last executing test programs: 3m48.978184435s ago: executing program 2 (id=1289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x4004804) 3m47.475322148s ago: executing program 2 (id=1291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000850400"]) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3m46.078752369s ago: executing program 2 (id=1293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x401, 0x0, 0x3, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3m35.979602573s ago: executing program 2 (id=1305): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe898000"/120, 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xc4) r6 = epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x7}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000340)={0xa000001c}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 3m34.83541042s ago: executing program 2 (id=1306): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 3m34.645437574s ago: executing program 2 (id=1307): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(0x0, 0x14) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x830200) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000200)=""/56, 0x38, 0x100000000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x3, 0x8}, {0xe, 0xfc}, 0x7, 0x1, 0x9c}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001e80), 0x100, 0x0) 3m18.962500873s ago: executing program 32 (id=1307): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(0x0, 0x14) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x830200) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000200)=""/56, 0x38, 0x100000000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x3, 0x8}, {0xe, 0xfc}, 0x7, 0x1, 0x9c}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001e80), 0x100, 0x0) 13.038100941s ago: executing program 0 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r9) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b32, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 11.972448747s ago: executing program 0 (id=1769): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1e8, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d6069b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14477454}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482bad72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a7ae7c7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b4c010b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x218c3e9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe87bbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76667d2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1993cc0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed36283}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f040942}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2519d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3312fcc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2659698f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e96df5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383d85a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638f4cbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa2b30a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eacbc29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b67cb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a4e45a7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3028862c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x439da543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x681867ad}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b034fe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73787787}]}]}]}, 0x1e8}}, 0x80) syz_open_procfs$namespace(0x0, 0x0) 10.319902132s ago: executing program 0 (id=1771): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) 10.125571295s ago: executing program 0 (id=1775): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000d000109022400011b00000009040000022a3e740009058bff7f0000130109050b362f"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0xeec, 0x0, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000040) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.226633559s ago: executing program 1 (id=1781): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000002b00)=ANY=[@ANYBLOB="0b00000073797a310000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000"], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="5e8a04d57f80ed0d21f1c62e6568355db200bf5646f4f4c6915e95ae5fad20b17a6358ee62337eb3513d22df842fe68dd59026d36b4a0b845b34956869922816cce3e4000d") 7.165121431s ago: executing program 3 (id=1782): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d7add05bb63ae661f053e1e79ceafeaa60a5ad1dc83dbe742eb40d907fd", "fd6ed24e", "c2e9e1c90d89691c"}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 6.524282551s ago: executing program 1 (id=1783): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x40084c0) 6.447982212s ago: executing program 4 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2, 0x401, 0x0, 0x3, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 6.357670223s ago: executing program 1 (id=1785): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x8}}]}}]}, 0x38}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.373257928s ago: executing program 4 (id=1786): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[], 0xa) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r9 = dup(r8) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r9, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x307, 0x1, 0x2d, 0x9}, 0x9c) 5.352556508s ago: executing program 1 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x613) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) clock_gettime(0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x3, 0x9, 0x4, 0x4000, 0x800, {0x77359400}, {0x6, 0x0, 0x2, 0x7, 0x4, 0x8, "2264fa66"}, 0x4, 0x2, {&(0x7f0000000200)=[{0x4a74, 0x6, {0x0}, 0x100}, {0x5, 0xbc, {0x0}, 0x5}]}, 0x28}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0xffaa) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) connect$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) 5.24946477s ago: executing program 0 (id=1788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 4.319958904s ago: executing program 0 (id=1789): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) close_range(r0, 0xffffffffffffffff, 0x0) 3.93609512s ago: executing program 1 (id=1790): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1e8, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d6069b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14477454}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482bad72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a7ae7c7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b4c010b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x218c3e9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe87bbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76667d2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1993cc0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed36283}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f040942}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2519d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3312fcc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2659698f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e96df5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383d85a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638f4cbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa2b30a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eacbc29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b67cb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a4e45a7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3028862c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x439da543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x681867ad}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b034fe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73787787}]}]}]}, 0x1e8}}, 0x80) syz_open_procfs$namespace(0x0, 0x0) 3.715942084s ago: executing program 4 (id=1791): unshare(0x8040480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, 0x0, 0x0, 0x7fffffffffffffff) 2.961073605s ago: executing program 1 (id=1792): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f00000001c0), 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x2000}) tkill(r2, 0xb) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 2.893250306s ago: executing program 4 (id=1793): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="040000000000000010000300000000002000000000000000"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24084004}, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x20000800) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) add_key$keyring(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2.176619787s ago: executing program 3 (id=1794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x117, &(0x7f0000000240)={0x0, 0x4a2d, 0x0, 0xff7fffff, 0xdd}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r2, 0x401, 0x0, 0x3, 0x0, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.985899429s ago: executing program 4 (id=1795): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x8}}]}}]}, 0x38}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.746146733s ago: executing program 4 (id=1796): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000d000109022400011b00000009040000022a3e740009058bff7f0000130109050b362f"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) syz_io_uring_setup(0xeec, 0x0, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000040) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.105975303s ago: executing program 3 (id=1797): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 948.629935ms ago: executing program 3 (id=1798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x613) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) clock_gettime(0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x3, 0x9, 0x4, 0x4000, 0x800, {0x77359400}, {0x6, 0x0, 0x2, 0x7, 0x4, 0x8, "2264fa66"}, 0x4, 0x2, {&(0x7f0000000200)=[{0x4a74, 0x6, {0x0}, 0x100}, {0x5, 0xbc, {0x0}, 0x5}]}, 0x28}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0xffaa) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) connect$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) 283.756356ms ago: executing program 3 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x80) 0s ago: executing program 3 (id=1800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) gettid() write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x1e8, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d6069b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14477454}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482bad72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a7ae7c7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b4c010b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x218c3e9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe87bbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76667d2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1993cc0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ed36283}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f040942}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2519d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3312fcc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2659698f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e96df5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383d85a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x638f4cbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa2b30a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eacbc29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12b67cb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a4e45a7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3028862c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x439da543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x681867ad}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b034fe5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73787787}]}]}]}, 0x1e8}}, 0x80) syz_open_procfs$namespace(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 81.156408][ T5780] cgroup: Unknown subsys name 'net' [ 81.295377][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.998301][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.689735][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.718752][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.742565][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.752017][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.753362][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.766960][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.786549][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.796049][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.796371][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.821087][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.829257][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.834655][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.838719][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.843994][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.852016][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.857687][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.865022][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.871621][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.889815][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.899809][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.901941][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.923013][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.923190][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.942533][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.427559][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.530116][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 85.638202][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 85.650526][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.658073][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.665562][ T5789] bridge_slave_0: entered allmulticast mode [ 85.673640][ T5789] bridge_slave_0: entered promiscuous mode [ 85.692063][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 85.735232][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.742568][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.749996][ T5789] bridge_slave_1: entered allmulticast mode [ 85.757410][ T5789] bridge_slave_1: entered promiscuous mode [ 85.805339][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.812733][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.820113][ T5790] bridge_slave_0: entered allmulticast mode [ 85.828142][ T5790] bridge_slave_0: entered promiscuous mode [ 85.866878][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.874105][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.881597][ T5790] bridge_slave_1: entered allmulticast mode [ 85.888863][ T5790] bridge_slave_1: entered promiscuous mode [ 85.933230][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.946845][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.054805][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.070774][ T5789] team0: Port device team_slave_0 added [ 