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.324434][ T1408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.413271][ T5935] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 394.564722][ T5935] usb 5-1: config 0 has no interfaces? [ 394.564760][ T5935] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.564782][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.570315][ T5935] usb 5-1: config 0 descriptor?? [ 395.899282][T10253] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.899440][T10253] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.899701][T10253] bridge_slave_0: entered allmulticast mode [ 395.936140][T10253] bridge_slave_0: entered promiscuous mode [ 396.170133][ T1408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.212588][T10253] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.215510][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.215762][T10253] bridge_slave_1: entered allmulticast mode [ 396.243259][T10253] bridge_slave_1: entered promiscuous mode [ 396.338513][ T9934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 396.543956][ T9934] usb 2-1: Using ep0 maxpacket: 32 [ 396.546555][ T9934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.546579][ T9934] usb 2-1: config 0 has no interface number 0 [ 396.549685][ T9934] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 396.549714][ T9934] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 396.549733][ T9934] usb 2-1: Product: syz [ 396.549747][ T9934] usb 2-1: Manufacturer: syz [ 396.549761][ T9934] usb 2-1: SerialNumber: syz [ 396.576461][T10253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.580781][T10253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.616396][ T9934] usb 2-1: config 0 descriptor?? [ 396.721897][ T9934] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 396.721934][ T9934] usb 2-1: selecting invalid altsetting 1 [ 396.721948][ T9934] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 396.915567][ T9934] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 396.918610][ T9934] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 396.918718][ T9934] usb 2-1: media controller created [ 397.274384][ T5935] usb 5-1: USB disconnect, device number 3 [ 397.505875][ T9934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.541023][T10253] team0: Port device team_slave_0 added [ 397.670897][T10253] team0: Port device team_slave_1 added [ 398.005938][T10422] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 398.402502][ T9934] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 398.402559][ T9934] zl10353_read_register: readreg error (reg=127, ret==-71) [ 398.405125][ T9934] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 398.567022][ T9934] usb 2-1: USB disconnect, device number 6 [ 399.852923][T10253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.852934][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.852948][T10253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.091443][T10253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.091459][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.091484][T10253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.726024][ T1408] bridge_slave_1: left allmulticast mode [ 401.726195][ T1408] bridge_slave_1: left promiscuous mode [ 401.730494][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.916190][ T1408] bridge_slave_0: left allmulticast mode [ 401.928885][ T1408] bridge_slave_0: left promiscuous mode [ 401.942228][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.122287][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 402.300658][ T5930] usb 2-1: config 0 has no interfaces? [ 402.300741][ T5930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.300754][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.346161][ T5930] usb 2-1: config 0 descriptor?? [ 404.944643][ T9934] usb 2-1: USB disconnect, device number 7 [ 405.546096][ T37] audit: type=1326 audit(1758717309.534:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10468 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 405.546148][ T37] audit: type=1326 audit(1758717309.534:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10468 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 405.546192][ T37] audit: type=1326 audit(1758717309.544:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10468 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 405.546540][ T37] audit: type=1326 audit(1758717309.544:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10468 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 405.546584][ T37] audit: type=1326 audit(1758717309.544:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10468 comm="syz.1.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 405.971203][T10473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 405.971238][T10473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 406.288375][T10471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 406.288456][T10471] block device autoloading is deprecated and will be removed. [ 406.752556][ T1408] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 409.931838][ T5930] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 410.114290][ T5930] usb 3-1: config 0 has no interfaces? [ 410.114327][ T5930] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.114349][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.146150][ T5930] usb 3-1: config 0 descriptor?? [ 410.575467][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.594811][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.802261][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.466013][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.468473][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.747833][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.817001][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.862754][ T1408] bond0 (unregistering): Released all slaves [ 411.957582][T10253] hsr_slave_0: entered promiscuous mode [ 411.962727][T10253] hsr_slave_1: entered promiscuous mode [ 411.965600][T10253] debugfs: 'hsr0' already exists in 'hsr' [ 411.965626][T10253] Cannot create hsr debugfs directory [ 412.004502][T10473] dummy0: entered promiscuous mode [ 412.023166][T10473] team0: entered promiscuous mode [ 412.023189][T10473] team_slave_1: entered promiscuous mode [ 412.046883][T10473] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 412.725251][ T6064] usb 3-1: USB disconnect, device number 3 [ 413.845591][ T5859] Bluetooth: hci5: command tx timeout [ 414.611131][ T37] audit: type=1326 audit(1758717318.604:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10507 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 414.611886][ T37] audit: type=1326 audit(1758717318.604:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10507 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 414.657770][ T37] audit: type=1326 audit(1758717318.654:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10507 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 414.657991][ T37] audit: type=1326 audit(1758717318.654:31): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=10507 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 414.658150][ T37] audit: type=1326 audit(1758717318.654:32): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=10507 comm="syz.1.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 415.922951][ T5859] Bluetooth: hci5: command tx timeout [ 417.097834][T10491] lo speed is unknown, defaulting to 1000 [ 417.992807][ T5859] Bluetooth: hci5: command tx timeout [ 419.318886][T10534] usb usb8: usbfs: process 10534 (syz.2.1596) did not claim interface 0 before use [ 420.072591][ T5859] Bluetooth: hci5: command tx timeout [ 421.647228][T10549] random: crng reseeded on system resumption [ 424.966644][ T1408] hsr_slave_0: left promiscuous mode [ 424.993821][ T1408] hsr_slave_1: left promiscuous mode [ 425.092547][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.092623][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.161812][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.161845][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.378170][ T1408] veth1_macvtap: left promiscuous mode [ 425.378513][ T1408] veth0_macvtap: left promiscuous mode [ 425.378864][ T1408] veth1_vlan: left promiscuous mode [ 425.379207][ T1408] veth0_vlan: left promiscuous mode [ 425.381874][T10565] block nbd4: shutting down sockets [ 426.094487][T10574] usb usb8: usbfs: process 10574 (syz.4.1608) did not claim interface 0 before use [ 431.755316][T10598] gfs2: not a GFS2 filesystem [ 433.714821][T10612] fuse: Unknown parameter '0x0000000000000006' [ 433.776078][ T37] audit: type=1800 audit(1758717337.774:33): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1619" name="/" dev="9p" ino=65538 res=0 errno=0 [ 436.639294][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 436.903472][T10634] Invalid ELF header magic: != ELF [ 436.912150][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 437.151295][ T5930] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 437.151325][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.151450][ T5930] usb 2-1: Product: syz [ 437.151465][ T5930] usb 2-1: Manufacturer: syz [ 437.151478][ T5930] usb 2-1: SerialNumber: syz [ 437.302822][ T5930] usb 2-1: config 0 descriptor?? [ 437.494521][ T5930] usb 2-1: bad CDC descriptors [ 438.239275][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.251208][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.261162][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.277373][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.319842][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.673647][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 440.154971][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.155077][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.229510][ T5930] usb 2-1: USB disconnect, device number 8 [ 440.279665][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.283502][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.298569][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.299780][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.300535][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.344480][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 440.392167][ T5859] Bluetooth: hci0: command tx timeout [ 442.070868][T10664] 9pnet_virtio: no channels available for device syz [ 442.396822][ T5859] Bluetooth: hci6: command tx timeout [ 442.473835][ T5859] Bluetooth: hci0: command tx timeout [ 444.491137][ T5859] Bluetooth: hci6: command tx timeout [ 444.551918][ T5859] Bluetooth: hci0: command tx timeout [ 446.138289][ T5841] lo speed is unknown, defaulting to 1000 [ 446.138320][ T5841] syz0: Port: 1 Link DOWN [ 446.631849][ T5859] Bluetooth: hci6: command tx timeout [ 446.631880][ T5859] Bluetooth: hci0: command tx timeout [ 448.072527][T10688] fuse: Unknown parameter 'user_i00000000000000000000' [ 448.728899][ T5854] Bluetooth: hci6: command tx timeout [ 450.916539][T10712] lo speed is unknown, defaulting to 1000 [ 450.916643][T10712] lo speed is unknown, defaulting to 1000 [ 450.919749][T10712] lo speed is unknown, defaulting to 1000 [ 450.936092][T10712] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 451.032053][T10712] lo speed is unknown, defaulting to 1000 [ 451.035083][T10712] lo speed is unknown, defaulting to 1000 [ 451.037937][T10712] lo speed is unknown, defaulting to 1000 [ 451.040949][T10712] lo speed is unknown, defaulting to 1000 [ 451.043936][T10712] lo speed is unknown, defaulting to 1000 [ 451.046892][T10712] lo speed is unknown, defaulting to 1000 [ 451.049796][T10712] lo speed is unknown, defaulting to 1000 [ 451.052783][T10712] lo speed is unknown, defaulting to 1000 [ 451.552745][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 451.734282][T10491] chnl_net:caif_netlink_parms(): no params data found [ 451.846101][T10726] fuse: Unknown parameter 'user_i00000000000000000000' [ 452.090658][T10640] chnl_net:caif_netlink_parms(): no params data found [ 452.212264][T10649] chnl_net:caif_netlink_parms(): no params