last executing test programs: 6m23.869748521s ago: executing program 3 (id=1119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x91d, 0x0, 0x3ff}, {0xbab, 0x0, 0x2}, {0x84d, 0x0, 0x1}, {0xc0011038}, {0xa10, 0x0, 0x5f}, {0x236, 0x0, 0x355}, {0x93b, 0x0, 0xfffffffffffffff3}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file2\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0xff000000}, 0x0) 5m51.09334607s ago: executing program 3 (id=1119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x91d, 0x0, 0x3ff}, {0xbab, 0x0, 0x2}, {0x84d, 0x0, 0x1}, {0xc0011038}, {0xa10, 0x0, 0x5f}, {0x236, 0x0, 0x355}, {0x93b, 0x0, 0xfffffffffffffff3}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file2\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0xff000000}, 0x0) 5m1.866926144s ago: executing program 3 (id=1119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x91d, 0x0, 0x3ff}, {0xbab, 0x0, 0x2}, {0x84d, 0x0, 0x1}, {0xc0011038}, {0xa10, 0x0, 0x5f}, {0x236, 0x0, 0x355}, {0x93b, 0x0, 0xfffffffffffffff3}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file2\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0xff000000}, 0x0) 4m7.037292228s ago: executing program 3 (id=1119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x91d, 0x0, 0x3ff}, {0xbab, 0x0, 0x2}, {0x84d, 0x0, 0x1}, {0xc0011038}, {0xa10, 0x0, 0x5f}, {0x236, 0x0, 0x355}, {0x93b, 0x0, 0xfffffffffffffff3}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file2\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0xff000000}, 0x0) 3m5.412359217s ago: executing program 3 (id=1119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x91d, 0x0, 0x3ff}, {0xbab, 0x0, 0x2}, {0x84d, 0x0, 0x1}, {0xc0011038}, {0xa10, 0x0, 0x5f}, {0x236, 0x0, 0x355}, {0x93b, 0x0, 0xfffffffffffffff3}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file2\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0xff000000}, 0x0) 2m47.578970879s ago: executing program 2 (id=2208): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) semget$private(0x0, 0x2, 0x0) semctl$GETPID(0x0, 0x3df657a8805f5a0f, 0x10, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 2m43.951444972s ago: executing program 2 (id=2213): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff00000000000000017300000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, ':&'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) r4 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfb, {0x1, 0x7, './file0', './file2'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6008081}, 0x8004) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 2m38.968309077s ago: executing program 2 (id=2221): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000322000/0x4000)=nil, 0x4000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x8000000003c) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x40000000000000}, 0x18) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x7a1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m36.495670109s ago: executing program 2 (id=2223): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000280)='usrquota') chdir(&(0x7f0000000380)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x46fbcd10ffa01ef, 0xee01, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x0, 0x0, 0xde}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f00000194c0)={0x7, 0x21, 0x2}, 0x7) ioctl$int_in(r1, 0x5421, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e0000b666dc6e4dd3e6bcbede0200000000001f4700000000"], 0x10}}, 0x0) r5 = dup(r3) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f7807440f06b90d0800000f32f3260f080f01cf0fae6115470f68060f06d1fa670f01ca", 0x24}], 0x1, 0x28, &(0x7f00000001c0)=[@efer={0x2, 0x1001}, @vmwrite={0x8, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], 0x2) write$UHID_INPUT(r4, &(0x7f0000019500)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d316d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1009}}, 0x1006) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000200)={0x41}, 0x10) 2m32.297687997s ago: executing program 2 (id=2229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x0, 0x0, @none, @none}}}}, 0x22) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000780)={{0x300, 0x300, 0x80}, "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", "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"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 2m29.673728497s ago: executing program 2 (id=2233): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000322000/0x4000)=nil, 0x4000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x8000000003c) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x40000000000000}, 0x18) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x7a1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m24.968809023s ago: executing program 4 (id=2236): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000019840)="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", 0xfe}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) recvmsg$kcm(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000000)={0x9, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffff}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x2]) personality(0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000016c0)={&(0x7f0000001680)='erofs_destroy_inode\x00'}, 0x10) syz_io_uring_setup(0x6e2c, &(0x7f0000000100)={0x0, 0x2958, 0x100, 0x0, 0xf2}, &(0x7f0000000080), &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$sysctl(r5, &(0x7f0000000040)='0\x00', 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@overlay={0xfffff0ae, 0x0, 0x4, 0x100000, 0x2c9b, {}, {0x0, 0x0, 0xa0, 0x9, 0x0, 0x9, "0d408108"}, 0x3, 0x3, {}, 0x2}) 2m20.690065178s ago: executing program 4 (id=2241): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000ac0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r4, 0x1, r1, 0x3, 0x80000}) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) r7 = accept4$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)=r2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r4}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r7], 0xb4}}, 0x8040) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0010000000000000b7030000000000ba4901850000007c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x7ffffffff000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ecb2850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() 2m18.530421984s ago: executing program 3 (id=1119): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r0, 0xae7d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) fcntl$getownex(r2, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x7, 0x0, [{0x91d, 0x0, 0x3ff}, {0xbab, 0x0, 0x2}, {0x84d, 0x0, 0x1}, {0xc0011038}, {0xa10, 0x0, 0x5f}, {0x236, 0x0, 0x355}, {0x93b, 0x0, 0xfffffffffffffff3}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file2\x00'}) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x0, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0xff000000}, 0x0) 2m18.492256681s ago: executing program 4 (id=2245): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff00000000000000017300000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, ':&'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) r3 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfb, {0x1, 0x7, './file0', './file2'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6008081}, 0x8004) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x0, 0x4000}, 0x10) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x40014) 2m8.257460088s ago: executing program 4 (id=2249): setrlimit(0x1, &(0x7f0000000080)={0x3, 0x80000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380), 0x8) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400000036000b63d25a80648c0100000124fc60", 0x14}], 0x1}, 0x0) 2m1.370612657s ago: executing program 4 (id=2254): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000ac0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r4, 0x1, r1, 0x3, 0x80000}) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) r7 = accept4$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@local}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000080)=r2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r4}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r7], 0xb4}}, 0x8040) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0010000000000000b7030000000000ba4901850000007c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x7ffffffff000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ecb2850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() 1m58.19486075s ago: executing program 4 (id=2259): socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x440, 0x20a, 0x278, 0x440, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x2c0, 0x2e8, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@multicast1}, {@ipv6=@private1, [], @ipv6=@dev}, {@ipv4=@private, [], @ipv4=@empty}, {@ipv4=@dev, [], @ipv4=@broadcast}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x100000001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYBLOB="e22f0e58c73d55178b4ad5708be22365133daa5f7f9ea78d9990eaf3687b5a8a8d47cc985dee347a35c625eb846c7e87aaba5dde6f7e320c826cc4ad8008e90e045af0f054f2906c8ca5f97962014ef7055486a8750ec16d3f0b1caa201a70fd12f003bb6a27df7e24efec24941681b856909ecdd3b0ad6e538743da86ea7fa76beb35166fceb32807f072f2dbb08aa18346c33821eaf76fd70783127098aa3cc5d41c"], 0xffffffef) 13.178179215s ago: executing program 1 (id=2362): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 13.114733485s ago: executing program 0 (id=2363): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x1, 0x0, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x65, 0x0, 0x4a, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}]}}}}}) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd2b) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12.764993438s ago: executing program 1 (id=2364): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff00000000000000017300000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, ':&'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) r4 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfb, {0x1, 0x7, './file0', './file2'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6008081}, 0x8004) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 11.376232636s ago: executing program 0 (id=2365): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000880)={0x0, 0x4, 0x93, 0x4, 0x7269}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr, 0x8000000}, 0x1c) syz_usb_connect(0x0, 0x129, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0xbb, 0xa2, 0x8a, 0x8, 0xcf2, 0x6250, 0x8fd5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x2, 0x89, 0x6, 0x60, 0x61, [{{0x9, 0x4, 0xd3, 0x0, 0x3, 0x91, 0x95, 0x59, 0x3, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "15"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x7, 0x0, 0x5}, {0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xae}, @country_functional={0xe, 0x24, 0x7, 0x9, 0x8, [0x2, 0x9, 0x6, 0x7]}, @call_mgmt={0x5}, @mdlm_detail={0x7e, 0x24, 0x13, 0x0, "3bd6a5881720eedf0cb1dc4022015a210e6a2f35591c1b8c5ad54a9501bd1c413662e7b17f4b6714f1e486338147e21aa436293912a5b1ed7fd86ac3dc1a688c6df821061141444ec85a96a73483c52b622f377b9573e95f112b1aa6ddf18c3d87aae0352036ab2022b09aeaa26f7414d68cf8466ca1b965237c"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x0, 0x7f, 0x1, 0xf9}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x1, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x230, 0x48, 0x9, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfd, 0x3}]}}]}}, {{0x9, 0x4, 0x73, 0x0, 0x3, 0x91, 0xaf, 0xe6, 0xaf, [], [{{0x9, 0x5, 0x5, 0xc, 0x400, 0x9, 0x0, 0x3, [@generic={0x2, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x3, 0x5ff, 0xc, 0x5, 0x81}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0x0, 0x8, [@generic={0x2, 0xa}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0x9, 0x9, 0x40}, 0x63, &(0x7f0000000240)=ANY=[@ANYBLOB="050f630006141004006796092801174572493368576392454714100406f5e7828444357ee713315fbd52dd6d7a03100b141004996a551fae3af496635d7a985c37073ebc141004b40de97792f9146e9ef6bfb10e2277a0b90b10010804000d08060008"], 0x4, [{0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "3db1669d26f711c12b7eea9b23efa21822a00bd4acdb"}}, {0x19, &(0x7f00000002c0)=@string={0x19, 0x3, "97cd1fa553d4cab7ec41722e77a2b630c120a9011af0ac"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2801}}]}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000680)=""/87, 0x57}], 0x2, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000740)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x1, r5}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) 9.026362356s ago: executing program 1 (id=2366): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff00000000000000017300000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, ':&'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) r4 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfb, {0x1, 0x7, './file0', './file2'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6008081}, 0x8004) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x40014) 7.953610443s ago: executing program 0 (id=2367): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff00000000000000017300000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, ':&'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) r4 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfb, {0x1, 0x7, './file0', './file2'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6008081}, 0x8004) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x40014) 5.115904445s ago: executing program 1 (id=2368): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x30]}}, 0x0, 0x2a}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x84, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x66, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x3c, 0x9}}, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x20, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}}]}, 0x84}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000600004f624d7a757c3d39ddc689e8aa94dd3102479d45e2cd3df5e47d99db3fcad9ce8e61a71069d421b0068116f5a82b8c046ad6ebf85b26feae6d092ac3802ef05b92c32134ca0538f8474a042dafbf03a4b40fe38897"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006112001c0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100f4000000000000000000000a20000000000a01020000000000000000010001000900010073797a3000100000140000001000010000000000000000000000000a0a6d21533cd6f8fb3667191f6dabefba94d29625915041780a6e9d15218443695be6bf255b20ca1f3c72a1334fee7aaaddcd6838d2c3ec22035874bf8ad6cd0b9bd0c1096b98db3c139cd96cbb604a0a5200d75b8777319541ec9f11c521b00cf9cb63a0236be03bb47e359845f67b2a63669538e52d79b353094e9b751df4b308b23acec92aee448c5b94b94217572bce7c37f0da064a32ac7920525ee0c708d2aadd2b212c1b49b80e88"], 0x48}}, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) 4.532284911s ago: executing program 0 (id=2369): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x3}, 0x14}}, 0x0) 4.299607272s ago: executing program 0 (id=2370): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff00000000000000017300000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, ':&'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="d5cdbbe5d95d348f7fad70c1f7fdbaa68096578520784275f0037ffbb2a74f9f646e2be4b28b03703f617614894daa08bafd6bc0387186ada507b04a011fda67437bd16b6afa9875d39922390acf1c085db0542dfed3dd4891b76a75b235436d791bfe51a5fd68e3281245b3c9cc9e5979714f0505ac653335c9e428694457f6b6edebbf7f300c17ef44715c4c7fae78ff48b14bcb1542a42258310369aed5f33bd0e785f845f4cdf5b5206495ad03c05f61a60985e253a6eda32cfd0774ab98bfe121818b1538132831ff6cbe59ef5e82451c49506a8c39eca9863698b79d0181b646687c17e563e9834dfaf1bdb7c44d0a7e3c5344f06d0580b8967064e46008fdc4034dddd1fc110b418d079b3d3eca2c11778da1a3445bcd6da0791c717c4df8802cefee679d5fa781307c7cc35c248bb76f6dc108f1efad47aa7d334ab19670afcc44dddee2b03c3fa0ce284c5110300836c0603e427bf6322df1c96f90d1675e7f32d4ed8345254af10391cd46"], 0x1c}}, 0x0) r4 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfb, {0x1, 0x7, './file0', './file2'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6008081}, 0x8004) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x3) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x40014) 191.789571ms ago: executing program 0 (id=2371): epoll_create(0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) write$UHID_CREATE(r0, &(0x7f0000000880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000540)=""/26, 0x1a}}, 0x120) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r6 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r8 = epoll_create1(0x0) syz_usb_control_io$hid(r5, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0xa, "e4332cd7"}, @main=@item_012={0x2, 0x0, 0x9, 'T!'