86.090709][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.097991][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.105165][ T5796] bridge_slave_0: entered allmulticast mode [ 86.113995][ T5796] bridge_slave_0: entered promiscuous mode [ 86.121590][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.129111][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.137259][ T5794] bridge_slave_0: entered allmulticast mode [ 86.144259][ T5794] bridge_slave_0: entered promiscuous mode [ 86.154116][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.179296][ T5789] team0: Port device team_slave_1 added [ 86.198243][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.205408][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.212897][ T5796] bridge_slave_1: entered allmulticast mode [ 86.220758][ T5796] bridge_slave_1: entered promiscuous mode [ 86.227961][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.235105][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.242599][ T5794] bridge_slave_1: entered allmulticast mode [ 86.249903][ T5794] bridge_slave_1: entered promiscuous mode [ 86.283156][ T5790] team0: Port device team_slave_0 added [ 86.292392][ T5790] team0: Port device team_slave_1 added [ 86.325084][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.332382][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.358516][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.372587][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.379720][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.406747][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.484641][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.497983][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.511059][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.520800][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.528807][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.555353][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.575966][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.583413][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.609407][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.623043][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.718054][ T5794] team0: Port device team_slave_0 added [ 86.727664][ T5796] team0: Port device team_slave_0 added [ 86.740956][ T5789] hsr_slave_0: entered promiscuous mode [ 86.748161][ T5789] hsr_slave_1: entered promiscuous mode [ 86.757855][ T5794] team0: Port device team_slave_1 added [ 86.767190][ T5796] team0: Port device team_slave_1 added [ 86.843064][ T5790] hsr_slave_0: entered promiscuous mode [ 86.850106][ T5790] hsr_slave_1: entered promiscuous mode [ 86.856802][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.864750][ T5790] Cannot create hsr debugfs directory [ 86.896019][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.903521][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.929710][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.943592][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.950660][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.977380][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.977494][ T5803] Bluetooth: hci0: command tx timeout [ 86.989798][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.001012][ T5792] Bluetooth: hci1: command tx timeout [ 87.006603][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.006722][ T5798] Bluetooth: hci2: command tx timeout [ 87.038546][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.051759][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.058918][ T5798] Bluetooth: hci3: command tx timeout [ 87.066555][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.097552][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.327526][ T5796] hsr_slave_0: entered promiscuous mode [ 87.334369][ T5796] hsr_slave_1: entered promiscuous mode [ 87.341008][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.349782][ T5796] Cannot create hsr debugfs directory [ 87.362246][ T5794] hsr_slave_0: entered promiscuous mode [ 87.369808][ T5794] hsr_slave_1: entered promiscuous mode [ 87.377007][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.384623][ T5794] Cannot create hsr debugfs directory [ 87.830976][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.856949][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.871046][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.882990][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.965755][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.977717][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.991988][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.004070][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.113018][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.124164][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.145864][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.158785][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.268536][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.283505][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.308870][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.320617][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.350166][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.405777][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.443428][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.450942][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.488838][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.502816][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.510090][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.582181][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.595229][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.602445][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.641744][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.648969][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.691402][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.771293][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.829917][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.837129][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.888676][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.911121][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.918373][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.995036][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.030939][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.038196][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.056806][ T5792] Bluetooth: hci1: command tx timeout [ 89.062289][ T5792] Bluetooth: hci0: command tx timeout [ 89.068195][ T5798] Bluetooth: hci2: command tx timeout [ 89.112235][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.119521][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.126623][ T5792] Bluetooth: hci3: command tx timeout [ 89.325139][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.359953][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.536993][ T5790] veth0_vlan: entered promiscuous mode [ 89.548433][ T5789] veth0_vlan: entered promiscuous mode [ 89.574283][ T5790] veth1_vlan: entered promiscuous mode [ 89.585722][ T5789] veth1_vlan: entered promiscuous mode [ 89.681170][ T5790] veth0_macvtap: entered promiscuous mode [ 89.720764][ T5789] veth0_macvtap: entered promiscuous mode [ 89.732946][ T5790] veth1_macvtap: entered promiscuous mode [ 89.749228][ T5789] veth1_macvtap: entered promiscuous mode [ 89.763069][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.820324][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.833457][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.845255][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.860156][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.880268][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.899995][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.911029][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.923056][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.949045][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.958497][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.968724][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.978596][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.991492][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.000911][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.010400][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.020435][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.038373][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.131605][ T5796] veth0_vlan: entered promiscuous mode [ 90.220133][ T5796] veth1_vlan: entered promiscuous mode [ 90.230214][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.238791][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.304683][ T5794] veth0_vlan: entered promiscuous mode [ 90.360327][ T5794] veth1_vlan: entered promiscuous mode [ 90.369154][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.396600][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.419252][ T5796] veth0_macvtap: entered promiscuous mode [ 90.431085][ T5796] veth1_macvtap: entered promiscuous mode [ 90.462298][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.494271][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.569548][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.582699][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.593181][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.603716][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.615963][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.639429][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.649301][ T5794] veth0_macvtap: entered promiscuous mode [ 90.664051][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.683390][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.708087][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.721626][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.736992][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.758683][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.785122][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.794800][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806031][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.815560][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.839449][ T5794] veth1_macvtap: entered promiscuous mode [ 90.955611][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.982026][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.010292][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.027754][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.027800][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.027813][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.027827][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.042963][ T5890] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.080543][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.092939][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.127427][ T5792] Bluetooth: hci1: command tx timeout [ 91.133428][ T5798] Bluetooth: hci0: command tx timeout [ 91.133442][ T5803] Bluetooth: hci2: command tx timeout [ 91.202763][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.207522][ T5798] Bluetooth: hci3: command tx timeout [ 91.261511][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.271681][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.283233][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.294852][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.306178][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.318112][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.386164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.566433][ T5896] overlayfs: missing 'lowerdir' [ 91.873352][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.932835][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984861][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.001815][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090839][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.103306][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.192264][ T55] cfg80211: failed to load regulatory.db [ 92.371321][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.401171][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.413336][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.455943][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.057264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.065689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.076206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.160842][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.187148][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.207098][ T5792] Bluetooth: hci1: command tx timeout [ 93.207224][ T5803] Bluetooth: hci2: command tx timeout [ 93.213386][ T5798] Bluetooth: hci0: command tx timeout [ 93.287688][ T5798] Bluetooth: hci3: command tx timeout [ 96.167315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.176459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.184865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.426695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.436398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.446383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.689950][ T5934] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd1": -EINTR [ 102.760581][ T5946] IPVS: Error joining to the multicast group [ 104.879281][ T5938] syz.2.13 (5938) used greatest stack depth: 16968 bytes left [ 105.084424][ T5958] ksmbd: Unknown IPC event: 6, ignore. [ 108.219957][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 108.227106][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 108.234625][ T5958] ceph: No mds server is up or the cluster is laggy [ 108.467401][ T5968] mmap: syz.2.17 (5968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.498712][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 108.509692][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 119.444785][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 119.591953][ T6024] input: syz0 as /devices/virtual/input/input5 [ 121.569714][ T6054] syz.0.