last executing test programs: 4m8.484468302s ago: executing program 2 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 4m7.565838038s ago: executing program 2 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m7.377498228s ago: executing program 2 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="05b09cbab092"}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00007f1b000000000000aaaaaaaaaa2c88a8400081"], 0x1a) 4m5.894301983s ago: executing program 2 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x7) 4m5.654196052s ago: executing program 2 (id=125): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0xcccccccc}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 4m3.983590682s ago: executing program 2 (id=139): openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x26e1, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000000c0)='.\x02\x00', 0x2) 4m3.569625065s ago: executing program 32 (id=139): openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x26e1, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000000c0)='.\x02\x00', 0x2) 3m58.380397424s ago: executing program 4 (id=162): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@remote, @broadcast, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, 'k', 'XyT', 0x805}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m57.17941829s ago: executing program 4 (id=167): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = mq_open(&(0x7f0000000080)='system.sockprotoname\x00', 0x840, 0x20, 0x0) mq_notify(r0, &(0x7f00000002c0)={0x0, 0x29, 0x1, @tid=0xffffffffffffffff}) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m56.814744119s ago: executing program 4 (id=169): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 3m56.606578876s ago: executing program 4 (id=171): syz_clone(0x8120011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 3m55.887688163s ago: executing program 4 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) 3m54.438758136s ago: executing program 4 (id=187): r0 = eventfd(0x5f0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x1, r0}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x40, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x9, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0x2, 0x6, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}}]}}, 0x0) socket(0xa, 0x1, 0x0) 3m54.073797637s ago: executing program 33 (id=187): r0 = eventfd(0x5f0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x1, r0}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x40, 0xf6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x9, 0x5, {0x7, 0x25, 0x1, 0xc, 0x7f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0x2, 0x6, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}}]}}, 0x0) socket(0xa, 0x1, 0x0) 2m47.992248425s ago: executing program 3 (id=484): preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000580)=""/165, 0xa5}], 0x1, 0x5, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc4740a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeadcd3641110bec4e93a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b900000000c52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2826b73323301b4bc94d0e4afde44867d71049a7c89bc617e215571ac910d8005000000000000006c34d2"], 0x0}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 2m46.755712958s ago: executing program 3 (id=493): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000500) 2m46.312461084s ago: executing program 3 (id=496): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/246, 0xf6}], 0x1}, 0x9}], 0x1, 0x40000021, 0x0) 2m44.643423553s ago: executing program 3 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m44.164628658s ago: executing program 3 (id=513): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = gettid() tkill(r4, 0x16) 2m42.621207077s ago: executing program 3 (id=531): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x38}}, 0x0) 2m41.888013477s ago: executing program 34 (id=531): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x38}}, 0x0) 34.748537962s ago: executing program 0 (id=1097): pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, 0x0, 0x0) setpriority(0x2, 0x0, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, 0x0) r5 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$6lowpan_control(r5, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 31.526054872s ago: executing program 0 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = syz_clone(0x90000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0xd21, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54e6cff3, 0xdf12, 0x2, 0x1, 0x1, 0x1, 0x6, 0xa22, 0x0, 0xc7c, 0x3, 0x40000007, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x0, 0x10004086, 0x0, 0xfffffff8]}) 29.272104824s ago: executing program 1 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x4048005) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2186dd600031f6f2177dba458f2aa5f88e00303a01fe880000000000000000000000000001ff020000000000000000000000000001020190780400000060000006da3400"/99], 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x3c000280) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 24.935102537s ago: executing program 6 (id=1127): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 23.085959224s ago: executing program 0 (id=1131): timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440), 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsync(0xffffffffffffffff) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = epoll_create(0x4) r2 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x400, 0x4, 0x2}, 0x18) r3 = io_uring_setup(0x1d48, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) mknodat$loop(r2, 0x0, 0x6000, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000200)) 23.079822811s ago: executing program 6 (id=1133): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 22.79144919s ago: executing program 1 (id=1134): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 20.83909481s ago: executing program 1 (id=1135): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x6, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsync(0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create(0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x1d48, &(0x7f0000000080)={0x0, 0xb140, 0x10, 0x6, 0x196}) r4 = socket$rxrpc(0x21, 0x2, 0x2) close_range(r3, r4, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, 0x0) 17.078626428s ago: executing program 6 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.888447364s