last executing test programs: 9m21.060692446s ago: executing program 1 (id=31): ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f000018e940)={0x2, &(0x7f000018e780)=[{0x4000000, 0x0, 0x0, 0x6, 0x54}, {0x2000000, 0x0, 0x0, 0x1, 0x9}]}) 9m20.217636044s ago: executing program 1 (id=32): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x11d100, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x4, 0x5b, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000037580)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0xffffffffffffff57, 0x0, 0x0, &(0x7f0000000300)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) 9m13.005477821s ago: executing program 1 (id=48): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 9m10.636154929s ago: executing program 1 (id=54): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r5, 0x0, 0x8000fffffffe) 9m9.286729758s ago: executing program 1 (id=57): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x4000000) 9m9.009423077s ago: executing program 1 (id=58): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x11d100, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x4, 0x5b, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000037580)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0xffffffffffffff57, 0x0, 0x0, &(0x7f0000000300)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) 8m53.895514156s ago: executing program 32 (id=58): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x11d100, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x4, 0x5b, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000037580)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0xffffffffffffff57, 0x0, 0x0, &(0x7f0000000300)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) 8m18.503642912s ago: executing program 3 (id=147): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 8m18.118981641s ago: executing program 3 (id=148): unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0) 8m17.754175842s ago: executing program 3 (id=150): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)="a4", 0x1, 0x44, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 8m15.427140578s ago: executing program 3 (id=151): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 8m8.396556725s ago: executing program 3 (id=162): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) 7m59.596856594s ago: executing program 3 (id=169): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x882) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, 0xffffffffffffffff, r4, 0x1) bind$tipc(r1, 0x0, 0x0) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000080)=""/29}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x4, 0x1, 0x0, 0x1000}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3cc00c5b8fbe60832617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0x0, 0x3}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x880) 7m42.842781949s ago: executing program 33 (id=169): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x882) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, 0xffffffffffffffff, r4, 0x1) bind$tipc(r1, 0x0, 0x0) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000080)=""/29}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x4, 0x1, 0x0, 0x1000}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3cc00c5b8fbe60832617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0x0, 0x3}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x880) 1m45.548133277s ago: executing program 2 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, &(0x7f0000001180)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x2, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x240440c5}, 0x8054) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x59, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1m44.57789101s ago: executing program 2 (id=969): socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x20000004}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7feff, 0x20008, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x8, 0x7c5, 0x1, 0x2800, 0xd59f80, 0x1, 0x5, 0x0, 0x8, 0x0, 0x722, 0x5, 0x3, 0x9, 0x28, 0xe, {0xffff945a, 0x9}, 0x5, 0x2d}}) epoll_create1(0x80000) r3 = syz_open_dev$evdev(0x0, 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x208) semop(r4, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) close_range(0xffffffffffffffff, r2, 0x0) 1m43.263580647s ago: executing program 2 (id=971): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x15, 0x1, 0x1) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffff48}, 0x10112) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) 1m42.041779772s ago: executing program 2 (id=976): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x130}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}) msgsnd(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02"], 0x2a, 0x0) msgsnd(r0, &(0x7f0000000100)=ANY=[], 0x2000, 0x0) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0xdf9, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1m40.964346554s ago: executing program 2 (id=981): socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x20000004}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x8, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000019380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x7feff, 0x20008, 0x0, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc010) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x8, 0x7c5, 0x1, 0x2800, 0xd59f80, 0x1, 0x5, 0x0, 0x8, 0x0, 0x722, 0x5, 0x3, 0x9, 0x28, 0xe, {0xffff945a, 0x9}, 0x5, 0x2d}}) epoll_create1(0x80000) r3 = syz_open_dev$evdev(0x0, 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x208) semop(r4, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) close_range(0xffffffffffffffff, r2, 0x0) 1m39.44577153s ago: executing program 2 (id=986): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, 0x0, &(0x7f0000000900)='GPL\x00', 0x3, 0x8a, &(0x7f00000000c0)=""/138}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1m24.296818179s ago: executing program 34 (id=986): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x4, 0x0, &(0x7f0000000900)='GPL\x00', 0x3, 0x8a, &(0x7f00000000c0)=""/138}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 20.714220083s ago: executing program 6 (id=1152): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000285000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1"], 0x0, 0xcb1f, 0x0, 0x0, 0x100, 0x16, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.486098226s ago: executing program 6 (id=1153): r0 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xa4, 0x5, 0x0, 0x20002}, {0x6, 0x8}]}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@report={0xf4, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0x2b, {@in=@multicast2, @in6=@loopback, 0x4e21, 0x80, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x84}}, [@policy={0xa8, 0x7, {{@in=@local, @in=@multicast1, 0x4e22, 0x401, 0x4e21, 0xa, 0xa, 0x20, 0x20, 0x89}, {0x1, 0xe, 0x8, 0x9, 0x101, 0xffffffffffff2c9f, 0x7, 0x1}, {0x6, 0x25, 0x6, 0x9}, 0x3, 0x0, 0x2, 0x1, 0x3, 0x3}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4c915}, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = timerfd_create(0x0, 0x800) timerfd_gettime(r5, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r7, 0xfffffe4d}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r9, 0x7}}, 0x48) 15.843910093s ago: executing program 6 (id=1160): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket(0x8, 0x4, 0x3) getpeername$packet(r0, &(0x7f0000000300), &(0x7f0000000340)=0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) 9.083519406s ago: executing program 5 (id=1171): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000558000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000729000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000497000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x899, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001a400)=""/102384, 0x18ff0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r6 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x3, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 7.280579263s ago: executing program 4 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 7.209325841s ago: executing program 5 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 5.205481686s ago: executing program 4 (id=1175): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x8, 0x6, 0x5, 0x37, 0x7, 0x8001}) 4.921688438s ago: executing program 4 (id=1177): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.884637383s ago: executing program 0 (id=1178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.6175383s ago: executing program 0 (id=1179): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) 4.377406906s ago: executing program 0 (id=1180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x458c, &(0x7f00000001c0)={0x0, 0xbd25, 0x40, 0x2, 0x30b}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000240)={&(0x7f0000000040)={&(0x7f00000002c0)="a7", 0x1, 0x1, 0x9, 0xfffffffffffffffb}}, 0x1) 3.624169828s ago: executing program 6 (id=1181): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) sendto$packet(r0, 0x0, 0x0, 0x90, 0x0, 0x0) 3.58351295s ago: executing program 0 (id=1182): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x16, &(0x7f0000000540)=""/22, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 3.373702888s ago: executing program 0 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000002000180c2000000aaaaaaaaaabb8100060008004589001c0068000001119078"], 0x32) 3.181677037s ago: executing program 6 (id=1184): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2.645481632s ago: executing program 6 (id=1185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801000000000011800010014000100fc01000000000000000000000000000008000f00ff0f00001400020000000000000000000000ffffffffffff72fde2e7dbf7779bc33d4376bb90fd375c168324983bb5bb83c3f642b8cf553840f2a3bf15802169df312ad9867e842ca011e05ec2a336f2e124484baa6656ae7450118a2b286a5912d41a07b0b66393f958de683e290ce5ad4eaaee75aa81c289e3efb99fd7bd4081d2343ed1"], 0x4c}}, 0x0) r1 = fanotify_init(0x200, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x420, &(0x7f00000001c0)={'trans=unix,', {[{@cache_readahead}, {@access_any}, {@access_any}, {@loose}, {@noextend}, {@cache_none}], [{@measure}, {@obj_user={'obj_user', 0x3d, 'blkio.throttle.io_serviced\x00'}}]}}) fanotify_mark(r1, 0x101, 0x8000011, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000000)={0x6, 0x7, 0x8, 0xfffffffffffffffa, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65", 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) keyctl$update(0x2, 0x0, &(0x7f0000000000)="11868a0fceae284c000000010000", 0xe) gettid() 2.47097673s ago: executing program 5 (id=1186): socket(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x190) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) tkill(0x0, 0x12) wait4(0x0, 0x0, 0x8, 0x0) truncate(&(0x7f0000003b40)='./mnt\x00', 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20050800) socket$inet(0x2, 0x4000000000000001, 0x0) 2.442580197s ago: executing program 4 (id=1187): syz_emit_ethernet(0x83, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff2004d0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="509500"], 0x0) 2.28445001s ago: executing program 4 (id=1188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.150913183s ago: executing program 5 (id=1189): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) 1.066432548s ago: executing program 4 (id=1190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c554f1919d845e30000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000841) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="06dcff00", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25170000005400068014000300322d73355fd5955d482ee5364c4323843c00040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x82341) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') io_setup(0x8, &(0x7f0000004200)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x0) capset(&(0x7f0000a31000)={0x20080522}, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x6, 0x8, 0xfd5, 0x7fffffffffffffff, 0x4, 0x7ff}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 893.687841ms ago: executing program 5 (id=1191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x458c, &(0x7f00000001c0)={0x0, 0xbd25, 0x40, 0x2, 0x30b}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000240)={&(0x7f0000000040)={&(0x7f00000002c0)="a7", 0x1, 0x1, 0x9, 0xfffffffffffffffb}}, 0x1) 98.215289ms ago: executing program 5 (id=1192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000040)={0x2, 0xa, 0x80}) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) 0s ago: executing program 0 (id=1193): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) syz_open_dev$vivid(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x0) kernel console output (not intermixed with test programs): 95.043900][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.050848][ T5599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.098409][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.117513][ T5599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.159141][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.180483][ T5599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.209173][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.219337][ T5599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.244645][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.336748][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.373818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.373968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.379577][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.446291][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.446397][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.557907][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.578002][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.612497][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.612786][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.660461][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.660556][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.710979][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.766601][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.768438][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.768562][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.845210][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.845406][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.958284][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.019403][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.080960][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.086382][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.118431][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.118577][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.203048][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.290953][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.291104][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.371815][ T5606] Bluetooth: hci3: command tx timeout [ 96.448226][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.448375][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.531936][ T5606] Bluetooth: hci0: command tx timeout [ 96.612033][ T5606] Bluetooth: hci1: command tx timeout [ 96.691808][ T5606] Bluetooth: hci4: command tx timeout [ 96.691841][ T5606] Bluetooth: hci2: command tx timeout [ 96.926557][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.506157][ T5601] veth0_vlan: entered promiscuous mode [ 97.572325][ T5601] veth1_vlan: entered promiscuous mode [ 97.681480][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.897073][ T5601] veth0_macvtap: entered promiscuous mode [ 97.942633][ T5601] veth1_macvtap: entered promiscuous mode [ 98.123349][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.153741][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.183577][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.276696][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.304443][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.307054][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309789][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549704][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.717509][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.840565][ T5600] veth0_vlan: entered promiscuous mode [ 98.863830][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.863855][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.906513][ T5603] veth0_vlan: entered promiscuous mode [ 98.924079][ T5600] veth1_vlan: entered promiscuous mode [ 99.029203][ T5603] veth1_vlan: entered promiscuous mode [ 99.033899][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.033918][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.098174][ T5598] veth0_vlan: entered promiscuous mode [ 99.166301][ T5599] veth0_vlan: entered promiscuous mode [ 99.188529][ T5598] veth1_vlan: entered promiscuous mode [ 99.206258][ T5600] veth0_macvtap: entered promiscuous mode [ 99.217440][ T5599] veth1_vlan: entered promiscuous mode [ 99.229947][ T5600] veth1_macvtap: entered promiscuous mode [ 99.283912][ T5603] veth0_macvtap: entered promiscuous mode [ 99.308367][ T5603] veth1_macvtap: entered promiscuous mode [ 99.361221][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.405186][ T5598] veth0_macvtap: entered promiscuous mode [ 99.427501][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.447646][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.468614][ T5598] veth1_macvtap: entered promiscuous mode [ 99.484957][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.490400][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.491007][ T5599] veth0_macvtap: entered promiscuous mode [ 99.511633][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544858][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.565646][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.591950][ T5599] veth1_macvtap: entered promiscuous mode [ 99.608072][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.731532][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.740037][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.761316][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.766709][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.962900][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.108666][ T5728] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.146089][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.196580][ T1132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.279440][ T1132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.284029][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.366187][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 100.462016][ T5728] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.462052][ T5728] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 34334, setting to 1024 [ 100.462081][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.462116][ T5728] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 100.462141][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.478275][ T1132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.510109][ T3331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.605763][ T5728] usb 3-1: config 0 descriptor?? [ 100.619686][ T5788] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.669271][ T1132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.676163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.676182][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.826099][ T3331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.894229][ T3331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.904888][ T3331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.945913][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.945934][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.230752][ T5728] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x0 [ 101.230794][ T5728] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x6 [ 101.230821][ T5728] corsair-cpro 0003:1B1C:0C10.0001: unknown main item tag 0x6 [ 101.340382][ T5728] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 101.545761][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.545784][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.686231][ T5728] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -71 [ 101.849740][ T5728] usb 3-1: USB disconnect, device number 2 [ 102.014678][ T5789] fido_id[5789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 102.157048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.157070][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.421361][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.421385][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.613302][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.613324][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.919181][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.919205][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.783002][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.783018][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.411635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.431620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.441619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.451614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.461613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.691071][ T5817] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2'. [ 106.460358][ T5827] binder: 5820:5827 ioctl c0306201 0 returned -14 [ 107.745084][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.915406][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 107.966956][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 107.966977][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 107.966988][ T9] usb 4-1: Product: syz [ 107.966997][ T9] usb 4-1: Manufacturer: syz [ 107.967005][ T9] usb 4-1: SerialNumber: syz [ 108.185857][ T9] usb 4-1: config 0 descriptor?? [ 108.371822][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 108.895218][ T9] gspca_sn9c2028: read1 error -110 [ 108.897375][ T9] gspca_sn9c2028: read1 error -32 [ 108.900189][ T9] gspca_sn9c2028: read1 error -32 [ 108.900298][ T9] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 109.544373][ T5852] process 'syz.4.17' launched './file0' with NULL argv: empty string added [ 110.569881][ T5729] usb 4-1: USB disconnect, device number 2 [ 110.621722][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.841731][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 110.850822][ T31] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 110.850853][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.850874][ T31] usb 2-1: Product: syz [ 110.850888][ T31] usb 2-1: Manufacturer: syz [ 110.850902][ T31] usb 2-1: SerialNumber: syz [ 111.041291][ T31] usb 2-1: config 0 descriptor?? [ 111.281636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.301634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.311630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.321632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.331639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.263882][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 113.264065][ T31] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 113.264093][ T31] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 113.630871][ T31] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32 [ 113.775607][ T31] usb 2-1: USB disconnect, device number 2 [ 121.348006][ T5916] ======================================================= [ 121.348006][ T5916] WARNING: The mand mount option has been deprecated and [ 121.348006][ T5916] and is ignored by this kernel. Remove the mand [ 121.348006][ T5916] option from the mount to silence this warning. [ 121.348006][ T5916] ======================================================= [ 121.351206][ T5916] overlayfs: missing 'lowerdir' [ 121.411927][ T5918] overlay: ./file0 is not a directory [ 124.601972][ T821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.775090][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 124.776011][ T821] usb 1-1: no configurations [ 124.776028][ T821] usb 1-1: can't read configurations, error -22 [ 124.952074][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.814756][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 125.815677][ T821] usb 1-1: no configurations [ 125.815693][ T821] usb 1-1: can't read configurations, error -22 [ 125.821069][ T821] usb usb1-port1: attempt power cycle [ 126.341858][ T821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.375122][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 126.376638][ T821] usb 1-1: no configurations [ 126.376650][ T821] usb 1-1: can't read configurations, error -22 [ 126.537272][ T821] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.583221][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 126.584077][ T821] usb 1-1: no configurations [ 126.584087][ T821] usb 1-1: can't read configurations, error -22 [ 126.584448][ T821] usb usb1-port1: unable to enumerate USB device [ 127.839817][ T5959] overlayfs: missing 'lowerdir' [ 132.973197][ T5996] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET) [ 133.220564][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.220698][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.923668][ T6006] overlayfs: missing 'lowerdir' [ 136.974039][ T6007] overlay: ./file0 is not a directory [ 143.073499][ T6038] overlayfs: missing 'lowerdir' [ 143.125232][ T6040] overlay: ./file0 is not a directory [ 143.277609][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.316058][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.330037][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.339771][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.342022][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.573983][ T5786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.724089][ T5786] usb 3-1: Using ep0 maxpacket: 16 [ 143.743692][ T5786] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.743735][ T5786] usb 3-1: can't read configurations, error -61 [ 144.060096][ T5786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.290342][ T6049] fuse: root generation should be zero [ 144.551715][ T5786] usb 3-1: Using ep0 maxpacket: 16 [ 144.593336][ T5786] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 144.593378][ T5786] usb 3-1: can't read configurations, error -61 [ 144.598103][ T5786] usb usb3-port1: attempt power cycle [ 145.184944][ T5786] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.659385][ T4914] Bluetooth: hci5: command tx timeout [ 145.670173][ T5786] usb 3-1: device not accepting address 5, error -71 [ 147.751007][ T4914] Bluetooth: hci5: command tx timeout [ 149.862636][ T4914] Bluetooth: hci5: command tx timeout [ 151.900482][ T4914] Bluetooth: hci5: command tx timeout [ 155.345638][ T4914] Bluetooth: hci3: unexpected cc 0x0c13 length: 85 > 1 [ 155.769372][ T177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.741781][ T5728] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.120950][ T6111] syz.0.97 (6111) used greatest stack depth: 16192 bytes left [ 158.415041][ T6115] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 158.533286][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 158.579255][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.579301][ T5728] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.579322][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.636739][ T5728] usb 3-1: config 0 descriptor?? [ 158.656009][ T5728] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 158.829730][ T6122] bridge_slave_0: left allmulticast mode [ 158.829753][ T6122] bridge_slave_0: left promiscuous mode [ 158.830404][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.949582][ T6122] bridge_slave_1: left allmulticast mode [ 158.949617][ T6122] bridge_slave_1: left promiscuous mode [ 158.949869][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.084299][ T6122] bond0: (slave bond_slave_0): Releasing backup interface [ 159.343630][ T6122] bond0: (slave bond_slave_1): Releasing backup interface [ 159.963929][ T6122] team0: Port device team_slave_0 removed [ 160.032900][ T6122] team0: Port device team_slave_1 removed [ 160.033978][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.034004][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.084405][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.084424][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.117204][ T6122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.025583][ T5715] usb 3-1: USB disconnect, device number 7 [ 165.529810][ T177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.561926][ T6149] batman_adv: batadv0: Adding interface: dummy0 [ 165.561939][ T6149] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.561959][ T6149] batman_adv: batadv0: Interface activated: dummy0 [ 166.032537][ T6153] batadv0: mtu less than device minimum [ 166.164622][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.246942][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.288000][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.332645][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.402265][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.483268][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.523091][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.587554][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 166.640478][ T6153] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.408257][ T177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.431285][ T177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.504277][ T6212] ip6erspan0: entered allmulticast mode [ 173.524469][ T177] bridge_slave_1: left allmulticast mode [ 173.524676][ T177] bridge_slave_1: left promiscuous mode [ 173.581632][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.763433][ T177] bridge_slave_0: left allmulticast mode [ 173.763472][ T177] bridge_slave_0: left promiscuous mode [ 173.763746][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.463819][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 179.976763][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.095997][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.135338][ T177] bond0 (unregistering): Released all slaves [ 180.600351][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.600492][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.600733][ T6037] bridge_slave_0: entered allmulticast mode [ 180.609377][ T6037] bridge_slave_0: entered promiscuous mode [ 180.643517][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.645319][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.645560][ T6037] bridge_slave_1: entered allmulticast mode [ 180.658815][ T6037] bridge_slave_1: entered promiscuous mode [ 181.117330][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.127417][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.498326][ T6037] team0: Port device team_slave_0 added [ 181.512046][ T6037] team0: Port device team_slave_1 added [ 182.041749][ T5861] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.057352][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 182.210364][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 184.861882][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.861965][ T5861] usb 5-1: no configurations [ 184.861973][ T5861] usb 5-1: can't read configurations, error -22 [ 185.373589][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.469532][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.469549][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.469569][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.487856][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.487873][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.487897][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.232951][ T6037] hsr_slave_0: entered promiscuous mode [ 188.249988][ T6037] hsr_slave_1: entered promiscuous mode [ 188.262782][ T6037] debugfs: 'hsr0' already exists in 'hsr' [ 188.262810][ T6037] Cannot create hsr debugfs directory [ 195.562173][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.562256][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.057411][ T177] hsr_slave_0: left promiscuous mode [ 196.650149][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 196.705271][ T177] hsr_slave_1: left promiscuous mode [ 196.708818][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.708913][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.737415][ T177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.737442][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.933637][ T177] veth1_macvtap: left promiscuous mode [ 196.933985][ T177] veth0_macvtap: left promiscuous mode [ 196.934307][ T177] veth1_vlan: left promiscuous mode [ 197.007372][ T177] veth0_vlan: left promiscuous mode [ 198.196190][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 202.265504][ T177] team0 (unregistering): Port device team_slave_1 removed [ 203.161950][ T6404] 9p: Bad value for 'wfdno' [ 203.371931][ T6397] overlayfs: missing 'lowerdir' [ 203.397625][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.415264][ T6404] overlay: ./file0 is not a directory [ 203.452502][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.453695][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.458336][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.483865][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.717141][ T177] team0 (unregistering): Port device team_slave_0 removed [ 205.739222][ T5606] Bluetooth: hci1: command tx timeout [ 207.822632][ T5606] Bluetooth: hci1: command tx timeout [ 209.200774][ T6426] Zero length message leads to an empty skb [ 210.613002][ T4914] Bluetooth: hci1: command tx timeout [ 212.326633][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.702798][ T6433] Bluetooth: hci0: command 0x0406 tx timeout [ 212.703515][ T6433] Bluetooth: hci4: command 0x0406 tx timeout [ 212.703557][ T6433] Bluetooth: hci2: command 0x0406 tx timeout [ 212.703579][ T6433] Bluetooth: hci1: command tx timeout [ 212.703639][ T6434] Bluetooth: hci3: command 0x0406 tx timeout [ 214.258412][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.309508][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.319232][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.330455][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.335302][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.481998][ T6475] 9p: Bad value for 'wfdno' [ 215.790091][ T6454] overlayfs: missing 'lowerdir' [ 215.793389][ T6475] overlay: ./file0 is not a directory [ 216.541927][ T5608] Bluetooth: hci5: command tx timeout [ 216.549658][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 217.446870][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 218.329084][ T9] IPVS: starting estimator thread 0... [ 218.445046][ T6505] IPVS: using max 13 ests per chain, 31200 per kthread [ 218.613708][ T5608] Bluetooth: hci5: command tx timeout [ 218.827094][ T177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.708241][ T5608] Bluetooth: hci5: command tx timeout [ 222.781718][ T5608] Bluetooth: hci5: command tx timeout [ 227.609618][ T177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.502396][ T6531] overlayfs: missing 'lowerdir' [ 228.691987][ T6538] overlay: ./file0 is not a directory [ 229.752810][ T177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.117211][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 231.785510][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 231.965306][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.965532][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.965764][ T6403] bridge_slave_0: entered allmulticast mode [ 231.999199][ T6403] bridge_slave_0: entered promiscuous mode [ 232.536616][ T6574] binder: BINDER_SET_CONTEXT_MGR already set [ 232.536694][ T6574] binder: 6572:6574 ioctl 4018620d 200000004a80 returned -16 [ 232.977584][ T6573] binder: 6572:6573 ioctl c0306201 0 returned -14 [ 233.037091][ T177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.099682][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.166890][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.234867][ T6403] bridge_slave_1: entered allmulticast mode [ 234.564084][ T6403] bridge_slave_1: entered promiscuous mode [ 239.236150][ T6595] overlayfs: missing 'lowerdir' [ 239.431929][ T6600] overlay: ./file0 is not a directory [ 239.864152][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.870574][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.052950][ T6403] team0: Port device team_slave_0 added [ 240.057783][ T6403] team0: Port device team_slave_1 added [ 240.211453][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.211472][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.211497][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.273871][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.273888][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.273913][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.680177][ T6403] hsr_slave_0: entered promiscuous mode [ 240.686285][ T6403] hsr_slave_1: entered promiscuous mode [ 240.690014][ T6403] debugfs: 'hsr0' already exists in 'hsr' [ 240.690038][ T6403] Cannot create hsr debugfs directory [ 240.879394][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 243.806789][ T6636] overlayfs: missing 'lowerdir' [ 243.857932][ T6635] overlay: ./file0 is not a directory [ 245.313288][ T177] bridge_slave_1: left allmulticast mode [ 245.313326][ T177] bridge_slave_1: left promiscuous mode [ 245.314066][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.575327][ T177] bridge_slave_0: left allmulticast mode [ 245.575369][ T177] bridge_slave_0: left promiscuous mode [ 245.575666][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.100745][ T177] bond0 (unregistering): Released all slaves [ 251.395412][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.502900][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.564808][ T177] bond0 (unregistering): Released all slaves [ 251.603299][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.603457][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.603784][ T6462] bridge_slave_0: entered allmulticast mode [ 251.609082][ T6462] bridge_slave_0: entered promiscuous mode [ 251.796488][ T6656] ip6erspan0: entered allmulticast mode [ 251.802362][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.802485][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.802716][ T6462] bridge_slave_1: entered allmulticast mode [ 251.809782][ T6462] bridge_slave_1: entered promiscuous mode [ 252.195494][ T177] IPVS: stopping master sync thread 6115 ... [ 252.233036][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.323935][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.355213][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 253.208303][ T6462] team0: Port device team_slave_0 added [ 253.517028][ T6462] team0: Port device team_slave_1 added [ 255.931406][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.949899][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.414772][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.414789][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.414813][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.931917][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 258.084330][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.084349][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.084376][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.085449][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 258.108373][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 258.108402][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 258.108419][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 258.108468][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.108488][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.108509][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.108547][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 258.108568][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.184986][ T31] usb 3-1: config 0 descriptor?? [ 259.600746][ T177] hsr_slave_0: left promiscuous mode [ 259.725176][ T177] hsr_slave_1: left promiscuous mode [ 259.738902][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.861016][ T177] hsr_slave_0: left promiscuous mode [ 259.907924][ T31] usb 3-1: USB disconnect, device number 8 [ 259.920832][ T177] hsr_slave_1: left promiscuous mode [ 259.932534][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.982415][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.997986][ T31] usblp0: removed [ 260.163658][ T177] veth1_macvtap: left promiscuous mode [ 260.165503][ T177] veth0_macvtap: left promiscuous mode [ 260.165846][ T177] veth1_vlan: left promiscuous mode [ 260.166034][ T177] veth0_vlan: left promiscuous mode [ 262.731699][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.843082][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.883417][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 262.913174][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.915020][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.915045][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.915085][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 262.915108][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 262.935588][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.943763][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.943793][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.943812][ T31] usb 1-1: Product: syz [ 262.943821][ T31] usb 1-1: Manufacturer: syz [ 262.943828][ T31] usb 1-1: SerialNumber: syz [ 262.946977][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.951668][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.420826][ T31] usb 1-1: 0:2 : does not exist [ 264.651401][ T31] usb 1-1: USB disconnect, device number 6 [ 265.178883][ T5608] Bluetooth: hci0: command tx timeout [ 267.251676][ T5608] Bluetooth: hci0: command tx timeout [ 267.508178][ T6630] udevd[6630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.263702][ T6753] af_packet: tpacket_rcv: packet too big, clamped from 100 to 4294967272. macoff=96 [ 269.362822][ T5608] Bluetooth: hci0: command tx timeout [ 269.877450][ T177] team0 (unregistering): Port device team_slave_1 removed [ 270.012175][ T177] team0 (unregistering): Port device team_slave_0 removed [ 270.941873][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 271.410896][ T5608] Bluetooth: hci0: command tx timeout [ 271.696348][ T6462] hsr_slave_0: entered promiscuous mode [ 271.710555][ T6462] hsr_slave_1: entered promiscuous mode [ 271.723229][ T6462] debugfs: 'hsr0' already exists in 'hsr' [ 271.723260][ T6462] Cannot create hsr debugfs directory [ 272.534288][ T6403] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 278.285843][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.653872][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.688286][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.701868][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.703783][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.697311][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 281.505653][ T59] Bluetooth: hci6: command tx timeout [ 281.624261][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.624290][ T5832] usb 5-1: config 0 has no interfaces? [ 281.628295][ T5832] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 281.628325][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.628346][ T5832] usb 5-1: Product: syz [ 281.628360][ T5832] usb 5-1: Manufacturer: syz [ 281.628375][ T5832] usb 5-1: SerialNumber: syz [ 281.674658][ T5832] usb 5-1: config 0 descriptor?? [ 283.366280][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 283.557868][ T31] usb 5-1: USB disconnect, device number 4 [ 283.586925][ T59] Bluetooth: hci6: command tx timeout [ 284.944580][ T177] bridge_slave_1: left allmulticast mode [ 284.944616][ T177] bridge_slave_1: left promiscuous mode [ 284.944885][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.378462][ T6856] 9p: Bad value for 'rfdno' [ 285.403335][ T177] bridge_slave_0: left allmulticast mode [ 285.403373][ T177] bridge_slave_0: left promiscuous mode [ 285.403651][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.815061][ T59] Bluetooth: hci6: command tx timeout [ 285.872594][ T177] bridge_slave_1: left allmulticast mode [ 285.872631][ T177] bridge_slave_1: left promiscuous mode [ 285.872902][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.174214][ T177] bridge_slave_0: left allmulticast mode [ 286.174255][ T177] bridge_slave_0: left promiscuous mode [ 286.174531][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.754447][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.863456][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.941550][ T177] bond0 (unregistering): Released all slaves [ 287.098249][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.188417][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.227586][ T177] bond0 (unregistering): Released all slaves [ 287.247049][ T6870] batman_adv: batadv0: Adding interface: dummy0 [ 287.247062][ T6870] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.247080][ T6870] batman_adv: batadv0: Interface activated: dummy0 [ 287.761229][ T5715] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 287.860317][ T59] Bluetooth: hci6: command tx timeout [ 287.913770][ T6871] net_ratelimit: 10 callbacks suppressed [ 287.913786][ T6871] batadv0: mtu less than device minimum [ 287.933227][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.000420][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.045585][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.120008][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.143338][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.169675][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.174698][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.249457][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.249582][ T5715] usb 5-1: config 0 has no interfaces? [ 288.253918][ T5715] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 288.253948][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.253969][ T5715] usb 5-1: Product: syz [ 288.253984][ T5715] usb 5-1: Manufacturer: syz [ 288.253998][ T5715] usb 5-1: SerialNumber: syz [ 288.346241][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.395077][ T6871] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 288.406497][ T5715] usb 5-1: config 0 descriptor?? [ 289.694456][ T177] hsr_slave_0: left promiscuous mode [ 289.734406][ T177] hsr_slave_1: left promiscuous mode [ 289.735549][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.761458][ T6889] 9p: Bad value for 'rfdno' [ 289.785291][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.883021][ T177] hsr_slave_0: left promiscuous mode [ 289.922769][ T177] hsr_slave_1: left promiscuous mode [ 289.923876][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.973357][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.622257][ T177] team0 (unregistering): Port device team_slave_1 removed [ 290.699688][ T177] team0 (unregistering): Port device team_slave_0 removed [ 291.208630][ T177] team0 (unregistering): Port device team_slave_1 removed [ 291.277091][ T177] team0 (unregistering): Port device team_slave_0 removed [ 292.316448][ T6897] kthread_run failed with err -4 [ 292.762557][ T6518] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 292.791726][ T31] usb 5-1: USB disconnect, device number 5 [ 292.940006][ T6518] usb 1-1: config 0 has no interfaces? [ 292.949560][ T6518] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 292.949592][ T6518] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 292.949612][ T6518] usb 1-1: Product: syz [ 292.949626][ T6518] usb 1-1: Manufacturer: syz [ 293.107967][ T6518] usb 1-1: config 0 descriptor?? [ 293.901476][ T5832] usb 1-1: USB disconnect, device number 7 [ 294.391872][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.392108][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.392335][ T6729] bridge_slave_0: entered allmulticast mode [ 294.415826][ T6729] bridge_slave_0: entered promiscuous mode [ 294.482196][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.482316][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.482542][ T6729] bridge_slave_1: entered allmulticast mode [ 294.501242][ T6729] bridge_slave_1: entered promiscuous mode [ 294.746349][ T6936] 9p: Bad value for 'rfdno' [ 295.080613][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.256085][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.220221][ T6953] overlayfs: missing 'lowerdir' [ 296.284801][ T6946] overlay: ./file0 is not a directory [ 297.939047][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 298.068233][ T6729] team0: Port device team_slave_0 added [ 298.139206][ T6729] team0: Port device team_slave_1 added [ 298.417675][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.417694][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.417721][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.497943][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.497962][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.497989][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.554575][ T6729] hsr_slave_0: entered promiscuous mode [ 299.563005][ T6729] hsr_slave_1: entered promiscuous mode [ 299.582521][ T6729] debugfs: 'hsr0' already exists in 'hsr' [ 299.582554][ T6729] Cannot create hsr debugfs directory [ 299.990884][ T6990] capability: warning: `syz.0.307' uses 32-bit capabilities (legacy support in use) [ 300.072731][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.072971][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.093409][ T6793] bridge_slave_0: entered allmulticast mode [ 300.558780][ T6793] bridge_slave_0: entered promiscuous mode [ 300.795923][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 300.810119][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.811651][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.811880][ T6793] bridge_slave_1: entered allmulticast mode [ 300.848855][ T6793] bridge_slave_1: entered promiscuous mode [ 301.135100][ T6996] ip6erspan0: entered allmulticast mode [ 301.205355][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.312478][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 301.357932][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.459138][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 301.463969][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.467943][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 301.492542][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.492574][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.492594][ T31] usb 3-1: Product: syz [ 301.492609][ T31] usb 3-1: Manufacturer: 뜨 [ 301.492633][ T31] usb 3-1: SerialNumber: syz [ 301.795165][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 301.839800][ T31] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 301.870556][ T6793] team0: Port device team_slave_0 added [ 301.941083][ T6793] team0: Port device team_slave_1 added [ 302.148563][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.148582][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.148618][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.248437][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.248456][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.248484][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.465577][ T31] usb 3-1: USB disconnect, device number 9 [ 302.743327][ T4926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 302.927559][ T4926] usb 5-1: Using ep0 maxpacket: 16 [ 302.931243][ T4926] usb 5-1: config 1 has an invalid interface number: 19 but max is 0 [ 302.931271][ T4926] usb 5-1: config 1 has no interface number 0 [ 302.931322][ T4926] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.931349][ T4926] usb 5-1: config 1 interface 19 has no altsetting 0 [ 302.984819][ T6630] udevd[6630]: setting owner of /dev/bus/usb/003/009 to uid=0, gid=0 failed: No such file or directory [ 303.045503][ T4926] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 303.045537][ T4926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.045557][ T4926] usb 5-1: Product: syz [ 303.045571][ T4926] usb 5-1: Manufacturer: syz [ 303.045586][ T4926] usb 5-1: SerialNumber: syz [ 303.183282][ T4926] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 303.332578][ T56] usb 5-1: Failed to submit usb control message: -71 [ 303.332619][ T56] usb 5-1: unable to send the bmi data to the device: -71 [ 303.332635][ T56] usb 5-1: unable to get target info from device [ 303.332650][ T56] usb 5-1: could not get target info (-71) [ 303.338243][ T4926] usb 5-1: USB disconnect, device number 6 [ 303.386663][ T56] usb 5-1: could not probe fw (-71) [ 303.411857][ T6630] udevd[6630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.175830][ T6793] hsr_slave_0: entered promiscuous mode [ 304.181001][ T6793] hsr_slave_1: entered promiscuous mode [ 304.182120][ T6793] debugfs: 'hsr0' already exists in 'hsr' [ 304.182146][ T6793] Cannot create hsr debugfs directory [ 304.234082][ T7046] batman_adv: batadv0: Adding interface: dummy0 [ 304.234101][ T7046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.234134][ T7046] batman_adv: batadv0: Interface activated: dummy0 [ 304.963104][ T7046] net_ratelimit: 10 callbacks suppressed [ 304.963126][ T7046] batadv0: mtu less than device minimum [ 304.997730][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.015561][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.023749][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.070689][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.091388][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.117769][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.142897][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.164915][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.188490][ T7046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 305.561450][ T59] block nbd0: Receive control failed (result -32) [ 305.835960][ T7056] block nbd0: shutting down sockets [ 305.964421][ T6729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.034694][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.117675][ T6729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.402792][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.463614][ T6729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.516183][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.650436][ T6729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.803635][ T6729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.238960][ T7093] syz.4.331 (7093) used greatest stack depth: 16152 bytes left [ 308.485517][ T7126] warning: `syz.0.339' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 308.485600][ T7129] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.340'. [ 309.151853][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.339625][ T7142] Illegal XDP return value 173297041 on prog (id 13) dev N/A, expect packet loss! [ 309.484996][ T6793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 309.623276][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.644248][ T6793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.716554][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.756578][ T6793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.938608][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.946307][ T6729] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.948573][ T6793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.069502][ T6793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.359632][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.359889][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.605340][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.605534][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.154796][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 311.394977][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 311.584791][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.584811][ T31] usb 3-1: config 0 has no interfaces? [ 311.609189][ T31] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 311.609216][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.609229][ T31] usb 3-1: Product: syz [ 311.609242][ T31] usb 3-1: Manufacturer: syz [ 311.609256][ T31] usb 3-1: SerialNumber: syz [ 311.685391][ T31] usb 3-1: config 0 descriptor?? [ 312.200047][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.392175][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.484863][ T3407] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.493044][ T3407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.627430][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.831868][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.442881][ T7214] net_ratelimit: 10 callbacks suppressed [ 314.442903][ T7214] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 314.591716][ T5832] usb 3-1: USB disconnect, device number 10 [ 314.756401][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.933852][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 315.903292][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.304437][ T6729] veth0_vlan: entered promiscuous mode [ 316.367356][ T6729] veth1_vlan: entered promiscuous mode [ 316.589612][ T6729] veth0_macvtap: entered promiscuous mode [ 316.668894][ T6729] veth1_macvtap: entered promiscuous mode [ 316.739998][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.780794][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.857490][ T1132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.864172][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.864240][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.899969][ T1132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.904608][ T177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.929536][ T3333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.030693][ T5715] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 318.079365][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.079683][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.274403][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.274434][ T5715] usb 5-1: config 0 has no interfaces? [ 318.312726][ T5715] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 318.312758][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.312779][ T5715] usb 5-1: Product: syz [ 318.312793][ T5715] usb 5-1: Manufacturer: syz [ 318.312808][ T5715] usb 5-1: SerialNumber: syz [ 318.449759][ T5715] usb 5-1: config 0 descriptor?? [ 320.184010][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.184033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.423781][ T6793] veth0_vlan: entered promiscuous mode [ 321.463808][ T31] usb 5-1: USB disconnect, device number 7 [ 321.745144][ T6793] veth1_vlan: entered promiscuous mode [ 322.206252][ T6793] veth0_macvtap: entered promiscuous mode [ 322.243697][ T6793] veth1_macvtap: entered promiscuous mode [ 322.379788][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.537855][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.535466][ T177] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.539157][ T177] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.760640][ T177] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.783141][ T177] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.410804][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.460567][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.464465][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.468317][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.470090][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.575585][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.575608][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.385291][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.385306][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.613257][ T5608] Bluetooth: hci1: command tx timeout [ 326.657772][ T7316] syz.0.385 (7316) used greatest stack depth: 15432 bytes left [ 327.624578][ T5728] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.792898][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.792926][ T5728] usb 1-1: config 0 has no interfaces? [ 327.796330][ T5728] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 327.796359][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.796377][ T5728] usb 1-1: Product: syz [ 327.796389][ T5728] usb 1-1: Manufacturer: syz [ 327.796402][ T5728] usb 1-1: SerialNumber: syz [ 327.838156][ T5728] usb 1-1: config 0 descriptor?? [ 328.120042][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 328.270084][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 328.278369][ T31] usb 5-1: config 1 has an invalid interface number: 19 but max is 0 [ 328.278400][ T31] usb 5-1: config 1 has no interface number 0 [ 328.278450][ T31] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.278477][ T31] usb 5-1: config 1 interface 19 has no altsetting 0 [ 329.341510][ T5608] Bluetooth: hci1: command tx timeout [ 329.381445][ T31] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 329.381479][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.381499][ T31] usb 5-1: Product: syz [ 329.381513][ T31] usb 5-1: Manufacturer: syz [ 329.381527][ T31] usb 5-1: SerialNumber: syz [ 329.695804][ T31] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 329.710814][ T3333] usb 5-1: Failed to submit usb control message: -71 [ 329.710855][ T3333] usb 5-1: unable to send the bmi data to the device: -71 [ 329.710874][ T3333] usb 5-1: unable to get target info from device [ 329.710889][ T3333] usb 5-1: could not get target info (-71) [ 329.710980][ T3333] usb 5-1: could not probe fw (-71) [ 329.826556][ T31] usb 5-1: USB disconnect, device number 8 [ 330.053363][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.264306][ T821] usb 1-1: USB disconnect, device number 8 [ 331.452117][ T5608] Bluetooth: hci1: command tx timeout [ 332.554779][ T7383] binder: BINDER_SET_CONTEXT_MGR already set [ 332.577483][ T7383] binder: 7379:7383 ioctl 4018620d 200000004a80 returned -16 [ 332.724949][ T7390] binder: 7379:7390 ioctl c0306201 0 returned -14 [ 334.217510][ T5608] Bluetooth: hci1: command tx timeout [ 334.247386][ T821] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 334.318258][ T7395] binder: BINDER_SET_CONTEXT_MGR already set [ 334.318293][ T7395] binder: 7393:7395 ioctl 4018620d 200000004a80 returned -16 [ 334.319505][ T7395] binder: 7393:7395 ioctl c0306201 2000000009c0 returned -14 [ 335.359944][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 335.362917][ T821] usb 1-1: not running at top speed; connect to a high speed hub [ 335.365375][ T821] usb 1-1: language id specifier not provided by device, defaulting to English [ 335.502925][ T821] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 335.502958][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.502978][ T821] usb 1-1: Product: syz [ 335.503002][ T821] usb 1-1: Manufacturer: 殂랔ṥ褤崉犚㖲ໂ邚⚲挚䘀Ⲫꇼ㕎靱蔻䍆 [ 335.503037][ T821] usb 1-1: SerialNumber: syz [ 335.541668][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.955925][ T6518] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 336.149933][ T821] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 336.152010][ T821] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 336.220691][ T6518] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.220719][ T6518] usb 3-1: config 0 has no interfaces? [ 336.265204][ T6518] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 336.265238][ T6518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.265259][ T6518] usb 3-1: Product: syz [ 336.265274][ T6518] usb 3-1: Manufacturer: syz [ 336.265289][ T6518] usb 3-1: SerialNumber: syz [ 336.378343][ T6518] usb 3-1: config 0 descriptor?? [ 338.096253][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.227141][ T821] usb 1-1: USB disconnect, device number 9 [ 338.367616][ T5855] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 338.521681][ T5855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.521738][ T5855] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 338.521764][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.640389][ T5855] usb 7-1: config 0 descriptor?? [ 339.409916][ T7264] usb 3-1: USB disconnect, device number 11 [ 339.482155][ T6630] udevd[6630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.543207][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.630874][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.630927][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.630953][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.630979][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.631004][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.631028][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.631052][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.631076][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.631100][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.631124][ T5855] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 339.983542][ T5855] logitech 0003:046D:C29C.0002: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 340.334159][ T5855] logitech 0003:046D:C29C.0002: no inputs found [ 341.145515][ T5855] usb 7-1: USB disconnect, device number 2 [ 344.273835][ T7476] kthread_run failed with err -4 [ 345.042499][ T7493] binder: 7492:7493 ioctl c0306201 0 returned -14 [ 346.519883][ T13] bridge_slave_1: left allmulticast mode [ 346.519923][ T13] bridge_slave_1: left promiscuous mode [ 346.520246][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.898987][ T13] bridge_slave_0: left allmulticast mode [ 346.899026][ T13] bridge_slave_0: left promiscuous mode [ 346.900899][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.433225][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.486073][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.505711][ T13] bond0 (unregistering): Released all slaves [ 350.113577][ T7521] kthread_run failed with err -4 [ 350.236871][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.237031][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.237270][ T7300] bridge_slave_0: entered allmulticast mode [ 350.324100][ T7300] bridge_slave_0: entered promiscuous mode [ 350.488178][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.488290][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.488463][ T7300] bridge_slave_1: entered allmulticast mode [ 350.490309][ T7300] bridge_slave_1: entered promiscuous mode [ 351.271525][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.300977][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.564013][ T7300] team0: Port device team_slave_0 added [ 351.576495][ T7542] binder: BINDER_SET_CONTEXT_MGR already set [ 351.576505][ T7542] binder: 7541:7542 ioctl 4018620d 200000004a80 returned -16 [ 351.640411][ T7546] binder: 7541:7546 ioctl c0306201 0 returned -14 [ 351.913561][ T7553] 9pnet_fd: Insufficient options for proto=fd [ 351.953314][ T7300] team0: Port device team_slave_1 added [ 352.404615][ T7264] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 352.798921][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.798939][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.798967][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.832048][ T7264] usb 7-1: Using ep0 maxpacket: 32 [ 352.835120][ T7264] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 352.835148][ T7264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.857672][ T7264] usb 7-1: config 0 descriptor?? [ 353.073208][ T7264] as10x_usb: device has been detected [ 353.112183][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.112883][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.145291][ T7264] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 354.033168][ T7264] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 354.505886][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.505906][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.505936][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.872608][ T7264] as10x_usb: error during firmware upload part1 [ 354.874960][ T7264] Registered device nBox DVB-T Dongle [ 355.247563][ T13] hsr_slave_0: left promiscuous mode [ 355.292922][ T13] hsr_slave_1: left promiscuous mode [ 355.298714][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.298747][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.358632][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.358663][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.548686][ T31] usb 7-1: USB disconnect, device number 3 [ 355.660584][ T7597] 9pnet_fd: Insufficient options for proto=fd [ 355.681174][ T13] veth1_macvtap: left promiscuous mode [ 355.733759][ T13] veth0_macvtap: left promiscuous mode [ 355.734069][ T13] veth1_vlan: left promiscuous mode [ 355.734278][ T13] veth0_vlan: left promiscuous mode [ 355.974442][ T7599] binder: 7598:7599 ioctl c0306201 0 returned -14 [ 356.004384][ T7601] netlink: 64 bytes leftover after parsing attributes in process `syz.0.453'. [ 356.169605][ T31] Unregistered device nBox DVB-T Dongle [ 356.233133][ T31] as10x_usb: device has been disconnected [ 356.562368][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.455'. [ 358.391892][ T13] team0 (unregistering): Port device team_slave_1 removed [ 358.491982][ T13] team0 (unregistering): Port device team_slave_0 removed [ 359.958178][ T7300] hsr_slave_0: entered promiscuous mode [ 359.988100][ T7300] hsr_slave_1: entered promiscuous mode [ 359.997925][ T7300] debugfs: 'hsr0' already exists in 'hsr' [ 359.997956][ T7300] Cannot create hsr debugfs directory [ 360.094218][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 360.274660][ T7636] 9pnet_fd: Insufficient options for proto=fd [ 360.735186][ T7641] binder: 7640:7641 ioctl c0306201 0 returned -14 [ 365.617798][ T7673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.469'. [ 366.054733][ T7681] 9pnet_fd: Insufficient options for proto=fd [ 366.653150][ T7689] binder: 7688:7689 ioctl c0306201 0 returned -14 [ 367.241378][ T7708] netlink: 64 bytes leftover after parsing attributes in process `syz.0.482'. [ 370.593233][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 370.725071][ T7749] binder: 7741:7749 ioctl c0306201 0 returned -14 [ 372.233446][ T7300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.282340][ T7300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.284144][ T7300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.328669][ T7300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.341146][ T7300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.666411][ T7300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.717818][ T7300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.869312][ T7300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.288325][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.288402][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.412353][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.442246][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.449724][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.450438][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.474738][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.474914][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.737947][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.777050][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.790849][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.793148][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.794077][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.390592][ T7866] binder: 7857:7866 ioctl c0306201 0 returned -14 [ 387.874070][ T59] Bluetooth: hci0: command tx timeout [ 388.914986][ T7878] batman_adv: batadv0: Adding interface: dummy0 [ 388.914999][ T7878] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.915017][ T7878] batman_adv: batadv0: Interface activated: dummy0 [ 389.067438][ T7879] batadv0: mtu less than device minimum [ 389.106885][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.155520][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.197704][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.241770][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.286941][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.347820][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.398435][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.445715][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.503477][ T7879] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 389.879850][ T59] Bluetooth: hci0: command tx timeout [ 392.060205][ T7914] fuse: Unknown parameter 'group_i00000000000000000000' [ 392.151125][ T59] Bluetooth: hci0: command tx timeout [ 394.199953][ T59] Bluetooth: hci0: command tx timeout [ 397.048774][ T7952] fuse: Unknown parameter 'group_i00000000000000000000' [ 397.411236][ T7954] cgroup: Name too long [ 401.993252][ T5608] Bluetooth: hci6: command 0x0406 tx timeout [ 402.895690][ T7993] cgroup: Name too long [ 403.888131][ T7989] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 405.499102][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.499180][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.499373][ T7855] bridge_slave_0: entered allmulticast mode [ 405.571687][ T7855] bridge_slave_0: entered promiscuous mode [ 408.508056][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.508266][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.508518][ T7855] bridge_slave_1: entered allmulticast mode [ 408.838435][ T7855] bridge_slave_1: entered promiscuous mode [ 413.688993][ T8040] cgroup: Name too long [ 413.743972][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.766085][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.889958][ T3331] bridge_slave_1: left allmulticast mode [ 413.889996][ T3331] bridge_slave_1: left promiscuous mode [ 413.890311][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.961348][ T3331] bridge_slave_0: left allmulticast mode [ 413.961394][ T3331] bridge_slave_0: left promiscuous mode [ 413.961688][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.242169][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.300486][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.332282][ T3331] bond0 (unregistering): Released all slaves [ 416.055948][ T7855] team0: Port device team_slave_0 added [ 416.064610][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 416.089273][ T7855] team0: Port device team_slave_1 added [ 416.243950][ T8066] netlink: 'syz.0.577': attribute type 6 has an invalid length. [ 416.469129][ T8068] netlink: 'syz.0.577': attribute type 6 has an invalid length. [ 416.472730][ T3331] hsr_slave_0: left promiscuous mode [ 417.590049][ T3331] hsr_slave_1: left promiscuous mode [ 417.593247][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.770440][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.251689][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 422.706998][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 422.906594][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.906606][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.906622][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.921609][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.921625][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.921647][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.695556][ T8098] cgroup: Name too long [ 423.792167][ T7855] hsr_slave_0: entered promiscuous mode [ 423.810925][ T7855] hsr_slave_1: entered promiscuous mode [ 423.822245][ T7855] debugfs: 'hsr0' already exists in 'hsr' [ 423.822273][ T7855] Cannot create hsr debugfs directory [ 433.188356][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 436.837700][ T5832] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 438.214629][ T5832] usb 1-1: device descriptor read/all, error -71 [ 438.548842][ T8213] netlink: 84 bytes leftover after parsing attributes in process `syz.0.618'. [ 439.797567][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.797644][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.160812][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.234437][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.246772][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.251096][ T7264] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 446.342399][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.440009][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.494786][ T7264] usb 5-1: unable to get BOS descriptor or descriptor too short [ 446.495578][ T7264] usb 5-1: not running at top speed; connect to a high speed hub [ 446.497970][ T7264] usb 5-1: language id specifier not provided by device, defaulting to English [ 446.618788][ T7264] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 446.618821][ T7264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.618841][ T7264] usb 5-1: Product: syz [ 446.618853][ T7264] usb 5-1: SerialNumber: syz [ 448.176300][ T7264] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 448.179749][ T7264] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 448.364809][ T7264] usb 5-1: USB disconnect, device number 9 [ 448.584419][ T8226] udevd[8226]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.679660][ T59] Bluetooth: hci1: command tx timeout [ 448.861210][ T8275] netlink: 84 bytes leftover after parsing attributes in process `syz.4.633'. [ 450.491502][ T8290] 9p: Bad value for 'rfdno' [ 450.883631][ T59] Bluetooth: hci1: command tx timeout [ 452.329627][ T7264] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 452.479583][ T7264] usb 1-1: Using ep0 maxpacket: 16 [ 452.483189][ T7264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 452.486414][ T7264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.503803][ T7264] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 452.503832][ T7264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.503849][ T7264] usb 1-1: Product: syz [ 452.503861][ T7264] usb 1-1: Manufacturer: syz [ 452.503874][ T7264] usb 1-1: SerialNumber: syz [ 452.935521][ T59] Bluetooth: hci1: command tx timeout [ 454.763655][ T7264] snd-ua101 1-1:1.1: sample format descriptor not found [ 454.763679][ T7264] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 454.999587][ T59] Bluetooth: hci1: command tx timeout [ 455.077729][ T7264] usb 1-1: USB disconnect, device number 12 [ 455.291508][ T1139] bridge_slave_1: left allmulticast mode [ 455.291548][ T1139] bridge_slave_1: left promiscuous mode [ 455.291861][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.475305][ T1139] bridge_slave_0: left allmulticast mode [ 455.475345][ T1139] bridge_slave_0: left promiscuous mode [ 455.475628][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.985553][ T8336] binder: 8334:8336 ioctl 4018620d 0 returned -22 [ 456.236430][ T8337] binder: 8334:8337 ioctl c0306201 0 returned -14 [ 459.338749][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.884171][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.967378][ T1139] bond0 (unregistering): Released all slaves [ 462.047929][ T1139] hsr_slave_0: left promiscuous mode [ 462.150435][ T1139] hsr_slave_1: left promiscuous mode [ 462.151583][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.826685][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.147249][ T5832] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 464.289592][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 464.302938][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 464.304991][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.331592][ T5832] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 464.331626][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.331646][ T5832] usb 1-1: Product: syz [ 464.331661][ T5832] usb 1-1: Manufacturer: syz [ 464.331675][ T5832] usb 1-1: SerialNumber: syz [ 464.715722][ T5832] snd-ua101 1-1:1.1: sample format descriptor not found [ 464.715747][ T5832] snd-ua101 1-1:1.0: invalid bNumEndpoints [ 465.273792][ T5832] usb 1-1: USB disconnect, device number 13 [ 466.676780][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 466.773144][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 470.092328][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 470.092640][ T8434] bridge_slave_0: default FDB implementation only supports local addresses [ 470.359906][ T7264] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.493797][ T5832] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 470.530549][ T7264] usb 3-1: no configurations [ 470.530571][ T7264] usb 3-1: can't read configurations, error -22 [ 470.771639][ T7264] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 470.772192][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 471.300333][ T5832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.319227][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.334987][ T5832] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 471.335021][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.335041][ T5832] usb 5-1: Product: syz [ 471.335056][ T5832] usb 5-1: Manufacturer: syz [ 471.335070][ T5832] usb 5-1: SerialNumber: syz [ 471.400378][ T7264] usb 3-1: no configurations [ 471.400400][ T7264] usb 3-1: can't read configurations, error -22 [ 471.404927][ T7264] usb usb3-port1: attempt power cycle [ 471.641671][ T5832] snd-ua101 5-1:1.1: sample format descriptor not found [ 471.641694][ T5832] snd-ua101 5-1:1.0: invalid bNumEndpoints [ 471.747137][ T5832] usb 5-1: USB disconnect, device number 10 [ 471.779600][ T7264] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 471.801142][ T7264] usb 3-1: no configurations [ 471.801162][ T7264] usb 3-1: can't read configurations, error -22 [ 471.930915][ T7264] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 471.951198][ T7264] usb 3-1: no configurations [ 471.951220][ T7264] usb 3-1: can't read configurations, error -22 [ 471.951640][ T7264] usb usb3-port1: unable to enumerate USB device [ 471.986437][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.986953][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.750095][ T8434] batman_adv: batadv0: Interface deactivated: dummy0 [ 473.549642][ T8474] fuse: Invalid rootmode [ 475.457642][ T7264] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 475.629615][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 475.635712][ T7264] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 475.635745][ T7264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.678531][ T7264] usb 3-1: config 0 descriptor?? [ 475.707882][ T7264] as10x_usb: device has been detected [ 475.716866][ T7264] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 475.860881][ T7264] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 475.899833][ T7264] as10x_usb: error during firmware upload part1 [ 475.900924][ T7264] Registered device nBox DVB-T Dongle [ 475.924644][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.925086][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.037790][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.135566][ T8434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.939800][ T5728] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 477.091003][ T5728] usb 7-1: Using ep0 maxpacket: 16 [ 477.115629][ T5728] usb 7-1: unable to get BOS descriptor or descriptor too short [ 477.117999][ T5728] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.141316][ T5728] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 477.141336][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.141348][ T5728] usb 7-1: Product: syz [ 477.141356][ T5728] usb 7-1: Manufacturer: syz [ 477.141365][ T5728] usb 7-1: SerialNumber: syz [ 477.413212][ T5728] snd-ua101 7-1:1.1: sample format descriptor not found [ 477.413254][ T5728] snd-ua101 7-1:1.0: invalid bNumEndpoints [ 477.463744][ T5728] usb 7-1: USB disconnect, device number 4 [ 477.622630][ T6517] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.661792][ T6517] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.664760][ T6517] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.694086][ T6517] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.726411][ T8513] batman_adv: batadv0: Interface activated: dummy0 [ 477.726429][ T8513] net_ratelimit: 10 callbacks suppressed [ 477.726441][ T8513] batadv0: mtu less than device minimum [ 477.730926][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.735325][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.739781][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.744119][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.748422][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.752828][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.757158][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.761549][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.765882][ T8513] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 477.899968][ T5729] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 477.957214][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.957371][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.957504][ T8249] bridge_slave_0: entered allmulticast mode [ 477.968426][ T8249] bridge_slave_0: entered promiscuous mode [ 478.007656][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.007933][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.008152][ T8249] bridge_slave_1: entered allmulticast mode [ 478.015158][ T8249] bridge_slave_1: entered promiscuous mode [ 478.052618][ T5729] usb 5-1: no configurations [ 478.052640][ T5729] usb 5-1: can't read configurations, error -22 [ 478.180885][ T5729] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 478.192356][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.198681][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.506703][ T7264] usb 3-1: USB disconnect, device number 16 [ 479.650550][ T5729] usb 5-1: no configurations [ 479.650573][ T5729] usb 5-1: can't read configurations, error -22 [ 479.651122][ T5729] usb usb5-port1: attempt power cycle [ 480.139670][ T5729] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 480.173305][ T5729] usb 5-1: no configurations [ 480.173334][ T5729] usb 5-1: can't read configurations, error -22 [ 480.255673][ T7264] Unregistered device nBox DVB-T Dongle [ 480.264429][ T7264] as10x_usb: device has been disconnected [ 480.283250][ T8249] team0: Port device team_slave_0 added [ 480.301117][ T5729] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 480.323151][ T5729] usb 5-1: no configurations [ 480.323171][ T5729] usb 5-1: can't read configurations, error -22 [ 480.343174][ T8249] team0: Port device team_slave_1 added [ 480.373072][ T5729] usb usb5-port1: unable to enumerate USB device [ 480.450378][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.450397][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.450423][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.456231][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.456248][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.456275][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.098073][ T8249] hsr_slave_0: entered promiscuous mode [ 481.107193][ T8249] hsr_slave_1: entered promiscuous mode [ 481.116907][ T8249] debugfs: 'hsr0' already exists in 'hsr' [ 481.116938][ T8249] Cannot create hsr debugfs directory [ 483.930327][ T8582] 9p: Bad value for 'rfdno' [ 484.207550][ T8587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.710'. [ 484.343562][ T8249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.391583][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.393883][ T8249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.440241][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.441931][ T8249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.764979][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.771981][ T8249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.956916][ T8249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.359019][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.440598][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.512370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.512622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.657135][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.657471][ T7834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.922756][ T8621] netlink: 64 bytes leftover after parsing attributes in process `syz.6.722'. [ 487.167188][ T8626] ip6erspan1: entered allmulticast mode [ 489.424162][ T8658] netlink: 64 bytes leftover after parsing attributes in process `syz.4.734'. [ 489.592968][ T8664] netlink: 'syz.0.736': attribute type 6 has an invalid length. [ 490.217503][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.488186][ T7264] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 490.664087][ T7264] usb 5-1: unable to get BOS descriptor or descriptor too short [ 490.664849][ T7264] usb 5-1: not running at top speed; connect to a high speed hub [ 490.671818][ T7264] usb 5-1: language id specifier not provided by device, defaulting to English [ 490.703799][ T7264] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 490.703830][ T7264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.703850][ T7264] usb 5-1: Product: syz [ 490.703864][ T7264] usb 5-1: Manufacturer: 殂랔ṥ褤崉犚㖲ໂ [ 490.703880][ T7264] usb 5-1: SerialNumber: syz [ 491.253224][ T7264] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 491.255037][ T7264] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 491.275579][ T821] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 491.989576][ T821] usb 3-1: device descriptor read/64, error -71 [ 492.394320][ T821] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 492.409968][ T7264] usb 5-1: USB disconnect, device number 15 [ 492.423314][ T8700] netlink: 64 bytes leftover after parsing attributes in process `syz.6.746'. [ 492.502345][ T8703] capability: warning: `syz.0.747' uses deprecated v2 capabilities in a way that may be insecure [ 492.520010][ T821] usb 3-1: device descriptor read/64, error -71 [ 493.798120][ T8707] overlayfs: missing 'lowerdir' [ 493.850810][ T8711] overlay: ./file0 is not a directory [ 493.851169][ T821] usb usb3-port1: attempt power cycle [ 494.157038][ T8249] veth0_vlan: entered promiscuous mode [ 494.220441][ T8669] udevd[8669]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.264257][ T8249] veth1_vlan: entered promiscuous mode [ 494.382581][ T8249] veth0_macvtap: entered promiscuous mode [ 494.403770][ T8249] veth1_macvtap: entered promiscuous mode [ 494.444771][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.815498][ T8249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.944521][ T8730] netlink: 64 bytes leftover after parsing attributes in process `syz.2.758'. [ 494.944703][ T1132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.992924][ T1132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.012444][ T1132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.066567][ T3333] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.399209][ T36] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 495.694613][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 495.695894][ T36] usb 1-1: not running at top speed; connect to a high speed hub [ 495.720437][ T36] usb 1-1: language id specifier not provided by device, defaulting to English [ 495.740293][ T36] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 495.740327][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.740347][ T36] usb 1-1: Product: syz [ 495.740362][ T36] usb 1-1: Manufacturer: 殂랔ṥ褤崉犚㖲ໂ邚⚲挚䘀Ⲫ [ 495.740379][ T36] usb 1-1: SerialNumber: syz [ 495.802503][ T7264] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 495.940234][ T7264] usb 3-1: device descriptor read/64, error -71 [ 496.148952][ T36] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 496.181617][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.181641][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.235867][ T36] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 496.270316][ T7264] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 496.420350][ T7264] usb 3-1: device descriptor read/64, error -71 [ 496.532685][ T7264] usb usb3-port1: attempt power cycle [ 496.606815][ T36] usb 1-1: USB disconnect, device number 14 [ 496.743501][ T8669] udevd[8669]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.884821][ T7264] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 496.917331][ T7264] usb 3-1: device descriptor read/8, error -71 [ 496.947543][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.947558][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.686039][ T8743] overlayfs: missing 'lowerdir' [ 497.735997][ T8741] overlay: ./file0 is not a directory [ 498.559602][ T7264] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 498.713809][ T7264] usb 3-1: device descriptor read/8, error -71 [ 498.877586][ T7264] usb usb3-port1: unable to enumerate USB device [ 500.206064][ T8763] netlink: 64 bytes leftover after parsing attributes in process `syz.0.768'. [ 501.773957][ T8777] overlayfs: missing 'lowerdir' [ 501.850391][ T8779] overlay: ./file0 is not a directory [ 502.583587][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.583669][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.615315][ T8793] netlink: 64 bytes leftover after parsing attributes in process `syz.0.778'. [ 504.705291][ T8796] netlink: 64 bytes leftover after parsing attributes in process `syz.4.780'. [ 506.643187][ T8816] overlayfs: missing 'lowerdir' [ 506.728776][ T8818] overlay: ./file0 is not a directory [ 508.192400][ T8830] netlink: 64 bytes leftover after parsing attributes in process `syz.2.792'. [ 509.197047][ T8844] overlayfs: missing 'lowerdir' [ 509.289544][ T8846] overlay: ./file0 is not a directory [ 511.363177][ T8856] fuse: Unknown parameter 'user_i00000000000000000000' [ 512.496440][ T8868] netlink: 64 bytes leftover after parsing attributes in process `syz.2.808'. [ 514.409049][ T8890] batman_adv: batadv0: Adding interface: dummy0 [ 514.409067][ T8890] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.409098][ T8890] batman_adv: batadv0: Interface activated: dummy0 [ 514.455428][ T8890] net_ratelimit: 10 callbacks suppressed [ 514.455444][ T8890] batadv0: mtu less than device minimum [ 514.459760][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.464122][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.468447][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.472825][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.477110][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.481432][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.485687][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.490081][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.494386][ T8890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.912399][ T8898] fuse: Unknown parameter 'user_i00000000000000000000' [ 516.047029][ T8908] cgroup: Name too long [ 516.282236][ T8915] netlink: 64 bytes leftover after parsing attributes in process `syz.6.821'. [ 518.637558][ T8933] fuse: Unknown parameter 'user_id00000000000000000000' [ 520.229625][ T8942] overlayfs: missing 'lowerdir' [ 520.305090][ T8943] overlay: ./file0 is not a directory [ 521.368653][ T8952] netlink: 64 bytes leftover after parsing attributes in process `syz.4.835'. [ 522.268939][ T8964] net_ratelimit: 10 callbacks suppressed [ 522.268961][ T8964] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 522.578765][ T8970] fuse: Unknown parameter 'user_id00000000000000000000' [ 522.709776][ T5834] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 522.871173][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 522.890476][ T5834] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 522.890495][ T5834] usb 5-1: config 0 has no interface number 0 [ 522.890524][ T5834] usb 5-1: config 0 interface 12 has no altsetting 0 [ 523.031866][ T5834] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 523.031900][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.031921][ T5834] usb 5-1: Product: syz [ 523.031935][ T5834] usb 5-1: Manufacturer: syz [ 523.031950][ T5834] usb 5-1: SerialNumber: syz [ 523.097292][ T5834] usb 5-1: config 0 descriptor?? [ 523.386110][ T5834] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 523.386149][ T5834] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 523.386159][ T5834] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 523.386217][ T5834] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 523.455816][ T5834] usb 5-1: USB disconnect, device number 16 [ 524.663260][ T8976] overlayfs: missing 'lowerdir' [ 524.690851][ T8881] udevd[8881]: setting mode of /dev/bus/usb/005/016 to 020664 failed: No such file