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.072422][ T6055] process 'syz.3.36' launched './file0' with NULL argv: empty string added [ 122.895109][ T5865] IPVS: starting estimator thread 0... [ 123.666444][ T6066] IPVS: using max 26 ests per chain, 62400 per kthread [ 127.152107][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 127.187409][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 127.487307][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 127.501854][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 127.786644][ T6075] ceph: No mds server is up or the cluster is laggy [ 128.339969][ T6093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.48'. [ 130.298381][ T5849] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.663496][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.787775][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.827987][ T5849] usb 3-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 130.884334][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.945226][ T5849] usb 3-1: config 0 descriptor?? [ 131.261225][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 131.289274][ T5849] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.607651][ T5849] usb 3-1: USB disconnect, device number 2 [ 132.685469][ T6133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.61'. [ 133.187094][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194022][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.485180][ T6172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.76'. [ 138.422230][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.499658][ T6190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 139.321520][ T6196] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 139.686510][ T6197] input: syz1 as /devices/virtual/input/input7 [ 143.284601][ T6230] Cannot find add_set index 0 as target [ 143.303258][ T6230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 149.515024][ T6279] netlink: 132 bytes leftover after parsing attributes in process `syz.3.109'. [ 155.523280][ T6320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 157.777523][ T6336] capability: warning: `syz.0.126' uses deprecated v2 capabilities in a way that may be insecure [ 158.181390][ T6342] Zero length message leads to an empty skb [ 160.483704][ T6366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 162.322263][ T6377] syz.3.135: attempt to access beyond end of device [ 162.322263][ T6377] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 167.121922][ T6410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 169.380199][ T6419] sctp: [Deprecated]: syz.2.144 (pid 6419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.380199][ T6419] Use struct sctp_sack_info instead [ 171.046175][ T5803] Bluetooth: hci3: command tx timeout [ 173.135451][ T6453] bridge0: entered promiscuous mode [ 173.144951][ T6453] macvlan2: entered promiscuous mode [ 176.712843][ T6483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 176.719698][ T6483] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.831044][ T6483] vhci_hcd vhci_hcd.0: Device attached [ 177.006525][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.021662][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.097275][ T6485] vhci_hcd: connection closed [ 178.140379][ T42] vhci_hcd: stop threads [ 178.187207][ T965] usb 40-1: SetAddress Request (2) to port 0 [ 178.195844][ T965] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 178.220849][ T42] vhci_hcd: release socket [ 178.251905][ T42] vhci_hcd: disconnect device [ 178.376170][ T965] usb 40-1: enqueue for inactive port 0 [ 178.782618][ T6496] netlink: 72 bytes leftover after parsing attributes in process `syz.3.162'. [ 179.256273][ T965] usb usb40-port1: attempt power cycle [ 179.896952][ T965] usb usb40-port1: unable to enumerate USB device [ 183.432063][ T6521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.439315][ T6521] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.574721][ T6521] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.855918][ T6521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.862926][ T6521] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.930426][ T6521] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.288571][ T6521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.400605][ T6521] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.500267][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.655238][ T6521] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.668538][ T6521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.682430][ T6521] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.703510][ T6521] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.926505][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.006320][ T965] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 186.113274][ T6565] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 186.544879][ T6567] netlink: 88 bytes leftover after parsing attributes in process `syz.0.180'. [ 186.597347][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.612245][ T965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.629875][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.668129][ T965] usb 2-1: config 0 descriptor?? [ 187.287245][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.526333][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.684522][ T965] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 187.687233][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.694075][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.740058][ T965] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input12 [ 187.761036][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.070351][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.443898][ T965] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 188.719788][ T965] usb 2-1: USB disconnect, device number 2 [ 189.857495][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.863911][ T5803] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.864789][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.249109][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.794435][ T6588] fido_id[6588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 191.926141][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.932536][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.631519][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650767][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.942366][ T6641] Cannot find add_set index 0 as target [ 197.672371][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.054923][ T6649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.204'. [ 204.086257][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.561720][ T6749] Cannot find add_set index 0 as target [ 215.133470][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.107399][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.239'. [ 219.611016][ T6785] macvlan3: entered promiscuous mode [ 222.936603][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 223.226298][ T5850] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.329959][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.459490][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.572864][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.677007][ T5850] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.702830][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 223.712728][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.715919][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 223.728622][ T5850] usb 2-1: Product: syz [ 223.732807][ T6820] netlink: 88 bytes leftover after parsing attributes in process `syz.0.251'. [ 223.734401][ T5850] usb 2-1: Manufacturer: syz [ 223.845535][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.250'. [ 223.976335][ T6822] warning: `syz.2.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 224.046784][ T5850] cdc_wdm 2-1:1.0: skipping garbage [ 224.106701][ T5850] cdc_wdm 2-1:1.0: skipping garbage [ 224.426347][ T5850] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 224.446251][ T5850] cdc_wdm 2-1:1.0: Unknown control protocol [ 224.713711][ T5841] usb 2-1: USB disconnect, device number 3 [ 225.217624][ T6832] macvlan4: entered promiscuous mode [ 227.813755][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 227.822928][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 227.833441][ T6857] netlink: 88 bytes leftover after parsing attributes in process `syz.0.260'. [ 229.430648][ T6871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.262'. [ 231.203546][ T6884] bridge0: entered promiscuous mode [ 231.210515][ T6884] macvlan2: entered promiscuous mode [ 231.872441][ T6894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.267'. [ 233.019335][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 233.066319][ T6905] netlink: 88 bytes leftover after parsing attributes in process `syz.1.270'. [ 234.711262][ T6922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.275'. [ 234.986615][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 238.617174][ T6937] syz.2.278: attempt to access beyond end of device [ 238.617174][ T6937] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 242.035405][ T6965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.284'. [ 247.848328][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.1.295'. [ 248.691754][ T7029] netlink: 88 bytes leftover after parsing attributes in process `syz.1.298'. [ 250.906781][ T7055] netlink: 72 bytes leftover after parsing attributes in process `syz.2.307'. [ 253.979861][ T5841] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 254.936161][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 255.028083][ T5841] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.056292][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.079119][ T5841] usb 3-1: Product: syz [ 255.083348][ T5841] usb 3-1: Manufacturer: syz [ 255.112376][ T5841] usb 3-1: SerialNumber: syz [ 255.171341][ T5841] usb 3-1: config 0 descriptor?? [ 256.016651][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.023019][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.176459][ T5841] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 257.005736][ T7091] netlink: 72 bytes leftover after parsing attributes in process `syz.1.317'. [ 258.534889][ T5841] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 258.546513][ T5841] usb 3-1: USB disconnect, device number 3 [ 258.764163][ T7106] fuse: Bad value for 'fd' [ 262.310557][ T7137] netlink: 72 bytes leftover after parsing attributes in process `syz.0.329'. [ 264.996982][ T7166] tmpfs: Cannot enable quota on remount [ 268.447019][ T7212] (null): rxe_set_mtu: Set mtu to 1024 [ 268.670820][ T7212] wg1 speed is unknown, defaulting to 1000 [ 268.745053][ T7212] wg1 speed is unknown, defaulting to 1000 [ 268.765593][ T7212] wg1 speed is unknown, defaulting to 1000 [ 268.825651][ T7208] pim6reg1: entered allmulticast mode [ 268.835396][ T7208] pim6reg1: left allmulticast mode [ 270.568456][ T7212] infiniband syz0: set active [ 270.602027][ T7212] infiniband syz0: added wg1 [ 270.612122][ T5864] wg1 speed is unknown, defaulting to 1000 [ 270.630902][ T7212] syz0: rxe_create_cq: returned err = -12 [ 270.651806][ T7212] infiniband syz0: Couldn't create ib_mad CQ [ 270.674929][ T7212] infiniband syz0: Couldn't open port 1 [ 270.850990][ T7212] RDS/IB: syz0: added [ 270.855497][ T7212] smc: adding ib device syz0 with port count 1 [ 270.893303][ T7212] smc: ib device syz0 port 1 has pnetid [ 271.100614][ T5884] wg1 speed is unknown, defaulting to 1000 [ 271.324826][ T7212] wg1 speed is unknown, defaulting to 1000 [ 272.545148][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 273.876807][ T7212] wg1 speed is unknown, defaulting to 1000 [ 274.871485][ T7270] netlink: 88 bytes leftover after parsing attributes in process `syz.3.366'. [ 274.913965][ T7212] wg1 speed is unknown, defaulting to 1000 [ 275.418423][ T7276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.368'. [ 276.015835][ T7212] wg1 speed is unknown, defaulting to 1000 [ 282.559210][ T6885] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 282.886239][ T6885] usb 3-1: config index 0 descriptor too short (expected 37924, got 36) [ 283.005513][ T6885] usb 3-1: config 214 has an invalid descriptor of length 68, skipping remainder of the config [ 283.118846][ T6885] usb 3-1: config 214 has 0 interfaces, different from the descriptor's value: 21 [ 283.250261][ T6885] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 284.426597][ T6885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.451866][ T7363] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 285.025679][ T6885] usb 3-1: string descriptor 0 read error: -71 [ 285.052127][ T6885] usb 3-1: USB disconnect, device number 4 [ 290.704886][ T7450] sctp: [Deprecated]: syz.3.420 (pid 7450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.704886][ T7450] Use struct sctp_sack_info instead [ 290.721621][ T7453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 291.373764][ T7443] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.382487][ T7443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.396645][ T7443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.658772][ T7443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.996392][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.360054][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.583484][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.589919][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.423915][ T7570] sctp: [Deprecated]: syz.2.444 (pid 7570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.423915][ T7570] Use struct sctp_sack_info instead [ 302.273820][ T7565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.282181][ T7565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.289919][ T7565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.312862][ T7565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.606259][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.326190][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 304.326497][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.332437][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.016115][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 305.226123][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 305.249017][ T5850] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 305.261225][ T5850] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 305.271124][ T5850] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 305.287759][ T5850] usb 4-1: Product: syz [ 305.301742][ T5850] usb 4-1: Manufacturer: syz [ 305.317863][ T5850] usb 4-1: SerialNumber: syz [ 305.899315][ T5850] usb 4-1: USB disconnect, device number 2 [ 305.935356][ T7615] comedi comedi2: adq12b: a I/O base address must be specified [ 306.474253][ T7625] Cannot find add_set index 0 as target [ 307.523673][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.778013][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.785633][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.818884][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.834267][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.842037][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.849790][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.861238][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.870720][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.916331][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.986451][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 307.996927][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.004392][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.039116][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.048136][ T7636] netlink: 72 bytes leftover after parsing attributes in process `syz.0.464'. [ 308.084831][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.106921][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.146667][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.167113][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 308.183462][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.196295][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.212120][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.220919][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.228425][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.236102][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.243639][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.251343][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.258904][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.293562][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.312674][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.331032][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.348482][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 