data found [ 452.493260][T10738] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1649'. [ 453.582060][ T6064] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 453.745696][ T6064] usb 2-1: config 0 has no interfaces? [ 453.745734][ T6064] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 453.745755][ T6064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.778723][ T6064] usb 2-1: config 0 descriptor?? [ 454.478791][T10749] ubi31: attaching mtd0 [ 454.484671][T10749] ubi31: scanning is finished [ 454.484692][T10749] ubi31: empty MTD device detected [ 455.080076][T10749] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 455.323698][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 455.467814][T10491] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.467998][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.468162][T10491] bridge_slave_0: entered allmulticast mode [ 455.471598][T10491] bridge_slave_0: entered promiscuous mode [ 455.524187][T10491] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.524351][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.524577][T10491] bridge_slave_1: entered allmulticast mode [ 455.527400][T10491] bridge_slave_1: entered promiscuous mode [ 456.048335][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 456.822346][ T984] usb 2-1: USB disconnect, device number 9 [ 456.890573][ T1408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.211769][ T9934] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 460.364630][ T9934] usb 5-1: config 0 has no interfaces? [ 460.364669][ T9934] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 460.364691][ T9934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.397479][ T9934] usb 5-1: config 0 descriptor?? [ 461.805952][ T1408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.844796][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.844947][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.845203][T10640] bridge_slave_0: entered allmulticast mode [ 461.853938][T10640] bridge_slave_0: entered promiscuous mode [ 462.923098][ T5935] usb 5-1: USB disconnect, device number 4 [ 462.975737][T10491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.976192][T10640] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.976300][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.976469][T10640] bridge_slave_1: entered allmulticast mode [ 462.980339][T10640] bridge_slave_1: entered promiscuous mode [ 463.038177][T10649] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.038303][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.038551][T10649] bridge_slave_0: entered allmulticast mode [ 463.062045][T10649] bridge_slave_0: entered promiscuous mode [ 463.078470][T10491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.102523][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 463.102554][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1668'. [ 463.420788][ T1408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.478190][T10649] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.478523][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.478774][T10649] bridge_slave_1: entered allmulticast mode [ 463.480491][T10649] bridge_slave_1: entered promiscuous mode [ 464.273115][T10640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.888376][ T1408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.898535][T10491] team0: Port device team_slave_0 added [ 466.923757][T10640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.943152][T10649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.958635][T10491] team0: Port device team_slave_1 added [ 467.051107][T10649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.141998][ T5841] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 467.303889][ T5841] usb 5-1: config 0 has no interfaces? [ 467.303926][ T5841] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 467.303954][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.315054][ T5841] usb 5-1: config 0 descriptor?? [ 467.449656][T10640] team0: Port device team_slave_0 added [ 467.708482][T10491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.708498][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.708522][T10491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.737935][T10640] team0: Port device team_slave_1 added [ 467.741022][T10649] team0: Port device team_slave_0 added [ 468.399918][T10491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.399962][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.400013][T10491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.669252][T10649] team0: Port device team_slave_1 added [ 468.939837][T10640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.939849][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.939861][T10640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.074588][T10640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.074600][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.074613][T10640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.077845][T10649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.077858][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.077875][T10649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.207362][T10649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.207378][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.207402][T10649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.522947][T10491] hsr_slave_0: entered promiscuous mode [ 469.525981][T10491] hsr_slave_1: entered promiscuous mode [ 469.527250][T10491] debugfs: 'hsr0' already exists in 'hsr' [ 469.527274][T10491] Cannot create hsr debugfs directory [ 469.987360][ T5841] usb 5-1: USB disconnect, device number 5 [ 470.032403][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 470.032646][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 470.244722][T10836] netlink: 'syz.1.1678': attribute type 21 has an invalid length. [ 470.244738][T10836] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1678'. [ 470.529854][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.551659][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.577694][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.596974][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.598024][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.712175][T10836] netlink: 'syz.1.1678': attribute type 5 has an invalid length. [ 470.712211][T10836] netlink: 'syz.1.1678': attribute type 6 has an invalid length. [ 470.712224][T10836] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1678'. [ 470.778242][T10640] hsr_slave_0: entered promiscuous mode [ 470.797410][T10640] hsr_slave_1: entered promiscuous mode [ 470.797941][T10640] debugfs: 'hsr0' already exists in 'hsr' [ 470.797956][T10640] Cannot create hsr debugfs directory [ 473.132133][ T5854] Bluetooth: hci3: command tx timeout [ 473.263735][ T1408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.958950][T10649] hsr_slave_0: entered promiscuous mode [ 473.970057][T10649] hsr_slave_1: entered promiscuous mode [ 473.977521][T10649] debugfs: 'hsr0' already exists in 'hsr' [ 473.977548][T10649] Cannot create hsr debugfs directory [ 474.096909][ T37] audit: type=1326 audit(1758717378.054:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 474.096968][ T37] audit: type=1326 audit(1758717378.094:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c8bf9d710 code=0x7ffc0000 [ 474.097008][ T37] audit: type=1326 audit(1758717378.094:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7c8bfa06f7 code=0x7ffc0000 [ 474.097048][ T37] audit: type=1326 audit(1758717378.094:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 474.097095][ T37] audit: type=1326 audit(1758717378.094:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7c8bfa06f7 code=0x7ffc0000 [ 474.097134][ T37] audit: type=1326 audit(1758717378.094:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7c8bf9db2a code=0x7ffc0000 [ 474.099124][ T37] audit: type=1326 audit(1758717378.094:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 474.099170][ T37] audit: type=1326 audit(1758717378.094:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 474.099209][ T37] audit: type=1326 audit(1758717378.094:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 474.099249][ T37] audit: type=1326 audit(1758717378.094:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10859 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 474.515570][T10866] ubi31: attaching mtd0 [ 474.586160][T10866] ubi31: scanning is finished [ 475.193457][ T5854] Bluetooth: hci3: command tx timeout [ 475.255653][T10866] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 475.702524][ T1408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.527566][T10880] usb usb8: usbfs: process 10880 (syz.4.1691) did not claim interface 0 before use [ 477.273796][ T5854] Bluetooth: hci3: command tx timeout [ 477.842361][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.410954][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.466688][ T1408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.426567][ T5854] Bluetooth: hci3: command tx timeout [ 479.704524][T10840] lo speed is unknown, defaulting to 1000 [ 479.964537][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.289307][T10898] ubi31: attaching mtd0 [ 480.290823][T10898] ubi31: scanning is finished [ 480.408651][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.542525][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.498299][T10898] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 481.580830][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.742909][ T1408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.141856][ T5935] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 485.291968][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 485.294532][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.294565][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.294606][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.294626][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.351079][ T5935] usb 2-1: config 0 descriptor?? [ 485.995355][T10936] ubi31: attaching mtd0 [ 485.998196][T10936] ubi31: scanning is finished [ 486.612432][ T1408] bridge_slave_1: left allmulticast mode [ 486.612465][ T1408] bridge_slave_1: left promiscuous mode [ 486.615598][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.628258][ T5935] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input7 [ 486.731236][T10936] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 486.755911][ T1408] bridge_slave_0: left allmulticast mode [ 486.755942][ T1408] bridge_slave_0: left promiscuous mode [ 486.758194][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.049928][ T5935] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 487.134561][ T1408] bridge_slave_1: left allmulticast mode [ 487.134596][ T1408] bridge_slave_1: left promiscuous mode [ 487.134848][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.227703][ T5935] usb 2-1: USB disconnect, device number 10 [ 487.256479][ T1408] bridge_slave_0: left allmulticast mode [ 487.256514][ T1408] bridge_slave_0: left promiscuous mode [ 487.256782][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.167220][T10962] ubi31: attaching mtd0 [ 489.170024][T10962] ubi31: scanning is finished [ 489.939198][T10962] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 493.002701][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.254437][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.354322][ T1408] bond0 (unregistering): Released all slaves [ 494.421798][ T5930] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 494.591335][ T5930] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 494.591352][ T5930] usb 2-1: config 0 has no interface number 0 [ 494.591379][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.591391][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 494.591405][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 494.591417][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 494.591430][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 