or directory [ 524.691819][ T8881] udevd[8881]: setting owner of /dev/bus/usb/005/016 to uid=0, gid=0 failed: No such file or directory [ 524.707580][ T8979] overlay: ./file0 is not a directory [ 525.344088][ T8987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.848'. [ 526.419030][ T9005] fuse: Unknown parameter 'user_id00000000000000000000' [ 527.650075][ T9007] overlayfs: missing 'lowerdir' [ 527.676981][ T9004] overlay: ./file0 is not a directory [ 528.129817][ T9012] netlink: 'syz.4.855': attribute type 6 has an invalid length. [ 528.793401][ T9016] cgroup: Name too long [ 530.159372][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 530.159705][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 531.632164][ T9040] overlayfs: missing 'lowerdir' [ 531.865204][ T9041] overlay: ./file0 is not a directory [ 534.829673][ T5786] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 534.996514][ T5786] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 534.996547][ T5786] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 534.996567][ T5786] usb 1-1: config 0 has no interface number 0 [ 534.996623][ T5786] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 534.996652][ T5786] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.996679][ T5786] usb 1-1: config 0 interface 52 has no altsetting 0 [ 535.000806][ T5786] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 535.000835][ T5786] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 535.000855][ T5786] usb 1-1: Manufacturer: syz [ 535.162820][ T5786] usb 1-1: config 0 descriptor?? [ 535.165840][ T5786] hub 1-1:0.52: bad descriptor, ignoring hub [ 535.165863][ T5786] hub 1-1:0.52: probe with driver hub failed with error -5 [ 535.907283][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 535.907315][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 536.305520][ T5786] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input5 [ 537.033197][ T9075] tmpfs: Bad value for 'mpol' [ 537.107362][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 537.108001][ T9076] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 537.184319][ T9076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.869'. [ 537.350727][ T9087] netlink: 'syz.5.868': attribute type 6 has an invalid length. [ 538.144440][ T9095] overlayfs: missing 'lowerdir' [ 538.264144][ T9097] overlay: ./file0 is not a directory [ 540.611262][ T5786] usb 1-1: Failed to suspend device, error -71 [ 540.613258][ T5786] usb 1-1: USB disconnect, device number 15 [ 542.631602][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 544.569871][ T9129] overlayfs: missing 'lowerdir' [ 544.573323][ T9125] overlay: ./file0 is not a directory [ 546.842722][ T9138] netlink: 'syz.2.893': attribute type 6 has an invalid length. [ 547.755867][ T9145] cgroup: Name too long [ 549.310119][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 549.310155][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 549.736217][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.894'. [ 549.736341][ T9161] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 549.737112][ T9161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.894'. [ 551.219924][ T9172] overlayfs: missing 'lowerdir' [ 551.223335][ T9168] overlay: ./file0 is not a directory [ 552.824147][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 552.824181][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 553.069191][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 553.069269][ T9197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.914'. [ 553.083293][ T9195] netlink: 'syz.4.913': attribute type 6 has an invalid length. [ 554.189999][ T9208] overlayfs: missing 'lowerdir' [ 554.292859][ T9204] overlay: ./file0 is not a directory [ 555.305481][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 555.305511][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 555.636741][ T9224] netlink: 'syz.0.925': attribute type 6 has an invalid length. [ 555.809736][ T9227] cgroup: Name too long [ 557.837557][ T9244] overlay: ./file0 is not a directory [ 562.642732][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.642852][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.855222][ T9268] netlink: 'syz.6.937': attribute type 6 has an invalid length. [ 563.949768][ T9278] overlay: ./file0 is not a directory [ 564.885257][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.944'. [ 564.885285][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.944'. [ 565.305901][ T9298] netlink: 'syz.5.950': attribute type 6 has an invalid length. [ 566.725001][ T9306] overlay: ./file0 is not a directory [ 566.726730][ T5832] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 567.039508][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 567.041867][ T5832] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 567.041898][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.061226][ T5832] usb 5-1: config 0 descriptor?? [ 567.250439][ T5832] as10x_usb: device has been detected [ 567.251525][ T5832] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 567.276474][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.285140][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.357689][ T5832] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 567.636137][ T5832] as10x_usb: error during firmware upload part1 [ 567.636916][ T5832] Registered device nBox DVB-T Dongle [ 568.854222][ T821] usb 5-1: USB disconnect, device number 17 [ 568.938792][ T821] Unregistered device nBox DVB-T Dongle [ 569.026108][ T821] as10x_usb: device has been disconnected [ 569.487144][ T9338] cgroup: Name too long [ 569.577111][ T9343] netlink: 'syz.2.962': attribute type 6 has an invalid length. [ 569.899202][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 573.203812][ T9372] netlink: 'syz.4.975': attribute type 6 has an invalid length. [ 575.683030][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.5.982'. [ 579.941482][ T9440] fuse: Unknown parameter 'fd0x0000000000000005' [ 584.717876][ T9482] cgroup: Name too long [ 585.119797][ T7264] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 585.304179][ T7264] usb 6-1: Using ep0 maxpacket: 32 [ 585.306594][ T7264] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 585.306612][ T7264] usb 6-1: config 0 has no interface number 0 [ 585.306645][ T7264] usb 6-1: config 0 interface 12 has no altsetting 0 [ 585.318494][ T7264] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 585.318521][ T7264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.318540][ T7264] usb 6-1: Product: syz [ 585.318555][ T7264] usb 6-1: Manufacturer: syz [ 585.318576][ T7264] usb 6-1: SerialNumber: syz [ 585.359773][ T7264] usb 6-1: config 0 descriptor?? [ 585.685542][ T7264] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 585.685581][ T7264] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 585.685592][ T7264] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 585.685649][ T7264] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 585.725253][ T7264] usb 6-1: USB disconnect, device number 2 [ 586.522585][ T9498] fuse: Unknown parameter 'fd0x0000000000000005' [ 587.512742][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.475271][ T9547] fuse: Unknown parameter 'fd0x0000000000000005' [ 594.266112][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.315194][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.322873][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.424513][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.447705][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.521952][ T59] Bluetooth: hci0: command tx timeout [ 597.948218][ T9594] 9p: Bad value for 'rfdno' [ 598.610696][ T59] Bluetooth: hci0: command tx timeout [ 600.680593][ T59] Bluetooth: hci0: command tx timeout [ 602.760600][ T59] Bluetooth: hci0: command tx timeout [ 603.310147][ T9641] 9p: Bad value for 'rfdno' [ 604.830020][ T167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.188738][ T9683] binder: 9682:9683 ioctl c0306201 0 returned -14 [ 606.270025][ T9687] binder: 9682:9687 ioctl c0306201 0 returned -14 [ 606.487259][ T9690] 9p: Bad value for 'rfdno' [ 607.692166][ T5728] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 608.299749][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 608.302753][ T5728] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 608.302780][ T5728] usb 5-1: config 0 has no interface number 0 [ 608.302832][ T5728] usb 5-1: config 0 interface 12 has no altsetting 0 [ 608.306902][ T5728] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 608.306930][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.306949][ T5728] usb 5-1: Product: syz [ 608.306961][ T5728] usb 5-1: Manufacturer: syz [ 608.306975][ T5728] usb 5-1: SerialNumber: syz [ 608.407770][ T5728] usb 5-1: config 0 descriptor?? [ 609.571318][ T5728] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 609.571396][ T5728] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 609.571414][ T5728] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 609.571519][ T5728] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 609.702491][ T167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.837460][ T5728] usb 5-1: USB disconnect, device number 18 [ 610.537325][ T9742] 9p: Bad value for 'wfdno' [ 611.581946][ T9752] binder: BINDER_SET_CONTEXT_MGR already set [ 611.582201][ T9752] binder: 9749:9752 ioctl 4018620d 200000004a80 returned -16 [ 611.607217][ T9752] binder: 9749:9752 ioctl c0306201 0 returned -14 [ 611.672827][ T9753] binder: 9749:9753 ioctl c0306201 0 returned -14 [ 612.370451][ T167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.373714][ T5728] IPVS: starting estimator thread 0... [ 612.478573][ T9763] IPVS: using max 7 ests per chain, 16800 per kthread [ 613.797502][ T167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.893112][ T9797] binder: 9796:9797 ioctl c0306201 0 returned -14 [ 616.053545][ T9538] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.053793][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.054029][ T9538] bridge_slave_0: entered allmulticast mode [ 616.063061][ T9538] bridge_slave_0: entered promiscuous mode [ 616.066483][ T9538] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.068158][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.068348][ T9538] bridge_slave_1: entered allmulticast mode [ 616.073447][ T9538] bridge_slave_1: entered promiscuous mode [ 620.895194][ T9538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.282873][ T9538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.259548][ T9538] team0: Port device team_slave_0 added [ 623.261866][ T9538] team0: Port device team_slave_1 added [ 623.567948][ T9849] comedi comedi0: Minor 3 could not be opened [ 624.123948][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.124000][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.297216][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.297238][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.297267][ T9538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.307418][ T9538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.307435][ T9538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.307459][ T9538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.640616][ T167] bridge_slave_1: left allmulticast mode [ 627.640657][ T167] bridge_slave_1: left promiscuous mode [ 627.640975][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.268748][ T167] bridge_slave_0: left allmulticast mode [ 628.268785][ T167] bridge_slave_0: left promiscuous mode [ 628.269077][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.303022][ T5729] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 628.479657][ T5729] usb 6-1: Using ep0 maxpacket: 32 [ 628.482628][ T5729] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 628.482653][ T5729] usb 6-1: config 0 has no interface number 0 [ 628.482704][ T5729] usb 6-1: config 0 interface 12 has no altsetting 0 [ 628.485241][ T5729] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 628.485269][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.485290][ T5729] usb 6-1: Product: syz [ 628.485305][ T5729] usb 6-1: Manufacturer: syz [ 628.485318][ T5729] usb 6-1: SerialNumber: syz [ 628.500713][ T5729] usb 6-1: config 0 descriptor?? [ 628.759237][ T5729] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 628.759303][ T5729] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 628.759322][ T5729] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 628.759591][ T5729] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 628.814607][ T5729] usb 6-1: USB disconnect, device number 3 [ 629.209481][ T5786] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 629.359513][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 629.365615][ T5786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 629.369692][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.369846][ T5786] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 629.394502][ T5786] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 629.394533][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.394553][ T5786] usb 1-1: Product: syz [ 629.394567][ T5786] usb 1-1: Manufacturer: syz [ 629.394581][ T5786] usb 1-1: SerialNumber: syz [ 629.708463][ T9886] netlink: 'syz.5.1106': attribute type 12 has an invalid length. [ 629.748397][ T5786] snd-ua101 1-1:1.1: sample format descriptor not found [ 629.748420][ T5786] snd-ua101 1-1:1.0: invalid num_altsetting [ 629.823146][ T5786] usb 1-1: USB disconnect, device number 16 [ 630.171551][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.255368][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.288187][ T167] bond0 (unregistering): Released all slaves [ 632.991359][ T9886] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 637.028818][ T9538] hsr_slave_0: entered promiscuous mode [ 637.034850][ T9538] hsr_slave_1: entered promiscuous mode [ 637.037325][ T9538] debugfs: 'hsr0' already exists in 'hsr' [ 637.037349][ T9538] Cannot create hsr debugfs directory [ 639.409867][ T167] hsr_slave_0: left promiscuous mode [ 639.460003][ T167] hsr_slave_1: left promiscuous mode [ 639.463381][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.463406][ T167] batadv0: mtu less than device minimum [ 639.817383][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.826753][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 639.837332][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 640.594882][ T9951] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.654172][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 640.672377][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 640.710625][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 640.749762][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 640.778344][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 640.806820][ T167] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.662571][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.682908][ T167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.665056][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.026110][ T167] batman_adv: batadv0: Interface deactivated: dummy0 [ 644.026141][ T167] batman_adv: batadv0: Removing interface: dummy0 [ 644.167312][ T167] veth1_macvtap: left promiscuous mode [ 644.167432][ T167] veth0_macvtap: left promiscuous mode [ 644.167721][ T167] veth1_vlan: left promiscuous mode [ 644.218338][ T167] veth0_vlan: left promiscuous mode [ 644.238223][ T9968] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1127'. [ 646.077472][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 646.353215][ T167] team0 (unregistering): Port device team_slave_1 removed [ 646.419122][ T167] team0 (unregistering): Port device team_slave_0 removed [ 646.605860][ T9989] ieee802154 phy0 wpan0: encryption failed: -22 [ 646.891739][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 650.368047][ T167] IPVS: stop unused estimator thread 0... [ 651.467601][T10034] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.468963][T10054] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1145'. [ 653.498879][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.545651][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.548372][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.575289][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.576144][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 654.344826][T10065] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1149'. [ 654.601275][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 655.837040][ T59] Bluetooth: hci3: command tx timeout [ 655.854842][T10076] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 656.054989][ T37] audit: type=1326 audit(1777851783.