last executing test programs: 14.628027997s ago: executing program 5 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_io_uring_complete(0x0, r0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x3, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x200, 0x3, 0x33b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c1b, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3acc, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 13.599664101s ago: executing program 5 (id=1353): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc) 13.398635011s ago: executing program 4 (id=1356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004884) 13.232766379s ago: executing program 5 (id=1357): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) unshare(0x2040400) syncfs(r0) 13.042749009s ago: executing program 4 (id=1360): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000020000000100000c02000000000000000000000d00000000c9ec5598fcd836344868d83500000000000000000000cca08a06a6bc9ccc362be3dae197fd900cb12745e3bf910700bfe4141898295538"], 0x0, 0x34}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 11.965410931s ago: executing program 4 (id=1362): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) close(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) 11.676994888s ago: executing program 5 (id=1366): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 9.905978904s ago: executing program 4 (id=1367): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.904419777s ago: executing program 5 (id=1368): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808070, 0x0, 0x1, 0x0, &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r3}, 0x38) 9.889541129s ago: executing program 2 (id=1369): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc) 9.494454188s ago: executing program 2 (id=1372): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.301273078s ago: executing program 1 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x40800) 9.160454238s ago: executing program 2 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peekuser(0x3, 0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 9.025384936s ago: executing program 0 (id=1376): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8806, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,allow_other'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000005580)='./file0\x00', 0x0, 0x3f) 8.956702222s ago: executing program 1 (id=1377): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="400501"]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x3a7, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x4f, 0xa5, 0x42, 0xff, 0x1199, 0x9070, 0xb9d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x395, 0x1, 0xc1, 0x10, 0xa0, 0x2d, "", [{{0x9, 0x4, 0xf2, 0x5, 0xe, 0xa0, 0xbe, 0x7e, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9fea31"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xe2e, 0x5, 0x81, 0x7}, {0x6, 0x24, 0x1a, 0x7, 0x3c}, [@mdlm_detail={0x42, 0x24, 0x13, 0x3, "f3024ba4e810f3133f4066545e3c97dcb12c25349bea527442d0217c7dea72e16b3afa654d628e6599f27af6e4180a3d777ade8d231e3d1ebebb7fae1cc5"}]}, @hid_hid={0x9, 0x21, 0xb7, 0x1, 0x1, {0x22, 0xa51}}], [{{0x9, 0x5, 0x7, 0x1c, 0x200, 0x9, 0x9, 0xf, [@generic={0xef, 0x0, "5c3d90affe6c25d6c83cc91d7a02ff3b29ae36003d9be37578b772a33e9b643ecd9b77ab30d08b207ccd691805c3498ec069d7fb99d60c7a4ec19b9368dd22818b439b00800a50857604744ce2491960846a937be93ab7bc560ec0fc9456d712e570cba3e0b665e524bcc57f918201db5d229c4be045e65577bb0111d44461c6daef50de5dcbd1d747620553258a1a8de57ab0250be88beab41f0f65673cf32607bf3dd4bb8101d079319ff320a92face8cba33a43a758058068b6ba9d4065a5233eaa7ea647b8324bdfff933c50cae6007e6e32dfc1044ce76f5b896a49fd98897e9ecac61fe04f1dce727ac4"}, @generic={0xda, 0xa, "4dac883cdc5ce287d5cb4e85eec36f47d28b8b92807c980162c9cf288e022640219b2c322389bc1af96c6f134b293dba3e21b178528073c21f61dc238d2b932fb74b615ab0c71cb6aa107d66f0b42fe68e282053dbb720010e51c3794eca9b0d2a3623254f06228bc49cc4f42354c5781c3b48ce52d1f011a0d6cdb72acb15e0a4c45a54f108c57243296ca0dc0e41e3f06dee1c695a46cbb73338c87ebdb555a18e7df1923cf955712f029dd88df065723ce9274cfcc1918d708e11593480a4dcfe7fbbec120a2d1b0e7d0f77303d2cbd9e3c1e8aa62d34"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x8, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xab8f}]}}, {{0x9, 0x5, 0x3, 0x0, 0x1ef, 0x19, 0x3, 0x5c}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x7, 0xf8, 0xbe}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xfe, 0xf7}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x6, 0x6, 0x3, [@generic={0x17, 0xb, "28bd090d89bcd1e9d577d8a717f06bbcb0b8fcc323"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0xf5, 0x2, 0x2}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x1, 0xa, 0x7, [@generic={0x56, 0x7, "ba340bfd3c38fd5efae96432e1888d381fd06baf1a00e39aff24870129bd278438db8cd7803fe91863bcf6bc6dd7e263a295980e2cd48bb3f291eed48fae212a423a02c3f96caee89231c278ee2dd1690d69a20a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0xf, 0x4, [@generic={0x17, 0x24, "1171ff7ff6eb6c692223835af373193d72e1308dd4"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0xf2}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7f, 0x80, 0x1, [@generic={0x3f, 0x9, "aeeca502f0022f7f51656732a5ce0b2636c9955bc288eecf75f7b46c1867d0b9167e9e920d55d666fda52b8d94161383f2a72914d90c926c52f4467ecb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x8, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xfffd}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x4, 0x8}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x300, 0x4, 0x6, 0x2, 0x10, 0x80}, 0x51, &(0x7f0000000980)={0x5, 0xf, 0x51, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x84, "0aacf4e3a5a6f2fc555728251a653eda"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "497e3c8ed41e52cf9ab9a0720e215504"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4, 0xc, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x2, 0x23, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0x1, 0x3, 0x2, 0x6}]}, 0x4, [{0xd, &(0x7f0000000a00)=@string={0xd, 0x3, "4c4912e181acbb40c28959"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x813}}, {0x5d, &(0x7f0000000a80)=@string={0x5d, 0x3, "5c872f9bc842478774fa9d8ec14b986f782b5551b1014e2beb0c690af9771371054a4adec1cdfece5eac6bf47306f1723deb337f0d09d4fa1644f40a24c6a4f2f3b14b3a5f4d190d5e0884490edabdd11a8af20e0b596529d85a60"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_ep_write(r2, 0x83, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x9, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.964655541s ago: executing program 0 (id=1379): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_rm_watch(r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 7.964269277s ago: executing program 1 (id=1380): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 7.908515764s ago: executing program 2 (id=1381): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 7.765011501s ago: executing program 1 (id=1383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003001c0012800b00010067726574617000000c00028008000700ac14142808000a00", @ANYRES32=r3], 0x44}}, 0x804) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x1000000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.969678098s ago: executing program 0 (id=1384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, r0}, 0xc) 5.969340584s ago: executing program 3 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x101) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040), 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[], 0xfffffdcf) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 5.668511125s ago: executing program 2 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.731754212s ago: executing program 3 (id=1387): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) 4.696490002s ago: executing program 1 (id=1388): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 4.637028609s ago: executing program 0 (id=1389): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.605300886s ago: executing program 2 (id=1390): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0}}, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpgid(0x0, 0x0) 4.430898925s ago: executing program 1 (id=1391): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open(0x0, 0x4242, 0x1df2a23c5997faa6) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1400400d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.392436797s ago: executing program 0 (id=1392): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37bb}, 0x50) read$FUSE(r0, &(0x7f000000e0c0)={0x2020}, 0x2020) 3.138295958s ago: executing program 3 (id=1393): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0) 2.642450988s ago: executing program 3 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.398861479s ago: executing program 4 (id=1395): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804"], 0x7) 2.028466798s ago: executing program 3 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xf}}}, 0x24}}, 0x4000000) 1.86969366s ago: executing program 4 (id=1397): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_rm_watch(r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.78530869s ago: executing program 5 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt6_stats\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 1.6965932s ago: executing program 0 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) 0s ago: executing program 3 (id=1400): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x1000000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r3, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x48000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) kernel console output (not intermixed with test programs): tate [ 106.907303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.983326][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.990593][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.043644][ T5636] Bluetooth: hci0: command tx timeout [ 107.043688][ T5631] Bluetooth: hci1: command tx timeout [ 107.049132][ T5636] Bluetooth: hci3: command tx timeout [ 107.055027][ T5642] Bluetooth: hci2: command tx timeout [ 107.120311][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.190023][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.201495][ T5642] Bluetooth: hci4: command tx timeout [ 107.212031][ T5642] Bluetooth: hci5: command tx timeout [ 107.213875][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.224623][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.268735][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.275974][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.370451][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.455058][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.462328][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.508571][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.515952][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.685575][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.301073][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.663107][ T5625] veth0_vlan: entered promiscuous mode [ 108.757080][ T5625] veth1_vlan: entered promiscuous mode [ 108.906008][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.037382][ T5625] veth0_macvtap: entered promiscuous mode [ 109.104367][ T5625] veth1_macvtap: entered promiscuous mode [ 109.179845][ T5633] veth0_vlan: entered promiscuous mode [ 109.242314][ T5633] veth1_vlan: entered promiscuous mode [ 109.264867][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.312024][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.362344][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.412871][ T751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.473921][ T751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.502602][ T751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.550264][ T751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.677580][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.739699][ T5633] veth0_macvtap: entered promiscuous mode [ 109.784633][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.808615][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.813958][ T5633] veth1_macvtap: entered promiscuous mode [ 109.825754][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.893267][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.894303][ T5624] veth0_vlan: entered promiscuous mode [ 109.902983][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.944903][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.970762][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.985840][ T5624] veth1_vlan: entered promiscuous mode [ 110.051811][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.071511][ T114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.103870][ T114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.114005][ T114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.150867][ T5629] veth0_vlan: entered promiscuous mode [ 110.184521][ T114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.268070][ T5629] veth1_vlan: entered promiscuous mode [ 110.305158][ T5629] veth0_macvtap: entered promiscuous mode [ 110.319261][ T5629] veth1_macvtap: entered promiscuous mode [ 110.351721][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.369154][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.487871][ T751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.530687][ T751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.572054][ T1110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.594663][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.607664][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.622739][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.157262][ T5638] veth0_vlan: entered promiscuous mode [ 111.216563][ T5817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.225515][ T5817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.305350][ T5634] veth0_vlan: entered promiscuous mode [ 111.400509][ T5634] veth1_vlan: entered promiscuous mode [ 111.433691][ T5865] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 111.440383][ T5638] veth1_vlan: entered promiscuous mode [ 111.529851][ T5624] veth0_macvtap: entered promiscuous mode [ 111.580543][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.595536][ T5624] veth1_macvtap: entered promiscuous mode [ 111.609687][ T5867] loop5: detected capacity change from 0 to 1024 [ 111.621567][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.643780][ T5867] EXT4-fs: Ignoring removed bh option [ 111.669986][ T5867] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.734113][ T5867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 111.752836][ T5867] System zones: 0-1, 3-12 [ 111.823498][ T5867] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.5: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.840472][ T5867] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 111.842083][ C1] EXT4-fs (loop5): initial error at time 1785000720: ext4_map_blocks:833: inode 3: block 1 [ 111.863326][ C1] EXT4-fs (loop5): last error at time 1785000720: ext4_map_blocks:833: inode 3: block 1 [ 111.885282][ T5867] EXT4-fs (loop5): Remounting filesystem read-only [ 111.894225][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.898477][ T5867] Quota error (device loop5): write_blk: dquota write failed [ 111.907322][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.917780][ T5867] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 111.929801][ T5867] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 111.940872][ T5867] EXT4-fs (loop5): 1 orphan inode deleted [ 111.943899][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.949051][ T5867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.005230][ T5634] veth0_macvtap: entered promiscuous mode [ 112.038174][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.077316][ T5634] veth1_macvtap: entered promiscuous mode [ 112.092878][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.112898][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.180811][ T5638] veth0_macvtap: entered promiscuous mode [ 112.202890][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.208294][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.258543][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.325761][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.357058][ T5638] veth1_macvtap: entered promiscuous mode [ 112.455899][ T5875] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 112.457532][ T5877] loop5: detected capacity change from 0 to 1024 [ 112.490627][ T5877] EXT4-fs: Ignoring removed bh option [ 112.508080][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.604193][ T5877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.620994][ T5875] loop4: detected capacity change from 0 to 1024 [ 112.625622][ T1050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.628687][ T5875] ======================================================= [ 112.628687][ T5875] WARNING: The mand mount option has been deprecated and [ 112.628687][ T5875] and is ignored by this kernel. Remove the mand [ 112.628687][ T5875] option from the mount to silence this warning. [ 112.628687][ T5875] ======================================================= [ 112.684525][ T1050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.694631][ T5875] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.696669][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.729282][ T5875] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.6: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.744759][ T5875] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.745096][ T5875] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 112.754402][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 112.754443][ C1] EXT4-fs (loop4): initial error at time 1785000721: ext4_map_blocks:791: inode 3: block 2 [ 112.754508][ C1] EXT4-fs (loop4): last error at time 1785000721: ext4_map_blocks:791: inode 3: block 2 [ 112.791873][ T5875] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.6: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.805470][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.807275][ T5875] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.815938][ T5875] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 112.838708][ T5875] EXT4-fs error (device loop4): ext4_acquire_dquot:7039: comm syz.4.6: Failed to acquire dquot type 0 [ 112.850179][ T5875] loop4: lost filesystem error report for type 5 error -117 [ 112.851437][ T5875] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 112.879227][ T5875] loop4: lost filesystem error report for type 5 error -117 [ 112.880440][ T5875] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.6: mark_inode_dirty error [ 112.887431][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.893510][ T5875] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.912611][ T5875] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 112.916292][ T5877] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.922633][ T5875] EXT4-fs (loop4): 1 orphan inode deleted [ 112.947566][ T12] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.955497][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.979998][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.020573][ T12] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.029169][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 113.055956][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7075: comm kworker/u8:0: Failed to release dquot type 0 [ 113.105383][ T1050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.171036][ T1050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.203064][ T1050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.215826][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.251122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.269844][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.304935][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.314731][ T5817] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.314796][ T5817] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.316197][ T5817] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 113.316250][ T5817] EXT4-fs error (device loop4): ext4_release_dquot:7075: comm kworker/u8:9: Failed to release dquot type 0 [ 113.373971][ T1050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.482996][ T5817] loop4: lost filesystem error report for type 5 error -117 [ 113.526070][ T5633] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.577396][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.579851][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.594172][ T5633] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 113.629828][ T5633] loop4: lost filesystem error report for type 5 error -117 [ 113.634829][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.650929][ T5633] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 113.670778][ T5633] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 113.957307][ T5896] Zero length message leads to an empty skb [ 113.999359][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.020310][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.105552][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.127921][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.324844][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.343593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.518820][ T5903] loop4: detected capacity change from 0 to 512 [ 114.644753][ T5903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.659456][ T5903] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.964546][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.000274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.025752][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.335180][ T5917] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.785295][ T5927] loop4: detected capacity change from 0 to 1024 [ 115.812826][ T5927] EXT4-fs: Ignoring removed bh option [ 115.875665][ T5927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.889151][ T5930] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 116.208385][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 116.225707][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 116.268931][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.559420][ T5956] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.243148][ T5636] Bluetooth: hci6: command 0x1003 tx timeout [ 118.243581][ T5642] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 118.276589][ T5976] loop0: detected capacity change from 0 to 1024 [ 118.305535][ T5976] EXT4-fs: Ignoring removed bh option [ 118.433849][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.938811][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.209945][ T6004] Need at least one configuration in g1. [ 120.270605][ T6004] udc usbip-vudc.0: failed to start g1: -22 [ 120.313889][ T6004] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 120.350824][ T6014] syz.5.56 uses obsolete (PF_INET,SOCK_PACKET) [ 120.386096][ T6004] UDC core: g1: couldn't find an available UDC or it's busy [ 121.336593][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.183172][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.345236][ T6036] bond0 (unregistering): Released all slaves [ 122.868913][ T6056] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 123.464431][ T6063] syzkaller0: entered promiscuous mode [ 123.482885][ T6063] syzkaller0: entered allmulticast mode [ 126.254149][ T6136] syzkaller0: entered promiscuous mode [ 126.275294][ T6136] syzkaller0: entered allmulticast mode [ 126.451975][ T6132] loop1: detected capacity change from 0 to 8192 [ 126.523424][ T6132] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.860752][ T6161] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 127.960837][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 130.520786][ T6192] loop0: detected capacity change from 0 to 512 [ 130.821075][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.857801][ T6192] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.857977][ T6203] loop5: detected capacity change from 0 to 1024 [ 130.924258][ T6192] EXT4-fs error (device loop0): ext4_xattr_block_find:1881: inode #15: comm syz.0.114: corrupted xattr block 33: invalid checksum [ 130.972132][ T6203] EXT4-fs: Ignoring removed bh option [ 131.192383][ T6203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.340996][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.237974][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.261949][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.275541][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.480625][ T6263] loop3: detected capacity change from 0 to 1024 [ 135.488641][ T6263] EXT4-fs: Ignoring removed bh option [ 135.567822][ T6263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.599808][ T6270] loop0: detected capacity change from 0 to 512 [ 136.773289][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.829898][ T6293] Need at least one configuration in g1. [ 136.917691][ T5634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.971483][ T6270] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.993568][ T6293] udc usbip-vudc.0: failed to start g1: -22 [ 137.084442][ T6293] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 137.243822][ T6293] UDC core: g1: couldn't find an available UDC or it's busy [ 137.685008][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.162961][ T6313] Need at least one configuration in g1. [ 139.168946][ T6313] udc usbip-vudc.0: failed to start g1: -22 [ 139.175022][ T6313] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 139.905211][ T6313] UDC core: g1: couldn't find an available UDC or it's busy [ 139.943001][ T6322] loop1: detected capacity change from 0 to 512 [ 140.639217][ T6322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.927032][ T6322] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.076330][ T6322] EXT4-fs error (device loop1): ext4_xattr_block_find:1881: inode #15: comm syz.1.153: corrupted xattr block 33: invalid checksum [ 142.041150][ T6335] loop3: detected capacity change from 0 to 1024 [ 142.134653][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.154209][ T6335] EXT4-fs: Ignoring removed bh option [ 142.242189][ T5638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.288771][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.399199][ T6337] bond0 (unregistering): Released all slaves [ 143.801557][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.390666][ T5634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.681647][ T6429] loop5: detected capacity change from 0 to 512 [ 150.795773][ T6429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.810390][ T6429] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.932354][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.804839][ T6476] loop0: detected capacity change from 0 to 1024 [ 152.819099][ T6476] EXT4-fs: Ignoring removed bh option [ 152.897069][ T6476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.192405][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.202853][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.244851][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.252386][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.262178][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.269486][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.316401][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.378726][ T6484] team0: Port device bridge0 added [ 153.410075][ T6494] loop3: detected capacity change from 0 to 128 [ 153.456079][ T6494] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 155.969921][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 156.049374][ T6531] 8021q: VLANs not supported on lo [ 160.570427][ T6600] loop5: detected capacity change from 0 to 512 [ 160.652164][ T6600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.697088][ T6600] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.868498][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.028228][ T6654] loop4: detected capacity change from 0 to 512 [ 163.137372][ T6654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.258892][ T6654] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.525135][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.247342][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.536509][ T24] usb 1-1: config 253 has an invalid interface number: 130 but max is 0 [ 166.650968][ T24] usb 1-1: config 253 has no interface number 0 [ 166.687669][ T24] usb 1-1: config 253 interface 130 has no altsetting 0 [ 166.759024][ T24] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 166.833646][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.905065][ T24] usb 1-1: Product: syz [ 166.930482][ T24] usb 1-1: Manufacturer: syz [ 167.000187][ T24] usb 1-1: SerialNumber: syz [ 167.632311][ T6743] syzkaller0: entered promiscuous mode [ 167.638409][ T6743] syzkaller0: entered allmulticast mode [ 167.971373][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.022285][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.058138][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.143881][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.250661][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.310218][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.371114][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.398041][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.867099][ T24] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 169.162805][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.192783][ T24] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 169.317333][ T24] usb 1-1: media controller created [ 169.346536][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.427751][ T6774] loop5: detected capacity change from 0 to 512 [ 169.623459][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.711715][ T6774] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.869333][ T24] DVB: Unable to find symbol dib8000_attach() [ 169.877127][ T24] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 170.089268][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.114079][ T24] rc_core: IR keymap rc-dib0700-nec not found [ 170.151736][ T24] Registered IR keymap rc-empty [ 170.185204][ T24] dvb-usb: could not initialize remote control. [ 170.214450][ T24] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 170.410184][ T24] usb 1-1: USB disconnect, device number 2 [ 171.132532][ T24] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 171.271804][ T6819] syzkaller0: entered promiscuous mode [ 171.394022][ T6819] syzkaller0: entered allmulticast mode [ 172.357390][ T6843] loop0: detected capacity change from 0 to 512 [ 172.436917][ T6843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.475867][ T6843] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.798079][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.137070][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.319'. [ 174.288857][ T6879] loop0: detected capacity change from 0 to 1024 [ 174.315911][ T6879] EXT4-fs: Ignoring removed bh option [ 174.411602][ T24] IPVS: starting estimator thread 0... [ 174.513093][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.550846][ T6883] IPVS: using max 24 ests per chain, 57600 per kthread [ 174.658009][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.301436][ T6897] loop0: detected capacity change from 0 to 128 [ 176.341138][ T6897] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 176.557115][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.330'. [ 176.600428][ T6901] syzkaller0: entered promiscuous mode [ 176.648417][ T6901] syzkaller0: entered allmulticast mode [ 178.499705][ T6929] loop5: detected capacity change from 0 to 1024 [ 178.539075][ T6929] EXT4-fs: Ignoring removed bh option [ 178.624090][ T6929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.130793][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.628746][ T6953] loop2: detected capacity change from 0 to 128 [ 179.792234][ T5601] IPVS: starting estimator thread 0... [ 180.888072][ T6953] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 180.961680][ T6959] IPVS: using max 22 ests per chain, 52800 per kthread [ 181.895268][ T6980] loop5: detected capacity change from 0 to 1024 [ 181.999589][ T6980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.132697][ T6945] loop4: detected capacity change from 0 to 40427 [ 182.183105][ T6945] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 182.233860][ T6945] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 182.445316][ T6945] F2FS-fs (loop4): invalid crc value [ 182.570092][ T6945] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 183.256365][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.430178][ T7046] loop4: detected capacity change from 0 to 2048 [ 186.967400][ T7035] loop5: detected capacity change from 0 to 32768 [ 187.503168][ T7035] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 188.423513][ T5629] ocfs2: Unmounting device (7,5) on (node local) [ 188.626926][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 188.694459][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 190.144745][ T5776] IPVS: starting estimator thread 0... [ 190.379194][ T7144] IPVS: using max 21 ests per chain, 50400 per kthread [ 190.516204][ T7152] ªªªªªª: renamed from vlan0 (while UP) [ 191.726056][ T7170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.409'. [ 191.831397][ T7170] vlan2: entered promiscuous mode [ 191.843920][ T7170] gretap0: entered promiscuous mode [ 193.383337][ T7204] ªªªªªª: renamed from vlan0 (while UP) [ 193.686842][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.693426][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.387873][ T7243] syzkaller0: entered promiscuous mode [ 195.396706][ T7243] syzkaller0: entered allmulticast mode [ 195.849195][ T7247] ªªªªªª: renamed from vlan0 (while UP) [ 196.213287][ T5776] IPVS: starting estimator thread 0... [ 196.332035][ T7274] IPVS: using max 21 ests per chain, 50400 per kthread [ 197.399929][ T7284] process 'syz.1.446' launched '/dev/fd/4' with NULL argv: empty string added [ 197.944796][ T7301] ªªªªªª: renamed from vlan0 (while UP) [ 198.104550][ T7304] syzkaller0: entered promiscuous mode [ 198.125837][ T7304] syzkaller0: entered allmulticast mode [ 198.576865][ T29] IPVS: starting estimator thread 0... [ 198.864947][ T7319] IPVS: using max 23 ests per chain, 55200 per kthread [ 201.328769][ T7350] overlayfs: failed to clone upperpath [ 202.167175][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 202.858578][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 203.214996][ T6042] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.228616][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 203.254881][ T6042] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.274471][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 203.332504][ T6042] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.389776][ T6042] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.803961][ T7439] loop5: detected capacity change from 0 to 256 [ 206.849126][ T7439] vfat: Deprecated parameter 'posix' [ 206.910454][ T7439] FAT-fs: "posix" option is obsolete, not supported now [ 209.415210][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 209.432150][ T7468] bridge_slave_1: left allmulticast mode [ 209.437945][ T7468] bridge_slave_1: left promiscuous mode [ 209.447257][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.018490][ T7468] bridge_slave_0: left allmulticast mode [ 210.024278][ T7468] bridge_slave_0: left promiscuous mode [ 210.030805][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.704061][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'. [ 210.905930][ T7475] vlan0: entered promiscuous mode [ 210.953994][ T7475] gretap0: entered promiscuous mode [ 212.845004][ T7497] ceph: No mds server is up or the cluster is laggy [ 213.251703][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 213.318301][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 213.825763][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 213.832378][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 215.687272][ T7532] loop4: detected capacity change from 0 to 1024 [ 217.087486][ T7532] hfsplus: failed to load catalog file [ 218.260378][ T7553] syzkaller0: entered promiscuous mode [ 218.288006][ T7553] syzkaller0: entered allmulticast mode [ 219.281990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.848449][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 221.854758][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 221.863880][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 221.870365][ T4935] Bluetooth: hci0: command 0x0406 tx timeout [ 221.874320][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 221.878728][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 223.582006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 227.281069][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.554'. [ 228.917534][ T7688] loop5: detected capacity change from 0 to 1024 [ 229.744733][ T7688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.052039][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 230.174492][ T7708] fuse: Bad value for 'fd' [ 230.254931][ T29] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 230.280201][ T29] usb 5-1: config 253 has no interface number 0 [ 231.175704][ T29] usb 5-1: config 253 interface 130 has no altsetting 0 [ 231.388927][ T29] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 231.671627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.714623][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.741964][ T29] usb 5-1: Product: syz [ 231.752758][ T29] usb 5-1: Manufacturer: syz [ 231.767725][ T29] usb 5-1: SerialNumber: syz [ 232.013594][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.419541][ T29] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 233.526998][ T7732] loop5: detected capacity change from 0 to 128 [ 233.608251][ T7732] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 233.665947][ T7733] netlink: 'syz.1.574': attribute type 11 has an invalid length. [ 233.812390][ T29] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 233.856324][ T29] dib0700: firmware download failed at 7 with -22 [ 234.005647][ T29] usb 5-1: USB disconnect, device number 2 [ 234.031860][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 234.082878][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.145843][ T6633] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 234.203049][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.219142][ T5629] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 237.078340][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 237.924202][ T29] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 237.999147][ T29] usb 5-1: config 253 has no interface number 0 [ 238.053053][ T29] usb 5-1: config 253 interface 130 has no altsetting 0 [ 238.099463][ T29] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 238.145547][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.177491][ T29] usb 5-1: Product: syz [ 238.202124][ T29] usb 5-1: Manufacturer: syz [ 238.226121][ T29] usb 5-1: SerialNumber: syz [ 238.497785][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.595'. [ 238.579666][ T7804] vlan0: entered promiscuous mode [ 238.591340][ T7804] gretap0: entered promiscuous mode [ 238.720520][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.747755][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.866649][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.923387][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.996833][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.049564][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.120095][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 239.127122][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.320000][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.020472][ T29] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 240.442142][ T7833] syz_tun: entered allmulticast mode [ 241.009548][ T7822] syz_tun: left allmulticast mode [ 241.563653][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.586776][ T29] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 241.610211][ T29] usb 5-1: media controller created [ 241.648684][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.954278][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'. [ 243.037356][ T7857] vlan0: entered promiscuous mode [ 243.057294][ T7857] gretap0: entered promiscuous mode [ 244.027166][ T29] DVB: Unable to find symbol dib8000_attach() [ 244.048537][ T29] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 244.451274][ T29] rc_core: IR keymap rc-dib0700-nec not found [ 244.462543][ T29] Registered IR keymap rc-empty [ 244.469442][ T29] dvb-usb: could not initialize remote control. [ 244.483491][ T29] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 244.763407][ T29] usb 5-1: USB disconnect, device number 3 [ 245.795613][ T29] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 247.956810][ T7919] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 250.478612][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 251.445358][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.748171][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.758650][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 251.768372][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.793539][ T24] usb 6-1: config 0 descriptor?? [ 251.863891][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.644'. [ 252.277291][ T24] playstation 0003:054C:0DF2.0001: item fetching failed at offset 1/5 [ 252.298695][ T24] playstation 0003:054C:0DF2.0001: Parse failed [ 252.321706][ T24] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 252.561698][ T5760] usb 6-1: USB disconnect, device number 2 [ 252.571506][ T7968] fuse: fd is not a fuse device [ 252.879650][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 253.678463][ T24] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 253.760589][ T24] usb 5-1: config 0 has no interface number 0 [ 253.812204][ T24] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.866465][ T24] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 39, changing to 9 [ 253.900798][ T24] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 9403, setting to 1024 [ 253.934896][ T24] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 253.955631][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.993123][ T24] usb 5-1: config 0 descriptor?? [ 254.012631][ T7962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 254.052405][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input9 [ 254.317479][ T24] usb 5-1: USB disconnect, device number 4 [ 254.317652][ C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 255.257938][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.270378][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.066940][ T8067] overlayfs: failed to clone upperpath [ 261.358021][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 261.531908][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 262.391864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 267.102009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 267.848491][ T8144] syz_tun: entered allmulticast mode [ 268.007312][ T8146] xt_hashlimit: size too large, truncated to 1048576 [ 268.287929][ T30] audit: type=1800 audit(1785000877.065:2): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.704" name="idVendor" dev="configfs" ino=14960 res=0 errno=0 [ 268.346094][ T8159] file system registered [ 274.654892][ T8272] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 274.754200][ T8272] Cannot find add_set index 0 as target [ 274.764881][ T8276] netlink: 'syz.5.740': attribute type 1 has an invalid length. [ 275.183041][ T8278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.186679][ T8283] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 275.211028][ T8278] bond1: (slave bond2): making interface the new active one [ 275.229459][ T8283] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 275.244986][ T8283] udc dummy_udc.0: failed to start g1: -22 [ 275.251395][ T8283] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 275.266618][ T8278] bond1: (slave bond2): Enslaving as an active interface with an up link [ 275.267924][ T8283] UDC core: g1: couldn't find an available UDC or it's busy [ 276.801698][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 277.591001][ T8319] f_midi2: Invalid MIDI1 group definitions for block 0:1 [ 278.895655][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 279.292040][ T803] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 279.708073][ T803] usb 5-1: config 253 has an invalid interface number: 130 but max is 0 [ 279.776097][ T803] usb 5-1: config 253 has no interface number 0 [ 280.378022][ T803] usb 5-1: config 253 interface 130 has no altsetting 0 [ 280.527758][ T803] usb 5-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 280.619010][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.687694][ T803] usb 5-1: Product: syz [ 280.764110][ T803] usb 5-1: Manufacturer: syz [ 280.806309][ T803] usb 5-1: SerialNumber: syz [ 281.561390][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.660825][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.705729][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.736599][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.776016][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.800938][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.856237][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.062252][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.259926][ T8370] netlink: 'syz.1.774': attribute type 1 has an invalid length. [ 282.269144][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 282.320511][ T803] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 282.435798][ T803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.687721][ T8370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.772819][ T803] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 282.781935][ T803] usb 5-1: media controller created [ 282.807035][ T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.073932][ T803] DVB: Unable to find symbol dib8000_attach() [ 283.088746][ T803] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 283.309404][ T8374] bond1: (slave geneve2): making interface the new active one [ 283.473222][ T8374] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 283.601924][ T803] rc_core: IR keymap rc-dib0700-nec not found [ 283.612048][ T803] Registered IR keymap rc-empty [ 283.617489][ T803] dvb-usb: could not initialize remote control. [ 283.624358][ T803] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 283.827333][ T803] usb 5-1: USB disconnect, device number 5 [ 284.147348][ T8386] bridge_slave_0: left allmulticast mode [ 284.185847][ T8386] bridge_slave_0: left promiscuous mode [ 284.233852][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.248588][ T803] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 284.341641][ T8386] bridge_slave_1: left allmulticast mode [ 284.348375][ T8386] bridge_slave_1: left promiscuous mode [ 284.360539][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.482273][ T8386] bond0: (slave bond_slave_0): Releasing backup interface [ 284.619451][ T8386] bond0: (slave bond_slave_1): Releasing backup interface [ 284.645177][ T803] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 284.737853][ T8386] team0: Port device team_slave_0 removed [ 284.813385][ T803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.827997][ T803] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 284.851257][ T803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.861026][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.890765][ T803] usb 5-1: Product: syz [ 284.898828][ T8386] team0: Port device team_slave_1 removed [ 284.907934][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.915792][ T803] usb 5-1: Manufacturer: syz [ 284.929475][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.939353][ T803] usb 5-1: SerialNumber: syz [ 284.990568][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.007963][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.035739][ T8386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.168664][ T8387] team0: Port device xfrm0 added [ 285.197283][ T8388] tipc: Started in network mode [ 285.209194][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.231780][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.234131][ T8388] tipc: Node identity ba0f54efbe34, cluster identity 4711 [ 285.282724][ T8388] tipc: Enabled bearer , priority 0 [ 285.293644][ T803] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 285.387763][ T803] usb 5-1: USB disconnect, device number 6 [ 285.768142][ T8407] netlink: 'syz.5.783': attribute type 10 has an invalid length. [ 285.904386][ T8407] team0: Device veth0_macvtap failed to register rx_handler [ 285.921525][ T803] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 286.102378][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 286.133956][ T803] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 286.164687][ T803] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 286.195761][ T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.471384][ T5761] tipc: Node number set to 70997231 [ 286.479284][ T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.496347][ T803] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 286.508373][ T803] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.519705][ T803] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.533074][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.760167][ T803] usb 5-1: GET_CAPABILITIES returned 0 [ 286.787588][ T803] usbtmc 5-1:16.0: can't read capabilities [ 286.902413][ T8425] syzkaller0: entered promiscuous mode [ 286.918875][ T8425] syzkaller0: entered allmulticast mode [ 287.030040][ T8265] Set syz1 is full, maxelem 65536 reached [ 287.118862][ T9] usb 5-1: USB disconnect, device number 7 [ 287.664061][ T8434] syz_tun: entered allmulticast mode [ 288.209576][ T8429] syz_tun: left allmulticast mode [ 289.275180][ T30] audit: type=1800 audit(1785000898.055:3): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.807" name="bcdDevice" dev="configfs" ino=16057 res=0 errno=0 [ 289.365903][ T8470] lo: entered allmulticast mode [ 289.910776][ T8462] lo: left allmulticast mode [ 290.378243][ T8478] netlink: 'syz.0.808': attribute type 4 has an invalid length. [ 290.444150][ T8481] netlink: 'syz.0.808': attribute type 4 has an invalid length. [ 291.081741][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 291.697817][ T9] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 291.722198][ T9] usb 6-1: config 253 has no interface number 0 [ 291.831672][ T9] usb 6-1: config 253 interface 130 has no altsetting 0 [ 291.895277][ T9] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 291.967630][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.005948][ T9] usb 6-1: Product: syz [ 292.032064][ T9] usb 6-1: Manufacturer: syz [ 292.037056][ T9] usb 6-1: SerialNumber: syz [ 292.578340][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.609742][ T8513] xt_hashlimit: size too large, truncated to 1048576 [ 292.623311][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.663980][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.692732][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.764921][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.796257][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.860267][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.895531][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.054058][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.062160][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.192717][ T9] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 293.284452][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.338040][ T9] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 293.384546][ T9] usb 6-1: media controller created [ 293.532994][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.746918][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.793862][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.864655][ T9] DVB: Unable to find symbol dib8000_attach() [ 293.898875][ T9] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 294.231372][ T9] rc_core: IR keymap rc-dib0700-nec not found [ 294.949363][ T9] Registered IR keymap rc-empty [ 294.981992][ T9] dvb-usb: could not initialize remote control. [ 295.000599][ T9] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 295.069135][ T9] usb 6-1: USB disconnect, device number 3 [ 295.145670][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.189564][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.241769][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.276073][ T9] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 295.295480][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.910472][ T8607] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 297.041689][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.068778][ T8610] bond0: (slave gretap1): making interface the new active one [ 297.081801][ T8530] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 297.106281][ T8610] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 297.265196][ T8530] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 297.286599][ T8530] usb 6-1: config 253 has no interface number 0 [ 297.306526][ T8530] usb 6-1: config 253 interface 130 has no altsetting 0 [ 297.325700][ T8563] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 297.364624][ T8530] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 297.405909][ T8530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.455860][ T8530] usb 6-1: Product: syz [ 297.466558][ T8530] usb 6-1: Manufacturer: syz [ 297.490278][ T8530] usb 6-1: SerialNumber: syz [ 297.526092][ T8563] usb 5-1: not running at top speed; connect to a high speed hub [ 297.740257][ T8563] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 297.793638][ T8563] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 297.825861][ T8563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.889781][ T8563] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 297.972927][ T8563] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 297.996657][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.065552][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.137129][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.168297][ T8563] usb 5-1: USB disconnect, device number 8 [ 298.178637][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.228098][ T8563] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 298.231652][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.262034][ T8563] garmin_gps 5-1:1.0: device disconnected [ 298.284974][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.327120][ T8604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.345225][ T8604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.559404][ T8530] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 298.616745][ T8530] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.655254][ T8530] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 298.676345][ T8530] usb 6-1: media controller created [ 298.737905][ T8530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.025199][ T8530] DVB: Unable to find symbol dib8000_attach() [ 299.055184][ T8530] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 299.276660][ T8649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.863'. [ 299.291665][ T8530] rc_core: IR keymap rc-dib0700-nec not found [ 299.318810][ T8530] Registered IR keymap rc-empty [ 299.338880][ T8530] dvb-usb: could not initialize remote control. [ 299.363170][ T8530] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 299.364826][ T8654] lo: entered allmulticast mode [ 299.388756][ T8530] dib0700: There's no endpoint for remote controller [ 299.629433][ T8532] usb 6-1: USB disconnect, device number 4 [ 299.920622][ T8532] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 300.003396][ T8672] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 300.013585][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.873'. [ 300.023485][ T8672] team_slave_1: entered promiscuous mode [ 300.029298][ T8672] team_slave_1: entered allmulticast mode [ 300.036222][ T8672] bridge0: port 1(team_slave_1) entered blocking state [ 300.045842][ T8672] bridge0: port 1(team_slave_1) entered disabled state [ 300.063065][ T48] bridge0: port 1(team_slave_1) entered blocking state [ 300.070224][ T48] bridge0: port 1(team_slave_1) entered forwarding state [ 303.841762][ T8754] warning: `syz.5.896' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 304.287929][ T8758] can: request_module (can-proto-0) failed. [ 304.601334][ T8764] batman_adv: batadv0: Adding interface: dummy0 [ 304.607756][ T8764] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.633433][ T8764] batman_adv: batadv0: Interface activated: dummy0 [ 304.732589][ T8758] batadv0: mtu less than device minimum [ 304.747487][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.761883][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.774594][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.786754][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.798932][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.810970][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.822983][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.834995][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.846988][ T8758] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.952629][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 305.006349][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 305.021650][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 305.053321][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 305.941885][ T8563] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 305.977140][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 306.135065][ T8563] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 306.164221][ T8563] usb 6-1: config 253 has no interface number 0 [ 306.189270][ T8563] usb 6-1: config 253 interface 130 has no altsetting 0 [ 306.218918][ T8563] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 306.235478][ T8563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.253821][ T8563] usb 6-1: Product: syz [ 306.275994][ T8563] usb 6-1: Manufacturer: syz [ 306.290539][ T8563] usb 6-1: SerialNumber: syz [ 307.645918][ T8826] syz_tun: entered allmulticast mode [ 307.652800][ T8826] syz_tun: left allmulticast mode [ 307.866173][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.892999][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.943742][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.987946][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.044371][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.078314][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.124656][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.173202][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.431144][ T8563] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 308.736560][ T8563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.806512][ T8563] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 308.849393][ T8563] usb 6-1: media controller created [ 308.976626][ T8563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.380212][ T8563] DVB: Unable to find symbol dib8000_attach() [ 309.443354][ T8563] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 309.644137][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.742291][ T8563] rc_core: IR keymap rc-dib0700-nec not found [ 309.754408][ T8563] Registered IR keymap rc-empty [ 309.766846][ T8563] dvb-usb: could not initialize remote control. [ 309.780114][ T8873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.806750][ T8563] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 309.862279][ T8563] usb 6-1: USB disconnect, device number 5 [ 310.125998][ T8563] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 314.821816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 315.332239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 316.702780][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.709420][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.766594][ T8986] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 318.043204][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.292373][ T8991] bond1: (slave gretap1): making interface the new active one [ 318.353091][ T8991] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 318.711346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 321.026891][ T8999] 9pnet_virtio: no channels available for device syz [ 321.036772][ T9025] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 321.045123][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.979'. [ 321.130208][ T9025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.288594][ T9028] bond1: (slave geneve2): making interface the new active one [ 321.347142][ T9028] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 321.424936][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 321.447560][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 321.472146][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 321.496186][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 322.068304][ T9045] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 322.177433][ T9045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.171426][ T9104] 9pnet_virtio: no channels available for device syz [ 325.233591][ T9106] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 325.613783][ T9106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.885839][ T9109] bond1: (slave gretap1): making interface the new active one [ 325.935575][ T9109] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 326.406508][ T9115] syzkaller0: entered promiscuous mode [ 326.424156][ T9115] syzkaller0: entered allmulticast mode [ 326.543019][ T9135] fuse: fd is not a fuse device [ 328.833847][ T5636] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 329.482985][ T9167] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 330.423017][ T9167] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 331.344925][ T9214] 9pnet_virtio: no channels available for device syz [ 332.356003][ T9253] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1054'. [ 332.477694][ T9253] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1054'. [ 332.513492][ T5636] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 332.698073][ T5636] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 332.711021][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 332.711062][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 332.711084][ T5636] Workqueue: hci2 hci_rx_work [ 332.711134][ T5636] Call Trace: [ 332.711145][ T5636] [ 332.711158][ T5636] dump_stack_lvl+0x100/0x190 [ 332.711205][ T5636] sysfs_warn_dup.cold+0x1c/0x28 [ 332.711260][ T5636] sysfs_create_dir_ns+0x24b/0x2b0 [ 332.711312][ T5636] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 332.711356][ T5636] ? find_held_lock+0x2b/0x80 [ 332.711413][ T5636] ? kobject_add_internal+0x25f/0x930 [ 332.711474][ T5636] ? kobject_add_internal+0x25f/0x930 [ 332.711540][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.711586][ T5636] ? do_raw_spin_unlock+0x145/0x1e0 [ 332.711646][ T5636] kobject_add_internal+0x2c8/0x930 [ 332.711715][ T5636] kobject_add+0x16a/0x1e0 [ 332.711776][ T5636] ? __pfx_kobject_add+0x10/0x10 [ 332.711835][ T5636] ? class_to_subsys+0x10f/0x150 [ 332.711904][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.711952][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.711999][ T5636] ? kobject_put+0xb9/0x640 [ 332.712054][ T5636] ? _raw_spin_unlock+0x28/0x50 [ 332.712107][ T5636] device_add+0x294/0x1970 [ 332.712175][ T5636] ? __pfx_dev_set_name+0x10/0x10 [ 332.712218][ T5636] ? __pfx_device_add+0x10/0x10 [ 332.712282][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.712332][ T5636] ? mgmt_send_event_skb+0x2fb/0x460 [ 332.712395][ T5636] hci_conn_add_sysfs+0x1a3/0x260 [ 332.712453][ T5636] le_conn_complete_evt+0x11eb/0x1f60 [ 332.712514][ T5636] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 332.712557][ T5636] ? hci_event_packet+0x186/0xcd0 [ 332.712599][ T5636] ? hci_event_packet+0x186/0xcd0 [ 332.712639][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.712700][ T5636] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 332.712749][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.712796][ T5636] ? skb_pull_data+0x15f/0x1e0 [ 332.712867][ T5636] hci_le_meta_evt+0x34a/0x5f0 [ 332.712917][ T5636] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 332.712972][ T5636] hci_event_packet+0x51c/0xcd0 [ 332.713018][ T5636] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 332.713069][ T5636] ? __pfx_hci_event_packet+0x10/0x10 [ 332.713122][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.713173][ T5636] ? kcov_remote_start+0x384/0x670 [ 332.713215][ T5636] ? lockdep_hardirqs_on+0x78/0x100 [ 332.713260][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.713319][ T5636] hci_rx_work+0x451/0xfc0 [ 332.713372][ T5636] process_one_work+0xa23/0x1940 [ 332.713432][ T5636] ? __pfx_process_one_work+0x10/0x10 [ 332.713468][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.713531][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.713587][ T5636] worker_thread+0x5ef/0xe50 [ 332.713642][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 332.713683][ T5636] ? kthread+0x13a/0x450 [ 332.713742][ T5636] ? __pfx_worker_thread+0x10/0x10 [ 332.713777][ T5636] kthread+0x370/0x450 [ 332.713835][ T5636] ? __pfx_kthread+0x10/0x10 [ 332.713898][ T5636] ret_from_fork+0x72b/0xd50 [ 332.713952][ T5636] ? __pfx_ret_from_fork+0x10/0x10 [ 332.714000][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.714046][ T5636] ? rcu_is_watching+0x12/0xc0 [ 332.714100][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.714154][ T5636] ? __switch_to+0x800/0x10f0 [ 332.714217][ T5636] ? __switch_to_asm+0x39/0x70 [ 332.714272][ T5636] ? __pfx_kthread+0x10/0x10 [ 332.714337][ T5636] ret_from_fork_asm+0x1a/0x30 [ 332.714417][ T5636] [ 332.730312][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 332.734806][ T5636] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 332.830828][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 332.832036][ T5636] Bluetooth: hci2: failed to register connection device [ 332.934369][ T5630] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 333.128169][ T5630] Bluetooth: hci0: Injecting HCI hardware error event [ 333.136803][ T5630] Bluetooth: hci0: hardware error 0x00 [ 333.205781][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 333.228306][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 333.248421][ T6217] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.286929][ T6217] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.299149][ T6217] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.308259][ T6217] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.429753][ T9261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.521106][ T9261] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 334.470972][ T9261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.510133][ T9261] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.579862][ T9261] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 334.783118][ T9261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.826265][ T9261] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.331625][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 335.476469][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 335.792160][ T9261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.833688][ T9261] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 335.989093][ T9261] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 336.027696][ T9261] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 336.606642][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 336.821373][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 336.944534][ T9338] xt_hashlimit: size too large, truncated to 1048576 [ 337.175903][ T9336] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1076'. [ 337.541432][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 338.218316][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 338.224930][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 338.603662][ T9355] lo: entered allmulticast mode [ 338.609398][ T9355] lo: left allmulticast mode [ 338.723055][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 338.892299][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 339.261365][ T5636] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 340.052235][ T9382] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 340.242065][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 340.248346][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 340.454585][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 340.801679][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 341.114677][ T8554] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 341.281444][ T9428] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 341.290309][ T9428] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 341.299061][ T9428] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 341.334349][ T8554] usb 5-1: config 118 interface 0 has no altsetting 0 [ 341.363746][ T8554] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 341.391591][ T8554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.427315][ T8554] usb 5-1: Product: syz [ 341.449009][ T8554] usb 5-1: Manufacturer: syz [ 341.461351][ T8554] usb 5-1: SerialNumber: syz [ 341.730658][ T8554] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 341.780151][ T8554] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 341.806835][ T8554] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 341.829713][ T8554] usb 5-1: media controller created [ 341.876966][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 341.900293][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 341.920797][ T8554] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.140736][ T8554] DVB: Unable to find symbol mt352_attach() [ 342.157138][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.177576][ T8554] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 342.204035][ T8554] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 342.248171][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.248189][ T8554] dvb-usb: schedule remote query interval to 100 msecs. [ 342.285676][ T8554] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 342.513365][ T8563] m920x_read = error: -71 [ 342.521416][ T8554] dvb_usb_m920x 5-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 342.536336][ T8563] dvb-usb: error while querying for an remote control event. [ 342.587023][ T8554] usb 5-1: USB disconnect, device number 9 [ 342.667198][ T8563] m920x_read = error: -19 [ 342.681312][ T8563] dvb-usb: error while querying for an remote control event. [ 342.813289][ T8563] m920x_read = error: -19 [ 342.825781][ T8563] dvb-usb: error while querying for an remote control event. [ 342.873864][ T7623] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.875555][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 342.897707][ T9472] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 342.913398][ T7623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.927020][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 342.954373][ T7623] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.964234][ T8563] m920x_read = error: -19 [ 342.980067][ T8563] dvb-usb: error while querying for an remote control event. [ 342.989677][ T7623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.013055][ T7623] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.050042][ T7623] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.090727][ T6217] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.103173][ T8563] m920x_read = error: -19 [ 343.120662][ T9478] netlink: 'syz.3.1109': attribute type 32 has an invalid length. [ 343.121903][ T8563] dvb-usb: error while querying for an remote control event. [ 343.159417][ T6217] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.215285][ T6217] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.240998][ T6217] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.268695][ T6217] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.315817][ T6217] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.331362][ T8551] m920x_read = error: -19 [ 343.343489][ T8551] dvb-usb: error while querying for an remote control event. [ 343.471716][ T8551] m920x_read = error: -19 [ 343.489258][ T8551] dvb-usb: error while querying for an remote control event. [ 343.631371][ T8551] m920x_read = error: -19 [ 343.650235][ T8551] dvb-usb: error while querying for an remote control event. [ 343.801365][ T8551] m920x_read = error: -19 [ 343.816226][ T8551] dvb-usb: error while querying for an remote control event. [ 343.971367][ T8551] m920x_read = error: -19 [ 343.982647][ T8551] dvb-usb: error while querying for an remote control event. [ 344.086605][ T9510] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1120'. [ 344.121728][ T8551] m920x_read = error: -19 [ 344.142181][ T8551] dvb-usb: error while querying for an remote control event. [ 344.271355][ T8551] m920x_read = error: -19 [ 344.288645][ T8551] dvb-usb: error while querying for an remote control event. [ 344.411809][ T8563] m920x_read = error: -19 [ 344.428470][ T8563] dvb-usb: error while querying for an remote control event. [ 344.561565][ T8551] m920x_read = error: -19 [ 344.575965][ T8551] dvb-usb: error while querying for an remote control event. [ 344.722882][ T8551] m920x_read = error: -19 [ 344.738886][ T8551] dvb-usb: error while querying for an remote control event. [ 344.864411][ T5636] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 344.881550][ T8551] m920x_read = error: -19 [ 344.891314][ T8551] dvb-usb: error while querying for an remote control event. [ 344.947794][ T9540] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 345.012451][ T8551] m920x_read = error: -19 [ 345.021353][ T8528] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 345.036895][ T8551] dvb-usb: error while querying for an remote control event. [ 345.144058][ T9548] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 345.184773][ T8528] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 345.203475][ T8563] m920x_read = error: -19 [ 345.215920][ T8528] usb 6-1: config 253 has no interface number 0 [ 345.220383][ T8563] dvb-usb: error while querying for an remote control event. [ 345.228014][ T8528] usb 6-1: config 253 interface 130 has no altsetting 0 [ 345.238521][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.261934][ T8528] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 345.287385][ T8528] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.316436][ T8528] usb 6-1: Product: syz [ 345.329786][ T8528] usb 6-1: Manufacturer: syz [ 345.342044][ T8528] usb 6-1: SerialNumber: syz [ 345.371801][ T8563] m920x_read = error: -19 [ 345.386002][ T8563] dvb-usb: error while querying for an remote control event. [ 345.386455][ T9545] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 345.434118][ T7623] net_ratelimit: 30 callbacks suppressed [ 345.434624][ T7623] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 345.548969][ T8563] m920x_read = error: -19 [ 345.564383][ T9546] bond0 (unregistering): (slave gretap1): Removing an active aggregator [ 345.570414][ T8563] dvb-usb: error while querying for an remote control event. [ 345.646916][ T9546] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 345.699860][ T9546] bond0 (unregistering): Released all slaves [ 345.743003][ T8563] m920x_read = error: -19 [ 345.772222][ T8563] dvb-usb: error while querying for an remote control event. [ 345.814529][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.869627][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.897708][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.918431][ T8563] m920x_read = error: -19 [ 345.952103][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.976236][ T9548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.041124][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.091142][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.164546][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.185754][ T8563] dvb-usb: error while querying for an remote control event. [ 346.230921][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.896167][ T8528] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 346.973039][ T8528] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.979397][ T8563] m920x_read = error: -19 [ 346.986819][ T8563] dvb-usb: error while querying for an remote control event. [ 347.039385][ T9574] syz_tun: entered allmulticast mode [ 347.044312][ T8528] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 347.069147][ T8528] usb 6-1: media controller created [ 347.113639][ T8551] m920x_read = error: -19 [ 347.131830][ T8528] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.133751][ T8551] dvb-usb: error while querying for an remote control event. [ 347.301958][ T8551] m920x_read = error: -19 [ 347.314578][ T8551] dvb-usb: error while querying for an remote control event. [ 347.367250][ T8528] DVB: Unable to find symbol dib8000_attach() [ 347.390443][ T8528] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 347.451654][ T8551] m920x_read = error: -19 [ 347.471008][ T8551] dvb-usb: error while querying for an remote control event. [ 347.611499][ T8551] m920x_read = error: -19 [ 347.621323][ T8528] rc_core: IR keymap rc-dib0700-nec not found [ 347.633018][ T8551] dvb-usb: error while querying for an remote control event. [ 347.635163][ T8528] Registered IR keymap rc-empty [ 347.668038][ T8528] dvb-usb: could not initialize remote control. [ 347.687949][ T8528] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 