}, @local=@item_4={0x3, 0x2, 0x9, "b98399db"}, @global=@item_4={0x3, 0x1, 0x2, "5aacbfb8"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0xc84}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400a67000000cab632d8598fa7769a8e44696552e8fee6d11b1c7f01ad2c4df13d23c59c513be6fe8108f60bcd51e7916f623e8bf07ac1cbdabfa414d89204253cda1371d1002545090ecb873b419dabeb23fd9f8c4fde5203050d6b53ff505ad4a4355825e136096696a1c3a01e66715d6e"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)=ANY=[@ANYBLOB="20013d000000961574b6a712397ee32b0d91726b2faadd1db837432aba6f437082c40a3aa652b744d44f4efd3be03c6d3502b04f456a3cde0ab484ef180c884cacdd51"], &(0x7f0000000680)={0x20, 0x3, 0x1, 0x65}}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000700)={0x1a}) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, 0x0) 191.2764ms ago: executing program 1 (id=2372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b700000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=2373): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x1, 0x0, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x65, 0x0, 0x4a, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}]}}}}}) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd2b) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): atadv0: Removing interface: batadv_slave_1 [ 1574.314290][T10247] usb 2-1: Using ep0 maxpacket: 8 [ 1574.385124][T10247] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1574.416287][T10247] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1574.444875][ T11] veth1_macvtap: left promiscuous mode [ 1574.457628][T10247] usb 2-1: config 137 has no interface number 0 [ 1574.466018][ T11] veth0_macvtap: left promiscuous mode [ 1574.472146][ T11] veth1_vlan: left promiscuous mode [ 1574.499163][T10247] usb 2-1: config 137 has no interface number 1 [ 1574.520207][ T11] veth0_vlan: left promiscuous mode [ 1574.526517][T10247] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1574.582725][T10247] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1574.628604][T10247] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1574.654953][T10247] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1574.696701][T10247] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1574.751916][T10247] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1574.792757][ T29] audit: type=1326 audit(1720337375.076:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1574.881918][T10247] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1574.894659][ T29] audit: type=1326 audit(1720337375.113:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1574.960420][T10247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.014604][T10247] usb 2-1: Product: ⠁ [ 1575.048179][T10247] usb 2-1: Manufacturer: Ї [ 1575.123770][T10247] usb 2-1: SerialNumber: syz [ 1575.173178][T16867] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1575.632409][ T29] audit: type=1326 audit(1720337375.833:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1575.740467][ T29] audit: type=1326 audit(1720337375.833:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1575.843913][ T29] audit: type=1326 audit(1720337375.833:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1575.885700][ T29] audit: type=1326 audit(1720337375.833:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1575.941976][T10247] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1575.982741][ T29] audit: type=1326 audit(1720337375.833:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1576.035162][ T29] audit: type=1326 audit(1720337375.833:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1576.059881][ T29] audit: type=1326 audit(1720337375.833:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1576.122033][T10247] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1576.156084][ T29] audit: type=1326 audit(1720337375.879:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.0.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1576.247604][T10247] usb 2-1: USB disconnect, device number 61 [ 1579.015981][T16913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2160'. [ 1579.078452][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 1579.793691][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1580.038233][T16921] netlink: 'syz.1.2162': attribute type 4 has an invalid length. [ 1580.048084][T16921] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2162'. [ 1580.059197][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1580.418056][ T5094] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1582.030635][T16913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2160'. [ 1582.237295][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.259697][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.285428][T16710] bridge_slave_0: entered allmulticast mode [ 1582.316496][T16710] bridge_slave_0: entered promiscuous mode [ 1582.498802][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1582.498821][ T29] audit: type=1326 audit(1720337382.174:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1582.530030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.596945][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.648412][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.672139][ T29] audit: type=1326 audit(1720337382.174:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1582.675030][T16710] bridge_slave_1: entered allmulticast mode [ 1582.782999][T16710] bridge_slave_1: entered promiscuous mode [ 1583.324321][ T29] audit: type=1326 audit(1720337382.930:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1583.409924][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.447514][ T29] audit: type=1326 audit(1720337382.930:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1583.655611][ T29] audit: type=1326 audit(1720337382.930:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1583.793383][ T29] audit: type=1326 audit(1720337382.930:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1583.932700][ T29] audit: type=1326 audit(1720337382.930:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1583.945236][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.374494][ T29] audit: type=1326 audit(1720337382.930:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1584.620947][ T29] audit: type=1326 audit(1720337382.930:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1586.500849][ T29] audit: type=1326 audit(1720337382.930:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16937 comm="syz.0.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1586.773714][T16710] team0: Port device team_slave_0 added [ 1586.839163][T16710] team0: Port device team_slave_1 added [ 1587.223125][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.239749][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.352122][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.441000][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.462223][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.611908][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.930487][ T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1587.930588][ T53] CPU: 0 PID: 53 Comm: kworker/u9:0 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1587.930619][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1587.930637][ T53] Workqueue: hci1 hci_rx_work [ 1587.930674][ T53] Call Trace: [ 1587.930685][ T53] [ 1587.930695][ T53] dump_stack_lvl+0x16c/0x1f0 [ 1587.930730][ T53] sysfs_warn_dup+0x7f/0xa0 [ 1587.930770][ T53] sysfs_create_dir_ns+0x24d/0x2b0 [ 1587.930810][ T53] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1587.930849][ T53] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1587.930879][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 1587.930908][ T53] kobject_add_internal+0x2c8/0x990 [ 1587.930944][ T53] kobject_add+0x16f/0x240 [ 1587.930987][ T53] ? __pfx_kobject_add+0x10/0x10 [ 1587.931023][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 1587.931052][ T53] ? kobject_put+0xbe/0x5b0 [ 1587.931087][ T53] device_add+0x289/0x1a70 [ 1587.931129][ T53] ? __pfx_dev_set_name+0x10/0x10 [ 1587.931156][ T53] ? __pfx_device_add+0x10/0x10 [ 1587.931197][ T53] ? mgmt_send_event_skb+0x2f0/0x460 [ 1587.931231][ T53] hci_conn_add_sysfs+0x17e/0x230 [ 1587.931266][ T53] le_conn_complete_evt+0x1078/0x1d80 [ 1587.931298][ T53] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1587.931327][ T53] ? trace_contention_end+0xea/0x140 [ 1587.931354][ T53] ? __mutex_lock+0x1a6/0x9c0 [ 1587.931388][ T53] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 1587.931427][ T53] ? skb_pull_data+0x166/0x210 [ 1587.931471][ T53] hci_le_meta_evt+0x2e2/0x5d0 [ 1587.931509][ T53] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1587.931542][ T53] hci_event_packet+0x664/0x1170 [ 1587.931572][ T53] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1587.931605][ T53] ? __pfx_hci_event_packet+0x10/0x10 [ 1587.931634][ T53] ? mark_held_locks+0x9f/0xe0 [ 1587.931673][ T53] ? kcov_remote_start+0x3d1/0x6e0 [ 1587.931701][ T53] ? lockdep_hardirqs_on+0x7c/0x110 [ 1587.931737][ T53] hci_rx_work+0x2c4/0x1610 [ 1587.931772][ T53] process_one_work+0x9c5/0x1b40 [ 1587.931802][ T53] ? __pfx_lock_acquire+0x10/0x10 [ 1587.931842][ T53] ? __pfx_process_one_work+0x10/0x10 [ 1587.931871][ T53] ? assign_work+0x1a0/0x250 [ 1587.931911][ T53] worker_thread+0x6c8/0xf30 [ 1587.931941][ T53] ? __pfx_worker_thread+0x10/0x10 [ 1587.931974][ T53] kthread+0x2c1/0x3a0 [ 1587.932006][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 1587.932035][ T53] ? __pfx_kthread+0x10/0x10 [ 1587.932069][ T53] ret_from_fork+0x45/0x80 [ 1587.932121][ T53] ? __pfx_kthread+0x10/0x10 [ 1587.932164][ T53] ret_from_fork_asm+0x1a/0x30 [ 1587.932221][ T53] [ 1587.933631][ T53] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1587.933684][ T53] Bluetooth: hci1: failed to register connection device [ 1588.265386][T16710] hsr_slave_0: entered promiscuous mode [ 1588.275469][T16710] hsr_slave_1: entered promiscuous mode [ 1588.281331][T16710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1588.281367][T16710] Cannot create hsr debugfs directory [ 1588.766757][T16627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1589.019234][T16627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1589.184643][T16627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1589.230049][T16627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1589.674740][T13611] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1589.734954][T16988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2176'. [ 1589.745479][T16988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2176'. [ 1589.747389][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2176'. [ 1589.873269][T13611] usb 2-1: Using ep0 maxpacket: 8 [ 1589.877890][T13611] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1589.877925][T13611] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1589.877953][T13611] usb 2-1: config 137 has no interface number 0 [ 1589.877975][T13611] usb 2-1: config 137 has no interface number 1 [ 1589.878041][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.878071][T13611] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1589.878109][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.878162][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1589.878199][T13611] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1589.878227][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1589.884396][T13611] usb 2-1: language id specifier not provided by device, defaulting to English [ 1589.887131][T13611] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1590.045118][T13611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.062318][T13611] usb 2-1: Product: Ї [ 1590.080314][T13611] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1590.087505][T13611] usb 2-1: SerialNumber: ⠁ [ 1590.111651][ T53] Bluetooth: hci1: command tx timeout [ 1590.200850][T16984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1591.064946][T13611] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1591.115767][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1591.115792][ T29] audit: type=1326 audit(1720337390.130:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1591.188161][T16627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1591.205730][ T29] audit: type=1326 audit(1720337390.213:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1591.251433][T13611] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1591.404176][T13611] usb 2-1: USB disconnect, device number 62 [ 1591.420522][T16627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1591.488480][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.495815][T10283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.572001][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.579400][T10283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.842879][ T29] audit: type=1326 audit(1720337390.803:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1592.010693][ T29] audit: type=1326 audit(1720337390.803:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1592.199532][T16710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1592.223971][ T29] audit: type=1326 audit(1720337390.803:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1592.357608][T16710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1592.388525][ T29] audit: type=1326 audit(1720337390.803:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1592.660386][ T5094] Bluetooth: hci4: command 0x0406 tx timeout [ 1592.695324][T16710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1592.713875][ T29] audit: type=1326 audit(1720337390.803:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1594.252696][ T29] audit: type=1326 audit(1720337390.803:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1594.296249][T16710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1594.363455][ T29] audit: type=1326 audit(1720337390.803:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1594.539800][ T29] audit: type=1326 audit(1720337390.812:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.2.