ago: executing program 0 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x48045) close_range(r3, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee01, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) setpriority(0x0, 0x0, 0x2a14b58) 14.917832274s ago: executing program 7 (id=1141): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200b3e8179f731700a226c704147fd243da8a5c9d484c713415e05a1c19699658c951e243854646bd"], 0x50) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = io_uring_setup(0x66a5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) 14.854090179s ago: executing program 1 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 13.248169633s ago: executing program 7 (id=1145): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 9.895514837s ago: executing program 0 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r0, &(0x7f000001d040)={0x38}, 0x38, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_get$pid(0x4, r0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = shmat(0x0, &(0x7f0000e42000/0x4000)=nil, 0x6000) shmdt(r3) shmdt(r3) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 9.444260728s ago: executing program 7 (id=1149): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) pipe2$9p(0x0, 0x80000) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 8.595668104s ago: executing program 5 (id=1151): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 7.569397858s ago: executing program 1 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8003) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/config\x00') r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) recvfrom$inet(r4, 0x0, 0x0, 0x720, 0x0, 0x0) 7.411872469s ago: executing program 6 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1c79, 0x0) sendmsg$nl_generic(r0, 0x0, 0x40) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0605000000bad775aa1b71da", 0xe, 0xfffffffffffffffe) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x7, &(0x7f0000000300)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) write$sndseq(r2, &(0x7f00000005c0)=[{0x3, 0x5, 0x5, 0xff, @tick=0x7fff, {0x1, 0x10}, {0x3, 0x10}, @raw8={"16f84dcd6511795300"}}, {0x2, 0x7, 0x7f, 0x8, @time={0x9, 0xa}, {0xe}, {0x7, 0x9}, @connect={{0x6, 0x61}, {0x9, 0x4}}}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) readv(r1, 0x0, 0x0) 7.265425031s ago: executing program 7 (id=1154): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.96987784s ago: executing program 5 (id=1155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0xc2d, 0x8, 0x5, 0xc36e}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) connect$tipc(r1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, 0x0, 0x0) 4.132890074s ago: executing program 5 (id=1156): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0xe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) 3.765660363s ago: executing program 1 (id=1157): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f00000000c0)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) accept4(r3, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x32, 0x0, &(0x7f00000004c0)="b9f70323600d698cff9e14f008004de7f9c7643600000088ffa45d0bb166daad18aac2361da56d32b011e841d8b8085d33d8", 0x0, 0xdfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.329134035s ago: executing program 7 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.208739529s ago: executing program 6 (id=1159): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2.170214589s ago: executing program 5 (id=1160): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e400102030309022400"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x9]}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x61, 0x80, 0x16, 0x3}, {0x6, 0x0, 0x7, 0x9}]}) bind$can_raw(r3, &(0x7f00000004c0), 0x10) futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x7, 0x0, &(0x7f0000000940)="ff412f66b083dc", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0x7, 0x9, 0x3ff}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x466, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.095624541s ago: executing program 7 (id=1161): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.049143992s ago: executing program 0 (id=1162): syz_open_dev$audion(0x0, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20008080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x240440c0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x403, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x9000}}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r1, 0x0, 0x0) 1.729453468s ago: executing program 5 (id=1163): syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0xdb}) io_setup(0xfffffff3, &(0x7f0000000180)=0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x408000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x42, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="4beebc9056b951cdc9971f23440096f10fa911b4b0c8788a75c3565065b2b4c34bcb1f29609ad9eb7e0e6080912c2b8630cdc272d5cdbc45b94a1bb0bf64933a6c1042275fd7dc6c053656f66950430df11081c54d7627fa485a2883d664a50c973c40d0a617e5cc5bb5f8a87d29a808d4368ea447825c5ea2b9e276c62c89680be9ffc45cfec06605761fdd009e6a7e9dc1ee7a11ae62b7479cfafb28972e17c000e767382fef5d7e475eb1e83b51fedc5f3fdbc7b04c7a2e8adc075fde3e652556943085538a922a2fe933b4b33a4d9b64121e8b7408d64fff9592788de7", 0xdf}, {&(0x7f0000000380)="77d00abb785e652e352a0e589384992219d3b99ceab9e3ebc2bd167e8b1e54fbc56853220a6f1ba8f985251cc951c76a4656e3347930881e07521a9b454fbc439b20859f40f52d04e5b9ce66b4e6152042828a211843f03910b058edfdd661740e54e04f9d7be43d3c6d6607daf93a79e8687361657b879ff5e28f3c1192a0186209a681ca71f40f2db2", 0x8a}, {&(0x7f0000000440)="8ef2847d9183ac79fe6b25e0e5cb164cb3da9065e38b4dd88b3c51b222418ebd6c43dec14818f07a194b7caaa35d3b8f6006dd1065c3361a3a6f9c906934e86d1732930a4e29676e0b30bf3bd2468dc0f0b20a36c03184c680147e97eff652814fea4703f7a3a867f1472b86d8391121a961e1b81ac2061b87844eb1443e06320b6d402bf72026d6f07ba1c0e3f3f262c5863eea3cd5c5d2e6285c352f", 0x9d}, {&(0x7f0000000500)="d8210528d6a3f013ca75bd0ec07dbdcefd67b2a0d7addf117a41fa01bc45a5ac0a9a0f94f05d94ee07890a82225b772a9a589b9b468b02c78f74836092870b445c20210021ccd59ce774a787db0471e625e8f7093f21c42e2f12a7c339e2262e203bb1cd13d11f0b40354a6092653fb3e85912adde2c5c98f80dcca57112f79c7d819c023ab1479392d557017186d4c8297d", 0x92}, {&(0x7f00000005c0)="1ff45c804fa17314f3a049817188a35ddbea316395982066cedaf504547364b1", 0x20}], 0x5}, 0x40000) pipe(&(0x7f0000000240)) io_submit(r0, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x100) umount2(&(0x7f0000000040)='.