494.591443][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.591465][ T5930] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 494.591477][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.626342][ T5930] usb 2-1: config 0 descriptor?? [ 494.708066][T10992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 494.708195][T10992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 495.859058][ T5930] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 495.879141][ T5930] usb 2-1: USB disconnect, device number 11 [ 496.260470][ T5930] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 498.263482][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 498.380535][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 498.804002][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.213363][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.214638][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.230494][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 501.672699][ T5858] Bluetooth: hci4: command tx timeout [ 501.672985][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.673057][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.673136][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 501.674563][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 501.676196][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 501.722011][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.966201][ T1408] bond0 (unregistering): Released all slaves [ 502.149235][ T5930] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 502.295700][ T5930] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 502.295726][ T5930] usb 5-1: config 0 has no interface number 0 [ 502.295798][ T5930] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.295819][ T5930] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 502.295843][ T5930] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 502.295866][ T5930] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 502.295890][ T5930] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 502.295912][ T5930] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 502.295959][ T5930] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 502.295981][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.306907][ T5930] usb 5-1: config 0 descriptor?? [ 502.308121][T11028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.308380][T11028] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.495373][ T5930] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 503.532328][ T5935] usb 5-1: USB disconnect, device number 6 [ 503.537374][ T5935] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 503.756737][ T5859] Bluetooth: hci5: command tx timeout [ 503.756991][ T5859] Bluetooth: hci4: command tx timeout [ 505.783992][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.822728][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.832842][ T5854] Bluetooth: hci4: command tx timeout [ 505.832872][ T5854] Bluetooth: hci5: command tx timeout [ 505.912334][ T1408] bond0 (unregistering): Released all slaves [ 505.971832][ T9935] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 506.132859][ T9935] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 506.132886][ T9935] usb 2-1: config 0 has no interface number 0 [ 506.132934][ T9935] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.132956][ T9935] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 506.132982][ T9935] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 506.133005][ T9935] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 506.133030][ T9935] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 506.133054][ T9935] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.133100][ T9935] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 506.133122][ T9935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.163887][ T9935] usb 2-1: config 0 descriptor?? [ 506.174331][T11060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.174477][T11060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.301126][ T9935] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 506.393346][T11007] lo speed is unknown, defaulting to 1000 [ 506.393803][T10840] chnl_net:caif_netlink_parms(): no params data found [ 506.740039][T11021] lo speed is unknown, defaulting to 1000 [ 507.934584][ T5859] Bluetooth: hci5: command tx timeout [ 507.934615][ T5859] Bluetooth: hci4: command tx timeout [ 508.014726][ T9] usb 2-1: USB disconnect, device number 12 [ 508.030340][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 509.666658][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.666868][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.667135][T10840] bridge_slave_0: entered allmulticast mode [ 509.686154][T10840] bridge_slave_0: entered promiscuous mode [ 509.901419][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.901527][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.903704][T10840] bridge_slave_1: entered allmulticast mode [ 509.906410][T10840] bridge_slave_1: entered promiscuous mode [ 509.991780][ T5854] Bluetooth: hci5: command tx timeout [ 510.174317][T11092] fuse: Bad value for 'fd' [ 510.647574][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.709905][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.771896][ T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 510.930320][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 510.930348][ T9] usb 2-1: config 0 has no interface number 0 [ 510.930396][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.930417][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 510.930441][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 510.930465][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 510.930490][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 510.930514][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.930554][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 510.930576][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.944864][ T9] usb 2-1: config 0 descriptor?? [ 510.947593][T11095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.947771][T11095] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.982221][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 511.235510][T11095] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 511.979343][T10840] team0: Port device team_slave_0 added [ 512.116241][T10840] team0: Port device team_slave_1 added [ 512.143176][ T6064] usb 2-1: USB disconnect, device number 13 [ 512.146267][ T6064] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 513.773615][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.773631][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.773655][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.822950][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.822966][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.822990][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.876377][T11007] chnl_net:caif_netlink_parms(): no params data found [ 514.158128][ T1408] hsr_slave_0: left promiscuous mode [ 514.199049][ T1408] hsr_slave_1: left promiscuous mode [ 514.336440][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.512631][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.871976][ T1408] hsr_slave_0: left promiscuous mode [ 515.032586][T11139] ubi31: attaching mtd0 [ 515.035387][T11139] ubi31: scanning is finished [ 515.618406][ T1408] hsr_slave_1: left promiscuous mode [ 515.769553][T11139] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 515.967910][ T1408] hsr_slave_0: left promiscuous mode [ 516.256305][ T1408] hsr_slave_1: left promiscuous mode [ 516.257244][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.257271][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.288125][ T1408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.288147][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.532255][T11144] ubi31: attaching mtd0 [ 516.538608][T11144] ubi31: scanning is finished [ 516.784341][ T1408] batman_adv: batadv0: Interface deactivated: macsec1 [ 516.784369][ T1408] batman_adv: batadv0: Removing interface: macsec1 [ 517.009995][T11144] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 517.209355][ T1408] veth1_macvtap: left promiscuous mode [ 517.209471][ T1408] veth0_macvtap: left promiscuous mode [ 517.209791][ T1408] veth1_vlan: left promiscuous mode [ 517.209998][ T1408] veth0_vlan: left promiscuous mode [ 518.362060][ T1408] batadv_slave_1: left promiscuous mode [ 518.362229][ T1408] veth1_macvtap: left promiscuous mode [ 518.362357][ T1408] veth0_macvtap: left promiscuous mode [ 518.362660][ T1408] veth1_vlan: left promiscuous mode [ 518.362879][ T1408] veth0_vlan: left promiscuous mode [ 519.472862][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 519.602472][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 529.841054][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 529.841072][ T37] audit: type=1326 audit(1758717433.244:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841119][ T37] audit: type=1326 audit(1758717433.244:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841155][ T37] audit: type=1326 audit(1758717433.254:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841191][ T37] audit: type=1326 audit(1758717433.254:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841227][ T37] audit: type=1326 audit(1758717433.264:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841266][ T37] audit: type=1326 audit(1758717433.264:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841304][ T37] audit: type=1326 audit(1758717433.274:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 529.841340][ T37] audit: type=1326 audit(1758717433.274:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11164 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 530.673119][T11021] chnl_net:caif_netlink_parms(): no params data found [ 531.632173][T11179] ubi31: attaching mtd0 [ 531.633897][T11179] ubi31: scanning is finished [ 531.968118][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.990102][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.998168][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.013546][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.014930][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.305965][T11179] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 534.070189][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.070589][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.071399][T11007] bridge_slave_0: entered allmulticast mode [ 534.102152][ T5854] Bluetooth: hci0: command tx timeout [ 534.167991][T11007] bridge_slave_0: entered promiscuous mode [ 534.364968][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.366421][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.389929][T11007] bridge_slave_1: entered allmulticast mode [ 534.457260][T11007] bridge_slave_1: entered promiscuous mode [ 535.522824][ T37] audit: type=1326 audit(1758717439.524:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.522879][ T37] audit: type=1326 audit(1758717439.524:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.522923][ T37] audit: type=1326 audit(1758717439.524:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.523222][ T37] audit: type=1326 audit(1758717439.524:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.523562][ T37] audit: type=1326 audit(1758717439.524:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.523603][ T37] audit: type=1326 audit(1758717439.524:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.523785][ T37] audit: type=1326 audit(1758717439.524:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 535.523903][ T37] audit: type=1326 audit(1758717439.524:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11209 comm="syz.4.