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1595.225516][T16710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.427422][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.491482][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.498834][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1595.633295][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.640638][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.847646][T16627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.176736][ T53] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1596.635671][T16627] veth0_vlan: entered promiscuous mode [ 1596.734691][T16627] veth1_vlan: entered promiscuous mode [ 1596.999929][T16627] veth0_macvtap: entered promiscuous mode [ 1597.056049][T16627] veth1_macvtap: entered promiscuous mode [ 1597.265293][T17068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1597.268901][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.268935][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.268955][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.268981][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.269000][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.269025][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.269045][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.269070][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.269089][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.269113][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.271850][T16627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.297640][T17068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1597.393892][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2187'. [ 1597.641037][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.695652][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.742506][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.781642][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.840665][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.898861][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.944316][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.986185][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.035298][T16627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.079624][T16627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.120129][T16627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.250145][T16627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.298865][T16627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.313943][T14054] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1598.328647][T16627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.359958][T16627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.525594][T16710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.574073][T14054] usb 2-1: Using ep0 maxpacket: 8 [ 1598.619167][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1598.619190][ T29] audit: type=1326 audit(1720337397.061:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1598.650141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.691908][T14054] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1598.727252][ T29] audit: type=1326 audit(1720337397.061:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1598.755202][T14054] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1598.792156][T14054] usb 2-1: config 137 has no interface number 0 [ 1598.837621][T14054] usb 2-1: config 137 has no interface number 1 [ 1598.860819][T14054] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1598.920665][T14054] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1598.973197][T14054] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1599.016847][T14054] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1599.056341][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.069772][T14054] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1599.105949][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.126644][T14054] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1599.196781][T14054] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1599.244931][T14054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.253224][T14054] usb 2-1: Product: Ї [ 1599.293872][T14054] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1599.331697][T14054] usb 2-1: SerialNumber: ⠁ [ 1599.367070][ T2794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.378695][T17073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1599.386781][ T29] audit: type=1326 audit(1720337397.744:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1599.410337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.452163][ T2794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.536348][ T29] audit: type=1326 audit(1720337397.744:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1599.657574][ T29] audit: type=1326 audit(1720337397.744:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1599.681141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.786729][ T29] audit: type=1326 audit(1720337397.753:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1599.970804][ T29] audit: type=1326 audit(1720337397.753:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1600.028893][T17101] netlink: 'syz.0.2191': attribute type 4 has an invalid length. [ 1600.129850][T17101] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2191'. [ 1600.139539][ T29] audit: type=1326 audit(1720337397.753:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1600.217833][ T29] audit: type=1326 audit(1720337397.753:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1600.325318][ T29] audit: type=1326 audit(1720337397.753:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17075 comm="syz.0.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1600.389717][T14054] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1600.674704][T14054] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1600.942854][T14054] usb 2-1: USB disconnect, device number 63 [ 1601.008503][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.140325][T16710] veth0_vlan: entered promiscuous mode [ 1601.418870][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.488809][T16710] veth1_vlan: entered promiscuous mode [ 1601.557291][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.710206][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.840072][T16710] veth0_macvtap: entered promiscuous mode [ 1601.870229][T16710] veth1_macvtap: entered promiscuous mode [ 1601.966878][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.978376][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.989034][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.018625][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.028544][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.072155][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.094585][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.117777][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.137766][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.174141][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.190773][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.201450][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.214755][T16710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.452359][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.485797][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.507529][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.524238][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.538603][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.549107][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.559105][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.569764][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.579892][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.603610][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.613697][T16710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.638090][T16710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.670247][T16710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.705781][ T12] bridge_slave_1: left allmulticast mode [ 1602.711508][ T12] bridge_slave_1: left promiscuous mode [ 1602.728932][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.764006][ T12] bridge_slave_0: left allmulticast mode [ 1602.795886][ T12] bridge_slave_0: left promiscuous mode [ 1602.809008][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.425817][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.437637][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.461692][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.524837][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.549348][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.579058][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.639008][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.688338][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.730994][ T25] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1606.760829][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.815251][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.869448][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.901572][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.938379][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1606.967522][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.004184][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.011673][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.032803][ T25] usb 3-1: config 0 has no interfaces? [ 1607.052428][ T25] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1607.080176][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.087612][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.106547][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.146416][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.163298][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.188009][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.223758][ T25] usb 3-1: config 0 descriptor?? [ 1607.231424][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.254797][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1607.275669][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.283426][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1607.293619][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.301268][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1607.309807][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.319024][ T785] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1607.326708][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1607.342046][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1607.350457][ T785] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1607.363670][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1607.599344][T14054] usb 3-1: USB disconnect, device number 59 [ 1608.141396][ T53] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1609.346253][T17185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2198'. [ 1609.431397][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2198'. [ 1609.489905][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.552843][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.613946][ T5094] Bluetooth: hci3: command tx timeout [ 1609.645004][ T12] bond0 (unregistering): Released all slaves [ 1609.906358][T17185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2198'. [ 1609.984947][T16710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.036776][T16710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.071285][T16710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.099740][T16710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.387225][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1610.387251][ T29] audit: type=1326 audit(1720337407.924:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1610.531021][ T29] audit: type=1326 audit(1720337407.970:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1610.724328][T17158] lo speed is unknown, defaulting to 1000 [ 1611.100371][ T29] audit: type=1326 audit(1720337408.570:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1611.232709][ T29] audit: type=1326 audit(1720337408.570:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1611.355802][ T29] audit: type=1326 audit(1720337408.570:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1611.380192][T17207] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2201'. [ 1611.471029][ T29] audit: type=1326 audit(1720337408.579:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1611.567222][ T29] audit: type=1326 audit(1720337408.579:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1611.718094][ T29] audit: type=1326 audit(1720337408.579:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1611.775505][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.867428][ T5094] Bluetooth: hci3: command tx timeout [ 1611.909048][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.971215][ T29] audit: type=1326 audit(1720337408.579:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1612.047341][ T29] audit: type=1326 audit(1720337408.579:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17196 comm="syz.2.