308.381648][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 309.237160][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 309.244631][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 309.253506][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 309.261312][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 309.278071][ T5841] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz1] on syz0 [ 309.721686][ T7659] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 310.767931][ T7660] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 310.947922][ T7654] fido_id[7654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 312.515748][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 317.456733][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464742][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.964722][ T7717] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 318.326189][ T7725] syz.1.487[7725]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 324.605917][ T7774] netlink: 596 bytes leftover after parsing attributes in process `syz.0.500'. [ 325.198416][ T7792] futex_wake_op: syz.0.504 tries to shift op by 32; fix this program [ 329.056334][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 330.702270][ T27] libceph: connect (1)[c::]:6789 error -101 [ 330.780472][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 331.137492][ T27] libceph: connect (1)[c::]:6789 error -101 [ 331.358518][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 332.839327][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 334.267860][ T7843] ceph: No mds server is up or the cluster is laggy [ 334.337182][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 334.387886][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 334.440716][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 341.561458][ T7922] autofs4:pid:7922:autofs_fill_super: called with bogus options [ 341.585724][ T7922] random: crng reseeded on system resumption [ 341.779376][ T7925] netlink: 104 bytes leftover after parsing attributes in process `syz.0.543'. [ 344.607236][ T7937] Cannot find add_set index 0 as target [ 345.056259][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.826827][ T7972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.459302][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 353.510076][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 353.852502][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 353.926209][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.398671][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 356.677776][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 356.684494][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 357.048204][ T7991] ceph: No mds server is up or the cluster is laggy [ 357.329660][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 358.118974][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 359.471613][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'. [ 362.298904][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 364.481883][ T8062] (null): rxe_set_mtu: Set mtu to 1024 [ 364.493395][ T8062] rdma_rxe: rxe_newlink: failed to add wg1 [ 364.746788][ T8062] pim6reg1: entered allmulticast mode [ 368.651243][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.885039][ T8112] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 375.082009][ T8142] sctp: [Deprecated]: syz.1.601 (pid 8142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.082009][ T8142] Use struct sctp_sack_info instead [ 375.543719][ T8126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.554148][ T8126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.567573][ T8126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.577442][ T8126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.141699][ T8155] netlink: 10 bytes leftover after parsing attributes in process `syz.0.607'. [ 377.622160][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 377.636320][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.642944][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.786066][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 378.979842][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.986598][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.387785][ T8236] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 383.744695][ T8239] bond1: (slave bridge1): making interface the new active one [ 384.006786][ T8239] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 384.146048][ T8256] sctp: [Deprecated]: syz.0.629 (pid 8256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.146048][ T8256] Use struct sctp_sack_info instead [ 385.412344][ T8240] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.427197][ T8240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 385.459280][ T8240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 385.496071][ T8240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 386.256127][ T5803] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.070067][ T8292] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 387.447884][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.526126][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 387.532339][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.458177][ T8351] sctp: [Deprecated]: syz.0.656 (pid 8351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.458177][ T8351] Use struct sctp_sack_info instead [ 395.702804][ T965] libceph: connect (1)[c::]:6789 error -101 [ 395.725103][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 395.980633][ T8380] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 396.009466][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 396.076611][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 396.336064][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.439134][ T8357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 396.453539][ T8357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.482659][ T8357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.493280][ T8357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.646142][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.716585][ T965] libceph: connect (1)[c::]:6789 error -101 [ 396.770142][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 398.166552][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 398.706260][ T8370] ceph: No mds server is up or the cluster is laggy [ 398.854772][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.861207][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 398.867880][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 399.154201][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 399.208202][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 399.214681][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 401.642177][ T965] libceph: connect (1)[c::]:6789 error -101 [ 401.651456][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 401.714141][ T8429] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 401.956458][ T965] libceph: connect (1)[c::]:6789 error -101 [ 401.962750][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 402.574203][ T8436] netlink: 72 bytes leftover after parsing attributes in process `syz.2.679'. [ 402.587527][ T965] libceph: connect (1)[c::]:6789 error -101 [ 402.605572][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 404.167321][ T965] libceph: connect (1)[c::]:6789 error -101 [ 404.187392][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 404.620608][ T8425] ceph: No mds server is up or the cluster is laggy [ 405.924609][ T8470] netlink: 'syz.2.689': attribute type 5 has an invalid length. [ 406.679998][ T8478] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 407.164999][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 407.189685][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 407.468715][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 407.518660][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 408.057228][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 408.065393][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 408.576139][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.126533][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 409.388383][ T8504] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 409.516688][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 410.117289][ T8487] ceph: No mds server is up or the cluster is laggy [ 410.780924][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.700'. [ 412.450090][ T8554] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 412.477812][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 412.502984][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 412.922622][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 412.959504][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 413.496530][ T965] libceph: connect (1)[c::]:6789 error -101 [ 413.504012][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 413.512417][ T8568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 415.206868][ T965] libceph: connect (1)[c::]:6789 error -101 [ 415.213077][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 415.407221][ T8553] ceph: No mds server is up or the cluster is laggy [ 415.692864][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'. [ 417.161725][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'. [ 419.183357][ T8637] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 421.360873][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 424.193851][ T8695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.741'. [ 424.733973][ T8705] lo: entered promiscuous mode [ 424.744493][ T8705] tunl0: entered promiscuous mode [ 424.767897][ T8705] gre0: entered promiscuous mode [ 424.774136][ T8705] gretap0: entered promiscuous mode [ 424.797276][ T8705] erspan0: entered promiscuous mode [ 424.827682][ T8705] ip_vti0: entered promiscuous mode [ 424.857224][ T8705] ip6_vti0: entered promiscuous mode [ 424.888534][ T8705] sit0: entered promiscuous mode [ 424.909179][ T8705] ip6tnl0: entered promiscuous mode [ 424.917070][ T8705] ip6gre0: entered promiscuous mode [ 424.923586][ T8705] syz_tun: entered promiscuous mode [ 424.931115][ T8705] ip6gretap0: entered promiscuous mode [ 424.939126][ T8705] vcan0: entered promiscuous mode [ 424.944814][ T8705] bond0: entered promiscuous mode [ 424.955684][ T8705] bond_slave_0: entered promiscuous mode [ 424.978903][ T8705] bond_slave_1: entered promiscuous mode [ 424.992935][ T8705] team0: entered promiscuous mode [ 424.999609][ T8705] team_slave_0: entered promiscuous mode [ 425.010418][ T8705] team_slave_1: entered promiscuous mode [ 425.024157][ T8705] dummy0: entered promiscuous mode [ 425.035690][ T8705] nlmon0: entered promiscuous mode [ 425.075731][ T8721] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 425.085076][ T8705] caif0: entered promiscuous mode [ 425.092952][ T8705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.430586][ T8734] (null): rxe_set_mtu: Set mtu to 1024 [ 426.456057][ T8734] rdma_rxe: rxe_newlink: failed to add wg1 [ 426.465199][ T8734] pim6reg1: entered allmulticast mode [ 426.487597][ T8734] pim6reg1: left allmulticast mode [ 427.709777][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 428.327727][ T8754] input: syz1 as /devices/virtual/input/input13 [ 428.991769][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.762'. [ 430.015343][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 431.247809][ T8809] netlink: 88 bytes leftover after parsing attributes in process `syz.1.768'. [ 431.262437][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 431.606339][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.763769][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'. [ 434.459192][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 434.824208][ T8844] netlink: 88 bytes leftover after parsing attributes in process `syz.1.777'. [ 434.851703][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 434.896928][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.923147][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 437.289627][ T8883] netlink: 88 bytes leftover after parsing attributes in process `syz.1.788'. [ 437.902707][ T8876] comedi comedi0: dt2815: I/O port conflict (0xef,2) [ 438.324338][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 440.010182][ T8389] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.331042][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.337764][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.973226][ T8925] input: syz1 as /devices/virtual/input/input14 [ 442.153265][ T8944] netlink: 72 bytes leftover after parsing attributes in process `syz.0.803'. [ 445.207211][ T8983] netlink: 72 bytes leftover after parsing attributes in process `syz.1.814'. [ 448.349588][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 450.006156][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 452.256592][ T6885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 452.449866][ T6885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.561772][ T6885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.599017][ T6885] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.677130][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 453.428703][ T6885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 453.437173][ T6885] usb 2-1: SerialNumber: syz [ 454.120024][ T6885] usb 2-1: 0:2 : does not exist [ 454.161700][ T6885] usb 2-1: USB disconnect, device number 4 [ 454.289400][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.406124][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.646090][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 459.881012][ T5850] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.894719][ T9108] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 459.925743][ T5850] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 459.957780][ T5850] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.980880][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 460.014011][ T5850] usb 4-1: Product: syz [ 460.040457][ T9099] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 460.054838][ T5850] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 461.516453][ T965] usb 4-1: USB disconnect, device number 3 [ 466.384546][ T9138] netlink: 72 bytes leftover after parsing attributes in process `syz.2.873'. [ 470.197748][ T9181] netlink: 72 bytes leftover after parsing attributes in process `syz.3.884'. [ 471.817413][ T9204] (null): rxe_set_mtu: Set mtu to 1024 [ 471.823969][ T9204] rdma_rxe: rxe_newlink: failed to add wg1 [ 471.889419][ T9204] pim6reg1: entered allmulticast mode [ 471.930863][ T9204] pim6reg1: left allmulticast mode [ 475.262762][ T9241] (null): rxe_set_mtu: Set mtu to 1024 [ 475.269496][ T9241] rdma_rxe: rxe_newlink: failed to add wg1 [ 475.396507][ T9241] pim6reg1: entered allmulticast mode [ 475.459643][ T9241] pim6reg1: left allmulticast mode [ 476.804691][ T9263] netlink: 72 bytes leftover after parsing attributes in process `syz.2.906'. [ 479.248581][ T9268] sctp: [Deprecated]: syz.0.904 (pid 9268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.248581][ T9268] Use struct sctp_sack_info instead [ 479.970127][ T9262] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 480.080662][ T9262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.132305][ T9262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.169777][ T9262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 482.016290][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 482.396245][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 482.402496][ T8389] Bluetooth: hci2: command 0x0c1a tx timeout [ 482.408702][ T5803] Bluetooth: hci3: command 0x0c1a tx timeout [ 486.056325][ T9330] netlink: 72 bytes leftover after parsing attributes in process `syz.0.915'. [ 486.959033][ T9340] ALSA: mixer_oss: invalid OSS volume '' [ 487.237158][ T9343] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 488.903344][ T9368] sctp: [Deprecated]: syz.2.923 (pid 9368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.903344][ T9368] Use struct sctp_sack_info instead [ 490.886035][ T8389] Bluetooth: hci3: command 0x0c1a tx timeout [ 491.136052][ T8389] Bluetooth: hci0: command 0x0c1a tx timeout [ 491.142289][ T9359] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 491.430654][ T9359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.437060][ T9359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.483146][ T9359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 492.960442][ T9397] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 493.446267][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.452447][ T8389] Bluetooth: hci2: command 0x0c1a tx timeout [ 493.526282][ T8389] Bluetooth: hci3: command 0x0c1a tx timeout [ 494.108736][ T9405] (null): rxe_set_mtu: Set mtu to 1024 [ 494.114469][ T9405] rdma_rxe: rxe_newlink: failed to add wg1 [ 494.123460][ T9405] pim6reg1: entered allmulticast mode [ 494.130892][ T9405] pim6reg1: left allmulticast mode [ 498.699424][ T9439] sctp: [Deprecated]: syz.2.940 (pid 9439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.699424][ T9439] Use struct sctp_sack_info instead [ 501.197530][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 501.203970][ T9434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.259352][ T9434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.265618][ T9434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.271837][ T9434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.781301][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.787724][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.251809][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 503.368495][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 503.374716][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 503.381097][ T8389] Bluetooth: hci3: command 0x0c1a tx timeout [ 510.570641][ T9523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.967'. [ 512.882252][ T9545] Bluetooth: MGMT ver 1.22 [ 515.036311][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 515.046166][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.020988][ T9592] dlm: no local IP address has been set [ 521.053187][ T9592] dlm: cannot start dlm midcomms -107 [ 524.271852][ T9612] syz0: rxe_newlink: already configured on wg1 [ 524.798251][ T9611] pim6reg1: entered allmulticast mode [ 524.804345][ T9611] pim6reg1: left allmulticast mode [ 527.768774][ T9648] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 533.977232][ T5702] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 534.221817][ T5702] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.432051][ T5702] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 534.813782][ T5702] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.923164][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 534.932146][ T5702] usb 3-1: Product: syz [ 534.940445][ T9700] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.957176][ T5702] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 536.442747][ T5833] usb 3-1: USB disconnect, device number 5 [ 537.278748][ T9735] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 541.044670][ T9761] (null): rxe_set_mtu: Set mtu to 1024 [ 541.051669][ T9761] rdma_rxe: rxe_newlink: failed to add wg1 [ 541.099109][ T9761] pim6reg1: entered allmulticast mode [ 541.105995][ T9761] pim6reg1: left allmulticast mode [ 543.066789][ T9795] netlink: 'syz.1.1040': attribute type 1 has an invalid length. [ 543.387668][ T9797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.050237][ T9846] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 547.726838][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.746123][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.797218][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.804692][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.957165][ T9871] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1062'. [ 551.966386][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 551.975398][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 552.111174][ T9886] input: syz1 as /devices/virtual/input/input15 [ 553.133005][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 554.806073][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 554.921314][ T5864] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 554.993752][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.058839][ T5864] usb 4-1: Product: syz [ 555.063284][ T5864] usb 4-1: Manufacturer: syz [ 555.068382][ T5864] usb 4-1: SerialNumber: syz [ 555.100805][ T5864] usb 4-1: config 0 descriptor?? [ 555.214516][ T9904] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 555.310720][ T5864] usb 4-1: can't set config #0, error -71 [ 555.337341][ T5864] usb 4-1: USB disconnect, device number 4 [ 560.271396][ T9939] netlink: set zone limit has 8 unknown bytes [ 561.097796][ T9941] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 563.222391][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.229313][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.878553][ T9993] sctp: [Deprecated]: syz.0.1095 (pid 9993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.878553][ T9993] Use struct sctp_sack_info instead [ 571.331585][ T9985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.846948][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 573.824830][ T9985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.834548][ T9985] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.841203][ T9985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.886031][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 575.933310][ T5798] Bluetooth: hci3: command 0x0c1a tx timeout [ 575.939656][ T8389] Bluetooth: hci2: command 0x0c1a tx timeout [ 575.939686][ T5803] Bluetooth: hci1: command 0x0c1a tx timeout [ 578.464778][ T9978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.578599][T10068] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 585.003203][T10096] x_tables: ip_tables: osf match: only valid for protocol 6 [ 585.798284][T10096] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 589.596495][T10118] input: syz1 as /devices/virtual/input/input16 [ 589.766151][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 590.001695][ T5850] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 590.012964][ T5850] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 590.027483][ T5850] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 590.037242][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 590.045444][ T5850] usb 2-1: Product: syz [ 590.071754][T10114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.081843][ T5850] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 590.440185][T10100] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 590.706132][T10100] usb 4-1: Using ep0 maxpacket: 8 [ 590.980930][T10100] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 590.990298][T10100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.006638][T10100] usb 4-1: Product: syz [ 591.018009][T10100] usb 4-1: Manufacturer: syz [ 591.063308][T10100] usb 4-1: SerialNumber: syz [ 591.149509][ T8] usb 2-1: USB disconnect, device number 5 [ 593.214734][T10100] usb 4-1: config 0 descriptor?? [ 593.382189][T10100] usb 4-1: can't set config #0, error -71 [ 593.444377][T10100] usb 4-1: USB disconnect, device number 5 [ 595.336240][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.527464][T10160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.838756][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.866093][T10160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.945685][T10172] block nbd3: shutting down sockets [ 596.796015][T10181] can0: slcan on ptm0. [ 597.726661][T10175] can0 (unregistered): slcan off ptm0. [ 597.875320][T10189] input: syz1 as /devices/virtual/input/input17 [ 598.237533][T10199] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.196447][T10100] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 599.395993][T10100] usb 2-1: Using ep0 maxpacket: 8 [ 600.129046][T10100] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 600.141367][T10100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.158747][T10100] usb 2-1: Product: syz [ 600.165329][T10100] usb 2-1: Manufacturer: syz [ 600.174481][T10100] usb 2-1: SerialNumber: syz [ 600.250086][T10100] usb 2-1: config 0 descriptor?? [ 600.283458][T10100] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 600.339677][T10100] usb 2-1: setting power ON [ 600.514801][T10100] dvb-usb: bulk message failed: -22 (2/0) [ 600.808990][T10100] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 600.835475][T10100] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 601.064906][T10100] usb 2-1: media controller created [ 601.089590][T10100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.546219][T10100] usb 2-1: selecting invalid altsetting 6 [ 601.552617][T10100] usb 2-1: digital interface selection failed (-22) [ 601.565203][T10100] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 601.593943][T10100] usb 2-1: setting power OFF [ 601.615846][T10100] dvb-usb: bulk message failed: -22 (2/0) [ 601.641326][T10100] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 601.713833][T10100] (NULL device *): no alternate interface [ 602.839645][T10100] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 602.909424][T10100] usb 2-1: USB disconnect, device number 6 [ 606.678747][ T5702] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 606.986067][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 607.038053][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 607.048877][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 607.060070][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 607.136089][ T5702] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 607.156211][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.164449][ T5702] usb 4-1: Product: syz [ 607.168822][ T5702] usb 4-1: Manufacturer: syz [ 607.174718][ T5702] usb 4-1: SerialNumber: syz [ 607.203693][ T5702] usb 4-1: config 0 descriptor?? [ 607.386213][T10287] input: syz1 as /devices/virtual/input/input18 [ 608.741236][ T5833] usb 4-1: USB disconnect, device number 6 [ 608.886502][ T5702] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 609.106354][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 609.202045][ T5702] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 609.224003][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.267886][ T5702] usb 2-1: Product: syz [ 609.278547][ T5702] usb 2-1: Manufacturer: syz [ 609.296984][ T5702] usb 2-1: SerialNumber: syz [ 609.338332][ T5702] usb 2-1: config 0 descriptor?? [ 609.368770][ T5702] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 609.508295][ T5702] usb 2-1: setting power ON [ 609.512909][ T5702] dvb-usb: bulk message failed: -22 (2/0) [ 609.592753][ T5702] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.617999][ T5702] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 609.631214][ T5702] usb 2-1: media controller created [ 610.538861][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.582452][ T5702] usb 2-1: selecting invalid altsetting 6 [ 610.588634][ T5702] usb 2-1: digital interface selection failed (-22) [ 610.595362][ T5702] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 610.608109][ T5702] usb 2-1: setting power OFF [ 610.612817][ T5702] dvb-usb: bulk message failed: -22 (2/0) [ 610.625126][ T5702] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 610.643933][ T5702] (NULL device *): no alternate interface [ 610.680112][ T5702] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 610.747870][ T5702] usb 2-1: USB disconnect, device number 7 [ 612.276930][ T28] audit: type=1326 audit(1752855824.248:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 612.427375][ T28] audit: type=1326 audit(1752855824.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 612.566858][ T28] audit: type=1326 audit(1752855824.278:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 612.699884][ T28] audit: type=1326 audit(1752855824.278:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 613.310930][ T28] audit: type=1326 audit(1752855824.288:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 613.383484][ T28] audit: type=1326 audit(1752855824.288:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 615.547336][ T28] audit: type=1326 audit(1752855824.288:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 615.570526][ T28] audit: type=1326 audit(1752855824.318:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 615.593237][ T28] audit: type=1326 audit(1752855824.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 615.620309][ T28] audit: type=1326 audit(1752855824.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10329 comm="syz.3.