347.720297][ T8528] dib0700: There's no endpoint for remote controller [ 347.747190][ T5636] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 347.771744][ T8551] m920x_read = error: -19 [ 347.777725][ T8551] dvb-usb: error while querying for an remote control event. [ 347.891677][ T8551] m920x_read = error: -19 [ 347.914130][ T8551] dvb-usb: error while querying for an remote control event. [ 347.977388][ T8528] usb 6-1: USB disconnect, device number 6 [ 348.126814][ T8528] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 348.258765][ T8551] m920x_read = error: -19 [ 348.263466][ T8551] dvb-usb: error while querying for an remote control event. [ 348.299542][ T9611] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 349.078428][ T8551] m920x_read = error: -19 [ 349.091268][ T8551] dvb-usb: error while querying for an remote control event. [ 349.211329][ T8551] m920x_read = error: -19 [ 349.229090][ T8551] dvb-usb: error while querying for an remote control event. [ 349.293883][ T9633] loop4: detected capacity change from 0 to 512 [ 349.336020][ T9611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.364080][ T8551] m920x_read = error: -19 [ 349.381468][ T9633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.394043][ T8551] dvb-usb: error while querying for an remote control event. [ 349.411514][ T9633] ext4 filesystem being mounted at /187/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.474799][ T30] audit: type=1800 audit(1785000958.245:4): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1151" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 349.521458][ T8551] m920x_read = error: -19 [ 349.527549][ T8551] dvb-usb: error while querying for an remote control event. [ 349.535700][ T9619] bond2: (slave gretap1): making interface the new active one [ 349.548854][ T9619] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 349.625242][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.672791][ T8551] m920x_read = error: -19 [ 349.698200][ T8551] dvb-usb: error while querying for an remote control event. [ 349.847775][ T8551] m920x_read = error: -19 [ 349.872082][ T8551] dvb-usb: error while querying for an remote control event. [ 349.948590][ T9639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.012928][ T8551] m920x_read = error: -19 [ 350.052327][ T8551] dvb-usb: error while querying for an remote control event. [ 350.191365][ T8551] m920x_read = error: -19 [ 350.199175][ T8551] dvb-usb: error while querying for an remote control event. [ 350.356746][ T8563] m920x_read = error: -19 [ 350.362939][ T8563] dvb-usb: error while querying for an remote control event. [ 350.399866][ T5636] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 350.547189][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 350.665624][ T8563] m920x_read = error: -19 [ 350.670402][ T8563] dvb-usb: error while querying for an remote control event. [ 350.777800][ T9673] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1165' sets config #0 [ 350.851596][ T8563] m920x_read = error: -19 [ 350.888632][ T8563] dvb-usb: error while querying for an remote control event. [ 351.011431][ T8551] m920x_read = error: -19 [ 351.034270][ T8551] dvb-usb: error while querying for an remote control event. [ 351.203247][ T8551] m920x_read = error: -19 [ 351.221022][ T8551] dvb-usb: error while querying for an remote control event. [ 351.244278][ T9680] IPVS: dh: FWM 3 0x00000003 - no destination available [ 351.274810][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 351.392230][ T8551] m920x_read = error: -19 [ 351.411618][ T8551] dvb-usb: error while querying for an remote control event. [ 351.551512][ T8551] m920x_read = error: -19 [ 351.564954][ T8551] dvb-usb: error while querying for an remote control event. [ 351.581964][ T9689] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 351.669506][ T9689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.852643][ T8551] m920x_read = error: -19 [ 351.858811][ T8551] dvb-usb: error while querying for an remote control event. [ 351.994224][ T8551] m920x_read = error: -19 [ 352.027599][ T8551] dvb-usb: error while querying for an remote control event. [ 352.161598][ T8551] m920x_read = error: -19 [ 352.177279][ T8551] dvb-usb: error while querying for an remote control event. [ 352.223828][ T5636] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 352.331886][ T8551] m920x_read = error: -19 [ 352.350362][ T8551] dvb-usb: error while querying for an remote control event. [ 352.385666][ T9669] loop4: detected capacity change from 0 to 40427 [ 352.505472][ T9669] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 352.524681][ T8551] m920x_read = error: -19 [ 352.552235][ T8551] dvb-usb: error while querying for an remote control event. [ 352.566446][ T9669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 352.632951][ T9669] F2FS-fs (loop4): invalid crc value [ 352.733512][ T8563] m920x_read = error: -19 [ 352.749894][ T8563] dvb-usb: error while querying for an remote control event. [ 352.891307][ T8563] m920x_read = error: -19 [ 352.908600][ T8563] dvb-usb: error while querying for an remote control event. [ 353.051692][ T8551] m920x_read = error: -19 [ 353.060633][ T8551] dvb-usb: error while querying for an remote control event. [ 353.089654][ T9669] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 353.162227][ T9669] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 353.191638][ T8563] m920x_read = error: -19 [ 353.194531][ T9669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 353.200099][ T8563] dvb-usb: error while querying for an remote control event. [ 353.294420][ T9732] IPVS: dh: FWM 3 0x00000003 - no destination available [ 353.304655][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 353.362902][ T8563] m920x_read = error: -19 [ 353.369629][ T8563] dvb-usb: error while querying for an remote control event. [ 353.390014][ T30] audit: type=1800 audit(1785000962.165:5): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1164" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 353.523665][ T8563] m920x_read = error: -19 [ 353.533584][ T8563] dvb-usb: error while querying for an remote control event. [ 353.562940][ T5633] syz-executor: attempt to access beyond end of device [ 353.562940][ T5633] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 353.630814][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 353.630870][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 353.630893][ T5633] Call Trace: [ 353.630905][ T5633] [ 353.630919][ T5633] dump_stack_lvl+0x100/0x190 [ 353.630971][ T5633] f2fs_stop_checkpoint+0x5e6/0xb30 [ 353.631039][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.631095][ T5633] ? errseq_set+0xe3/0x150 [ 353.631156][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.631211][ T5633] f2fs_write_end_bio+0xf53/0x1340 [ 353.631254][ T5633] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 353.631297][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.631354][ T5633] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 353.631392][ T5633] bio_endio+0x778/0x8e0 [ 353.631438][ T5633] submit_bio_noacct+0x64c/0x1ff0 [ 353.631512][ T5633] f2fs_submit_write_bio+0x133/0x330 [ 353.631580][ T5633] __submit_merged_bio+0x330/0x7b0 [ 353.631618][ T5633] ? rcu_is_watching+0x12/0xc0 [ 353.631683][ T5633] __submit_merged_write_cond+0x3fe/0x510 [ 353.631733][ T5633] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 353.631784][ T5633] ? __pfx___might_resched+0x10/0x10 [ 353.631825][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.631871][ T5633] ? folio_clear_dirty_for_io+0x178/0x960 [ 353.631942][ T5633] f2fs_write_cache_pages+0x20e9/0x2630 [ 353.632006][ T5633] ? find_held_lock+0x2b/0x80 [ 353.632069][ T5633] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 353.632111][ T5633] ? is_bpf_text_address+0x8a/0x1a0 [ 353.632159][ T5633] ? __lock_acquire+0x49f/0x1a40 [ 353.632282][ T5633] ? check_noncircular+0x97/0x160 [ 353.632319][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.632360][ T5633] ? rcu_is_watching+0x12/0xc0 [ 353.632417][ T5633] f2fs_write_data_pages+0x799/0x16d0 [ 353.632463][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.632505][ T5633] ? check_prev_add+0xfe/0xe60 [ 353.632551][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 353.632615][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 353.632663][ T5633] do_writepages+0x278/0x600 [ 353.632726][ T5633] ? __pfx_do_writepages+0x10/0x10 [ 353.632781][ T5633] ? do_raw_spin_unlock+0x145/0x1e0 [ 353.632829][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.632871][ T5633] ? _raw_spin_unlock+0x28/0x50 [ 353.632913][ T5633] filemap_writeback+0x22d/0x2e0 [ 353.632976][ T5633] ? __pfx_filemap_writeback+0x10/0x10 [ 353.633033][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633130][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633172][ T5633] ? find_held_lock+0x2b/0x80 [ 353.633223][ T5633] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 353.633268][ T5633] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 353.633312][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633365][ T5633] f2fs_sync_dirty_inodes+0x46a/0x970 [ 353.633427][ T5633] block_operations+0x2a6/0xfc0 [ 353.633486][ T5633] ? __pfx_block_operations+0x10/0x10 [ 353.633580][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633625][ T5633] ? ktime_get+0x22c/0x320 [ 353.633665][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633707][ T5633] ? rcu_is_watching+0x12/0xc0 [ 353.633764][ T5633] f2fs_write_checkpoint+0x58b/0x53d0 [ 353.633812][ T5633] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.633849][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633891][ T5633] ? _raw_spin_unlock_irq+0x2e/0x50 [ 353.633924][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.633966][ T5633] ? __wait_for_common+0x1f3/0x4c0 [ 353.634006][ T5633] ? __pfx_schedule_timeout+0x10/0x10 [ 353.634076][ T5633] ? __pfx___wait_for_common+0x10/0x10 [ 353.634122][ T5633] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 353.634168][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.634220][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.634261][ T5633] ? rcu_is_watching+0x12/0xc0 [ 353.634311][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.634353][ T5633] ? kthread_stop+0x280/0x630 [ 353.634411][ T5633] kill_f2fs_super+0x3f1/0x4a0 [ 353.634457][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 353.634520][ T5633] ? lockdep_hardirqs_on+0x78/0x100 [ 353.634561][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.634605][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.634661][ T5633] deactivate_locked_super+0xc1/0x1b0 [ 353.634706][ T5633] deactivate_super+0xe7/0x110 [ 353.634750][ T5633] cleanup_mnt+0x21f/0x450 [ 353.634803][ T5633] task_work_run+0x150/0x240 [ 353.634839][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 353.634878][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.634928][ T5633] exit_to_user_mode_loop+0x1d8/0x6f0 [ 353.634970][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 353.635012][ T5633] ? rcu_is_watching+0x12/0xc0 [ 353.635071][ T5633] do_syscall_64+0x666/0x870 [ 353.635120][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.635156][ T5633] RIP: 0033:0x7f118cd9f0d7 [ 353.635184][ T5633] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 353.635217][ T5633] RSP: 002b:00007ffc2a95e6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 353.635250][ T5633] RAX: 0000000000000000 RBX: 00007f118ce3330a RCX: 00007f118cd9f0d7 [ 353.635272][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2a95e770 [ 353.635293][ T5633] RBP: 00007ffc2a95e770 R08: 00007ffc2a95f770 R09: 00000000ffffffff [ 353.635315][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2a95f800 [ 353.635336][ T5633] R13: 00007f118ce3330a R14: 0000000000056469 R15: 00007ffc2a95f840 [ 353.635382][ T5633] [ 354.174347][ T9737] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 354.178510][ T8563] m920x_read = error: -19 [ 354.186598][ T8563] dvb-usb: error while querying for an remote control event. [ 354.224793][ T9737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.238566][ T5633] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 354.311930][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 354.381999][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 354.521000][ T6514] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.535448][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 354.567336][ T6514] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.604954][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 354.624768][ T6514] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.679479][ T6514] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.713689][ T8551] m920x_read = error: -19 [ 354.719414][ T8551] dvb-usb: error while querying for an remote control event. [ 354.831314][ T8563] m920x_read = error: -19 [ 354.835758][ T8563] dvb-usb: error while querying for an remote control event. [ 354.951421][ T8563] m920x_read = error: -19 [ 354.955891][ T8563] dvb-usb: error while querying for an remote control event. [ 355.081909][ T8563] m920x_read = error: -19 [ 355.086959][ T8563] dvb-usb: error while querying for an remote control event. [ 355.212325][ T8551] m920x_read = error: -19 [ 355.216854][ T8551] dvb-usb: error while querying for an remote control event. [ 355.278803][ T5636] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 355.333216][ T8551] m920x_read = error: -19 [ 355.350594][ T8551] dvb-usb: error while querying for an remote control event. [ 355.491434][ T8551] m920x_read = error: -19 [ 355.497449][ T8551] dvb-usb: error while querying for an remote control event. [ 355.596586][ T9766] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1201'. [ 355.633986][ T8551] m920x_read = error: -19 [ 355.646510][ T9766] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1201'. [ 355.655966][ T8551] dvb-usb: error while querying for an remote control event. [ 355.781770][ T8563] m920x_read = error: -19 [ 355.787331][ T8563] dvb-usb: error while querying for an remote control event. [ 355.871677][ T9771] loop5: detected capacity change from 0 to 128 [ 355.922568][ T8563] m920x_read = error: -19 [ 355.937416][ T8563] dvb-usb: error while querying for an remote control event. [ 356.081561][ T8563] m920x_read = error: -19 [ 356.101856][ T8563] dvb-usb: error while querying for an remote control event. [ 356.724296][ T8563] m920x_read = error: -19 [ 356.759109][ T8563] dvb-usb: error while querying for an remote control event. [ 356.935024][ T8553] m920x_read = error: -19 [ 356.975449][ T8553] dvb-usb: error while querying for an remote control event. [ 357.141410][ T8553] m920x_read = error: -19 [ 357.164354][ T8553] dvb-usb: error while querying for an remote control event. [ 357.494472][ T5636] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 357.581978][ T8551] m920x_read = error: -19 [ 357.602230][ T8551] dvb-usb: error while querying for an remote control event. [ 357.914937][ T8551] m920x_read = error: -19 [ 357.920086][ T8551] dvb-usb: error while querying for an remote control event. [ 358.677010][ T8551] m920x_read = error: -19 [ 358.691280][ T8551] dvb-usb: error while querying for an remote control event. [ 358.807507][ T8551] m920x_read = error: -19 [ 358.819004][ T8551] dvb-usb: error while querying for an remote control event. [ 358.905067][ T9814] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1216'. [ 358.944093][ T8551] m920x_read = error: -19 [ 358.965490][ T8551] dvb-usb: error while querying for an remote control event. [ 359.338786][ T8551] m920x_read = error: -19 [ 359.343973][ T8551] dvb-usb: error while querying for an remote control event. [ 359.823975][ T8551] m920x_read = error: -19 [ 359.847011][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 359.884747][ T8551] dvb-usb: error while querying for an remote control event. [ 360.031483][ T8551] m920x_read = error: -19 [ 360.046190][ T8551] dvb-usb: error while querying for an remote control event. [ 360.221516][ T8563] m920x_read = error: -19 [ 360.246389][ T8563] dvb-usb: error while querying for an remote control event. [ 360.412499][ T8563] m920x_read = error: -19 [ 360.431831][ T8563] dvb-usb: error while querying for an remote control event. [ 360.551936][ T8553] m920x_read = error: -19 [ 360.565565][ T8553] dvb-usb: error while querying for an remote control event. [ 360.664840][ T30] audit: type=1326 audit(1785000969.