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 536.151880][ T5854] Bluetooth: hci0: command tx timeout [ 536.528484][T11216] usb usb8: usbfs: process 11216 (syz.4.1785) did not claim interface 0 before use [ 536.647778][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.647925][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.648170][T11021] bridge_slave_0: entered allmulticast mode [ 536.674119][T11021] bridge_slave_0: entered promiscuous mode [ 536.697699][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.697944][T11187] lo speed is unknown, defaulting to 1000 [ 536.699412][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.699646][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.699848][T11021] bridge_slave_1: entered allmulticast mode [ 536.748838][T11021] bridge_slave_1: entered promiscuous mode [ 536.764583][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.213021][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 538.231781][ T5854] Bluetooth: hci0: command tx timeout [ 538.510310][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.514727][T11007] team0: Port device team_slave_0 added [ 538.845392][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.848244][T11007] team0: Port device team_slave_1 added [ 538.978123][T11231] tmpfs: Bad value for 'mpol' [ 540.096686][ T37] audit: type=1326 audit(1758717444.094:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11232 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 540.096744][ T37] audit: type=1326 audit(1758717444.094:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11232 comm="syz.1.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 540.311876][ T5854] Bluetooth: hci0: command tx timeout [ 540.444352][T11021] team0: Port device team_slave_0 added [ 540.451073][T11007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.451087][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.451109][T11007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.523331][T11021] team0: Port device team_slave_1 added [ 540.561389][T11007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.564613][T11007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.564641][T11007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.831753][ T5935] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 540.977408][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.977423][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.977446][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.013024][ T5935] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 541.013052][ T5935] usb 5-1: config 0 has no interface number 0 [ 541.013105][ T5935] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.013125][ T5935] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 541.013150][ T5935] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 541.013173][ T5935] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 541.013197][ T5935] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 541.013221][ T5935] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 541.013261][ T5935] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 541.013282][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.024205][ T5935] usb 5-1: config 0 descriptor?? [ 541.025120][T11242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.025253][T11242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.164857][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.164873][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.164897][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.237675][ T5935] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 541.556296][T11007] hsr_slave_0: entered promiscuous mode [ 541.557147][T11007] hsr_slave_1: entered promiscuous mode [ 541.774125][ T6123] usb 5-1: USB disconnect, device number 7 [ 541.835178][ T6123] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 542.347289][T11253] usb usb8: usbfs: process 11253 (syz.4.1796) did not claim interface 0 before use [ 542.500949][T11021] hsr_slave_0: entered promiscuous mode [ 542.502800][T11021] hsr_slave_1: entered promiscuous mode [ 542.503674][T11021] debugfs: 'hsr0' already exists in 'hsr' [ 542.503739][T11021] Cannot create hsr debugfs directory [ 543.572067][T11187] chnl_net:caif_netlink_parms(): no params data found [ 543.654108][ T1408] IPVS: stop unused estimator thread 0... [ 545.927490][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 545.927506][ T37] audit: type=1326 audit(1758717449.924:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927550][ T37] audit: type=1326 audit(1758717449.924:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927587][ T37] audit: type=1326 audit(1758717449.924:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927622][ T37] audit: type=1326 audit(1758717449.924:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927661][ T37] audit: type=1326 audit(1758717449.924:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927699][ T37] audit: type=1326 audit(1758717449.924:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927739][ T37] audit: type=1326 audit(1758717449.924:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 545.927778][ T37] audit: type=1326 audit(1758717449.924:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11277 comm="syz.1.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 546.031810][ T6064] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 546.235799][ T6064] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.235826][ T6064] usb 5-1: config 0 has no interface number 0 [ 546.235870][ T6064] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.235892][ T6064] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 546.235917][ T6064] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.235941][ T6064] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 546.235965][ T6064] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 546.235990][ T6064] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.236031][ T6064] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.236052][ T6064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.361477][ T6064] usb 5-1: config 0 descriptor?? [ 546.369193][T11280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.369384][T11280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.585068][ T6064] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 546.606242][T11280] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 546.975648][T11289] usb usb8: usbfs: process 11289 (syz.1.1804) did not claim interface 0 before use [ 547.152364][ T9] usb 5-1: USB disconnect, device number 8 [ 547.189882][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 547.781351][T11292] befs: (nullb0): No write support. Marking filesystem read-only [ 547.804263][T11292] befs: (nullb0): invalid magic header [ 548.038255][T11295] process 'syz.1.1806' launched './file1' with NULL argv: empty string added [ 548.428684][T11187] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.428827][T11187] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.429122][T11187] bridge_slave_0: entered allmulticast mode [ 548.435296][T11187] bridge_slave_0: entered promiscuous mode [ 548.622653][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.622886][T11187] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.623153][T11187] bridge_slave_1: entered allmulticast mode [ 548.626092][T11187] bridge_slave_1: entered promiscuous mode [ 548.742049][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 548.891987][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 548.905219][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 548.905256][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.944658][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 548.944682][ T10] pvrusb2: ********** [ 548.944689][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 548.944702][ T10] pvrusb2: Important functionality might not be entirely working. [ 548.944710][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 548.944721][ T10] pvrusb2: ********** [ 549.042800][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.240444][ T2370] pvrusb2: Invalid write control endpoint [ 549.491201][T11307] ubi31: attaching mtd0 [ 549.494001][T11307] ubi31: scanning is finished [ 550.157374][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.170714][T11187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.204038][ T6123] usb 5-1: USB disconnect, device number 9 [ 550.270814][T11187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.341068][ T2370] pvrusb2: Invalid write control endpoint [ 550.341084][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 550.341093][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 550.341101][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 550.341111][ T2370] pvrusb2: Device being rendered inoperable [ 550.375448][T11307] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 550.449847][ C0] vkms_vblank_simulate: vblank timer overrun [ 550.495160][ T2370] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 550.495240][ T2370] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 550.520336][ T2370] pvrusb2: Attached sub-driver cx25840 [ 550.520363][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 550.520372][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 550.804045][ T1408] bridge_slave_1: left allmulticast mode [ 550.804076][ T1408] bridge_slave_1: left promiscuous mode [ 550.804359][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.050373][ T9934] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 551.073314][ T1408] bridge_slave_0: left allmulticast mode [ 551.073347][ T1408] bridge_slave_0: left promiscuous mode [ 551.073622][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.816844][ T9934] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 551.816874][ T9934] usb 2-1: config 0 has no interface number 0 [ 551.816922][ T9934] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 551.816944][ T9934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 551.816969][ T9934] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 551.816995][ T9934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 551.817021][ T9934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 551.817046][ T9934] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 551.817089][ T9934] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 551.817112][ T9934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.862240][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.059631][ T9934] usb 2-1: config 0 descriptor?? [ 552.060963][T11314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.061154][T11314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.089998][ T9934] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 552.129528][ T1408] bridge_slave_1: left allmulticast mode [ 552.129561][ T1408] bridge_slave_1: left promiscuous mode [ 552.129827][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.272331][ T1408] bridge_slave_0: left allmulticast mode [ 552.272355][ T1408] bridge_slave_0: left promiscuous mode [ 552.272588][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.278579][T11314] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 552.319132][T11321] binder: 11320:11321 ioctl c0306201 0 returned -14 [ 552.320079][T11321] binder: 11320:11321 ioctl c0306201 0 returned -14 [ 552.388517][ T1408] bridge_slave_1: left allmulticast mode [ 552.388907][ T1408] bridge_slave_1: left promiscuous mode [ 552.390127][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.458097][ T1408] bridge_slave_0: left allmulticast mode [ 552.458290][ T1408] bridge_slave_0: left promiscuous mode [ 552.461558][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.668322][ T1408] bridge_slave_1: left allmulticast mode [ 552.668726][ T1408] bridge_slave_1: left promiscuous mode [ 552.670242][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.754457][ T1408] bridge_slave_0: left allmulticast mode [ 552.754981][ T1408] bridge_slave_0: left promiscuous mode [ 552.755448][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.974413][ T9934] usb 2-1: USB disconnect, device number 14 [ 553.004307][ T9934] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 553.949090][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.311046][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.433125][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.512763][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.586515][ T1408] bond0 (unregistering): Released all slaves [ 554.962003][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.106368][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.290118][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.794527][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.201105][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.254185][ T1408] bond0 (unregistering): Released all slaves [ 556.502586][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.582709][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.666317][ T1408] bond0 (unregistering): Released all slaves [ 557.091127][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.276206][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.793603][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.037873][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.048759][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.102465][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.149933][ T1408] bond0 (unregistering): Released all slaves [ 558.200829][T11187] team0: Port device team_slave_0 added [ 558.262962][T11187] team0: Port device team_slave_1 added [ 558.377073][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.419746][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.424441][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.438518][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.447742][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.493502][ T9934] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 558.672152][ T9934] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 558.672247][ T9934] usb 2-1: config 0 has no interface number 0 [ 558.672435][ T9934] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.672523][ T9934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 558.672614][ T9934] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 558.672676][ T9934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 558.672764][ T9934] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 558.672851][ T9934] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.672979][ T9934] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 558.673072][ T9934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.174040][ T9934] usb 2-1: config 0 descriptor?? [ 559.177332][T11355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.177605][T11355] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.212031][ T9934] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 559.530872][T11366] befs: (nullb0): No write support. Marking filesystem read-only [ 559.558072][T11366] befs: (nullb0): invalid magic header [ 560.051841][ T6064] usb 2-1: USB disconnect, device number 15 [ 560.061200][ T6064] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 560.093300][T11187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.093314][T11187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.093337][T11187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.200395][T11187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.200412][T11187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.200435][T11187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.501782][T11357] lo speed is unknown, defaulting to 1000 [ 560.561757][ T5854] Bluetooth: hci3: command tx timeout [ 560.971850][ T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 561.117130][T11187] hsr_slave_0: entered promiscuous mode [ 561.128073][T11187] hsr_slave_1: entered promiscuous mode [ 561.159440][T11187] debugfs: 'hsr0' already exists in 'hsr' [ 561.159468][T11187] Cannot create hsr debugfs directory [ 561.182644][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 561.182671][ T9] usb 2-1: config 0 has no interface number 0 [ 561.182736][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 561.182757][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 561.182780][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 561.182801][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 561.182822][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 561.182846][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 561.182883][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 561.182904][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.279355][ T9] usb 2-1: config 0 descriptor?? [ 561.284245][T11374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 561.284517][T11374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 561.333701][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 561.507490][ T9] usb 2-1: USB disconnect, device number 16 [ 561.508279][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 561.532047][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 561.533482][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 561.536787][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 561.541882][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 561.632711][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 561.902521][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.942735][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.102590][T11384] syz.4.1831: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 562.112843][T11384] CPU: 0 UID: 0 PID: 11384 Comm: syz.4.1831 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 562.112859][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 562.112869][T11384] Call Trace: [ 562.112873][T11384] [ 562.112879][T11384] dump_stack_lvl+0x189/0x250 [ 562.112900][T11384] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 562.112915][T11384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.112930][T11384] ? __pfx__printk+0x10/0x10 [ 562.112942][T11384] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 562.112955][T11384] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 562.112970][T11384] warn_alloc+0x22e/0x3b0 [ 562.112988][T11384] ? stack_trace_save+0x9c/0xe0 [ 562.113003][T11384] ? __pfx_warn_alloc+0x10/0x10 [ 562.113016][T11384] ? __kasan_kmalloc+0x93/0xb0 [ 562.113028][T11384] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 562.113041][T11384] ? xskq_create+0x56/0x170 [ 562.113055][T11384] ? xsk_init_queue+0xb0/0x110 [ 562.113067][T11384] ? xsk_setsockopt+0x57b/0x8d0 [ 562.113078][T11384] ? do_sock_setsockopt+0x179/0x1b0 [ 562.113092][T11384] ? __x64_sys_setsockopt+0x145/0x1b0 [ 562.113101][T11384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.113115][T11384] __vmalloc_node_range_noprof+0x125/0x12f0 [ 562.113146][T11384] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.113165][T11384] ? __kasan_kmalloc+0x93/0xb0 [ 562.113179][T11384] vmalloc_user_noprof+0xad/0xf0 [ 562.113193][T11384] ? xskq_create+0xbf/0x170 [ 562.113208][T11384] xskq_create+0xbf/0x170 [ 562.113223][T11384] xsk_init_queue+0xb0/0x110 [ 562.113238][T11384] xsk_setsockopt+0x57b/0x8d0 [ 562.113252][T11384] ? __pfx_xsk_setsockopt+0x10/0x10 [ 562.113268][T11384] ? __fget_files+0x2a/0x420 [ 562.113284][T11384] ? __fget_files+0x2a/0x420 [ 562.113296][T11384] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 562.113306][T11384] ? __pfx_xsk_setsockopt+0x10/0x10 [ 562.113320][T11384] do_sock_setsockopt+0x179/0x1b0 [ 562.113337][T11384] __x64_sys_setsockopt+0x145/0x1b0 [ 562.113350][T11384] do_syscall_64+0xfa/0x3b0 [ 562.113359][T11384] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.113372][T11384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.113382][T11384] ? clear_bhb_loop+0x60/0xb0 [ 562.113394][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.113407][T11384] RIP: 0033:0x7f7c8bf9eec9 [ 562.113418][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.113427][T11384] RSP: 002b:00007f7c8a1fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 562.113439][T11384] RAX: ffffffffffffffda RBX: 00007f7c8c1f5fa0 RCX: 00007f7c8bf9eec9 [ 562.113447][T11384] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 562.113453][T11384] RBP: 00007f7c8c021f91 R08: 0000000000000004 R09: 0000000000000000 [ 562.113460][T11384] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 562.113466][T11384] R13: 00007f7c8c1f6038 R14: 00007f7c8c1f5fa0 R15: 00007ffcf5e7ac08 [ 562.113484][T11384] [ 562.113491][T11384] Mem-Info: [ 562.113500][T11384] active_anon:255 inactive_anon:5235 isolated_anon:0 [ 562.113500][T11384] active_file:17995 inactive_file:40403 isolated_file:0 [ 562.113500][T11384] unevictable:768 dirty:124 writeback:0 [ 562.113500][T11384] slab_reclaimable:12239 slab_unreclaimable:106824 [ 562.113500][T11384] mapped:34700 shmem:1368 pagetables:1124 [ 562.113500][T11384] sec_pagetables:0 bounce:0 [ 562.113500][T11384] kernel_misc_reclaimable:0 [ 562.113500][T11384] free:1258216 free_pcp:2187 free_cma:0 [ 562.113529][T11384] Node 0 active_anon:1020kB inactive_anon:20940kB active_file:71776kB inactive_file:161612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138800kB dirty:496kB writeback:0kB shmem:3936kB kernel_stack:12272kB pagetables:4308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 562.113554][T11384] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 562.113578][T11384] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.113610][T11384] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 562.113628][T11384] Node 0 DMA32 free:1112568kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:20900kB active_file:70756kB inactive_file:161544kB unevictable:1536kB writepending:492kB present:3129332kB managed:2572288kB mlocked:0kB bounce:0kB free_pcp:8716kB local_pcp:7440kB free_cma:0kB [ 562.113658][T11384] lowmem_reserve[]: 0 0 1 1 1 [ 562.113674][T11384] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1020kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.113703][T11384] lowmem_reserve[]: 0 0 0 0 0 [ 562.113719][T11384] Node 1 Normal free:3904936kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 562.113748][T11384] lowmem_reserve[]: 0 0 0 0 0 [ 562.113765][T11384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 562.114213][T11384] Node 0 DMA32: 598*4kB (UME) 848*8kB (UME) 424*16kB (UME) 363*32kB (UME) 271*64kB (UME) 165*128kB (UME) 76*256kB (UME) 64*512kB (UME) 71*1024kB (UME) 40*2048kB (UME) 205*4096kB (UM) = 1112568kB [ 562.114296][T11384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.114346][T11384] Node 1 Normal: 204*4kB (UE) 37*8kB (UME) 27*16kB (UME) 239*32kB (UME) 87*64kB (UME) 32*128kB (UME) 14*256kB (UME) 9*512kB (UM) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3904936kB [ 562.114424][T11384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.114433][T11384] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 562.114441][T11384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.114449][T11384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.114457][T11384] 59763 total pagecache pages [ 562.114467][T11384] 0 pages in swap cache [ 562.114470][T11384] Free swap = 124996kB [ 562.114474][T11384] Total swap = 124996kB [ 562.114478][T11384] 2097051 pages RAM [ 562.114482][T11384] 0 pages HighMem/MovableOnly [ 562.114485][T11384] 422081 pages reserved [ 562.114490][T11384] 0 pages cma reserved [ 562.641844][ T5854] Bluetooth: hci3: command tx timeout [ 563.038875][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.038985][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.247074][ T1408] hsr_slave_0: left promiscuous mode [ 563.371647][ T1408] hsr_slave_1: left promiscuous mode [ 563.395231][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.424158][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.751832][ T5854] Bluetooth: hci6: command tx timeout [ 563.802927][ T1408] hsr_slave_0: left promiscuous mode [ 563.822007][ T1408] hsr_slave_1: left promiscuous mode [ 563.823946][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.882010][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.983899][ T1408] hsr_slave_0: left promiscuous mode [ 564.058937][ T1408] hsr_slave_1: left promiscuous mode [ 564.059982][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.121005][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.712501][ T5854] Bluetooth: hci3: command tx timeout [ 564.884834][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 