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 618.445910][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 618.445998][ T28] audit: type=1326 audit(1752855830.398:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.756113][ T28] audit: type=1326 audit(1752855830.398:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.784121][ T28] audit: type=1326 audit(1752855830.458:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.822786][ T28] audit: type=1326 audit(1752855830.458:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.845578][ T28] audit: type=1326 audit(1752855830.458:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.869877][ T28] audit: type=1326 audit(1752855830.468:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.896561][ T28] audit: type=1326 audit(1752855830.468:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.921967][ T28] audit: type=1326 audit(1752855830.478:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 618.945266][ T28] audit: type=1326 audit(1752855830.478:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 619.206702][ T28] audit: type=1326 audit(1752855830.478:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 623.980882][T10425] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1188'. [ 624.694588][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.776153][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.506855][T10457] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1197'. [ 638.332716][T10507] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1210'. [ 638.351912][ T27] libceph: connect (1)[c::]:6789 error -101 [ 638.404740][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 638.718835][ T27] libceph: connect (1)[c::]:6789 error -101 [ 638.725675][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 638.990076][T10500] ceph: No mds server is up or the cluster is laggy [ 639.780691][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 640.365392][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1212'. [ 643.464395][T10548] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1219'. [ 651.846248][T10623] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1239'. [ 665.914937][T10718] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 665.921537][T10718] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.938093][T10718] vhci_hcd vhci_hcd.0: Device attached [ 666.216450][ T5833] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 666.236112][ T5850] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 666.689319][ T5850] usb 4-1: config 0 has no interfaces? [ 666.715440][ T5850] usb 4-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 666.761528][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.792566][ T5850] usb 4-1: config 0 descriptor?? [ 667.276496][ T5833] usb 39-1: device descriptor read/64, error -71 [ 668.028366][T10100] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 668.220194][T10100] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.247580][T10100] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 668.274113][T10100] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.302932][T10100] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 668.322938][T10100] usb 3-1: Product: syz [ 668.340311][T10734] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 668.360976][T10100] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 668.566607][ T5833] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 669.260231][T10100] usb 4-1: USB disconnect, device number 7 [ 669.272949][T10719] vhci_hcd: connection closed [ 669.310186][ T48] vhci_hcd: stop threads [ 669.387672][ T48] vhci_hcd: release socket [ 669.450525][ T48] vhci_hcd: disconnect device [ 669.518117][ T5850] usb 3-1: USB disconnect, device number 6 [ 674.346430][ T5833] vhci_hcd: vhci_device speed not set [ 675.716312][ T6885] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 676.427722][ T6885] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.440383][ T6885] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 676.452056][ T6885] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 676.462918][ T6885] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 676.495070][ T6885] usb 2-1: Product: syz [ 676.521208][T10810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 676.532326][ T6885] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 678.045317][ T5864] usb 2-1: USB disconnect, device number 8 [ 686.846264][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.976698][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.649231][ T6885] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 690.569831][ T6885] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 690.583516][ T6885] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 690.600542][ T6885] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 690.610542][ T6885] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 690.614896][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 690.614916][ T28] audit: type=1326 audit(1752855902.588:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 690.618936][ T6885] usb 2-1: Product: syz [ 690.645387][ T28] audit: type=1326 audit(1752855902.598:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 690.651275][T10888] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 690.681973][ T28] audit: type=1326 audit(1752855902.598:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 690.689857][ T6885] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 690.766358][ T28] audit: type=1326 audit(1752855902.598:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 690.824954][ T28] audit: type=1326 audit(1752855902.598:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 690.918145][ T28] audit: type=1326 audit(1752855902.598:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 691.157447][T10905] overlayfs: failed to resolve './file1': -2 [ 691.163770][ T28] audit: type=1326 audit(1752855902.598:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 691.612690][ T28] audit: type=1326 audit(1752855902.598:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 691.667227][ T28] audit: type=1326 audit(1752855902.598:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 691.718965][ T28] audit: type=1326 audit(1752855902.598:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaa378e9a9 code=0x7ffc0000 [ 692.165690][ T5864] usb 2-1: USB disconnect, device number 9 [ 697.542704][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 699.803540][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 699.803598][ T28] audit: type=1326 audit(1752855911.778:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 699.833732][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 699.919394][ T28] audit: type=1326 audit(1752855911.778:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 699.977153][ T28] audit: type=1326 audit(1752855911.798:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 700.014483][ T28] audit: type=1326 audit(1752855911.798:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 700.094933][ T28] audit: type=1326 audit(1752855911.798:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 700.120600][ T5702] libceph: connect (1)[c::]:6789 error -101 [ 700.128169][ T5702] libceph: mon0 (1)[c::]:6789 connect error [ 700.137081][ T28] audit: type=1326 audit(1752855911.798:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 700.160661][ T28] audit: type=1326 audit(1752855911.798:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10941 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e818e9a9 code=0x7ffc0000 [ 700.638057][T10946] ceph: No mds server is up or the cluster is laggy [ 701.008695][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 701.771354][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 703.518801][T10970] (null): rxe_set_mtu: Set mtu to 1024 [ 703.527740][T10970] rdma_rxe: rxe_newlink: failed to add wg1 [ 704.478155][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 708.848268][T10100] libceph: connect (1)[c::]:6789 error -101 [ 708.859019][T10100] libceph: mon0 (1)[c::]:6789 connect error [ 708.909526][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.923776][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.933977][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.942845][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.952669][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 708.969332][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.026583][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 709.039683][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 709.049170][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 709.062200][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 709.076750][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 709.233626][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 709.240257][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 709.283037][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 710.022008][ T8] libceph: connect (1)[c::]:6789 error -101 [ 710.028210][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 710.179135][T11011] wg1 speed is unknown, defaulting to 1000 [ 712.225857][ C1] sched: RT throttling activated [ 712.226540][T11007] ceph: No mds server is up or the cluster is laggy [ 712.238461][ T5798] Bluetooth: hci4: command tx timeout [ 712.256410][T10100] libceph: connect (1)[c::]:6789 error -101 [ 712.280630][T10100] libceph: mon0 (1)[c::]:6789 connect error [ 712.404751][T10100] libceph: connect (1)[c::]:6789 error -101 [ 712.415167][T10100] libceph: mon0 (1)[c::]:6789 connect error [ 713.913981][ T3450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.144322][T11011] chnl_net:caif_netlink_parms(): no params data found [ 714.246130][ T5798] Bluetooth: hci4: command tx timeout [ 714.961445][ T3450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.308283][ T3450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.336027][ T5798] Bluetooth: hci4: command tx timeout [ 717.172448][T11011] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.246791][T11011] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.254253][T11011] bridge_slave_0: entered allmulticast mode [ 717.261660][T11011] bridge_slave_0: entered promiscuous mode [ 717.275177][T11011] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.297648][T11011] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.304971][T11011] bridge_slave_1: entered allmulticast mode [ 717.345462][T11011] bridge_slave_1: entered promiscuous mode [ 718.157505][T11011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.969045][ T5798] Bluetooth: hci4: command tx timeout [ 719.090453][T11011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.419089][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 719.425358][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 719.500971][T11011] team0: Port device team_slave_0 added [ 719.535294][T11011] team0: Port device team_slave_1 added [ 719.717007][T10100] libceph: connect (1)[c::]:6789 error -101 [ 719.723083][T10100] libceph: mon0 (1)[c::]:6789 connect error [ 719.772197][T11011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.780275][T11011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.812448][T11011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.877018][T11011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.893919][T11011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.925225][T11011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.287734][ T8] libceph: connect (1)[c::]:6789 error -101 [ 720.296350][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 720.384388][T11011] hsr_slave_0: entered promiscuous mode [ 720.411052][T11011] hsr_slave_1: entered promiscuous mode [ 720.444470][T11011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.454479][T11011] Cannot create hsr debugfs directory [ 721.206720][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 721.212917][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 721.539249][T11098] syz.3.1346: attempt to access beyond end of device [ 721.539249][T11098] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 721.831262][T11099] wg1 speed is unknown, defaulting to 1000 [ 722.160012][T11077] ceph: No mds server is up or the cluster is laggy [ 722.284870][T11011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 722.323100][T11011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 722.375266][T11011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 722.444548][T11011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 724.586897][T11011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.663012][T11011] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.798440][ T3450] hsr_slave_0: left promiscuous mode [ 724.866250][ T3450] hsr_slave_1: left promiscuous mode [ 724.915403][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.939044][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.948068][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.956713][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.970680][ T3450] bridge_slave_1: left allmulticast mode [ 724.976824][ T3450] bridge_slave_1: left promiscuous mode [ 724.985148][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.000003][ T3450] bridge_slave_0: left allmulticast mode [ 725.005738][ T3450] bridge_slave_0: left promiscuous mode [ 725.011691][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.095509][ T3450] bridge0: left promiscuous mode [ 725.123102][ T3450] veth1_macvtap: left promiscuous mode [ 725.130445][ T3450] veth0_macvtap: left promiscuous mode [ 725.152528][ T3450] veth1_vlan: left promiscuous mode [ 725.215559][ T3450] veth0_vlan: left promiscuous mode [ 727.336996][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 727.469066][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 727.613800][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.765761][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.696131][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 729.905460][ T3450] bond0 (unregistering): Released all slaves [ 729.916764][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 729.945464][ T5850] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 729.955214][ T5850] usb 2-1: config 254 has no interface number 0 [ 729.967807][ T5850] usb 2-1: config 254 interface 235 altsetting 2 has an invalid endpoint with address 0xFF, skipping [ 729.979420][ T5850] usb 2-1: config 254 interface 235 has no altsetting 0 [ 730.004664][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 730.014987][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.023489][ T5850] usb 2-1: Product: syz [ 730.028329][ T5850] usb 2-1: Manufacturer: syz [ 730.033128][ T5850] usb 2-1: SerialNumber: syz [ 730.115855][ T5850] usbtest 2-1:254.235: couldn't get endpoints, -22 [ 730.146570][ T5850] usbtest: probe of 2-1:254.235 failed with error -22 [ 730.349203][ T5864] usb 2-1: USB disconnect, device number 10 [ 730.498488][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.505696][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.612263][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.619567][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.778633][T11011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.956083][T10100] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 733.139553][T10100] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 733.163251][T10100] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 733.174391][T10100] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 733.186870][T10100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.227578][T10100] pcwd_usb: The device isn't a Human Interface Device [ 734.668560][ T5833] usb 2-1: USB disconnect, device number 11 [ 734.703262][T11011] veth0_vlan: entered promiscuous mode [ 734.719902][T11011] veth1_vlan: entered promiscuous mode [ 735.403473][T11011] veth0_macvtap: entered promiscuous mode [ 735.458858][T11011] veth1_macvtap: entered promiscuous mode [ 735.545243][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.580370][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.646810][T11011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.827677][T11011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.888194][T11011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.922843][T11011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.967699][T11011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.058263][T11011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.068675][T11011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.151957][T11011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.408783][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.438008][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.799499][T11250] syz.0.1374: attempt to access beyond end of device [ 738.799499][T11250] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 738.887530][T11252] wg1 speed is unknown, defaulting to 1000 [ 738.963439][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.999090][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.036120][T11262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1376'. [ 739.215459][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 739.300766][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 