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ba975bd9 code=0x7fc00000 [ 1612.282209][ T5714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1612.321169][ T5714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.996264][ T53] Bluetooth: hci3: command tx timeout [ 1615.000414][T15715] Bluetooth: hci1: command 0x0406 tx timeout [ 1615.714750][ T12] hsr_slave_0: left promiscuous mode [ 1615.765334][ T12] hsr_slave_1: left promiscuous mode [ 1615.812947][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1615.833958][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.855040][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1615.886625][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1615.886668][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.920353][T17251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2206'. [ 1615.963509][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1615.981302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.995712][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.006283][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.030545][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.060657][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.102381][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.111684][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.133992][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.143500][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.169717][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.205273][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.236525][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.255855][T13611] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1616.265163][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.294838][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.302790][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.328856][ T12] veth1_macvtap: left promiscuous mode [ 1616.331574][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.386896][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.386944][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.386983][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.387021][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.387067][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.387106][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.387145][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.387183][ T785] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1616.392483][ T785] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1616.412021][ T12] veth0_macvtap: left promiscuous mode [ 1616.412395][ T12] veth1_vlan: left promiscuous mode [ 1616.412615][ T12] veth0_vlan: left promiscuous mode [ 1616.420636][ T5094] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1616.420792][ T5094] CPU: 0 PID: 5094 Comm: kworker/u9:3 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1616.420833][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1616.420859][ T5094] Workqueue: hci4 hci_rx_work [ 1616.420907][ T5094] Call Trace: [ 1616.420922][ T5094] [ 1616.420936][ T5094] dump_stack_lvl+0x16c/0x1f0 [ 1616.420981][ T5094] sysfs_warn_dup+0x7f/0xa0 [ 1616.421033][ T5094] sysfs_create_dir_ns+0x24d/0x2b0 [ 1616.421099][ T5094] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1616.421154][ T5094] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1616.421197][ T5094] ? do_raw_spin_unlock+0x172/0x230 [ 1616.421238][ T5094] kobject_add_internal+0x2c8/0x990 [ 1616.421289][ T5094] kobject_add+0x16f/0x240 [ 1616.421339][ T5094] ? __pfx_kobject_add+0x10/0x10 [ 1616.421387][ T5094] ? do_raw_spin_unlock+0x172/0x230 [ 1616.421436][ T5094] ? kobject_put+0xbe/0x5b0 [ 1616.421484][ T5094] device_add+0x289/0x1a70 [ 1616.421541][ T5094] ? __pfx_dev_set_name+0x10/0x10 [ 1616.421580][ T5094] ? __pfx_device_add+0x10/0x10 [ 1616.421635][ T5094] ? mgmt_send_event_skb+0x2f0/0x460 [ 1616.421682][ T5094] hci_conn_add_sysfs+0x17e/0x230 [ 1616.421732][ T5094] le_conn_complete_evt+0x1078/0x1d80 [ 1616.421777][ T5094] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1616.421817][ T5094] ? trace_contention_end+0xea/0x140 [ 1616.421854][ T5094] ? __mutex_lock+0x1a6/0x9c0 [ 1616.421902][ T5094] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 1616.421946][ T5094] ? skb_pull_data+0x166/0x210 [ 1616.421990][ T5094] hci_le_meta_evt+0x2e2/0x5d0 [ 1616.422036][ T5094] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1616.422088][ T5094] hci_event_packet+0x664/0x1170 [ 1616.422130][ T5094] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1616.422175][ T5094] ? __pfx_hci_event_packet+0x10/0x10 [ 1616.422215][ T5094] ? mark_held_locks+0x9f/0xe0 [ 1616.422270][ T5094] ? kcov_remote_start+0x3d1/0x6e0 [ 1616.422307][ T5094] ? lockdep_hardirqs_on+0x7c/0x110 [ 1616.422355][ T5094] hci_rx_work+0x2c4/0x1610 [ 1616.422405][ T5094] process_one_work+0x9c5/0x1b40 [ 1616.422448][ T5094] ? __pfx_lock_acquire+0x10/0x10 [ 1616.422504][ T5094] ? __pfx_process_one_work+0x10/0x10 [ 1616.422544][ T5094] ? assign_work+0x1a0/0x250 [ 1616.422600][ T5094] worker_thread+0x6c8/0xf30 [ 1616.422642][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 1616.422678][ T5094] kthread+0x2c1/0x3a0 [ 1616.422723][ T5094] ? _raw_spin_unlock_irq+0x23/0x50 [ 1616.422760][ T5094] ? __pfx_kthread+0x10/0x10 [ 1616.422805][ T5094] ret_from_fork+0x45/0x80 [ 1616.422857][ T5094] ? __pfx_kthread+0x10/0x10 [ 1616.422901][ T5094] ret_from_fork_asm+0x1a/0x30 [ 1616.422960][ T5094] [ 1616.423009][ T5094] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1616.423082][ T5094] Bluetooth: hci4: failed to register connection device [ 1616.529377][T13611] usb 5-1: config 0 has no interfaces? [ 1616.529427][T13611] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1616.529458][T13611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.556285][T13611] usb 5-1: config 0 descriptor?? [ 1617.242222][ T5094] Bluetooth: hci3: command tx timeout [ 1617.528193][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1618.639958][ T5094] Bluetooth: hci4: command 0x0406 tx timeout [ 1618.852729][T10247] usb 5-1: USB disconnect, device number 31 [ 1619.027668][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1619.194964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1620.966587][T17251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2206'. [ 1621.394270][T17277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2210'. [ 1621.717789][T17277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2210'. [ 1622.029987][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1622.030013][ T29] audit: type=1326 audit(1720337418.658:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1622.119028][T17158] chnl_net:caif_netlink_parms(): no params data found [ 1622.136452][ T29] audit: type=1326 audit(1720337418.713:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1622.866795][ T29] audit: type=1326 audit(1720337419.415:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1623.065293][ T29] audit: type=1326 audit(1720337419.415:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1623.186893][ T29] audit: type=1326 audit(1720337419.415:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1623.268533][T17158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.276079][T17158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.312222][T17158] bridge_slave_0: entered allmulticast mode [ 1623.329924][ T29] audit: type=1326 audit(1720337419.415:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1623.363267][T17158] bridge_slave_0: entered promiscuous mode [ 1623.392005][T17158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.411374][T17158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.427892][ T29] audit: type=1326 audit(1720337419.415:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1623.455256][T17158] bridge_slave_1: entered allmulticast mode [ 1623.471911][T17158] bridge_slave_1: entered promiscuous mode [ 1624.345229][ T29] audit: type=1326 audit(1720337419.415:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1624.488945][ T29] audit: type=1326 audit(1720337419.415:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1624.618012][ T29] audit: type=1326 audit(1720337419.415:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x7fc00000 [ 1624.759865][T17158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.833095][T17158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.349461][ T5094] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1625.584034][T17158] team0: Port device team_slave_0 added [ 1625.715146][T17158] team0: Port device team_slave_1 added [ 1626.391200][T17158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.433856][T17158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.570704][T17158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.628417][T17158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.654170][T17158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.699236][T17158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.013652][T17158] hsr_slave_0: entered promiscuous mode [ 1627.045238][T17158] hsr_slave_1: entered promiscuous mode [ 1630.789148][T17375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2224'. [ 1630.844579][T17375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2224'. [ 1630.951397][T17158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1631.038244][T17158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1631.121081][T17158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1631.233214][T17158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1632.092056][T17158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.306611][T17158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.241036][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.248331][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.332645][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1633.332671][ T29] audit: type=1326 audit(1720337429.106:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.387958][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.395307][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.475322][ T29] audit: type=1326 audit(1720337429.152:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.611612][ T29] audit: type=1326 audit(1720337429.355:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.706757][ T29] audit: type=1326 audit(1720337429.355:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.823632][ T29] audit: type=1326 audit(1720337429.355:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.991628][ T29] audit: type=1326 audit(1720337429.355:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.991729][ T29] audit: type=1326 audit(1720337429.355:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.991818][ T29] audit: type=1326 audit(1720337429.392:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.992807][ T29] audit: type=1326 audit(1720337429.392:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1633.992884][ T29] audit: type=1326 audit(1720337429.392:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.4.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1634.235659][ T5094] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1634.458019][T13611] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1634.585925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.671683][T13611] usb 2-1: Using ep0 maxpacket: 8 [ 1634.714619][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1634.728591][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1634.767872][T13611] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1634.777103][T13611] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1634.813774][T13611] usb 2-1: config 137 has no interface number 0 [ 1634.853865][T13611] usb 2-1: config 137 has no interface number 1 [ 1634.853978][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1634.854023][T13611] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1634.854070][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1634.854134][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1634.854183][T13611] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1634.854223][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1634.866913][T13611] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1634.866951][T13611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.866978][T13611] usb 2-1: Product: Ї [ 1634.866998][T13611] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1634.867021][T13611] usb 2-1: SerialNumber: ⠁ [ 1634.884504][T17409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1635.075516][ T5137] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1635.250815][T17158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.271756][ T5137] usb 5-1: Using ep0 maxpacket: 8 [ 1635.330654][ T5137] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1635.330688][ T5137] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.330727][ T5137] usb 5-1: config 0 has no interface number 0 [ 1635.330800][ T5137] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1635.330837][ T5137] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1635.330872][ T5137] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1635.330927][ T5137] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1635.330972][ T5137] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1635.331002][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.343853][ T5137] usb 5-1: config 0 descriptor?? [ 1635.737926][ T5137] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input21 [ 1635.940955][T17158] veth0_vlan: entered promiscuous mode [ 1636.026076][T13611] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1636.045447][T17158] veth1_vlan: entered promiscuous mode [ 1636.278981][T13611] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1636.378057][T17158] veth0_macvtap: entered promiscuous mode [ 1636.466751][T17158] veth1_macvtap: entered promiscuous mode [ 1636.508868][T13611] usb 2-1: USB disconnect, device number 64 [ 1636.583681][T17435] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1636.919339][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.008258][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.049270][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.087629][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.139281][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.416284][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.507096][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1639.572427][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.607678][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1639.656485][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.954076][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.159690][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.271462][T17158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.554761][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.693348][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.765367][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.840492][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.878126][ T932] usb 5-1: USB disconnect, device number 32 [ 1640.937841][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.029387][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.119506][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.174074][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.262078][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.300674][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.348745][T17158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.396755][T17158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.446952][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2236'. [ 1641.470568][T17158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.554850][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2236'. [ 1641.690483][T17158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.814731][T17158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.858531][T17158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.995396][T17158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.343294][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.384706][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.724040][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1644.747947][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1644.759499][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1644.807448][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1644.815944][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1644.850910][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1646.419696][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1646.419715][ T29] audit: type=1326 audit(1720337441.169:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1646.449576][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.471904][ T5944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.577680][ T29] audit: type=1326 audit(1720337441.289:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1646.630513][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.653022][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.865762][ T5094] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1646.953777][ T5944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.116414][ T29] audit: type=1326 audit(1720337441.824:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.126758][ T29] audit: type=1326 audit(1720337441.824:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.182305][T15715] Bluetooth: hci4: command tx timeout [ 1647.212614][T13611] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1647.269815][ T29] audit: type=1326 audit(1720337441.833:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.269916][ T29] audit: type=1326 audit(1720337441.833:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.270003][ T29] audit: type=1326 audit(1720337441.833:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.270095][ T29] audit: type=1326 audit(1720337441.833:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.270187][ T29] audit: type=1326 audit(1720337441.833:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.270894][ T29] audit: type=1326 audit(1720337441.833:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17501 comm="syz.4.