565.176196][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 565.442739][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.831811][ T5854] Bluetooth: hci6: command tx timeout [ 566.545316][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.791998][ T5854] Bluetooth: hci3: command tx timeout [ 567.376032][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.019609][ T5854] Bluetooth: hci6: command tx timeout [ 568.029663][T11420] usb usb8: usbfs: process 11420 (syz.1.1844) did not claim interface 0 before use [ 568.044211][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 568.382513][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 569.298262][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'. [ 569.298294][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'. [ 570.071947][ T5854] Bluetooth: hci6: command tx timeout [ 570.472344][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 570.622683][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 572.802603][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 573.072753][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 574.365649][ T6123] lo speed is unknown, defaulting to 1000 [ 574.365678][ T6123] syz0: Port: 1 Link DOWN [ 575.157276][T11453] usb usb8: usbfs: process 11453 (syz.1.1852) did not claim interface 0 before use [ 575.219826][T11377] lo speed is unknown, defaulting to 1000 [ 579.379665][T11357] chnl_net:caif_netlink_parms(): no params data found [ 579.460618][T11489] usb usb8: usbfs: process 11489 (syz.1.1862) did not claim interface 0 before use [ 580.702196][T11187] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 581.071742][T11187] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 581.391853][T11187] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 581.452998][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.453136][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.453347][T11357] bridge_slave_0: entered allmulticast mode [ 581.457152][T11357] bridge_slave_0: entered promiscuous mode [ 581.459384][T11187] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 581.623716][T11357] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.626031][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.626623][T11357] bridge_slave_1: entered allmulticast mode [ 581.629304][T11357] bridge_slave_1: entered promiscuous mode [ 581.807762][T11520] usb usb8: usbfs: process 11520 (syz.1.1871) did not claim interface 0 before use [ 582.530477][T11377] chnl_net:caif_netlink_parms(): no params data found [ 583.026346][T11357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.076556][T11357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.774651][T11357] team0: Port device team_slave_0 added [ 583.826222][T11357] team0: Port device team_slave_1 added [ 583.939095][T11553] usb usb8: usbfs: process 11553 (syz.1.1879) did not claim interface 0 before use [ 584.436444][T11560] befs: (nullb0): No write support. Marking filesystem read-only [ 584.478179][T11560] befs: (nullb0): invalid magic header [ 584.956936][T11357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.956954][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.956980][T11357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.827872][T11357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.827891][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.827917][T11357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.846238][ T37] audit: type=1326 audit(1758717489.844:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.846291][ T37] audit: type=1326 audit(1758717489.844:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.849179][ T37] audit: type=1326 audit(1758717489.844:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.852842][ T37] audit: type=1326 audit(1758717489.844:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.852888][ T37] audit: type=1326 audit(1758717489.854:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.853172][ T37] audit: type=1326 audit(1758717489.854:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.859868][ T37] audit: type=1326 audit(1758717489.854:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.860637][ T37] audit: type=1326 audit(1758717489.854:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 585.860681][ T37] audit: type=1326 audit(1758717489.854:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11569 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8bf9eec9 code=0x7ffc0000 [ 586.304037][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.304251][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.304486][T11377] bridge_slave_0: entered allmulticast mode [ 586.307249][T11377] bridge_slave_0: entered promiscuous mode [ 586.658646][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.694910][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.695056][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.695307][T11377] bridge_slave_1: entered allmulticast mode [ 586.698186][T11377] bridge_slave_1: entered promiscuous mode [ 586.827075][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.140299][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.327806][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.708398][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.844394][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.867057][T11357] hsr_slave_0: entered promiscuous mode [ 588.868000][T11357] hsr_slave_1: entered promiscuous mode [ 588.868570][T11357] debugfs: 'hsr0' already exists in 'hsr' [ 588.868588][T11357] Cannot create hsr debugfs directory [ 588.911741][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 589.081884][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 589.085410][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 589.085427][ T10] usb 5-1: config 0 has no interface number 0 [ 589.085453][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 589.085467][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 589.085480][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 589.089153][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 589.089172][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.089183][ T10] usb 5-1: Product: syz [ 589.089190][ T10] usb 5-1: Manufacturer: syz [ 589.089198][ T10] usb 5-1: SerialNumber: syz [ 589.180085][ T10] usb 5-1: config 0 descriptor?? [ 589.181002][T11592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.181161][T11592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.243913][T11377] team0: Port device team_slave_0 added [ 589.418346][T11592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.418490][T11592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 589.490281][T11377] team0: Port device team_slave_1 added [ 590.031064][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 590.297193][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.297210][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.297235][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.437503][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 590.437530][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 590.437795][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 590.492592][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.492611][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.492637][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.497482][ T10] usb 5-1: USB disconnect, device number 10 [ 591.679695][T11377] hsr_slave_0: entered promiscuous mode [ 591.688396][T11377] hsr_slave_1: entered promiscuous mode [ 591.691470][T11377] debugfs: 'hsr0' already exists in 'hsr' [ 591.691488][T11377] Cannot create hsr debugfs directory [ 592.030901][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 592.078598][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 592.102131][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 592.113937][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 592.119465][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 593.381723][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 593.534344][ T10] usb 2-1: config 0 has no interfaces? [ 593.534383][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 593.534406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.574344][ T10] usb 2-1: config 0 descriptor?? [ 593.877776][T11622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.583886][ T5854] Bluetooth: hci4: command tx timeout [ 594.604972][ T6064] usb 2-1: USB disconnect, device number 17 [ 596.066164][T11611] lo speed is unknown, defaulting to 1000 [ 596.631854][ T5854] Bluetooth: hci4: command tx timeout [ 597.561869][ T1408] bridge_slave_1: left allmulticast mode [ 597.561901][ T1408] bridge_slave_1: left promiscuous mode [ 597.562163][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.683487][ T1408] bridge_slave_0: left allmulticast mode [ 597.683520][ T1408] bridge_slave_0: left promiscuous mode [ 597.683787][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.774383][ T1408] bridge_slave_1: left allmulticast mode [ 597.774418][ T1408] bridge_slave_1: left promiscuous mode [ 597.774678][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.862402][ T1408] bridge_slave_0: left allmulticast mode [ 597.862434][ T1408] bridge_slave_0: left promiscuous mode [ 597.862689][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.721843][ T5854] Bluetooth: hci4: command tx timeout [ 599.001397][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.143399][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.563252][ T1408] bond0 (unregistering): Released all slaves [ 600.797871][ T5854] Bluetooth: hci4: command tx timeout [ 601.117788][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.198150][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.256029][ T1408] bond0 (unregistering): Released all slaves [ 601.770350][T11611] chnl_net:caif_netlink_parms(): no params data found [ 603.451879][ T1408] hsr_slave_0: left promiscuous mode [ 603.483820][ T1408] hsr_slave_1: left promiscuous mode [ 603.486170][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.537762][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.715752][ T1408] hsr_slave_0: left promiscuous mode [ 603.757041][ T1408] hsr_slave_1: left promiscuous mode [ 603.757696][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.775456][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.032461][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 605.173544][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 606.552893][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 606.702314][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 608.143435][T11611] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.143568][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.143803][T11611] bridge_slave_0: entered allmulticast mode [ 608.147099][T11611] bridge_slave_0: entered promiscuous mode [ 608.218953][T11611] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.219099][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.219355][T11611] bridge_slave_1: entered allmulticast mode [ 608.222954][T11611] bridge_slave_1: entered promiscuous mode [ 608.873825][T11611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.078117][ T6123] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 609.108441][T11611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.243467][ T6123] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 609.243496][ T6123] usb 2-1: config 0 has no interface number 0 [ 609.243543][ T6123] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 609.243564][ T6123] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 609.243595][ T6123] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 609.243619][ T6123] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 609.243643][ T6123] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 609.243668][ T6123] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 609.243737][ T6123] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 609.243758][ T6123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.357547][ T6123] usb 2-1: config 0 descriptor?? [ 