739.354272][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 739.355728][T11266] ceph: No mds server is up or the cluster is laggy [ 739.367991][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 739.639846][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 739.647176][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 741.912869][T11295] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 742.062384][T11301] 9pnet_virtio: no channels available for device syz [ 747.554832][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.562000][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.517264][ T8] libceph: connect (1)[c::]:6789 error -101 [ 748.523315][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 748.822833][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 748.958941][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 749.251208][T11330] ceph: No mds server is up or the cluster is laggy [ 749.628016][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 749.696922][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 753.676037][T11378] syz.1.1398: attempt to access beyond end of device [ 753.676037][T11378] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 754.517470][T11390] wg1 speed is unknown, defaulting to 1000 [ 754.574560][T11400] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 756.628962][T10100] libceph: connect (1)[c::]:6789 error -101 [ 756.635197][T10100] libceph: mon0 (1)[c::]:6789 connect error [ 757.204523][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 757.232899][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 757.509240][T11413] ceph: No mds server is up or the cluster is laggy [ 757.770395][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 758.276086][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 762.529874][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 762.836002][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 763.603907][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 763.619676][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 763.929059][T11461] ceph: No mds server is up or the cluster is laggy [ 764.415137][T11480] syz.4.1418: attempt to access beyond end of device [ 764.415137][T11480] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 764.467400][T11490] wg1 speed is unknown, defaulting to 1000 [ 765.861377][T11522] tmpfs: Bad value for 'mpol' [ 767.400200][T11544] (null): rxe_set_mtu: Set mtu to 1024 [ 767.482951][T11544] rdma_rxe: rxe_newlink: failed to add wg1 [ 768.709364][T11562] input: syz1 as /devices/virtual/input/input19 [ 769.157627][T11557] input: syz1 as /devices/virtual/input/input20 [ 770.046033][T11590] set match dimension is over the limit! [ 770.574142][T11596] input: syz1 as /devices/virtual/input/input21 [ 775.558819][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 775.564930][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 775.859948][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 775.877003][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 776.030940][T11663] ceph: No mds server is up or the cluster is laggy [ 776.449136][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 776.455297][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 779.267434][T11712] (null): rxe_set_mtu: Set mtu to 1024 [ 779.344851][T11712] rdma_rxe: rxe_newlink: failed to add wg1 [ 779.976895][T11711] pim6reg1: entered allmulticast mode [ 779.982857][T11711] pim6reg1: left allmulticast mode [ 780.308246][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 780.324643][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 780.535667][T11722] ceph: No mds server is up or the cluster is laggy [ 780.610659][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 780.637034][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 784.325657][T11739] vivid-008: kernel_thread() failed [ 784.749209][T11745] syz.0.1476 uses old SIOCAX25GETINFO [ 788.103627][T11780] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 793.506480][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 793.545582][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 793.571098][T11829] ceph: No mds server is up or the cluster is laggy [ 793.909940][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 793.950779][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 797.516107][ T5850] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 797.880421][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.998415][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.011523][ T5850] usb 2-1: string descriptor 0 read error: -22 [ 798.128538][ T5850] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.139433][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.181841][ T5850] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 798.210518][ T5850] usb 2-1: MIDIStreaming interface descriptor not found [ 798.868054][T11905] fuse: Bad value for 'fd' [ 800.386039][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 800.441061][ T5849] usb 2-1: USB disconnect, device number 12 [ 800.622633][ T5850] usb 5-1: config 241 has an invalid interface number: 0 but max is -1 [ 800.674926][ T5850] usb 5-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 800.723010][ T5850] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 800.844960][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.880687][ T5850] pcwd_usb: This driver only supports 1 device [ 802.483301][T11945] netlink: 'syz.3.1521': attribute type 4 has an invalid length. [ 802.506273][ T5864] usb 5-1: USB disconnect, device number 2 [ 802.573056][T11947] can: request_module (can-proto-0) failed. [ 808.971165][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.977907][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.166412][ T5850] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 809.406795][ T5850] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 809.426229][ T5850] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 809.443537][ T5850] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 809.457377][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 809.465640][ T5850] usb 2-1: Product: syz [ 809.515473][T12020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 809.584623][ T5850] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 810.609739][ T6885] usb 2-1: USB disconnect, device number 13 [ 811.589276][ T6885] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 812.026195][ T6885] usb 4-1: Using ep0 maxpacket: 16 [ 812.122324][ T6885] usb 4-1: config 0 has no interfaces? [ 812.148126][ T6885] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 812.169521][ T6885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.406077][ T6885] usb 4-1: Product: syz [ 812.410488][ T6885] usb 4-1: Manufacturer: syz [ 812.415129][ T6885] usb 4-1: SerialNumber: syz [ 812.429701][ T6885] usb 4-1: config 0 descriptor?? [ 812.676721][T12040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.708566][T12040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.816302][ T5864] usb 4-1: USB disconnect, device number 8 [ 815.290834][T12091] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 822.456741][T12173] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1567'. [ 824.366080][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 824.811545][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.848199][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 824.883277][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.903305][ T8] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 824.925823][ T8] usb 2-1: Product: syz [ 824.971877][T12191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 825.042768][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 825.397520][T12203] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1578'. [ 829.851503][T12239] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1589'. [ 830.605330][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 830.627654][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 831.117088][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 833.166353][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 834.167486][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 834.173554][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 834.267146][T12243] ceph: No mds server is up or the cluster is laggy [ 835.975490][ T5850] usb 2-1: USB disconnect, device number 14 [ 836.653344][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 837.793811][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.803862][ T8] libceph: connect (1)[c::]:6789 error -101 [ 837.827355][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 837.842049][T12287] bond0: (slave rose0): Enslaving as an active interface with an up link [ 838.368716][ T8] libceph: connect (1)[c::]:6789 error -101 [ 838.718721][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 839.226385][ T8] libceph: connect (1)[c::]:6789 error -101 [ 839.757354][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 840.055930][ T6885] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 840.350649][ T6885] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 840.362052][ T6885] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 841.034174][ T6885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 841.055832][ T6885] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 841.064017][ T6885] usb 4-1: Product: syz [ 841.101838][T12312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 841.228758][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 841.235002][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 841.271986][ T6885] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 841.291500][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 841.302362][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 841.548322][T12331] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 841.586324][ T6885] libceph: connect (1)[c::]:6789 error -101 [ 841.595008][ T6885] libceph: mon0 (1)[c::]:6789 connect error [ 841.628519][T12293] ceph: No mds server is up or the cluster is laggy [ 847.103759][T12387] xt_nfacct: accounting object `syz1' does not exists [ 849.301950][ T5849] usb 4-1: USB disconnect, device number 9 [ 852.736827][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 852.989836][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 853.059931][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 853.213955][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 853.273390][ T8] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 853.293454][ T8] usb 4-1: Product: syz [ 853.344330][T12452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 853.375501][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 858.334734][ T5849] usb 4-1: USB disconnect, device number 10 [ 861.805008][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 861.819474][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 861.867650][T12561] ceph: No mds server is up or the cluster is laggy [ 864.939438][ T8] libceph: connect (1)[c::]:6789 error -101 [ 864.968181][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 865.000393][T12599] ceph: No mds server is up or the cluster is laggy [ 865.007699][ T8] libceph: connect (1)[c::]:6789 error -101 [ 865.038883][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 865.416476][T12608] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 868.113741][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 868.196844][T12632] ceph: No mds server is up or the cluster is laggy [ 868.206287][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 870.416470][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.423013][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.463913][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 870.474308][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 870.509178][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 870.518023][ T5849] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 870.584767][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 871.095445][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 871.101626][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 871.128295][T12663] ceph: No mds server is up or the cluster is laggy [ 871.199373][ T5849] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 871.226991][ T5849] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 871.258170][ T5849] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 871.289897][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 871.328431][ T5849] usb 4-1: Product: syz [ 871.348201][T12659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 871.369462][ T5849] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 873.856713][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 873.885389][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 873.973845][T12707] ceph: No mds server is up or the cluster is laggy [ 874.310327][ T5865] usb 4-1: USB disconnect, device number 11 [ 877.106870][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 877.113098][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 877.124709][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 877.140669][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 877.264045][T12744] ceph: No mds server is up or the cluster is laggy [ 877.585848][ T5865] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 877.798338][ T5865] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 877.821133][ T5865] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 877.855133][ T5865] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 877.867504][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 877.898583][ T5865] usb 4-1: Product: syz [ 877.926784][T12752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 877.976320][ T5865] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 879.946927][T12781] lo: entered promiscuous mode [ 879.955346][T12781] tunl0: entered promiscuous mode [ 879.961773][T12781] gre0: entered promiscuous mode [ 879.969536][T12781] gretap0: entered promiscuous mode [ 879.984480][T12781] erspan0: entered promiscuous mode [ 880.011269][T12781] ip_vti0: entered promiscuous mode [ 880.051449][T12781] ip6_vti0: entered promiscuous mode [ 880.126767][T12781] sit0: entered promiscuous mode [ 880.176247][T12781] ip6tnl0: entered promiscuous mode [ 880.233722][T12781] ip6gre0: entered promiscuous mode [ 880.282812][T12781] ip6gretap0: entered promiscuous mode [ 880.389736][T12781] bridge0: entered promiscuous mode [ 880.412652][T12781] vcan0: entered promiscuous mode [ 880.443553][T12781] bond0: entered promiscuous mode [ 880.495042][T12781] bond_slave_0: entered promiscuous mode [ 880.534716][ T5849] usb 4-1: USB disconnect, device number 12 [ 880.632804][T12781] bond_slave_1: entered promiscuous mode [ 880.692515][T12781] team0: entered promiscuous mode [ 880.737916][T12781] team_slave_0: entered promiscuous mode [ 880.751617][T12781] team_slave_1: entered promiscuous mode [ 880.891987][T12781] dummy0: entered promiscuous mode [ 880.967612][T12781] nlmon0: entered promiscuous mode [ 881.007053][T12781] caif0: entered promiscuous mode [ 881.017912][T12781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.119759][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 881.136980][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 881.224393][T12791] ceph: No mds server is up or the cluster is laggy [ 884.576062][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 