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 360.711798][ T9843] netlink: 'syz.5.1228': attribute type 1 has an invalid length. [ 360.714835][ T8553] m920x_read = error: -19 [ 360.726045][ T30] audit: type=1326 audit(1785000969.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 360.744437][ T8553] dvb-usb: error while querying for an remote control event. [ 360.821444][ T30] audit: type=1326 audit(1785000969.455:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 360.911366][ T8553] m920x_read = error: -19 [ 360.919860][ T30] audit: type=1326 audit(1785000969.455:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 361.014091][ T8553] dvb-usb: error while querying for an remote control event. [ 361.019078][ T30] audit: type=1326 audit(1785000969.455:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 361.163620][ T30] audit: type=1326 audit(1785000969.455:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 361.281514][ T8553] m920x_read = error: -19 [ 361.283221][ T30] audit: type=1326 audit(1785000969.455:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 361.300461][ T8553] dvb-usb: error while querying for an remote control event. [ 361.393382][ T30] audit: type=1326 audit(1785000969.455:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 361.492546][ T8553] m920x_read = error: -19 [ 361.516537][ T30] audit: type=1326 audit(1785000969.455:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.3.1227" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff38519de99 code=0x7ffc0000 [ 361.524441][ T8553] dvb-usb: error while querying for an remote control event. [ 361.741473][ T8553] m920x_read = error: -19 [ 361.745927][ T8553] dvb-usb: error while querying for an remote control event. [ 361.902634][ T8553] m920x_read = error: -19 [ 361.907163][ T8553] dvb-usb: error while querying for an remote control event. [ 362.041734][ T8553] m920x_read = error: -19 [ 362.050221][ T8553] dvb-usb: error while querying for an remote control event. [ 362.181477][ T8553] m920x_read = error: -19 [ 362.185915][ T8553] dvb-usb: error while querying for an remote control event. [ 362.248132][ T9877] overlayfs: failed to clone upperpath [ 362.322812][ T8553] m920x_read = error: -19 [ 362.344565][ T8553] dvb-usb: error while querying for an remote control event. [ 362.626410][ T8553] m920x_read = error: -19 [ 362.639487][ T8553] dvb-usb: error while querying for an remote control event. [ 362.781896][ T8553] m920x_read = error: -19 [ 362.801364][ T8553] dvb-usb: error while querying for an remote control event. [ 362.951357][ T8553] m920x_read = error: -19 [ 362.980604][ T8553] dvb-usb: error while querying for an remote control event. [ 363.161622][ T8553] m920x_read = error: -19 [ 363.185528][ T8553] dvb-usb: error while querying for an remote control event. [ 363.321338][ T8551] m920x_read = error: -19 [ 363.335518][ T8551] dvb-usb: error while querying for an remote control event. [ 363.471349][ T8551] m920x_read = error: -19 [ 363.481801][ T8551] dvb-usb: error while querying for an remote control event. [ 363.834694][ T8551] m920x_read = error: -19 [ 363.839422][ T8551] dvb-usb: error while querying for an remote control event. [ 364.569409][ T8551] m920x_read = error: -19 [ 364.573960][ T8551] dvb-usb: error while querying for an remote control event. [ 364.682092][ T9923] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1264'. [ 364.698277][ T9923] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1264'. [ 364.711920][ T8553] m920x_read = error: -19 [ 364.717181][ T9923] IPVS: dh: FWM 3 0x00000003 - no destination available [ 364.729479][ T8553] dvb-usb: error while querying for an remote control event. [ 364.760657][ C0] IPVS: dh: FWM 3 0x00000003 - no destination available [ 364.861343][ T8553] m920x_read = error: -19 [ 364.882390][ T8553] dvb-usb: error while querying for an remote control event. [ 365.329213][ T8553] m920x_read = error: -19 [ 365.337688][ T8553] dvb-usb: error while querying for an remote control event. [ 365.654804][ T8553] m920x_read = error: -19 [ 365.659945][ T8553] dvb-usb: error while querying for an remote control event. [ 365.810435][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 366.089597][ T8563] m920x_read = error: -19 [ 366.483930][ T8563] dvb-usb: error while querying for an remote control event. [ 366.612090][ T8563] m920x_read = error: -19 [ 366.642944][ T8563] dvb-usb: error while querying for an remote control event. [ 366.782222][ T8563] m920x_read = error: -19 [ 366.795606][ T8563] dvb-usb: error while querying for an remote control event. [ 366.921405][ T8551] m920x_read = error: -19 [ 366.944854][ T8551] dvb-usb: error while querying for an remote control event. [ 367.082786][ T8551] m920x_read = error: -19 [ 367.090810][ T8551] dvb-usb: error while querying for an remote control event. [ 367.221328][ T8551] m920x_read = error: -19 [ 367.231139][ T8551] dvb-usb: error while querying for an remote control event. [ 367.362690][ T8551] m920x_read = error: -19 [ 367.381800][ T8551] dvb-usb: error while querying for an remote control event. [ 367.541527][ T8551] m920x_read = error: -19 [ 367.562810][ T8551] dvb-usb: error while querying for an remote control event. [ 367.624428][ T9968] fuse: fd is not a fuse device [ 367.702802][ T8551] m920x_read = error: -19 [ 367.716522][ T8551] dvb-usb: error while querying for an remote control event. [ 367.758088][ T9970] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1280'. [ 367.834170][ T9970] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1280'. [ 367.844247][ T8553] m920x_read = error: -19 [ 367.860408][ T8553] dvb-usb: error while querying for an remote control event. [ 367.992189][ T8553] m920x_read = error: -19 [ 367.996658][ T8553] dvb-usb: error while querying for an remote control event. [ 368.121785][ T8553] m920x_read = error: -19 [ 368.142407][ T8553] dvb-usb: error while querying for an remote control event. [ 368.291934][ T8553] m920x_read = error: -19 [ 368.302505][ T8553] dvb-usb: error while querying for an remote control event. [ 368.445513][ T8553] m920x_read = error: -19 [ 368.464041][ T8553] dvb-usb: error while querying for an remote control event. [ 368.611369][ T8553] m920x_read = error: -19 [ 368.627161][ T8553] dvb-usb: error while querying for an remote control event. [ 368.781455][ T8553] m920x_read = error: -19 [ 368.799426][ T8553] dvb-usb: error while querying for an remote control event. [ 368.942808][ T8553] m920x_read = error: -19 [ 369.343066][ T9998] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 369.527193][ T8553] dvb-usb: error while querying for an remote control event. [ 369.619946][ T9998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.974429][ T8553] m920x_read = error: -19 [ 369.979372][ T8553] dvb-usb: error while querying for an remote control event. [ 370.127431][ T8551] m920x_read = error: -19 [ 370.179261][ T8551] dvb-usb: error while querying for an remote control event. [ 370.364681][ T8551] m920x_read = error: -19 [ 370.383116][ T8551] dvb-usb: error while querying for an remote control event. [ 370.512690][ T8551] m920x_read = error: -19 [ 370.540722][ T8551] dvb-usb: error while querying for an remote control event. [ 370.544395][ T5630] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 370.558673][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 370.558721][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 370.558746][ T5630] Workqueue: hci1 hci_rx_work [ 370.558793][ T5630] Call Trace: [ 370.558804][ T5630] [ 370.558818][ T5630] dump_stack_lvl+0x100/0x190 [ 370.558864][ T5630] sysfs_warn_dup.cold+0x1c/0x28 [ 370.558923][ T5630] sysfs_create_dir_ns+0x24b/0x2b0 [ 370.558978][ T5630] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 370.559029][ T5630] ? find_held_lock+0x2b/0x80 [ 370.559088][ T5630] ? kobject_add_internal+0x25f/0x930 [ 370.559150][ T5630] ? kobject_add_internal+0x25f/0x930 [ 370.559349][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.559433][ T5630] ? do_raw_spin_unlock+0x145/0x1e0 [ 370.559516][ T5630] kobject_add_internal+0x2c8/0x930 [ 370.559644][ T5630] kobject_add+0x16a/0x1e0 [ 370.559738][ T5630] ? __pfx_kobject_add+0x10/0x10 [ 370.559831][ T5630] ? class_to_subsys+0x10f/0x150 [ 370.559939][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.560048][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.560116][ T5630] ? kobject_put+0xb9/0x640 [ 370.560262][ T5630] ? _raw_spin_unlock+0x28/0x50 [ 370.560336][ T5630] device_add+0x294/0x1970 [ 370.560407][ T5630] ? __pfx_dev_set_name+0x10/0x10 [ 370.560456][ T5630] ? __pfx_device_add+0x10/0x10 [ 370.560540][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.560603][ T5630] ? mgmt_send_event_skb+0x2fb/0x460 [ 370.560688][ T5630] hci_conn_add_sysfs+0x1a3/0x260 [ 370.560769][ T5630] le_conn_complete_evt+0x11eb/0x1f60 [ 370.560856][ T5630] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 370.560918][ T5630] ? hci_event_packet+0x186/0xcd0 [ 370.560963][ T5630] ? hci_event_packet+0x186/0xcd0 [ 370.561004][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.561067][ T5630] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 370.561119][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.561168][ T5630] ? skb_pull_data+0x15f/0x1e0 [ 370.561292][ T5630] hci_le_meta_evt+0x34a/0x5f0 [ 370.561346][ T5630] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 370.561406][ T5630] hci_event_packet+0x51c/0xcd0 [ 370.561457][ T5630] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 370.561511][ T5630] ? __pfx_hci_event_packet+0x10/0x10 [ 370.561561][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.561617][ T5630] ? kcov_remote_start+0x384/0x670 [ 370.561663][ T5630] ? lockdep_hardirqs_on+0x78/0x100 [ 370.561713][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.561925][ T5630] hci_rx_work+0x451/0xfc0 [ 370.561990][ T5630] process_one_work+0xa23/0x1940 [ 370.562048][ T5630] ? __pfx_process_one_work+0x10/0x10 [ 370.562088][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.562161][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.562212][ T5630] worker_thread+0x5ef/0xe50 [ 370.562275][ T5630] ? kthread+0x13a/0x450 [ 370.562340][ T5630] ? __pfx_worker_thread+0x10/0x10 [ 370.562380][ T5630] kthread+0x370/0x450 [ 370.562440][ T5630] ? __pfx_kthread+0x10/0x10 [ 370.562504][ T5630] ret_from_fork+0x72b/0xd50 [ 370.562566][ T5630] ? __pfx_ret_from_fork+0x10/0x10 [ 370.562620][ T5630] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.562673][ T5630] ? __switch_to+0x800/0x10f0 [ 370.562755][ T5630] ? __switch_to_asm+0x39/0x70 [ 370.562816][ T5630] ? __pfx_kthread+0x10/0x10 [ 370.562888][ T5630] ret_from_fork_asm+0x1a/0x30 [ 370.562977][ T5630] [ 370.900775][ T5630] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 370.901745][ T8551] m920x_read = error: -19 [ 370.959912][ T8551] dvb-usb: error while querying for an remote control event. [ 370.973352][ T5630] Bluetooth: hci1: failed to register connection device [ 370.987738][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 371.090431][T10021] bridge0: port 1(team_slave_1) entered disabled state [ 371.098963][ T8551] m920x_read = error: -19 [ 371.106111][ T8551] dvb-usb: error while querying for an remote control event. [ 371.150286][T10021] tipc: Resetting bearer [ 371.248635][ T5860] m920x_read = error: -19 [ 371.266418][ T5860] dvb-usb: error while querying for an remote control event. [ 371.430305][ T803] m920x_read = error: -19 [ 371.445491][ T803] dvb-usb: error while querying for an remote control event. [ 371.582983][T10047] m920x_read = error: -19 [ 371.587454][T10047] dvb-usb: error while querying for an remote control event. [ 371.706763][ T751] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.729957][ T751] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.762305][ T5769] m920x_read = error: -19 [ 371.782483][ T5769] dvb-usb: error while querying for an remote control event. [ 371.835893][ T751] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.886355][ T751] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.991579][ T751] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.997112][ T29] m920x_read = error: -19 [ 372.036237][ T751] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.046656][ T29] dvb-usb: error while querying for an remote control event. [ 372.138311][ T751] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.169239][ T751] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.312517][ T5761] m920x_read = error: -19 [ 372.333425][ T5761] dvb-usb: error while querying for an remote control event. [ 372.477543][T10048] m920x_read = error: -19 [ 372.502989][T10048] dvb-usb: error while querying for an remote control event. [ 372.642362][T10048] m920x_read = error: -19 [ 372.651128][T10048] dvb-usb: error while querying for an remote control event. [ 372.682166][T10066] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 372.771337][T10048] m920x_read = error: -19 [ 372.790291][T10048] dvb-usb: error while querying for an remote control event. [ 373.072128][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 373.688737][ T8553] m920x_read = error: -19 [ 373.730649][ T8553] dvb-usb: error while querying for an remote control event. [ 373.863943][T10066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.891663][T10048] m920x_read = error: -19 [ 373.919202][T10048] dvb-usb: error while querying for an remote control event. [ 374.041384][T10048] m920x_read = error: -19 [ 374.050921][T10048] dvb-usb: error while querying for an remote control event. [ 374.181321][T10048] m920x_read = error: -19 [ 374.185771][T10048] dvb-usb: error while querying for an remote control event. [ 374.332204][T10048] m920x_read = error: -19 [ 374.340429][T10048] dvb-usb: error while querying for an remote control event. [ 374.493645][T10048] m920x_read = error: -19 [ 374.503838][T10048] dvb-usb: error while querying for an remote control event. [ 374.820997][T10048] m920x_read = error: -19 [ 374.829685][T10048] dvb-usb: error while querying for an remote control event. [ 374.995491][ T5761] m920x_read = error: -19 [ 375.003766][ T5761] dvb-usb: error while querying for an remote control event. [ 375.121289][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 375.131795][ T5761] m920x_read = error: -19 [ 375.151956][ T5761] dvb-usb: error while querying for an remote control event. [ 375.811483][T10048] m920x_read = error: -19 [ 375.818709][T10048] dvb-usb: error while querying for an remote control event. [ 375.938761][T10048] m920x_read = error: -19 [ 376.009977][T10048] dvb-usb: error while querying for an remote control event. [ 376.097701][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 376.162813][T10048] m920x_read = error: -19 [ 376.183272][T10048] dvb-usb: error while querying for an remote control event. [ 376.422315][T10048] m920x_read = error: -19 [ 376.577213][T10048] dvb-usb: error while querying for an remote control event. [ 376.623462][T10122] netlink: 