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1647.279328][T17493] lo speed is unknown, defaulting to 1000 [ 1647.402177][ T5944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.406479][T13611] usb 2-1: Using ep0 maxpacket: 8 [ 1647.529713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.824078][ T5944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.895278][T13611] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1647.895314][T13611] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1647.895347][T13611] usb 2-1: config 137 has no interface number 0 [ 1647.895370][T13611] usb 2-1: config 137 has no interface number 1 [ 1647.895443][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1647.895473][T13611] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1647.895506][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1647.895559][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1647.895596][T13611] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1647.895624][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1647.898813][T13611] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1648.196334][T13611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.204636][T13611] usb 2-1: Product: Ї [ 1648.246111][T13611] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1648.275323][T13611] usb 2-1: SerialNumber: ⠁ [ 1648.302751][T17514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1648.724879][ T5944] bridge_slave_1: left allmulticast mode [ 1648.735966][ T5944] bridge_slave_1: left promiscuous mode [ 1648.758284][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.859069][ T5944] bridge_slave_0: left allmulticast mode [ 1648.873515][ T5944] bridge_slave_0: left promiscuous mode [ 1648.895347][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.931292][T13611] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1649.033303][T13611] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1649.145788][T13611] usb 2-1: USB disconnect, device number 65 [ 1649.410085][T15715] Bluetooth: hci4: command tx timeout [ 1649.917671][T17519] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2245'. [ 1650.362948][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.400934][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.512942][ T5944] bond0 (unregistering): Released all slaves [ 1651.652995][T15715] Bluetooth: hci4: command tx timeout [ 1654.048526][T15715] Bluetooth: hci4: command tx timeout [ 1655.535840][T17493] chnl_net:caif_netlink_parms(): no params data found [ 1656.274021][ T5944] hsr_slave_0: left promiscuous mode [ 1656.305562][ T5944] hsr_slave_1: left promiscuous mode [ 1656.335826][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.343297][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.413904][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1656.463378][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.708578][ T5944] veth1_macvtap: left promiscuous mode [ 1656.768808][ T5944] veth0_macvtap: left promiscuous mode [ 1656.797784][ T5944] veth1_vlan: left promiscuous mode [ 1656.815841][ T5944] veth0_vlan: left promiscuous mode [ 1656.837944][T15715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1656.870170][T15715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1656.891223][T15715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1656.907946][T15715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1656.917233][T15715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1656.925865][T15715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1658.535837][T17572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2250'. [ 1658.662379][T17576] netlink: 'syz.1.2251': attribute type 4 has an invalid length. [ 1658.697160][T17576] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2251'. [ 1659.194195][T15715] Bluetooth: hci3: command tx timeout [ 1661.491815][T15715] Bluetooth: hci3: command tx timeout [ 1661.997798][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 1662.135969][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.155427][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 1662.194907][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.202389][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.259934][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.285710][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.315936][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.323400][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.331990][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.340290][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.373292][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.382832][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.395115][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.417127][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.442894][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.451211][T13611] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1662.475828][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.489361][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.496911][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.512102][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.519900][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.527504][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.540109][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.558549][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.582604][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.600517][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.615839][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.627928][ T785] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1662.660550][ T785] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1662.690618][T13611] usb 2-1: config 0 has no interfaces? [ 1662.700160][T13611] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1662.736594][T13611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.782050][T13611] usb 2-1: config 0 descriptor?? [ 1663.701431][ T5094] Bluetooth: hci3: command tx timeout [ 1664.542231][T17572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2250'. [ 1664.646853][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.685855][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.712693][T17493] bridge_slave_0: entered allmulticast mode [ 1664.741476][T17493] bridge_slave_0: entered promiscuous mode [ 1664.778137][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.822243][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.871702][T17493] bridge_slave_1: entered allmulticast mode [ 1664.896469][T17493] bridge_slave_1: entered promiscuous mode [ 1665.130928][T17558] lo speed is unknown, defaulting to 1000 [ 1665.158919][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1665.230552][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1665.230578][ T29] audit: type=1326 audit(1720337458.520:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1665.279981][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.378299][ T29] audit: type=1326 audit(1720337458.594:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1665.578917][ T5154] usb 2-1: USB disconnect, device number 66 [ 1665.718946][T17493] team0: Port device team_slave_0 added [ 1665.835123][T17493] team0: Port device team_slave_1 added [ 1665.968908][ T5094] Bluetooth: hci3: command tx timeout [ 1666.594029][ T29] audit: type=1326 audit(1720337459.720:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1667.209416][ T29] audit: type=1326 audit(1720337459.739:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1667.364066][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.381561][ T29] audit: type=1326 audit(1720337459.739:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1667.644872][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.753527][ T29] audit: type=1326 audit(1720337459.748:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1670.180147][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.242052][ T29] audit: type=1326 audit(1720337459.757:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f75bd9 code=0x7fc00000 [ 1670.276560][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.349789][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.421515][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.062029][ T5944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.370707][T17493] hsr_slave_0: entered promiscuous mode [ 1671.424959][T17493] hsr_slave_1: entered promiscuous mode [ 1671.455408][T17493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1671.491252][T17493] Cannot create hsr debugfs directory [ 1671.698590][ T5944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.149212][ T5944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.681424][ T5944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.690113][T17664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1675.239233][T17664] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1675.407285][T17558] chnl_net:caif_netlink_parms(): no params data found [ 1675.820416][ T5944] bridge_slave_1: left allmulticast mode [ 1675.868384][ T5944] bridge_slave_1: left promiscuous mode [ 1675.874415][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.935704][ T5944] bridge_slave_0: left allmulticast mode [ 1675.973986][ T5944] bridge_slave_0: left promiscuous mode [ 1675.999155][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.075999][T15715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1681.091876][T15715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1681.101613][T15715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1681.112680][T15715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1681.121138][T15715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1681.170105][T15715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1681.533936][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.629898][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.682755][ T5944] bond0 (unregistering): Released all slaves [ 1682.705085][T17697] lo speed is unknown, defaulting to 1000 [ 1683.261017][T17558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.305112][T17558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.340504][T17558] bridge_slave_0: entered allmulticast mode [ 1683.377114][T15715] Bluetooth: hci7: command tx timeout [ 1683.384991][T17558] bridge_slave_0: entered promiscuous mode [ 1683.447016][T17558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.513694][T17558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.557910][T17558] bridge_slave_1: entered allmulticast mode [ 1683.585450][T17558] bridge_slave_1: entered promiscuous mode [ 1684.704303][T17558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.781262][T17558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.921615][ T5944] hsr_slave_0: left promiscuous mode [ 1684.958170][ T5944] hsr_slave_1: left promiscuous mode [ 1684.992042][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1685.026149][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.141853][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.178054][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.365082][ T5944] veth1_macvtap: left promiscuous mode [ 1685.461436][ T5944] veth0_macvtap: left promiscuous mode [ 1685.480236][ T5944] veth1_vlan: left promiscuous mode [ 1685.506852][ T5944] veth0_vlan: left promiscuous mode [ 1685.630609][T15715] Bluetooth: hci7: command tx timeout [ 1687.884462][T15715] Bluetooth: hci7: command tx timeout [ 1688.061078][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 1688.153046][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 1689.479315][T17493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1689.679122][T17493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1689.686749][T17742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2276'. [ 1689.743836][T17558] team0: Port device team_slave_0 added [ 1689.779775][T17558] team0: Port device team_slave_1 added [ 1689.829092][T17742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2276'. [ 1689.858748][T17493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1690.087762][T17493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1690.150550][T15715] Bluetooth: hci7: command tx timeout [ 1690.211515][T17558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.237324][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.332066][T17558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.387777][T17558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.412085][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.734217][T17558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.990909][ T25] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1692.078673][T17558] hsr_slave_0: entered promiscuous mode [ 1692.112235][T17558] hsr_slave_1: entered promiscuous mode [ 1692.261501][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1692.293575][ T25] usb 1-1: config 137 has an invalid interface number: 211 but max is 1 [ 1692.348066][ T25] usb 1-1: config 137 has an invalid interface number: 115 but max is 1 [ 1692.356503][ T25] usb 1-1: config 137 has no interface number 0 [ 1692.412819][ T25] usb 1-1: config 137 has no interface