609.360687][T11706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 609.360811][T11706] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 609.392146][ T6123] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 609.569504][T11706] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 609.770256][T11709] befs: (nullb0): No write support. Marking filesystem read-only [ 609.790844][T11709] befs: (nullb0): invalid magic header [ 610.167344][T11611] team0: Port device team_slave_0 added [ 610.205295][T11611] team0: Port device team_slave_1 added [ 610.497399][ T6123] usb 2-1: USB disconnect, device number 18 [ 610.517149][ T6123] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 610.802470][ T5935] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 611.224090][T11611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.224107][T11611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.224132][T11611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.335693][ T5935] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.335719][ T5935] usb 5-1: config 0 has no interface number 0 [ 611.345333][ T5935] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 611.345360][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.345379][ T5935] usb 5-1: Product: syz [ 611.345394][ T5935] usb 5-1: Manufacturer: syz [ 611.345407][ T5935] usb 5-1: SerialNumber: syz [ 611.354741][ T5935] usb 5-1: config 0 descriptor?? [ 611.425782][T11611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.425800][T11611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.425884][T11611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.566458][ T5935] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 611.577125][ T5935] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 611.577535][ T5935] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 611.577584][ T5935] usb 5-1: media controller created [ 611.684938][T11357] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 611.711373][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.287811][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.340222][T11357] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.564043][ T5935] usb 5-1: USB disconnect, device number 11 [ 612.653098][T11357] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.765468][ T37] audit: type=1326 audit(1758717516.754:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 612.765519][ T37] audit: type=1326 audit(1758717516.754:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 612.765561][ T37] audit: type=1326 audit(1758717516.764:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 612.765601][ T37] audit: type=1326 audit(1758717516.764:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11726 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3f65eec9 code=0x7ffc0000 [ 612.848627][T11611] hsr_slave_0: entered promiscuous mode [ 612.854936][T11611] hsr_slave_1: entered promiscuous mode [ 612.857779][T11357] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 613.108699][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.800022][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.002256][ T6064] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 614.122781][T11377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 614.185831][ T6064] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 614.185859][ T6064] usb 5-1: config 0 has no interface number 0 [ 614.185908][ T6064] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.185931][ T6064] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 614.185957][ T6064] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 614.185981][ T6064] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 614.186007][ T6064] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 614.186033][ T6064] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 614.186074][ T6064] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 614.186096][ T6064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.195298][ T6064] usb 5-1: config 0 descriptor?? [ 614.198076][T11741] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 614.198257][T11741] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 614.223304][ T6064] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 614.223684][T11377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 614.407034][T11741] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 614.991707][ T5935] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 615.076848][T11377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.122298][ T5935] usb 2-1: device descriptor read/64, error -71 [ 615.166157][ T9934] usb 5-1: USB disconnect, device number 12 [ 615.169024][ T9934] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 615.281633][T11377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 615.401756][ T5935] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 616.451778][ T5935] usb 2-1: device descriptor read/64, error -71 [ 616.577167][ T5935] usb usb2-port1: attempt power cycle [ 618.051731][ T5935] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 618.550283][T11767] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1936'. [ 620.790722][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.836481][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.838068][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.874888][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.892226][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 622.134493][ T1408] bridge_slave_1: left allmulticast mode [ 622.134518][ T1408] bridge_slave_1: left promiscuous mode [ 622.134818][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.181682][ T10] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 622.364110][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 622.364136][ T10] usb 5-1: config 0 has no interface number 0 [ 622.364183][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 622.364204][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 622.364230][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 622.364253][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 622.364279][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 622.364313][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.364363][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 622.364762][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.480159][ T10] usb 5-1: config 0 descriptor?? [ 622.664139][T11779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.680598][T11779] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.742924][ T1408] bridge_slave_0: left allmulticast mode [ 622.742956][ T1408] bridge_slave_0: left promiscuous mode [ 622.743242][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.744086][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 622.931733][ T10] usb 5-1: USB disconnect, device number 13 [ 623.115481][ T5935] usb 2-1: device descriptor read/8, error -110 [ 623.123809][ T5854] Bluetooth: hci0: command tx timeout [ 623.177547][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.180595][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 623.202800][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.207323][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.236637][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.237681][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 624.998193][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.998270][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.287918][ T5859] Bluetooth: hci0: command tx timeout [ 625.762465][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 626.614609][ T5859] Bluetooth: hci3: command tx timeout [ 627.037089][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 627.282666][ T1408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.343167][ T1408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.351650][ T5854] Bluetooth: hci0: command tx timeout [ 627.409048][ T1408] bond0 (unregistering): Released all slaves [ 627.440842][T11799] vlan2: entered allmulticast mode [ 627.440857][T11799] dummy0: entered allmulticast mode [ 628.224061][T11801] bridge0: entered promiscuous mode [ 628.224471][T11801] vlan3: entered promiscuous mode [ 628.548078][T11773] lo speed is unknown, defaulting to 1000 [ 628.632081][ T5854] Bluetooth: hci3: command tx timeout [ 628.708081][ T1408] hsr_slave_0: left promiscuous mode [ 628.750265][ T1408] hsr_slave_1: left promiscuous mode [ 628.757361][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.797305][ T1408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.182052][T11810] befs: (nullb0): No write support. Marking filesystem read-only [ 629.182322][T11810] befs: (nullb0): invalid magic header [ 629.441705][ T5854] Bluetooth: hci0: command tx timeout [ 629.661903][ T9] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 629.851037][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 629.851066][ T9] usb 2-1: config 0 has no interface number 0 [ 629.851115][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.851138][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 629.851163][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 629.851189][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 629.851214][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 629.851239][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 629.851281][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 629.851302][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.993613][ T9] usb 2-1: config 0 descriptor?? [ 629.995148][T11814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 629.995486][T11814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 630.073239][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 630.199564][T11814] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 630.212127][ T9935] usb 2-1: USB disconnect, device number 23 [ 630.218957][ T9935] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 630.624973][ T1408] team0 (unregistering): Port device team_slave_1 removed [ 630.718067][ T5854] Bluetooth: hci3: command tx timeout [ 630.795425][ T1408] team0 (unregistering): Port device team_slave_0 removed [ 632.525967][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.951783][ T5854] Bluetooth: hci3: command tx timeout [ 633.104852][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.796342][T11780] lo speed is unknown, defaulting to 1000 [ 634.865151][ T37] audit: type=1800 audit(1758717538.864:93): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1959" name="/" dev="9p" ino=65538 res=0 errno=0 [ 634.867142][T11843] netfs: Couldn't get user pages (rc=-14) [ 636.554921][T11780] chnl_net:caif_netlink_parms(): no params data found [ 637.933406][T11773] chnl_net:caif_netlink_parms(): no params data found [ 638.105418][T11611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 639.344643][T11611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 639.551519][T11871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.551824][T11871] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 639.726536][T11611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 640.014398][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.014559][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.014813][T11780] bridge_slave_0: entered allmulticast mode [ 640.021002][T11780] bridge_slave_0: entered promiscuous mode [ 640.056060][T11611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 640.174129][T11886] Invalid ELF header magic: != ELF [ 640.241177][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.241382][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.256512][T11780] bridge_slave_1: entered allmulticast mode [ 640.258068][T11780] bridge_slave_1: entered promiscuous mode [ 641.332464][T11871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.333502][T11871] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 641.339628][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.517865][T11871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 641.519439][T11871] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 