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10078 comm="syz.6.1153" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb96f2fcdd9 code=0x0 [ 657.968962][ T59] Bluetooth: hci3: command tx timeout [ 660.248749][T10118] overlayfs: missing 'lowerdir' [ 661.063920][ T59] Bluetooth: hci3: command tx timeout [ 663.088890][ T59] Bluetooth: hci3: command tx timeout [ 665.216203][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 665.608016][ T37] audit: type=1326 audit(1777851793.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10152 comm="syz.5.1168" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefe6efcdd9 code=0x0 [ 665.918418][T10168] 9p: Bad value for 'wfdno' [ 667.042353][T10183] overlayfs: missing 'lowerdir' [ 670.659526][ T7264] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 670.695353][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 670.852612][ T7264] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 670.852653][ T7264] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 670.852673][ T7264] usb 5-1: config 0 has no interface number 0 [ 670.852723][ T7264] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 670.852750][ T7264] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.852778][ T7264] usb 5-1: config 0 interface 52 has no altsetting 0 [ 670.854288][ T7264] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 670.854317][ T7264] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 670.854337][ T7264] usb 5-1: Manufacturer: syz [ 671.604516][ T7264] usb 5-1: config 0 descriptor?? [ 671.652628][ T7264] hub 5-1:0.52: bad descriptor, ignoring hub [ 671.652676][ T7264] hub 5-1:0.52: probe with driver hub failed with error -5 [ 672.155864][ T7264] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input6 [ 672.440659][ T7264] usb 5-1: Failed to suspend device, error -71 [ 672.441757][ T7264] usb 5-1: USB disconnect, device number 19 [ 673.009587][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.009734][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.009983][T10043] bridge_slave_0: entered allmulticast mode [ 673.018955][T10043] bridge_slave_0: entered promiscuous mode [ 675.286027][T10256] ================================================================== [ 675.286047][T10256] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 675.286081][T10256] Read of size 1 at addr ffff8880394fc418 by task syz.4.1190/10256 [ 675.286099][T10256] [ 675.286115][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.4.1190 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 675.286145][T10256] Tainted: [L]=SOFTLOCKUP [ 675.286153][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.286167][T10256] Call Trace: [ 675.286176][T10256] [ 675.286185][T10256] dump_stack_lvl+0xe8/0x150 [ 675.286212][T10256] print_address_description+0x55/0x1e0 [ 675.286236][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.286258][T10256] print_report+0x58/0x70 [ 675.286279][T10256] kasan_report+0x117/0x150 [ 675.286307][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.286333][T10256] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 675.286373][T10256] __kasan_check_byte+0x2a/0x40 [ 675.286402][T10256] lock_acquire+0x84/0x350 [ 675.286431][T10256] ? preempt_schedule_thunk+0x16/0x30 [ 675.286463][T10256] ? rcu_is_watching+0x15/0xb0 [ 675.286496][T10256] _raw_spin_lock_irqsave+0x40/0x60 [ 675.286518][T10256] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 675.286547][T10256] rt_mutex_slowunlock+0xbf/0x8b0 [ 675.286576][T10256] ? reacquire_held_locks+0x104/0x190 [ 675.286605][T10256] ? rt_spin_lock+0x1e0/0x400 [ 675.286635][T10256] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 675.286666][T10256] ? rt_spin_unlock+0x14f/0x200 [ 675.286705][T10256] ? rt_spin_unlock+0x160/0x200 [ 675.286736][T10256] kbd_event+0x2f91/0x42f0 [ 675.286766][T10256] ? __pfx_kbd_event+0x10/0x10 [ 675.286793][T10256] ? try_to_take_rt_mutex+0x840/0xb00 [ 675.286829][T10256] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 675.286864][T10256] ? __lock_acquire+0x6b5/0x2cf0 [ 675.286897][T10256] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 675.286932][T10256] ? input_pass_values+0x8d/0x890 [ 675.286966][T10256] input_handle_events_default+0xd4/0x1a0 [ 675.287001][T10256] ? input_pass_values+0x8d/0x890 [ 675.287028][T10256] input_pass_values+0x288/0x890 [ 675.287061][T10256] ? input_handle_event+0x70c/0xf30 [ 675.287086][T10256] input_event_dispose+0x330/0x6b0 [ 675.287112][T10256] input_inject_event+0x1d7/0x320 [ 675.287136][T10256] ? input_inject_event+0xb0/0x320 [ 675.287162][T10256] evdev_write+0x328/0x4c0 [ 675.287192][T10256] ? __lock_acquire+0x6b5/0x2cf0 [ 675.287222][T10256] ? __pfx_evdev_write+0x10/0x10 [ 675.287255][T10256] ? rw_verify_area+0x25b/0x4e0 [ 675.287278][T10256] ? __pfx_evdev_write+0x10/0x10 [ 675.287309][T10256] vfs_write+0x2a3/0xba0 [ 675.287333][T10256] ? __pfx_vfs_write+0x10/0x10 [ 675.287372][T10256] ? __fget_files+0x2a/0x420 [ 675.287393][T10256] ? __fget_files+0x2a/0x420 [ 675.287411][T10256] ? __fget_files+0x3a6/0x420 [ 675.287428][T10256] ? __fget_files+0x2a/0x420 [ 675.287450][T10256] ksys_write+0x156/0x270 [ 675.287475][T10256] ? __pfx_ksys_write+0x10/0x10 [ 675.287501][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.287521][T10256] do_syscall_64+0x15f/0xf80 [ 675.287543][T10256] ? clear_bhb_loop+0x40/0x90 [ 675.287564][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.287583][T10256] RIP: 0033:0x7f3ce693cdd9 [ 675.287603][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.287619][T10256] RSP: 002b:00007f3ce4b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.287642][T10256] RAX: ffffffffffffffda RBX: 00007f3ce6bb6090 RCX: 00007f3ce693cdd9 [ 675.287657][T10256] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 675.287671][T10256] RBP: 00007f3ce69d2d69 R08: 0000000000000000 R09: 0000000000000000 [ 675.287684][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.287696][T10256] R13: 00007f3ce6bb6128 R14: 00007f3ce6bb6090 R15: 00007ffd29d15aa8 [ 675.287719][T10256] [ 675.287727][T10256] [ 675.287731][T10256] Allocated by task 10254: [ 675.287740][T10256] kasan_save_track+0x3e/0x80 [ 675.287759][T10256] __kasan_kmalloc+0x93/0xb0 [ 675.287777][T10256] __kmalloc_cache_noprof+0x3a6/0x690 [ 675.287798][T10256] alloc_tty_struct+0xa6/0x7b0 [ 675.287818][T10256] tty_init_dev+0x59/0x4d0 [ 675.287837][T10256] tty_open+0x86e/0xd80 [ 675.287860][T10256] chrdev_open+0x4d0/0x5f0 [ 675.287882][T10256] do_dentry_open+0x83d/0x13e0 [ 675.287908][T10256] vfs_open+0x3b/0x350 [ 675.287933][T10256] path_openat+0x2e43/0x38a0 [ 675.287953][T10256] do_file_open+0x23e/0x4a0 [ 675.287968][T10256] do_sys_openat2+0x113/0x200 [ 675.287992][T10256] __x64_sys_openat+0x138/0x170 [ 675.288016][T10256] do_syscall_64+0x15f/0xf80 [ 675.288032][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.288051][T10256] [ 675.288056][T10256] Freed by task 9549: [ 675.288065][T10256] kasan_save_track+0x3e/0x80 [ 675.288081][T10256] kasan_save_free_info+0x46/0x50 [ 675.288103][T10256] __kasan_slab_free+0x5c/0x80 [ 675.288120][T10256] kfree+0x1c5/0x6c0 [ 675.288137][T10256] process_scheduled_works+0xb5d/0x1860 [ 675.288156][T10256] worker_thread+0xa53/0xfc0 [ 675.288176][T10256] kthread+0x388/0x470 [ 675.288198][T10256] ret_from_fork+0x514/0xb70 [ 675.288217][T10256] ret_from_fork_asm+0x1a/0x30 [ 675.288241][T10256] [ 675.288245][T10256] Last potentially related work creation: [ 675.288253][T10256] kasan_save_stack+0x3e/0x60 [ 675.288270][T10256] kasan_record_aux_stack+0xbd/0xd0 [ 675.288296][T10256] insert_work+0x3d/0x330 [ 675.288313][T10256] __queue_work+0xcfd/0x1010 [ 675.288334][T10256] queue_work_on+0x106/0x1d0 [ 675.288366][T10256] tty_release_struct+0xb8/0xd0 [ 675.288387][T10256] tty_release+0xcb6/0x1710 [ 675.288405][T10256] __fput+0x461/0xa70 [ 675.288431][T10256] task_work_run+0x1d9/0x270 [ 675.288457][T10256] exit_to_user_mode_loop+0xed/0x480 [ 675.288481][T10256] do_syscall_64+0x33e/0xf80 [ 675.288500][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.288519][T10256] [ 675.288524][T10256] The buggy address belongs to the object at ffff8880394fc000 [ 675.288524][T10256] which belongs to the cache kmalloc-cg-2k of size 2048 [ 675.288542][T10256] The buggy address is located 1048 bytes inside of [ 675.288542][T10256] freed 2048-byte region [ffff8880394fc000, ffff8880394fc800) [ 675.288562][T10256] [ 675.288568][T10256] The buggy address belongs to the physical page: [ 675.288578][T10256] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x394f8 [ 675.288596][T10256] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 675.288613][T10256] memcg:ffff8880394f8811 [ 675.288622][T10256] flags: 0x80000000000040(head|node=0|zone=1) [ 675.288638][T10256] page_type: f5(slab) [ 675.288655][T10256] raw: 0080000000000040 ffff88801a0283c0 dead000000000100 dead000000000122 [ 675.288672][T10256] raw: 0000000000000000 0000100000080008 00000000f5000000 ffff8880394f8811 [ 675.288691][T10256] head: 0080000000000040 ffff88801a0283c0 dead000000000100 dead000000000122 [ 675.288708][T10256] head: 0000000000000000 0000100000080008 00000000f5000000 ffff8880394f8811 [ 675.288726][T10256] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 675.288744][T10256] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 675.288753][T10256] page dumped because: kasan: bad access detected [ 675.288763][T10256] page_owner tracks the page as allocated [ 675.288769][T10256] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10227, tgid 10223 (syz.6.1184), ts 672514792751, free_ts 672387522740 [ 675.288805][T10256] post_alloc_hook+0x231/0x280 [ 675.288824][T10256] get_page_from_freelist+0x27c8/0x2840 [ 675.288848][T10256] __alloc_frozen_pages_noprof+0x18d/0x380 [ 675.288869][T10256] allocate_slab+0x77/0x660 [ 675.288891][T10256] refill_objects+0x33c/0x3d0 [ 675.288913][T10256] __pcs_replace_empty_main+0x373/0x720 [ 675.288940][T10256] __kmalloc_cache_noprof+0x44e/0x690 [ 675.288959][T10256] bpf_copy_verifier_state+0x83f/0xf20 [ 675.288976][T10256] push_stack+0x19d/0x3a0 [ 675.288997][T10256] do_check_insn+0xad76/0x18a90 [ 675.289018][T10256] do_check_common+0x3ace/0x5780 [ 675.289039][T10256] bpf_check+0x3ff3/0x49f0 [ 675.289057][T10256] bpf_prog_load+0x1406/0x1a10 [ 675.289078][T10256] __sys_bpf+0x618/0x950 [ 675.289099][T10256] __x64_sys_bpf+0x7c/0x90 [ 675.289118][T10256] do_syscall_64+0x15f/0xf80 [ 675.289138][T10256] page last free pid 10233 tgid 10233 stack trace: [ 675.289150][T10256] __free_frozen_pages+0xfa6/0x10f0 [ 675.289171][T10256] __slab_free+0x252/0x2a0 [ 675.289189][T10256] qlist_free_all+0x99/0x100 [ 675.289204][T10256] kasan_quarantine_reduce+0x148/0x160 [ 675.289221][T10256] __kasan_slab_alloc+0x22/0x80 [ 675.289239][T10256] kmem_cache_alloc_noprof+0x33b/0x680 [ 675.289258][T10256] __pmd_alloc+0xa4/0x5e0 [ 675.289275][T10256] handle_mm_fault+0xe91/0x13c0 [ 675.289295][T10256] do_user_addr_fault+0xa73/0x1340 [ 675.289315][T10256] exc_page_fault+0x6a/0xc0 [ 675.289332][T10256] asm_exc_page_fault+0x26/0x30 [ 675.289361][T10256] [ 675.289366][T10256] Memory state around the buggy address: [ 675.289377][T10256] ffff8880394fc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.289392][T10256] ffff8880394fc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.289407][T10256] >ffff8880394fc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.289418][T10256] ^ [ 675.289429][T10256] ffff8880394fc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.289444][T10256] ffff8880394fc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.289454][T10256] ================================================================== [ 675.289468][T10256] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 675.289487][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.4.1190 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 675.289517][T10256] Tainted: [L]=SOFTLOCKUP [ 675.289524][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.289538][T10256] Call Trace: [ 675.289546][T10256] [ 675.289555][T10256] vpanic+0x56c/0xa60 [ 675.289584][T10256] ? __pfx_vpanic+0x10/0x10 [ 675.289613][T10256] panic+0xc5/0xd0 [ 675.289637][T10256] ? __pfx_panic+0x10/0x10 [ 675.289664][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.289687][T10256] ? rcu_is_watching+0x15/0xb0 [ 675.289719][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.289742][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.289763][T10256] check_panic_on_warn+0x89/0xb0 [ 675.289793][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.289815][T10256] end_report+0x73/0x170 [ 675.289838][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.289860][T10256] kasan_report+0x128/0x150 [ 675.289885][T10256] ? _raw_spin_lock_irqsave+0x40/0x60 [ 675.289911][T10256] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 675.289940][T10256] __kasan_check_byte+0x2a/0x40 [ 675.289963][T10256] lock_acquire+0x84/0x350 [ 675.289991][T10256] ? preempt_schedule_thunk+0x16/0x30 [ 675.290023][T10256] ? rcu_is_watching+0x15/0xb0 [ 675.290055][T10256] _raw_spin_lock_irqsave+0x40/0x60 [ 675.290077][T10256] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 675.290107][T10256] rt_mutex_slowunlock+0xbf/0x8b0 [ 675.290137][T10256] ? reacquire_held_locks+0x104/0x190 [ 675.290169][T10256] ? rt_spin_lock+0x1e0/0x400 [ 675.290199][T10256] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 675.290231][T10256] ? rt_spin_unlock+0x14f/0x200 [ 675.290262][T10256] ? rt_spin_unlock+0x160/0x200 [ 675.290293][T10256] kbd_event+0x2f91/0x42f0 [ 675.290323][T10256] ? __pfx_kbd_event+0x10/0x10 [ 675.290358][T10256] ? try_to_take_rt_mutex+0x840/0xb00 [ 675.290394][T10256] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 675.290430][T10256] ? __lock_acquire+0x6b5/0x2cf0 [ 675.290462][T10256] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 675.290497][T10256] ? input_pass_values+0x8d/0x890 [ 675.290531][T10256] input_handle_events_default+0xd4/0x1a0 [ 675.290566][T10256] ? input_pass_values+0x8d/0x890 [ 675.290593][T10256] input_pass_values+0x288/0x890 [ 675.290624][T10256] ? input_handle_event+0x70c/0xf30 [ 675.290648][T10256] input_event_dispose+0x330/0x6b0 [ 675.290673][T10256] input_inject_event+0x1d7/0x320 [ 675.290694][T10256] ? input_inject_event+0xb0/0x320 [ 675.290716][T10256] evdev_write+0x328/0x4c0 [ 675.290744][T10256] ? __lock_acquire+0x6b5/0x2cf0 [ 675.290771][T10256] ? __pfx_evdev_write+0x10/0x10 [ 675.290802][T10256] ? rw_verify_area+0x25b/0x4e0 [ 675.290824][T10256] ? __pfx_evdev_write+0x10/0x10 [ 675.290851][T10256] vfs_write+0x2a3/0xba0 [ 675.290874][T10256] ? __pfx_vfs_write+0x10/0x10 [ 675.290895][T10256] ? __fget_files+0x2a/0x420 [ 675.290914][T10256] ? __fget_files+0x2a/0x420 [ 675.290931][T10256] ? __fget_files+0x3a6/0x420 [ 675.290949][T10256] ? __fget_files+0x2a/0x420 [ 675.290971][T10256] ksys_write+0x156/0x270 [ 675.290994][T10256] ? __pfx_ksys_write+0x10/0x10 [ 675.291021][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.291044][T10256] do_syscall_64+0x15f/0xf80 [ 675.291066][T10256] ? clear_bhb_loop+0x40/0x90 [ 675.291088][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.291108][T10256] RIP: 0033:0x7f3ce693cdd9 [ 675.291127][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.291145][T10256] RSP: 002b:00007f3ce4b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.291166][T10256] RAX: ffffffffffffffda RBX: 00007f3ce6bb6090 RCX: 00007f3ce693cdd9 [ 675.291183][T10256] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 675.291197][T10256] RBP: 00007f3ce69d2d69 R08: 0000000000000000 R09: 0000000000000000 [ 675.291211][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.291222][T10256] R13: 00007f3ce6bb6128 R14: 00007f3ce6bb6090 R15: 00007ffd29d15aa8 [ 675.291248][T10256] [ 675.291404][T10256] Kernel Offset: disabled