number 1 [ 1692.433228][ T25] usb 1-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1692.467198][ T25] usb 1-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1692.477558][ T25] usb 1-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1692.506655][ T25] usb 1-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1692.518575][ T25] usb 1-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1692.574269][ T25] usb 1-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1692.646547][ T25] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1692.684772][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.716533][ T25] usb 1-1: Product: Ї [ 1692.733926][ T25] usb 1-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1692.749042][ T25] usb 1-1: SerialNumber: ⠁ [ 1692.775487][ T5714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.808973][T17758] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1693.021837][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2279'. [ 1693.221808][ T5714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.461900][ T25] ums_eneub6250 1-1:137.211: USB Mass Storage device detected [ 1693.600378][ T25] ums_eneub6250 1-1:137.115: USB Mass Storage device detected [ 1693.677363][ T5714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.822030][ T25] usb 1-1: USB disconnect, device number 59 [ 1694.014984][ T5714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.199353][T17697] chnl_net:caif_netlink_parms(): no params data found [ 1695.496564][T17697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.522999][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.530414][T17697] bridge_slave_0: entered allmulticast mode [ 1695.808582][T17697] bridge_slave_0: entered promiscuous mode [ 1698.052782][ T5714] bridge_slave_1: left allmulticast mode [ 1698.080077][ T5714] bridge_slave_1: left promiscuous mode [ 1698.153642][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.212181][ T5714] bridge_slave_0: left allmulticast mode [ 1698.231999][ T5714] bridge_slave_0: left promiscuous mode [ 1698.237934][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.841831][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.882058][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1699.918821][ T5714] bond0 (unregistering): Released all slaves [ 1700.112375][T17697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.160544][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.167970][T17697] bridge_slave_1: entered allmulticast mode [ 1700.212881][T17697] bridge_slave_1: entered promiscuous mode [ 1700.452124][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1700.697810][T17697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.730045][T17697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.856932][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2286'. [ 1701.286272][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1701.293225][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1702.590160][T15715] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1702.666863][T17697] team0: Port device team_slave_0 added [ 1702.990567][T17697] team0: Port device team_slave_1 added [ 1703.180736][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.620760][T17697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.656135][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.784014][T17697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.884006][T17697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.913964][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.052694][T17697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.374781][ T785] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1704.402203][ T5714] hsr_slave_0: left promiscuous mode [ 1704.443474][ T5714] hsr_slave_1: left promiscuous mode [ 1704.455427][T17845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1704.468629][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1704.486930][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.521831][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1704.558427][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.592025][ T785] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1704.612432][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.635825][ T785] usb 1-1: Product: syz [ 1704.640045][ T785] usb 1-1: Manufacturer: syz [ 1704.644702][ T785] usb 1-1: SerialNumber: syz [ 1704.703593][ T785] usb 1-1: config 0 descriptor?? [ 1704.757087][ T785] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1704.775747][ T5714] veth1_macvtap: left promiscuous mode [ 1704.781484][ T5714] veth0_macvtap: left promiscuous mode [ 1704.788029][ T5714] veth1_vlan: left promiscuous mode [ 1704.795354][ T5714] veth0_vlan: left promiscuous mode [ 1705.125002][T17852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.175461][T17852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.347687][ T785] gspca_vc032x: reg_r err -110 [ 1705.361893][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.394298][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.425125][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.463950][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.485900][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.523254][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.537140][ T29] audit: type=1326 audit(1720337495.743:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2fb75bd9 code=0x0 [ 1705.551746][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.614776][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.640587][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.679620][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.708104][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.713446][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.750818][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.760222][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.797842][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.849259][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.854733][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.969905][ T785] gspca_vc032x: I2c Bus Busy Wait 00 [ 1705.975284][ T785] gspca_vc032x: Unknown sensor... [ 1706.067322][ T785] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1706.263272][T15715] Bluetooth: hci1: command 0x0406 tx timeout [ 1707.613943][T10247] usb 1-1: USB disconnect, device number 60 [ 1707.844504][ T5094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1707.882908][ T5094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1707.896463][ T5094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1707.908458][ T5094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1707.933680][ T5094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1707.941945][ T5094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1708.401990][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 1708.641037][T17868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1709.174747][ T5714] team0 (unregistering): Port device team_slave_1 removed [ 1709.257555][ T5714] team0 (unregistering): Port device team_slave_0 removed [ 1710.160810][ T5094] Bluetooth: hci5: command tx timeout [ 1712.138951][T17697] hsr_slave_0: entered promiscuous mode [ 1712.205250][T17697] hsr_slave_1: entered promiscuous mode [ 1712.275050][T17697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1712.297909][T17902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1712.316614][T17697] Cannot create hsr debugfs directory [ 1712.324363][T17874] lo speed is unknown, defaulting to 1000 [ 1712.352592][T17902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1712.422588][ T5094] Bluetooth: hci5: command tx timeout [ 1712.664565][T17558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1712.729605][T17558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1713.095076][T17558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1713.382654][T17558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1714.127270][ T785] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1714.486238][ T785] usb 2-1: Using ep0 maxpacket: 8 [ 1714.527395][ T785] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1714.558898][ T785] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1714.578658][ T785] usb 2-1: config 137 has no interface number 0 [ 1714.830045][ T5094] Bluetooth: hci5: command tx timeout [ 1714.851817][ T785] usb 2-1: config 137 has no interface number 1 [ 1714.858282][ T785] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.873014][ T785] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1714.884652][ T785] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.896097][ T785] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1714.907413][ T785] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.918592][ T785] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1716.327501][ T785] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1716.340440][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.348813][ T785] usb 2-1: Product: Ї [ 1716.352983][ T785] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1716.360319][ T785] usb 2-1: SerialNumber: ⠁ [ 1716.370785][T17916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1717.008109][ T5094] Bluetooth: hci5: command tx timeout [ 1717.342884][ T785] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1717.541669][ T785] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1717.723873][ T785] usb 2-1: USB disconnect, device number 67 [ 1718.206429][T17874] chnl_net:caif_netlink_parms(): no params data found [ 1718.412099][T17697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1721.354330][T17697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1721.416969][T17697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1721.520083][ T5714] bridge_slave_1: left allmulticast mode [ 1721.569861][ T5714] bridge_slave_1: left promiscuous mode [ 1721.615452][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.716054][ T5714] bridge_slave_0: left allmulticast mode [ 1721.746865][ T5714] bridge_slave_0: left promiscuous mode [ 1721.766322][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.140370][T15715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1722.152925][T15715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1722.161772][T15715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1722.172337][T15715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1722.182557][T15715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1722.194025][T15715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1724.167004][T17992] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2307'. [ 1724.351837][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.446401][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.473472][ T5094] Bluetooth: hci3: command tx timeout [ 1724.498212][ T5714] bond0 (unregistering): Released all slaves [ 1724.537219][T17697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1724.924580][T17992] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2307'. [ 1725.387351][T17874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.431802][T17874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.468343][T17874] bridge_slave_0: entered allmulticast mode [ 1725.529330][T17874] bridge_slave_0: entered promiscuous mode [ 1725.549574][T18010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1725.625897][T17874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.640358][T17874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.679472][T17874] bridge_slave_1: entered allmulticast mode [ 1725.773457][T17874] bridge_slave_1: entered promiscuous mode [ 1725.847007][T17969] lo speed is unknown, defaulting to 1000 [ 1725.888942][T18010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1726.013065][T18019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2310'. [ 1726.108057][ T5714] hsr_slave_0: left promiscuous mode [ 1726.206875][ T5714] hsr_slave_1: left promiscuous mode [ 1726.241232][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.276111][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.716036][ T5094] Bluetooth: hci3: command tx timeout [ 1728.970305][ T5094] Bluetooth: hci3: command tx timeout [ 1728.990360][ T5714] team0 (unregistering): Port device team_slave_1 removed [ 1731.214819][ T5714] team0 (unregistering): Port device team_slave_0 removed [ 1731.244959][ T5094] Bluetooth: hci3: command tx timeout [ 1732.267409][T18019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2310'. [ 1732.522571][T17874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.677453][T17874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.942608][T17874] team0: Port device team_slave_0 added [ 1733.006667][T17874] team0: Port device team_slave_1 added [ 1733.044937][ T25] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1733.227065][T17874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.245513][T17874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.280698][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1733.301673][ T25] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1733.312786][ T25] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1733.331390][T17874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.345969][ T25] usb 2-1: config 137 has no interface number 0 [ 1733.364411][ T25] usb 2-1: config 137 has no interface number 1 [ 1733.378058][T17874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.396784][ T25] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1733.419542][T17874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1733.455337][ T25] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1733.477045][ T25] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1733.477127][ T25] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1733.521800][T17874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.525229][ T25] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1733.554406][ T25] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1733.610728][ T25] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1733.632650][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.646169][ T25] usb 2-1: Product: Ї [ 1733.659883][ T25] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1733.687989][ T25] usb 2-1: SerialNumber: ⠁ [ 1733.733342][T18047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1734.176528][ T25] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1734.295302][ T25] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1734.451350][ T25] usb 2-1: USB disconnect, device number 68 [ 1734.621739][T17874] hsr_slave_0: entered promiscuous mode [ 1734.680058][T17874] hsr_slave_1: entered promiscuous mode [ 1734.703169][T17874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1734.710812][T17874] Cannot create hsr debugfs directory [ 1735.363730][T18082] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2318'. [ 1735.365016][ T785] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1735.415487][T17697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.434647][T17969] chnl_net:caif_netlink_parms(): no params data found [ 1735.601965][ T785] usb 2-1: Using ep0 maxpacket: 8 [ 1735.617676][ T785] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1735.644094][ T785] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1735.652624][ T785] usb 2-1: config 137 has no interface number 0 [ 1735.698236][ T785] usb 2-1: config 137 has no interface number 1 [ 1735.704646][ T785] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1735.738462][ T785] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1735.752287][ T785] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1736.104327][ T785] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1736.128915][ T785] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1736.188277][ T785] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1736.442542][ T785] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1736.452210][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.460803][ T785] usb 2-1: Product: Ї [ 1736.464964][ T785] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1736.480038][ T785] usb 2-1: SerialNumber: ⠁ [ 1736.491840][T17697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.520028][T18080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1736.904177][ T5714] bridge_slave_1: left allmulticast mode [ 1736.939901][ T5714] bridge_slave_1: left promiscuous mode [ 1736.988118][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.005758][ T5714] bridge_slave_0: left allmulticast mode [ 1737.011873][ T5714] bridge_slave_0: left promiscuous mode [ 1737.021043][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.441244][ T785] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1737.624494][ T785] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1737.682183][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.711496][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.736249][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1737.772961][ T5714] bond0 (unregistering): Released all slaves [ 1737.780374][ T785] usb 2-1: USB disconnect, device number 69 [ 1737.980476][T17969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.022104][T17969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.084505][T17969] bridge_slave_0: entered allmulticast mode [ 1738.130369][T17969] bridge_slave_0: entered promiscuous mode [ 1738.161267][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.168586][T13611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.237478][T18108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1738.400308][T17969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.421216][T17969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.433570][T17969] bridge_slave_1: entered allmulticast mode [ 1738.490768][T17969] bridge_slave_1: entered promiscuous mode [ 1739.159399][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.166720][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.468213][ T5714] hsr_slave_0: left promiscuous mode [ 1739.531796][ T5714] hsr_slave_1: left promiscuous mode [ 1739.572992][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1739.603181][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.760899][ T5714] team0 (unregistering): Port device team_slave_1 removed [ 1740.921524][ T5714] team0 (unregistering): Port device team_slave_0 removed [ 1742.031578][T17969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.116610][T17969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.707585][T18148] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2328'. [ 1742.813632][T17969] team0: Port device team_slave_0 added [ 1742.880031][T17697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1742.974509][T17969] team0: Port device team_slave_1 added [ 1743.596795][T18164] netlink: 'syz.0.2330': attribute type 4 has an invalid length. [ 1743.656661][T18164] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2330'. [ 1743.963542][T17969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.177424][T17969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.254259][T17969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1745.280115][T17969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1745.287758][T17969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.477137][T17969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.025374][T17969] hsr_slave_0: entered promiscuous mode [ 1746.099466][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1746.110863][T17969] hsr_slave_1: entered promiscuous mode [ 1746.478614][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1746.502193][ T9] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1746.511191][ T9] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1746.519599][ T9] usb 2-1: config 137 has no interface number 0 [ 1746.641475][ T9] usb 2-1: config 137 has no interface number 1 [ 1746.648272][ T9] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1746.666165][ T9] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1748.639502][ T9] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1748.755592][ T9] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1748.851471][ T9] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1748.931260][ T9] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1749.041085][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1749.082385][ T9] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1749.133729][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.227385][ T9] usb 2-1: can't set config #137, error -71 [ 1749.269102][T15715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1749.285867][T15715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1749.308384][T15715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1749.319365][ T9] usb 2-1: USB disconnect, device number 70 [ 1749.339462][T15715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1749.349235][T15715] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1749.358601][T15715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1749.645918][T17874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1749.911301][T17874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1750.027455][T17874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1750.088810][T17874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1750.613662][T18194] lo speed is unknown, defaulting to 1000 [ 1750.862054][T18208] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2338'. [ 1751.593940][ T5094] Bluetooth: hci4: command tx timeout [ 1752.026372][T13611] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1752.293228][T13611] usb 2-1: Using ep0 maxpacket: 8 [ 1752.362894][T13611] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1752.799749][T13611] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1752.834581][T13611] usb 2-1: config 137 has no interface number 0 [ 1752.859269][T13611] usb 2-1: config 137 has no interface number 1 [ 1752.894355][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1752.936207][T13611] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1752.955716][T13611] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1752.990535][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1753.047950][ T64] bridge_slave_1: left allmulticast mode [ 1753.064147][T13611] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1753.069316][ T64] bridge_slave_1: left promiscuous mode [ 1753.090365][T13611] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1753.137622][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.164886][T13611] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1753.185663][ T64] bridge_slave_0: left allmulticast mode [ 1753.217823][T13611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.225893][T13611] usb 2-1: Product: Ї [ 1753.241159][ T64] bridge_slave_0: left promiscuous mode [ 1753.250569][T13611] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1753.275754][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.283279][T13611] usb 2-1: SerialNumber: ⠁ [ 1753.309848][T18215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1753.846796][ T5094] Bluetooth: hci4: command tx timeout [ 1754.265268][T13611] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1754.493474][T13611] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1754.657887][T13611] usb 2-1: USB disconnect, device number 71 [ 1756.228733][ T5094] Bluetooth: hci4: command tx timeout [ 1756.709485][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1756.755274][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.820735][ T64] bond0 (unregistering): Released all slaves [ 1758.201725][ T64] hsr_slave_0: left promiscuous mode [ 1758.256042][ T64] hsr_slave_1: left promiscuous mode [ 1758.278374][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1758.298304][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1758.441049][ T5094] Bluetooth: hci4: command tx timeout [ 1759.549201][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1759.728539][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1762.302793][T17874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.317316][T17969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1762.347906][T17969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1762.384350][T18285] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2347'. [ 1762.470749][T10247] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1762.479290][T17969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1762.539865][T17969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1762.713971][T10247] usb 2-1: Using ep0 maxpacket: 8 [ 1762.723407][T10247] usb 2-1: config 137 has an invalid interface number: 211 but max is 1 [ 1762.748584][T10247] usb 2-1: config 137 has an invalid interface number: 115 but max is 1 [ 1762.776898][T10247] usb 2-1: config 137 has no interface number 0 [ 1762.798558][T10247] usb 2-1: config 137 has no interface number 1 [ 1762.804963][T10247] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1762.829566][T10247] usb 2-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1762.840736][T10247] usb 2-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1762.852048][T10247] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1762.863468][T10247] usb 2-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1762.876924][T10247] usb 2-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1762.894055][T10247] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1762.904631][T10247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.914293][T10247] usb 2-1: Product: Ї [ 1762.926079][T17874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.932845][T10247] usb 2-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1762.959418][T10247] usb 2-1: SerialNumber: ⠁ [ 1762.989815][T18322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1763.266072][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.273422][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.395065][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.402533][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.443746][T18194] chnl_net:caif_netlink_parms(): no params data found [ 1764.579518][T10247] ums_eneub6250 2-1:137.211: USB Mass Storage device detected [ 1764.712738][T10247] ums_eneub6250 2-1:137.115: USB Mass Storage device detected [ 1764.730217][ T5154] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1764.765733][T18194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.790320][T18194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.832709][T18194] bridge_slave_0: entered allmulticast mode [ 1764.840483][T18194] bridge_slave_0: entered promiscuous mode [ 1764.858188][T10247] usb 2-1: USB disconnect, device number 72 [ 1764.929467][T18194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.941293][T18194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.948745][T18194] bridge_slave_1: entered allmulticast mode [ 1764.967919][ T5154] usb 1-1: Using ep0 maxpacket: 8 [ 1764.983396][ T5154] usb 1-1: config 137 has an invalid interface number: 211 but max is 1 [ 1764.994432][T18194] bridge_slave_1: entered promiscuous mode [ 1765.002460][ T5154] usb 1-1: config 137 has an invalid interface number: 115 but max is 1 [ 1765.053149][ T5154] usb 1-1: config 137 has no interface number 0 [ 1765.085818][ T5154] usb 1-1: config 137 has no interface number 1 [ 1765.092252][ T5154] usb 1-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1765.146917][ T5154] usb 1-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1765.179047][ T5154] usb 1-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1765.199566][T18194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.221263][ T5154] usb 1-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1765.266742][ T5154] usb 1-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1765.289755][T18194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1765.322713][ T5154] usb 1-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1765.339095][ T5154] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1765.350810][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.386901][ T5154] usb 1-1: Product: Ї [ 1765.394094][ T5154] usb 1-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1765.416210][ T5154] usb 1-1: SerialNumber: ⠁ [ 1765.444771][T18345] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1765.640552][T18194] team0: Port device team_slave_0 added [ 1765.737434][T18194] team0: Port device team_slave_1 added [ 1766.043510][T18194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.063338][T18194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.145569][T18194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.202464][T17969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.260215][T18194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.277133][T18194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.332380][ T5154] ums_eneub6250 1-1:137.211: USB Mass Storage device detected [ 1766.353634][T18194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.461565][ T5154] ums_eneub6250 1-1:137.115: USB Mass Storage device detected [ 1766.679025][ T5154] usb 1-1: USB disconnect, device number 61 [ 1766.807062][T18384] netlink: 'syz.1.2355': attribute type 4 has an invalid length. [ 1766.817948][T18384] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2355'. [ 1766.854632][T18194] hsr_slave_0: entered promiscuous mode [ 1766.877653][T18194] hsr_slave_1: entered promiscuous mode [ 1766.884773][T18194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1766.894285][T18194] Cannot create hsr debugfs directory [ 1767.182207][T17969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.221267][T18386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2356'. [ 1767.237225][T17874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.269766][T18386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2356'. [ 1767.426738][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.434087][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.629262][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.636604][T13611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.818049][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1767.831279][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1768.503182][T17874] veth0_vlan: entered promiscuous mode [ 1768.875676][T17874] veth1_vlan: entered promiscuous mode [ 1772.945032][ T29] audit: type=1400 audit(1720337557.950:2165): avc: denied { map } for pid=18428 comm="syz.1.2362" path="/dev/video4" dev="devtmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1773.017644][T18194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1773.127282][T18194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1773.319213][T18194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1773.410936][T18194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1773.957583][T15715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1773.981928][T15715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1773.992971][T15715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1774.007212][T15715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1774.020945][T15715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1774.031801][T15715] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1774.491469][T17969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1774.985653][T18438] lo speed is unknown, defaulting to 1000 [ 1775.039350][ T5154] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1775.274190][ T5154] usb 1-1: Using ep0 maxpacket: 8 [ 1775.294472][ T5154] usb 1-1: config 137 has an invalid interface number: 211 but max is 1 [ 1775.314299][ T5154] usb 1-1: config 137 has an invalid interface number: 115 but max is 1 [ 1775.347490][ T5154] usb 1-1: config 137 has no interface number 0 [ 1775.403548][ T5154] usb 1-1: config 137 has no interface number 1 [ 1775.443468][ T5154] usb 1-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1775.490983][ T5154] usb 1-1: config 137 interface 211 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1775.517661][ T5154] usb 1-1: config 137 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1775.545304][T17969] veth0_vlan: entered promiscuous mode [ 1775.551142][ T5154] usb 1-1: config 137 interface 115 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1775.613589][ T5154] usb 1-1: config 137 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1775.663273][ T5154] usb 1-1: config 137 interface 115 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1775.695061][T18194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.728286][ T5154] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 1775.791483][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.835212][ T5154] usb 1-1: Product: Ї [ 1775.847829][ T5154] usb 1-1: Manufacturer: 춗ꔟ푓럊䇬⹲ꉷザ⃁Ʃ [ 1775.857549][T17969] veth1_vlan: entered promiscuous mode [ 1775.878981][ T5154] usb 1-1: SerialNumber: ⠁ [ 1775.913896][T18441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1776.011981][T18194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.270167][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.277626][T13611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.298068][T15715] Bluetooth: hci7: command tx timeout [ 1776.379764][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.387142][T13611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.050344][ T1263] bridge_slave_1: left allmulticast mode [ 1777.057873][ T1263] bridge_slave_1: left promiscuous mode [ 1777.063782][ T1263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.112349][ T5154] ums_eneub6250 1-1:137.211: USB Mass Storage device detected [ 1777.134276][ T1263] bridge_slave_0: left allmulticast mode [ 1777.140005][ T1263] bridge_slave_0: left promiscuous mode [ 1777.161753][ T1263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.208273][ T5154] ums_eneub6250 1-1:137.115: USB Mass Storage device detected [ 1777.333616][ T5154] usb 1-1: USB disconnect, device number 62 [ 1777.844703][T18460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2366'. [ 1778.542993][T18469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2367'. [ 1778.553831][T15715] Bluetooth: hci7: command tx timeout [ 1779.382449][ T1263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.464345][ T1263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.500161][ T1263] bond0 (unregistering): Released all slaves [ 1779.708569][T17969] veth0_macvtap: entered promiscuous mode [ 1780.178756][T17969] veth1_macvtap: entered promiscuous mode [ 1780.464502][T18194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1780.627540][ T1263] hsr_slave_0: left promiscuous mode [ 1780.690255][ T1263] hsr_slave_1: left promiscuous mode [ 1780.724680][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.785880][ T1263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.803167][T15715] Bluetooth: hci7: command tx timeout [ 1780.844719][ T1263] veth1_vlan: left promiscuous mode [ 1780.850711][ T1263] veth0_vlan: left promiscuous mode [ 1782.971107][ T1263] team0 (unregistering): Port device team_slave_1 removed [ 1783.067643][T15715] Bluetooth: hci7: command tx timeout [ 1783.152655][ T1263] team0 (unregistering): Port device team_slave_0 removed [ 1785.568141][T18194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1785.633659][T18438] chnl_net:caif_netlink_parms(): no params data found [ 1786.100010][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1786.191546][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1786.349486][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1786.395595][T13611] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1786.416847][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1786.697317][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1786.704945][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1786.721424][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1787.187636][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1787.195123][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1787.206279][ T785] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1900.516384][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1900.523414][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18505/1:b..l [ 1900.532478][ C1] rcu: (detected by 1, t=10503 jiffies, g=192341, q=359 ncpus=2) [ 1900.540694][ C1] task:syz-executor state:R running task stack:27168 pid:18505 tgid:18505 ppid:5073 flags:0x00004000 [ 1900.554260][ C1] Call Trace: [ 1900.557583][ C1] [ 1900.560557][ C1] __schedule+0xf15/0x5d00 [ 1900.565034][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1900.569873][ C1] ? __pfx___schedule+0x10/0x10 [ 1900.574785][ C1] ? hlock_class+0x4e/0x130 [ 1900.579355][ C1] preempt_schedule_irq+0x51/0x90 [ 1900.584438][ C1] irqentry_exit+0x36/0x90 [ 1900.588914][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1900.594972][ C1] RIP: 0010:lock_acquire+0x1f2/0x560 [ 1900.600445][ C1] Code: c1 05 1a ad 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 1900.620115][ C1] RSP: 0018:ffffc90003227710 EFLAGS: 00000206 [ 1900.626246][ C1] RAX: dffffc0000000000 RBX: 1ffff92000644ee4 RCX: 00000000d439196c [ 1900.634269][ C1] RDX: 0000000000000001 RSI: ffffffff8b2cb200 RDI: ffffffff8b8ff680 [ 1900.642307][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284ca58 [ 1900.650428][ C1] R10: ffffffff942652c7 R11: 0000000000000000 R12: 0000000000000000 [ 1900.658656][ C1] R13: 0000000000000000 R14: ffffffff8dbb1620 R15: 0000000000000000 [ 1900.666864][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1900.671965][ C1] ? depot_fetch_stack+0x75/0xc0 [ 1900.676969][ C1] ? __set_page_owner+0x245/0x560 [ 1900.682045][ C1] page_ext_get+0x3a/0x310 [ 1900.686516][ C1] ? page_ext_get+0x34/0x310 [ 1900.691157][ C1] __page_table_check_zero+0xc4/0x360 [ 1900.696598][ C1] post_alloc_hook+0x2c0/0x350 [ 1900.701419][ C1] get_page_from_freelist+0x1353/0x2e50 [ 1900.707048][ C1] ? __pfx___might_resched+0x10/0x10 [ 1900.712396][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1900.718918][ C1] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 1900.725490][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1900.730939][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 1900.736292][ C1] ? alloc_pages_bulk_noprof+0x742/0x14f0 [ 1900.742246][ C1] ? vmalloc_user_noprof+0x6b/0x90 [ 1900.747449][ C1] ? kcov_ioctl+0x4f/0x730 [ 1900.752180][ C1] ? do_syscall_64+0xcd/0x250 [ 1900.757014][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.763148][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1900.768931][ C1] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1900.774969][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1900.780927][ C1] ? policy_nodemask+0xea/0x4e0 [ 1900.785919][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1900.791865][ C1] ? policy_nodemask+0xea/0x4e0 [ 1900.796780][ C1] alloc_pages_mpol_noprof+0x275/0x610 [ 1900.802298][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1900.808339][ C1] ? __pfx___might_resched+0x10/0x10 [ 1900.813680][ C1] ? __vmalloc_node_range_noprof+0x401/0x1520 [ 1900.819827][ C1] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 1900.825801][ C1] ? kcov_ioctl+0x4f/0x730 [ 1900.830275][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1900.836687][ C1] ? kcov_ioctl+0x4f/0x730 [ 1900.841171][ C1] vmalloc_user_noprof+0x6b/0x90 [ 1900.846199][ C1] ? kcov_ioctl+0x4f/0x730 [ 1900.851327][ C1] kcov_ioctl+0x4f/0x730 [ 1900.855741][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 1900.860755][ C1] __x64_sys_ioctl+0x193/0x220 [ 1900.865590][ C1] do_syscall_64+0xcd/0x250 [ 1900.870160][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.876218][ C1] RIP: 0033:0x7fc94ad757db [ 1900.880679][ C1] RSP: 002b:00007ffe286c8860 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1900.889142][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc94ad757db [ 1900.897162][ C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 1900.905178][ C1] RBP: 00007fc94af04358 R08: 00000000000000da R09: 0000000000000000 [ 1900.913212][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1900.921245][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1900.930155][ C1] [ 1900.934381][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g192341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1900.945907][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1900.956279][ C1] rcu: RCU grace-period kthread stack dump: [ 1900.962374][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1900.974265][ C1] Call Trace: [ 1900.977668][ C1] [ 1900.980673][ C1] __schedule+0xf15/0x5d00 [ 1900.985339][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1900.990643][ C1] ? __pfx___schedule+0x10/0x10 [ 1900.995577][ C1] ? schedule+0x298/0x350 [ 1900.999969][ C1] ? __pfx_lock_release+0x10/0x10 [ 1901.005071][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1901.010078][ C1] ? lock_acquire+0x1b1/0x560 [ 1901.014912][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1901.020529][ C1] schedule+0xe7/0x350 [ 1901.024659][ C1] schedule_timeout+0x136/0x2a0 [ 1901.030021][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1901.035553][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1901.040956][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1901.047343][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1901.053320][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1901.058416][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1901.063774][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1901.069033][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1901.074979][ C1] rcu_gp_kthread+0x271/0x380 [ 1901.079725][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1901.084988][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1901.090260][ C1] ? __kthread_parkme+0x148/0x220 [ 1901.095361][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1901.100713][ C1] kthread+0x2c1/0x3a0 [ 1901.104932][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1901.110193][ C1] ? __pfx_kthread+0x10/0x10 [ 1901.114869][ C1] ret_from_fork+0x45/0x80 [ 1901.119567][ C1] ? __pfx_kthread+0x10/0x10 [ 1901.124422][ C1] ret_from_fork_asm+0x1a/0x30 [ 1901.129898][ C1] [ 1901.133323][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1901.141001][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 1901.151691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1901.161819][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1901.167181][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 68 54 1c 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 18 ae b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1901.186932][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 1901.193050][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae767b9 [ 1901.201065][ C1] RDX: 0000000000000001 RSI: ffff888019ebb800 RDI: ffff888019ebb864 [ 1901.209080][ C1] RBP: ffff888019ebb864 R08: 0000000000000001 R09: ffffed1017266fdd [ 1901.217806][ C1] R10: ffff8880b9337eeb R11: 0000000000000000 R12: ffff888017f15000 [ 1901.226465][ C1] R13: ffffffff8e741e00 R14: 0000000000000001 R15: 0000000000000000 [ 1901.234935][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1901.243938][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1901.250583][ C1] CR2: 00007f7b317c8fa8 CR3: 0000000028e8c000 CR4: 00000000003506f0 [ 1901.258620][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1901.267249][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1901.275269][ C1] Call Trace: [ 1901.278591][ C1] [ 1901.281475][ C1] ? show_regs+0x8c/0xa0 [ 1901.285783][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1901.292262][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1901.297520][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 1901.303055][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1901.308761][ C1] ? tmigr_requires_handle_remote+0x14c/0x480 [ 1901.314988][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 1901.321909][ C1] ? hrtimer_run_queues+0x97/0x450 [ 1901.327083][ C1] ? update_process_times+0x175/0x220 [ 1901.332524][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1901.338299][ C1] ? tick_nohz_handler+0x376/0x530 [ 1901.343475][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1901.348987][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 1901.354415][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1901.360278][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 1901.366421][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 1901.371621][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1901.377847][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1901.383712][ C1] [ 1901.386678][ C1] [ 1901.389646][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1901.395876][ C1] ? ct_kernel_exit+0x139/0x190 [ 1901.400874][ C1] ? acpi_safe_halt+0x1a/0x20 [ 1901.405618][ C1] acpi_idle_enter+0xc5/0x160 [ 1901.410364][ C1] cpuidle_enter_state+0x85/0x500 [ 1901.415454][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1901.421330][ C1] cpuidle_enter+0x4e/0xa0 [ 1901.425801][ C1] do_idle+0x313/0x3f0 [ 1901.429924][ C1] ? __pfx_do_idle+0x10/0x10 [ 1901.434572][ C1] cpu_startup_entry+0x4f/0x60 [ 1901.439393][ C1] start_secondary+0x220/0x2b0 [ 1901.444786][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1901.450315][ C1] common_startup_64+0x13e/0x148 [ 1901.455484][ C1]