884.778258][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 885.615899][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 885.627909][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 885.637166][ T8] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 885.645348][ T8] usb 2-1: Product: syz [ 885.655562][T12814] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 885.714466][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 888.601357][ T8] libceph: connect (1)[c::]:6789 error -101 [ 888.618859][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 888.745155][T12844] ceph: No mds server is up or the cluster is laggy [ 892.610586][T12871] infiniband syz0: set active [ 892.666592][ T5865] usb 2-1: USB disconnect, device number 15 [ 892.700745][T12871] bridge_slave_0: left allmulticast mode [ 892.734647][T12871] bridge_slave_0: left promiscuous mode [ 892.761583][T12871] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.804662][T12871] bridge_slave_1: left allmulticast mode [ 892.829661][T12871] bridge_slave_1: left promiscuous mode [ 892.841345][T12871] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.902512][T12871] bond0: (slave bond_slave_0): Releasing backup interface [ 892.935491][T12871] bond_slave_0: left promiscuous mode [ 892.972864][T12871] bond0: (slave bond_slave_1): Releasing backup interface [ 892.998748][T12871] bond_slave_1: left promiscuous mode [ 893.030961][T12871] team_slave_0: left promiscuous mode [ 893.091461][T12871] team0: Port device team_slave_0 removed [ 893.100850][T12871] team_slave_1: left promiscuous mode [ 893.137790][T12871] team0: Port device team_slave_1 removed [ 893.202063][ T5833] wg1 speed is unknown, defaulting to 1000 [ 896.399468][ T8] libceph: connect (1)[c::]:6789 error -101 [ 896.405570][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 896.730829][T12907] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 896.971579][ T8] libceph: connect (1)[c::]:6789 error -101 [ 896.979081][T12904] ceph: No mds server is up or the cluster is laggy [ 897.000745][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 902.537962][ T8] libceph: connect (1)[c::]:6789 error -101 [ 902.544091][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 903.124700][ T8] libceph: connect (1)[c::]:6789 error -101 [ 903.134717][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 903.176613][T12959] ceph: No mds server is up or the cluster is laggy [ 904.797782][T12979] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 905.085788][ T6885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 905.268991][ T6885] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 905.296858][ T6885] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 905.333988][ T6885] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 905.353584][ T6885] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 905.373825][ T6885] usb 5-1: Product: syz [ 905.387639][T12976] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 905.432035][ T6885] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 906.256170][ C1] ================================================================== [ 906.264298][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 906.272249][ C1] Read of size 2 at addr ffff88806a78642a by task swapper/1/0 [ 906.279733][ C1] [ 906.282106][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.99-syzkaller #0 [ 906.289780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.299897][ C1] Call Trace: [ 906.303214][ C1] [ 906.306105][ C1] dump_stack_lvl+0x16c/0x230 [ 906.310826][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 906.315905][ C1] ? show_regs_print_info+0x20/0x20 [ 906.321203][ C1] ? load_image+0x3b0/0x3b0 [ 906.325781][ C1] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 906.331220][ C1] ? __virt_addr_valid+0x18c/0x540 [ 906.336393][ C1] ? __virt_addr_valid+0x469/0x540 [ 906.341555][ C1] print_report+0xac/0x200 [ 906.346048][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 906.351214][ C1] kasan_report+0x117/0x150 [ 906.355781][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 906.360938][ C1] rose_timer_expiry+0x46a/0x4b0 [ 906.365920][ C1] call_timer_fn+0x16e/0x530 [ 906.370528][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 906.375573][ C1] ? call_timer_fn+0xbf/0x530 [ 906.380271][ C1] ? __run_timers+0x7d0/0x7d0 [ 906.384971][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 906.390204][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 906.395430][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 906.400480][ C1] __run_timers+0x52d/0x7d0 [ 906.405007][ C1] ? detach_timer+0x2b0/0x2b0 [ 906.409708][ C1] ? lock_chain_count+0x20/0x20 [ 906.414586][ C1] run_timer_softirq+0x67/0xf0 [ 906.419436][ C1] handle_softirqs+0x280/0x820 [ 906.424227][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 906.429034][ C1] ? do_softirq+0x180/0x180 [ 906.433576][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 906.438835][ C1] __irq_exit_rcu+0xc7/0x190 [ 906.443458][ C1] ? irq_exit_rcu+0x20/0x20 [ 906.448071][ C1] irq_exit_rcu+0x9/0x20 [ 906.452319][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 906.457972][ C1] [ 906.460906][ C1] [ 906.463845][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 906.469843][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 906.475589][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 17 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 906.495293][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 906.501372][ C1] RAX: 1dd7ece1f9f6d900 RBX: ffffffff81619a7b RCX: 1dd7ece1f9f6d900 [ 906.509348][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6680 [ 906.517325][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 906.525394][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7ce8 [ 906.533380][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037cd780 [ 906.541456][ C1] ? do_idle+0x1eb/0x510 [ 906.545729][ C1] default_idle+0x13/0x20 [ 906.550081][ C1] default_idle_call+0x6c/0xa0 [ 906.554860][ C1] do_idle+0x1eb/0x510 [ 906.558934][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 906.564141][ C1] ? do_idle+0xa/0x510 [ 906.568213][ C1] cpu_startup_entry+0x43/0x60 [ 906.573071][ C1] start_secondary+0xee/0xf0 [ 906.577697][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 906.583793][ C1] [ 906.586820][ C1] [ 906.589153][ C1] Allocated by task 5850: [ 906.593480][ C1] kasan_set_track+0x4e/0x70 [ 906.598077][ C1] __kasan_kmalloc+0x8f/0xa0 [ 906.602679][ C1] br_multicast_new_port_group+0x3ef/0xdc0 [ 906.608492][ C1] __br_multicast_add_group+0x60f/0xa80 [ 906.614042][ C1] br_multicast_rcv+0x3a16/0x7030 [ 906.619078][ C1] br_handle_frame_finish+0x785/0x1920 [ 906.624540][ C1] br_nf_hook_thresh+0x3b6/0x480 [ 906.629482][ C1] br_nf_pre_routing_finish_ipv6+0x9e3/0xd90 [ 906.635468][ C1] br_nf_pre_routing_ipv6+0x34d/0x680 [ 906.640851][ C1] br_handle_frame+0x96b/0x1480 [ 906.645708][ C1] __netif_receive_skb_core+0xf6b/0x3ac0 [ 906.651361][ C1] __netif_receive_skb+0x74/0x290 [ 906.656392][ C1] process_backlog+0x380/0x6e0 [ 906.661160][ C1] __napi_poll+0xc0/0x460 [ 906.665505][ C1] net_rx_action+0x5ea/0xbf0 [ 906.670105][ C1] handle_softirqs+0x280/0x820 [ 906.674869][ C1] do_softirq+0xed/0x180 [ 906.679110][ C1] __local_bh_enable_ip+0x178/0x1c0 [ 906.684327][ C1] __dev_queue_xmit+0x1449/0x35a0 [ 906.689353][ C1] ip6_finish_output2+0xe2e/0x1650 [ 906.694466][ C1] NF_HOOK+0x161/0x470 [ 906.698586][ C1] mld_sendpack+0x7f9/0xd70 [ 906.703103][ C1] mld_ifc_work+0x835/0xb40 [ 906.707619][ C1] process_scheduled_works+0xa45/0x15b0 [ 906.713188][ C1] worker_thread+0xa55/0xfc0 [ 906.717788][ C1] kthread+0x2fa/0x390 [ 906.721856][ C1] ret_from_fork+0x48/0x80 [ 906.726276][ C1] ret_from_fork_asm+0x11/0x20 [ 906.731057][ C1] [ 906.733379][ C1] Freed by task 8: [ 906.737093][ C1] kasan_set_track+0x4e/0x70 [ 906.741680][ C1] kasan_save_free_info+0x2e/0x50 [ 906.746711][ C1] ____kasan_slab_free+0x126/0x1e0 [ 906.751911][ C1] slab_free_freelist_hook+0x130/0x1b0 [ 906.757374][ C1] kmem_cache_free_bulk+0x347/0x460 [ 906.762584][ C1] kvfree_rcu_bulk+0x1eb/0x470 [ 906.767356][ C1] kfree_rcu_work+0x32f/0x3a0 [ 906.772036][ C1] process_scheduled_works+0xa45/0x15b0 [ 906.777590][ C1] worker_thread+0xa55/0xfc0 [ 906.782191][ C1] kthread+0x2fa/0x390 [ 906.786268][ C1] ret_from_fork+0x48/0x80 [ 906.790692][ C1] ret_from_fork_asm+0x11/0x20 [ 906.795457][ C1] [ 906.797790][ C1] Last potentially related work creation: [ 906.803498][ C1] kasan_save_stack+0x3e/0x60 [ 906.808187][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 906.813560][ C1] kvfree_call_rcu+0xee/0x780 [ 906.818243][ C1] br_multicast_gc_work+0x1b7/0x230 [ 906.823454][ C1] process_scheduled_works+0xa45/0x15b0 [ 906.829108][ C1] worker_thread+0xa55/0xfc0 [ 906.833715][ C1] kthread+0x2fa/0x390 [ 906.837832][ C1] ret_from_fork+0x48/0x80 [ 906.842256][ C1] ret_from_fork_asm+0x11/0x20 [ 906.847031][ C1] [ 906.849365][ C1] The buggy address belongs to the object at ffff88806a786400 [ 906.849365][ C1] which belongs to the cache kmalloc-512 of size 512 [ 906.863420][ C1] The buggy address is located 42 bytes inside of [ 906.863420][ C1] freed 512-byte region [ffff88806a786400, ffff88806a786600) [ 906.877144][ C1] [ 906.879463][ C1] The buggy address belongs to the physical page: [ 906.885988][ C1] page:ffffea0001a9e100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a784 [ 906.896136][ C1] head:ffffea0001a9e100 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 906.905064][ C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 906.913046][ C1] page_type: 0xffffffff() [ 906.917389][ C1] raw: 00fff00000000840 ffff888017841c80 ffffea00016f7e00 dead000000000002 [ 906.925971][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 906.934548][ C1] page dumped because: kasan: bad access detected [ 906.941051][ C1] page_owner tracks the page as allocated [ 906.946851][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5702, tgid 5702 (kworker/1:3), ts 722618746456, free_ts 709252212387 [ 906.969682][ C1] post_alloc_hook+0x1cd/0x210 [ 906.974455][ C1] get_page_from_freelist+0x195c/0x19f0 [ 906.980010][ C1] __alloc_pages+0x1e3/0x460 [ 906.984604][ C1] alloc_slab_page+0x5d/0x170 [ 906.989295][ C1] new_slab+0x87/0x2e0 [ 906.993392][ C1] ___slab_alloc+0xc6d/0x12f0 [ 906.998079][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 907.003544][ C1] kmalloc_trace+0x2a/0xe0 [ 907.007963][ C1] __ipv6_dev_mc_inc+0x413/0xac0 [ 907.012996][ C1] addrconf_dad_work+0x3c5/0x14e0 [ 907.018021][ C1] process_scheduled_works+0xa45/0x15b0 [ 907.023590][ C1] worker_thread+0xa55/0xfc0 [ 907.028186][ C1] kthread+0x2fa/0x390 [ 907.032250][ C1] ret_from_fork+0x48/0x80 [ 907.036801][ C1] ret_from_fork_asm+0x11/0x20 [ 907.041569][ C1] page last free stack trace: [ 907.046241][ C1] free_unref_page_prepare+0x7ce/0x8e0 [ 907.051708][ C1] free_unref_page+0x32/0x2e0 [ 907.056393][ C1] vfree+0x1a6/0x320 [ 907.060290][ C1] kcov_close+0x2b/0x50 [ 907.064449][ C1] __fput+0x234/0x970 [ 907.068436][ C1] task_work_run+0x1ce/0x250 [ 907.073119][ C1] do_exit+0x90b/0x23c0 [ 907.077279][ C1] do_group_exit+0x21b/0x2d0 [ 907.081875][ C1] get_signal+0x12fc/0x1400 [ 907.086383][ C1] arch_do_signal_or_restart+0x96/0x780 [ 907.091934][ C1] exit_to_user_mode_loop+0x70/0x110 [ 907.097225][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 907.102807][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 907.108300][ C1] do_syscall_64+0x61/0xb0 [ 907.112942][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.118947][ C1] [ 907.121272][ C1] Memory state around the buggy address: [ 907.126903][ C1] ffff88806a786300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 907.135157][ C1] ffff88806a786380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 907.143228][ C1] >ffff88806a786400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 907.151296][ C1] ^ [ 907.156703][ C1] ffff88806a786480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 907.164777][ C1] ffff88806a786500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 907.172832][ C1] ================================================================== [ 907.180981][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.187005][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 907.194211][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.99-syzkaller #0 [ 907.201924][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.211980][ C1] Call Trace: [ 907.215258][ C1] [ 907.218101][ C1] dump_stack_lvl+0x16c/0x230 [ 907.222786][ C1] ? show_regs_print_info+0x20/0x20 [ 907.228001][ C1] ? load_image+0x3b0/0x3b0 [ 907.232542][ C1] panic+0x2c0/0x710 [ 907.236468][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 907.241081][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 907.246993][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 907.252905][ C1] ? _raw_spin_unlock+0x40/0x40 [ 907.257769][ C1] ? print_memory_metadata+0x314/0x400 [ 907.263238][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 907.268351][ C1] check_panic_on_warn+0x84/0xa0 [ 907.273301][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 907.278421][ C1] end_report+0x6f/0x140 [ 907.282672][ C1] kasan_report+0x128/0x150 [ 907.287187][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 907.292303][ C1] rose_timer_expiry+0x46a/0x4b0 [ 907.297247][ C1] call_timer_fn+0x16e/0x530 [ 907.301843][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 907.306872][ C1] ? call_timer_fn+0xbf/0x530 [ 907.311551][ C1] ? __run_timers+0x7d0/0x7d0 [ 907.316318][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 907.321614][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 907.326824][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 907.331866][ C1] __run_timers+0x52d/0x7d0 [ 907.336464][ C1] ? detach_timer+0x2b0/0x2b0 [ 907.341143][ C1] ? lock_chain_count+0x20/0x20 [ 907.346000][ C1] run_timer_softirq+0x67/0xf0 [ 907.350854][ C1] handle_softirqs+0x280/0x820 [ 907.355620][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 907.360389][ C1] ? do_softirq+0x180/0x180 [ 907.364900][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 907.370113][ C1] __irq_exit_rcu+0xc7/0x190 [ 907.374713][ C1] ? irq_exit_rcu+0x20/0x20 [ 907.379395][ C1] irq_exit_rcu+0x9/0x20 [ 907.383726][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 907.389383][ C1] [ 907.392328][ C1] [ 907.395255][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 907.401336][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 907.407067][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 03 17 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 907.426696][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 907.432779][ C1] RAX: 1dd7ece1f9f6d900 RBX: ffffffff81619a7b RCX: 1dd7ece1f9f6d900 [ 907.440982][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6680 [ 907.449066][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 907.457049][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a7ce8 [ 907.465113][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037cd780 [ 907.473093][ C1] ? do_idle+0x1eb/0x510 [ 907.477457][ C1] default_idle+0x13/0x20 [ 907.481802][ C1] default_idle_call+0x6c/0xa0 [ 907.486599][ C1] do_idle+0x1eb/0x510 [ 907.490674][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 907.495883][ C1] ? do_idle+0xa/0x510 [ 907.499962][ C1] cpu_startup_entry+0x43/0x60 [ 907.504734][ C1] start_secondary+0xee/0xf0 [ 907.509418][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 907.515512][ C1] [ 907.518879][ C1] Kernel Offset: disabled [ 907.523213][ C1] Rebooting in 86400 seconds..