641.647749][T11871] ================================================================== [ 641.647767][T11871] BUG: KASA[ 641.647767][T11871] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 641.647789][T11871] Read of size 8 at addr ffff8880293d9768 by task syz.1.1966/11871 [ 641.647799][T11871] [ 641.647808][T11871] CPU: 1 UID: 0 PID: 11871 Comm: syz.1.1966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.647821][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.647828][T11871] Call Trace: [ 641.647834][T11871] [ 641.647841][T11871] dump_stack_lvl+0x189/0x250 [ 641.647857][T11871] ? __kasan_check_byte+0x12/0x40 [ 641.647872][T11871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.647886][T11871] ? lock_release+0x4b/0x3e0 [ 641.647900][T11871] ? __virt_addr_valid+0x4a5/0x5c0 [ 641.647910][T11871] print_report+0xca/0x240 [ 641.647923][T11871] ? __list_del_entry_valid_or_report+0x92/0x190 [ 641.647935][T11871] kasan_report+0x118/0x150 [ 641.647948][T11871] ? __list_del_entry_valid_or_report+0x92/0x190 [ 641.647963][T11871] __list_del_entry_valid_or_report+0x92/0x190 [ 641.647976][T11871] bt_accept_unlink+0x39/0x240 [ 641.647990][T11871] l2cap_sock_teardown_cb+0x17e/0x460 [ 641.648003][T11871] l2cap_chan_del+0xb2/0x5e0 [ 641.648014][T11871] ? l2cap_conn_del+0x37c/0x680 [ 641.648023][T11871] l2cap_conn_del+0x388/0x680 [ 641.648033][T11871] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 641.648042][T11871] hci_conn_hash_flush+0x10d/0x230 [ 641.648053][T11871] hci_dev_close_sync+0xaef/0x1330 [ 641.648069][T11871] ? __pfx_bt_err+0x10/0x10 [ 641.648081][T11871] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 641.648095][T11871] ? mutex_lock_nested+0x154/0x1d0 [ 641.648107][T11871] ? hci_dev_do_close+0x27/0x90 [ 641.648121][T11871] hci_dev_do_close+0x2f/0x90 [ 641.648134][T11871] hci_rfkill_set_block+0x21d/0x2e0 [ 641.648148][T11871] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 641.648161][T11871] rfkill_set_block+0x1e2/0x450 [ 641.648179][T11871] rfkill_fop_write+0x44e/0x580 [ 641.648189][T11871] ? count_memcg_event_mm+0x21/0x260 [ 641.648202][T11871] ? __pfx_rfkill_fop_write+0x10/0x10 [ 641.648212][T11871] ? rw_verify_area+0x25b/0x4e0 [ 641.648224][T11871] ? __lock_acquire+0xab9/0xd20 [ 641.648236][T11871] ? __pfx_rfkill_fop_write+0x10/0x10 [ 641.648246][T11871] vfs_write+0x287/0xb40 [ 641.648259][T11871] ? __pfx_vfs_write+0x10/0x10 [ 641.648271][T11871] ? __fget_files+0x2a/0x420 [ 641.648286][T11871] ? __fget_files+0x2a/0x420 [ 641.648299][T11871] ? __fget_files+0x3a6/0x420 [ 641.648311][T11871] ? __fget_files+0x2a/0x420 [ 641.648325][T11871] ksys_write+0x14b/0x260 [ 641.648338][T11871] ? __pfx_ksys_write+0x10/0x10 [ 641.648350][T11871] ? do_syscall_64+0xbe/0x3b0 [ 641.648361][T11871] do_syscall_64+0xfa/0x3b0 [ 641.648369][T11871] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.648391][T11871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.648402][T11871] ? clear_bhb_loop+0x60/0xb0 [ 641.648413][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.648423][T11871] RIP: 0033:0x7f7c3f65eec9 [ 641.648434][T11871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.648443][T11871] RSP: 002b:00007f7c3d884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.648455][T11871] RAX: ffffffffffffffda RBX: 00007f7c3f8b6180 RCX: 00007f7c3f65eec9 [ 641.648463][T11871] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 641.648470][T11871] RBP: 00007f7c3f6e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.648477][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.648484][T11871] R13: 00007f7c3f8b6218 R14: 00007f7c3f8b6180 R15: 00007fff60483b68 [ 641.648495][T11871] [ 641.648499][T11871] [ 641.648501][T11871] Allocated by task 11772: [ 641.648507][T11871] kasan_save_track+0x3e/0x80 [ 641.648518][T11871] __kasan_kmalloc+0x93/0xb0 [ 641.648529][T11871] __kmalloc_noprof+0x1ef/0x430 [ 641.648541][T11871] sk_prot_alloc+0xe7/0x220 [ 641.648549][T11871] sk_alloc+0x3a/0x370 [ 641.648556][T11871] bt_sock_alloc+0x3b/0x310 [ 641.648566][T11871] l2cap_sock_create+0x147/0x300 [ 641.648575][T11871] bt_sock_create+0x163/0x240 [ 641.648587][T11871] __sock_create+0x4b0/0x9f0 [ 641.648598][T11871] __sys_socket+0xd7/0x1b0 [ 641.648608][T11871] __x64_sys_socket+0x7a/0x90 [ 641.648619][T11871] do_syscall_64+0xfa/0x3b0 [ 641.648626][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.648635][T11871] [ 641.648637][T11871] Freed by task 11772: [ 641.648642][T11871] kasan_save_track+0x3e/0x80 [ 641.648652][T11871] kasan_save_free_info+0x46/0x50 [ 641.648660][T11871] __kasan_slab_free+0x5b/0x80 [ 641.648670][T11871] kfree+0x195/0x550 [ 641.648680][T11871] __sk_destruct+0x4e4/0x670 [ 641.648688][T11871] l2cap_sock_release+0x1b0/0x230 [ 641.648696][T11871] sock_close+0xc3/0x240 [ 641.648705][T11871] __fput+0x458/0xa80 [ 641.648713][T11871] task_work_run+0x1d4/0x260 [ 641.648722][T11871] do_exit+0x6b5/0x2300 [ 641.648730][T11871] do_group_exit+0x21c/0x2d0 [ 641.648737][T11871] get_signal+0x125e/0x1310 [ 641.648747][T11871] arch_do_signal_or_restart+0x9a/0x750 [ 641.648758][T11871] exit_to_user_mode_loop+0x75/0x110 [ 641.648769][T11871] do_syscall_64+0x2bd/0x3b0 [ 641.648777][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.648786][T11871] [ 641.648788][T11871] The buggy address belongs to the object at ffff8880293d9000 [ 641.648788][T11871] which belongs to the cache kmalloc-2k of size 2048 [ 641.648797][T11871] The buggy address is located 1896 bytes inside of [ 641.648797][T11871] freed 2048-byte region [ffff8880293d9000, ffff8880293d9800) [ 641.648807][T11871] [ 641.648810][T11871] The buggy address belongs to the physical page: [ 641.648817][T11871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x293d8 [ 641.648832][T11871] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 641.648841][T11871] flags: 0x80000000000040(head|node=0|zone=1) [ 641.648851][T11871] page_type: f5(slab) [ 641.648861][T11871] raw: 0080000000000040 ffff888019842000 ffffea0000cb5c00 dead000000000002 [ 641.648870][T11871] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 641.648880][T11871] head: 0080000000000040 ffff888019842000 ffffea0000cb5c00 dead000000000002 [ 641.648889][T11871] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 641.648898][T11871] head: 0080000000000003 ffffea0000a4f601 00000000ffffffff 00000000ffffffff [ 641.648907][T11871] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 641.648913][T11871] page dumped because: kasan: bad access detected [ 641.648924][T11871] page_owner tracks the page as allocated [ 641.648929][T11871] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13109523547, free_ts 0 [ 641.648947][T11871] post_alloc_hook+0x240/0x2a0 [ 641.648960][T11871] get_page_from_freelist+0x2119/0x21b0 [ 641.648970][T11871] __alloc_frozen_pages_noprof+0x181/0x370 [ 641.648979][T11871] alloc_pages_mpol+0xd1/0x380 [ 641.648991][T11871] allocate_slab+0x8a/0x370 [ 641.649001][T11871] ___slab_alloc+0x8d1/0xdc0 [ 641.649009][T11871] __kmalloc_cache_noprof+0xe6/0x320 [ 641.649021][T11871] usb_hub_create_port_device+0x82/0xb90 [ 641.649033][T11871] hub_probe+0x26fa/0x3830 [ 641.649043][T11871] usb_probe_interface+0x665/0xc30 [ 641.649055][T11871] really_probe+0x26d/0x9e0 [ 641.649065][T11871] __driver_probe_device+0x18c/0x2f0 [ 641.649074][T11871] driver_probe_device+0x4f/0x430 [ 641.649083][T11871] __device_attach_driver+0x2ce/0x530 [ 641.649092][T11871] bus_for_each_drv+0x254/0x2e0 [ 641.649104][T11871] __device_attach+0x2bb/0x400 [ 641.649112][T11871] page_owner free stack trace missing [ 641.649116][T11871] [ 641.649118][T11871] Memory state around the buggy address: [ 641.649124][T11871] ffff8880293d9600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 641.649131][T11871] ffff8880293d9680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 641.649138][T11871] >ffff8880293d9700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 641.649144][T11871] ^ [ 641.649150][T11871] ffff8880293d9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 641.649157][T11871] ffff8880293d9800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 641.649162][T11871] ================================================================== [ 641.661905][T11871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 641.661921][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.1.1966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.661935][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.661942][T11871] Call Trace: [ 641.661947][T11871] [ 641.661952][T11871] dump_stack_lvl+0x99/0x250 [ 641.661973][T11871] ? __asan_memcpy+0x40/0x70 [ 641.661985][T11871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.661999][T11871] ? __pfx__printk+0x10/0x10 [ 641.662013][T11871] vpanic+0x281/0x750 [ 641.662027][T11871] ? rcu_is_watching+0x15/0xb0 [ 641.662042][T11871] ? __pfx_vpanic+0x10/0x10 [ 641.662055][T11871] ? preempt_schedule_irq+0xde/0x150 [ 641.662070][T11871] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 641.662082][T11871] ? preempt_schedule+0xae/0xc0 [ 641.662095][T11871] ? __pfx_preempt_schedule+0x10/0x10 [ 641.662110][T11871] panic+0xb9/0xc0 [ 641.662123][T11871] ? __pfx_panic+0x10/0x10 [ 641.662140][T11871] ? __list_del_entry_valid_or_report+0x92/0x190 [ 641.662154][T11871] check_panic_on_warn+0x89/0xb0 [ 641.662164][T11871] ? __list_del_entry_valid_or_report+0x92/0x190 [ 641.662177][T11871] end_report+0x78/0x160 [ 641.662189][T11871] kasan_report+0x129/0x150 [ 641.662202][T11871] ? __list_del_entry_valid_or_report+0x92/0x190 [ 641.662217][T11871] __list_del_entry_valid_or_report+0x92/0x190 [ 641.662231][T11871] bt_accept_unlink+0x39/0x240 [ 641.662246][T11871] l2cap_sock_teardown_cb+0x17e/0x460 [ 641.662258][T11871] l2cap_chan_del+0xb2/0x5e0 [ 641.662270][T11871] ? l2cap_conn_del+0x37c/0x680 [ 641.662280][T11871] l2cap_conn_del+0x388/0x680 [ 641.662291][T11871] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 641.662301][T11871] hci_conn_hash_flush+0x10d/0x230 [ 641.662313][T11871] hci_dev_close_sync+0xaef/0x1330 [ 641.662328][T11871] ? __pfx_bt_err+0x10/0x10 [ 641.662340][T11871] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 641.662353][T11871] ? mutex_lock_nested+0x154/0x1d0 [ 641.662365][T11871] ? hci_dev_do_close+0x27/0x90 [ 641.662380][T11871] hci_dev_do_close+0x2f/0x90 [ 641.662396][T11871] hci_rfkill_set_block+0x21d/0x2e0 [ 641.662409][T11871] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 641.662422][T11871] rfkill_set_block+0x1e2/0x450 [ 641.662437][T11871] rfkill_fop_write+0x44e/0x580 [ 641.662447][T11871] ? count_memcg_event_mm+0x21/0x260 [ 641.662460][T11871] ? __pfx_rfkill_fop_write+0x10/0x10 [ 641.662471][T11871] ? rw_verify_area+0x25b/0x4e0 [ 641.662482][T11871] ? __lock_acquire+0xab9/0xd20 [ 641.662494][T11871] ? __pfx_rfkill_fop_write+0x10/0x10 [ 641.662504][T11871] vfs_write+0x287/0xb40 [ 641.662517][T11871] ? __pfx_vfs_write+0x10/0x10 [ 641.662529][T11871] ? __fget_files+0x2a/0x420 [ 641.662543][T11871] ? __fget_files+0x2a/0x420 [ 641.662556][T11871] ? __fget_files+0x3a6/0x420 [ 641.662568][T11871] ? __fget_files+0x2a/0x420 [ 641.662583][T11871] ksys_write+0x14b/0x260 [ 641.662595][T11871] ? __pfx_ksys_write+0x10/0x10 [ 641.662607][T11871] ? do_syscall_64+0xbe/0x3b0 [ 641.662618][T11871] do_syscall_64+0xfa/0x3b0 [ 641.662634][T11871] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.662648][T11871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.662659][T11871] ? clear_bhb_loop+0x60/0xb0 [ 641.662671][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.662681][T11871] RIP: 0033:0x7f7c3f65eec9 [ 641.662693][T11871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.662701][T11871] RSP: 002b:00007f7c3d884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.662713][T11871] RAX: ffffffffffffffda RBX: 00007f7c3f8b6180 RCX: 00007f7c3f65eec9 [ 641.662721][T11871] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 641.662728][T11871] RBP: 00007f7c3f6e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.662735][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.662741][T11871] R13: 00007f7c3f8b6218 R14: 00007f7c3f8b6180 R15: 00007fff60483b68 [ 641.662754][T11871] [ 641.663044][T11871] Kernel Offset: disabled