'syz.3.1327': attribute type 1 has an invalid length. [ 376.743917][T10048] m920x_read = error: -19 [ 376.784389][T10048] dvb-usb: error while querying for an remote control event. [ 376.839571][T10122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.936143][T10048] m920x_read = error: -19 [ 376.953822][T10048] dvb-usb: error while querying for an remote control event. [ 377.091838][T10047] m920x_read = error: -19 [ 377.102576][T10047] dvb-usb: error while querying for an remote control event. [ 377.211559][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 377.485547][T10047] m920x_read = error: -19 [ 377.495346][T10047] dvb-usb: error while querying for an remote control event. [ 378.049229][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.056252][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.185987][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 378.484210][T10047] m920x_read = error: -19 [ 378.489847][T10047] dvb-usb: error while querying for an remote control event. [ 378.703889][T10048] m920x_read = error: -19 [ 378.727725][T10048] dvb-usb: error while querying for an remote control event. [ 378.882301][T10048] m920x_read = error: -19 [ 379.012736][T10165] 9p: Bad value for 'rfdno' [ 379.142938][T10048] dvb-usb: error while querying for an remote control event. [ 379.260517][T10168] Invalid source name [ 379.264959][T10168] UBIFS error (pid: 10168): cannot open "ubifs", error -22 [ 379.961935][T10048] m920x_read = error: -19 [ 379.980539][T10048] dvb-usb: error while querying for an remote control event. [ 380.341717][T10048] m920x_read = error: -19 [ 380.349918][T10048] dvb-usb: error while querying for an remote control event. [ 381.080426][T10048] m920x_read = error: -19 [ 381.084929][T10048] dvb-usb: error while querying for an remote control event. [ 381.211437][T10047] m920x_read = error: -19 [ 381.233342][T10047] dvb-usb: error while querying for an remote control event. [ 381.256081][T10186] netlink: 'syz.5.1345': attribute type 1 has an invalid length. [ 381.361587][T10047] m920x_read = error: -19 [ 381.389633][T10047] dvb-usb: error while querying for an remote control event. [ 381.553170][T10048] m920x_read = error: -19 [ 381.572209][T10048] dvb-usb: error while querying for an remote control event. [ 382.284004][T10048] m920x_read = error: -19 [ 382.288622][T10048] dvb-usb: error while querying for an remote control event. [ 382.392088][T10186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.434003][T10048] m920x_read = error: -19 [ 382.467494][T10048] dvb-usb: error while querying for an remote control event. [ 382.506438][T10188] bond3: (slave gretap1): making interface the new active one [ 382.536542][T10188] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 382.631941][T10047] m920x_read = error: -19 [ 382.648619][T10047] dvb-usb: error while querying for an remote control event. [ 382.781324][T10047] m920x_read = error: -19 [ 382.791948][T10047] dvb-usb: error while querying for an remote control event. [ 382.921505][T10047] m920x_read = error: -19 [ 382.938273][T10047] dvb-usb: error while querying for an remote control event. [ 383.082963][T10047] m920x_read = error: -19 [ 383.107289][T10047] dvb-usb: error while querying for an remote control event. [ 383.261358][T10047] m920x_read = error: -19 [ 383.293188][T10047] dvb-usb: error while querying for an remote control event. [ 383.446941][T10047] m920x_read = error: -19 [ 383.482124][T10047] dvb-usb: error while querying for an remote control event. [ 383.624154][ T5636] Bluetooth: hci5: command 0x0406 tx timeout [ 383.695129][T10047] m920x_read = error: -19 [ 383.742766][T10047] dvb-usb: error while querying for an remote control event. [ 383.891466][T10047] m920x_read = error: -19 [ 383.909312][T10047] dvb-usb: error while querying for an remote control event. [ 384.042900][T10047] m920x_read = error: -19 [ 384.052308][T10047] dvb-usb: error while querying for an remote control event. [ 384.181837][T10047] m920x_read = error: -19 [ 384.205465][T10047] dvb-usb: error while querying for an remote control event. [ 384.274740][T10222] loop5: detected capacity change from 0 to 128 [ 384.331783][T10047] m920x_read = error: -19 [ 384.344407][T10047] dvb-usb: error while querying for an remote control event. [ 384.587676][T10047] m920x_read = error: -19 [ 384.698645][T10047] dvb-usb: error while querying for an remote control event. [ 384.941855][T10047] m920x_read = error: -19 [ 385.007305][T10047] dvb-usb: error while querying for an remote control event. [ 385.296618][T10047] m920x_read = error: -19 [ 385.351052][T10047] dvb-usb: error while querying for an remote control event. [ 385.521577][T10047] m920x_read = error: -19 [ 385.536655][T10047] dvb-usb: error while querying for an remote control event. [ 385.596146][T10235] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 385.681698][T10047] m920x_read = error: -19 [ 385.686266][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 385.692707][T10047] dvb-usb: error while querying for an remote control event. [ 385.826167][T10047] m920x_read = error: -19 [ 385.935364][T10240] loop4: detected capacity change from 0 to 256 [ 385.952159][T10240] exfat: Deprecated parameter 'utf8' [ 386.054912][T10047] dvb-usb: error while querying for an remote control event. [ 386.371623][T10240] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 386.543132][T10047] m920x_read = error: -19 [ 386.768584][T10047] dvb-usb: error while querying for an remote control event. [ 387.328559][T10047] m920x_read = error: -19 [ 387.333135][T10047] dvb-usb: error while querying for an remote control event. [ 387.426440][T10235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.451481][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 387.459801][T10048] m920x_read = error: -19 [ 387.472428][T10048] dvb-usb: error while querying for an remote control event. [ 387.581328][T10047] m920x_read = error: -19 [ 387.590436][T10047] dvb-usb: error while querying for an remote control event. [ 387.731352][T10047] m920x_read = error: -19 [ 387.984623][T10047] dvb-usb: error while querying for an remote control event. [ 388.102706][T10047] m920x_read = error: -19 [ 388.126667][T10047] dvb-usb: error while querying for an remote control event. [ 388.261733][T10048] m920x_read = error: -19 [ 388.304740][T10048] dvb-usb: error while querying for an remote control event. [ 388.453642][T10048] m920x_read = error: -19 [ 388.486340][T10048] dvb-usb: error while querying for an remote control event. [ 388.634686][T10276] fuse: Bad value for 'fd' [ 388.661370][T10047] m920x_read = error: -19 [ 388.688445][T10047] dvb-usb: error while querying for an remote control event. [ 388.945068][T10047] m920x_read = error: -19 [ 389.039098][T10047] dvb-usb: error while querying for an remote control event. [ 389.302713][T10047] m920x_read = error: -19 [ 389.330868][T10047] dvb-usb: error while querying for an remote control event. [ 389.492757][T10048] m920x_read = error: -19 [ 389.510858][T10048] dvb-usb: error while querying for an remote control event. [ 389.530121][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 389.836145][T10048] m920x_read = error: -19 [ 389.840584][T10048] dvb-usb: error while querying for an remote control event. [ 390.140066][T10294] syz_tun: entered allmulticast mode [ 390.755745][T10298] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 391.346371][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 391.542986][T10048] m920x_read = error: -19 [ 391.547473][T10048] dvb-usb: error while querying for an remote control event. [ 391.578476][T10298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.672607][ T8565] m920x_read = error: -19 [ 391.691584][ T8565] dvb-usb: error while querying for an remote control event. [ 391.852061][ T8565] m920x_read = error: -19 [ 391.947120][ T8565] dvb-usb: error while querying for an remote control event. [ 392.262155][ T8565] m920x_read = error: -19 [ 392.356628][ T8565] dvb-usb: error while querying for an remote control event. [ 392.723510][ T8565] m920x_read = error: -19 [ 392.737894][ T8565] dvb-usb: error while querying for an remote control event. [ 392.889767][ T8565] m920x_read = error: -19 [ 392.898483][ T8565] dvb-usb: error while querying for an remote control event. [ 393.031905][ T8565] m920x_read = error: -19 [ 393.283901][ T8565] dvb-usb: error while querying for an remote control event. [ 393.391435][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 393.518487][ T8565] m920x_read = error: -19 [ 393.563519][ T8565] dvb-usb: error while querying for an remote control event. [ 394.082966][T10048] m920x_read = error: -19 [ 394.116261][T10048] dvb-usb: error while querying for an remote control event. [ 394.296945][ T8565] m920x_read = error: -19 [ 394.330786][ T8565] dvb-usb: error while querying for an remote control event. [ 394.523607][ T8565] m920x_read = error: -19 [ 394.564064][ T8565] dvb-usb: error while querying for an remote control event. [ 394.744938][ T8565] m920x_read = error: -19 [ 394.781105][ T8565] dvb-usb: error while querying for an remote control event. [ 394.943096][T10048] m920x_read = error: -19 [ 394.958758][T10048] dvb-usb: error while querying for an remote control event. [ 395.141495][T10048] m920x_read = error: -19 [ 395.176553][T10048] dvb-usb: error while querying for an remote control event. [ 395.372555][ T8565] m920x_read = error: -19 [ 395.386841][ T8565] dvb-usb: error while querying for an remote control event. [ 395.547819][T10048] m920x_read = error: -19 [ 395.574941][T10048] dvb-usb: error while querying for an remote control event. [ 395.743594][ T8565] m920x_read = error: -19 [ 396.042686][ T8565] dvb-usb: error while querying for an remote control event. [ 396.655167][ T8565] m920x_read = error: -19 [ 396.688344][ T8565] dvb-usb: error while querying for an remote control event. [ 397.121570][T10351] netlink: 'syz.5.1398': attribute type 12 has an invalid length. [ 397.281798][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 397.369450][ T5631] ------------[ cut here ]------------ [ 397.375820][ T5631] refcnt < 0 [ 397.375842][ T5631] WARNING: net/bluetooth/hci_conn.c:631 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u9:4/5631 [ 397.391406][ T5631] Modules linked in: [ 397.398192][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 397.408613][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 397.419239][ T5631] Workqueue: hci3 hci_conn_timeout [ 397.425139][ T5631] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 397.431157][ T5631] Code: 44 0f b6 2d 83 b8 6d 06 31 ff 41 83 e5 40 44 89 ee e8 ea d8 59 f7 45 84 ed 0f 84 02 ff ff ff e9 e7 04 c1 f6 e8 c7 de 59 f7 90 <0f> 0b 90 e8 be de 59 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 397.451412][ T5631] RSP: 0018:ffffc9000417fc18 EFLAGS: 00010293 [ 397.457932][ T5631] RAX: 0000000000000000 RBX: ffff8880694b4a40 RCX: ffffffff8ab05bbf [ 397.466725][ T5631] RDX: ffff88807ca6dd00 RSI: ffffffff8ab05cb9 RDI: ffff88807ca6dd00 [ 397.475218][ T5631] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 397.483403][ T5631] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8880694b4000 [ 397.491864][ T5631] R13: ffff88807ca6e1c4 R14: ffffffff9122cc84 R15: 0000000000000000 [ 397.499947][ T5631] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 397.509234][ T5631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.516291][ T5631] CR2: 00007f0b9d3fe2c8 CR3: 0000000074e71000 CR4: 0000000000350ef0 [ 397.524808][ T5631] Call Trace: [ 397.528124][ T5631] [ 397.531083][ T5631] process_one_work+0xa23/0x1940 [ 397.536286][ T5631] ? __pfx_process_one_work+0x10/0x10 [ 397.541849][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.547666][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.553665][ T5631] worker_thread+0x5ef/0xe50 [ 397.558653][ T5631] ? kthread+0x13a/0x450 [ 397.563366][ T5631] ? __pfx_worker_thread+0x10/0x10 [ 397.568524][ T5631] kthread+0x370/0x450 [ 397.572752][ T5631] ? __pfx_kthread+0x10/0x10 [ 397.577404][ T5631] ret_from_fork+0x72b/0xd50 [ 397.582135][ T5631] ? __pfx_ret_from_fork+0x10/0x10 [ 397.587398][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.593455][ T5631] ? __switch_to+0x800/0x10f0 [ 397.598228][ T5631] ? __switch_to_asm+0x39/0x70 [ 397.603272][ T5631] ? __pfx_kthread+0x10/0x10 [ 397.607952][ T5631] ret_from_fork_asm+0x1a/0x30 [ 397.612956][ T5631] [ 397.615997][ T5631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.623302][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 397.633157][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 397.643466][ T5631] Workqueue: hci3 hci_conn_timeout [ 397.648878][ T5631] Call Trace: [ 397.652198][ T5631] [ 397.655168][ T5631] dump_stack_lvl+0x100/0x190 [ 397.659891][ T5631] vpanic+0x552/0x970 [ 397.664010][ T5631] ? __pfx_vpanic+0x10/0x10 [ 397.668640][ T5631] panic+0xd1/0xe0 [ 397.672412][ T5631] ? __pfx_panic+0x10/0x10 [ 397.676887][ T5631] ? check_panic_on_warn+0x1f/0x90 [ 397.682111][ T5631] check_panic_on_warn.cold+0x19/0x34 [ 397.687622][ T5631] ? hci_conn_timeout+0x16a/0x230 [ 397.692701][ T5631] __warn.cold+0x191/0x318 [ 397.697245][ T5631] __report_bug+0x30f/0x440 [ 397.701826][ T5631] ? hci_conn_timeout+0x16a/0x230 [ 397.707030][ T5631] ? __pfx___report_bug+0x10/0x10 [ 397.712146][ T5631] ? lockdep_hardirqs_on+0x78/0x100 [ 397.717392][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.723068][ T5631] ? irqentry_exit+0x24d/0xa00 [ 397.727930][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.733709][ T5631] ? hci_conn_timeout+0x16a/0x230 [ 397.738788][ T5631] ? hci_conn_timeout+0x16a/0x230 [ 397.743866][ T5631] report_bug+0xb2/0x220 [ 397.748146][ T5631] ? hci_conn_timeout+0x16a/0x230 [ 397.753237][ T5631] handle_bug+0x16a/0x2a0 [ 397.757720][ T5631] exc_invalid_op+0x17/0x50 [ 397.762499][ T5631] asm_exc_invalid_op+0x1a/0x20 [ 397.767855][ T5631] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 397.773822][ T5631] Code: 44 0f b6 2d 83 b8 6d 06 31 ff 41 83 e5 40 44 89 ee e8 ea d8 59 f7 45 84 ed 0f 84 02 ff ff ff e9 e7 04 c1 f6 e8 c7 de 59 f7 90 <0f> 0b 90 e8 be de 59 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 397.797121][ T5631] RSP: 0018:ffffc9000417fc18 EFLAGS: 00010293 [ 397.803958][ T5631] RAX: 0000000000000000 RBX: ffff8880694b4a40 RCX: ffffffff8ab05bbf [ 397.812606][ T5631] RDX: ffff88807ca6dd00 RSI: ffffffff8ab05cb9 RDI: ffff88807ca6dd00 [ 397.821051][ T5631] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 397.829102][ T5631] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8880694b4000 [ 397.837232][ T5631] R13: ffff88807ca6e1c4 R14: ffffffff9122cc84 R15: 0000000000000000 [ 397.845257][ T5631] ? hci_conn_timeout+0x6f/0x230 [ 397.850516][ T5631] ? hci_conn_timeout+0x169/0x230 [ 397.855839][ T5631] ? hci_conn_timeout+0x169/0x230 [ 397.861226][ T5631] process_one_work+0xa23/0x1940 [ 397.866318][ T5631] ? __pfx_process_one_work+0x10/0x10 [ 397.871766][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.877468][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.883193][ T5631] worker_thread+0x5ef/0xe50 [ 397.887887][ T5631] ? kthread+0x13a/0x450 [ 397.892221][ T5631] ? __pfx_worker_thread+0x10/0x10 [ 397.898165][ T5631] kthread+0x370/0x450 [ 397.902625][ T5631] ? __pfx_kthread+0x10/0x10 [ 397.907401][ T5631] ret_from_fork+0x72b/0xd50 [ 397.912128][ T5631] ? __pfx_ret_from_fork+0x10/0x10 [ 397.917587][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 397.923280][ T5631] ? __switch_to+0x800/0x10f0 [ 397.928117][ T5631] ? __switch_to_asm+0x39/0x70 [ 397.933044][ T5631] ? __pfx_kthread+0x10/0x10 [ 397.937729][ T5631] ret_from_fork_asm+0x1a/0x30 [ 397.942656][ T5631] [ 397.945956][ T5631] Kernel Offset: disabled [ 397.950369][ T5631] Rebooting in 86400 seconds..