\x00', 0x2) 666.435726ms ago: executing program 6 (id=1164): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x1800, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44090) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x3c, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r2, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 0s ago: executing program 5 (id=1165): syz_open_dev$dri(0x0, 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000045e000/0x3000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, 0x0) unshare(0x28060400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 81.196333][ T5786] cgroup: Unknown subsys name 'net' [ 81.439026][ T5786] cgroup: Unknown subsys name 'cpuset' [ 81.492459][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.390195][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.076673][ T10] cfg80211: failed to load regulatory.db [ 87.138585][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.139597][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.172912][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.189532][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.196863][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.199797][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.213305][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.217919][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.219199][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.222712][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.225655][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.227139][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.228548][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.230341][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.230571][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.233943][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.235092][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.237624][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.239932][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.241801][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.253572][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.253884][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.254743][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.256220][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.362338][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.525416][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 88.556566][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 88.620158][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 88.679515][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 88.789626][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 88.960942][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.962340][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.963842][ T5802] bridge_slave_0: entered allmulticast mode [ 88.966452][ T5802] bridge_slave_0: entered promiscuous mode [ 89.000980][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.001081][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.001183][ T5798] bridge_slave_0: entered allmulticast mode [ 89.003902][ T5798] bridge_slave_0: entered promiscuous mode [ 89.032219][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.032352][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.032886][ T5802] bridge_slave_1: entered allmulticast mode [ 89.034809][ T5802] bridge_slave_1: entered promiscuous mode [ 89.077153][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.077313][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.077860][ T5798] bridge_slave_1: entered allmulticast mode [ 89.079690][ T5798] bridge_slave_1: entered promiscuous mode [ 89.134563][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.134705][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.135247][ T5803] bridge_slave_0: entered allmulticast mode [ 89.137046][ T5803] bridge_slave_0: entered promiscuous mode [ 89.199381][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.199543][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.199711][ T5801] bridge_slave_0: entered allmulticast mode [ 89.201934][ T5801] bridge_slave_0: entered promiscuous mode [ 89.206163][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.206293][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.206474][ T5803] bridge_slave_1: entered allmulticast mode [ 89.210415][ T5803] bridge_slave_1: entered promiscuous mode [ 89.261128][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.261386][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.261994][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.262178][ T5801] bridge_slave_1: entered allmulticast mode [ 89.292981][ T5801] bridge_slave_1: entered promiscuous mode [ 89.312807][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.333294][ T60] Bluetooth: hci4: command tx timeout [ 89.334134][ T60] Bluetooth: hci1: command tx timeout [ 89.334896][ T5812] Bluetooth: hci2: command tx timeout [ 89.337734][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.376095][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.376400][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.376498][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.376610][ T5799] bridge_slave_0: entered allmulticast mode [ 89.378156][ T5799] bridge_slave_0: entered promiscuous mode [ 89.422347][ T60] Bluetooth: hci3: command tx timeout [ 89.426401][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.445456][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.445659][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.446154][ T5799] bridge_slave_1: entered allmulticast mode [ 89.448920][ T5799] bridge_slave_1: entered promiscuous mode [ 89.491669][ T60] Bluetooth: hci0: command tx timeout [ 89.586434][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.589376][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.626433][ T5802] team0: Port device team_slave_0 added [ 89.630025][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.650997][ T5798] team0: Port device team_slave_0 added [ 89.669730][ T5802] team0: Port device team_slave_1 added [ 89.699506][ T5798] team0: Port device team_slave_1 added [ 89.708527][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.752304][ T5803] team0: Port device team_slave_0 added [ 89.778477][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.797562][ T5801] team0: Port device team_slave_0 added [ 89.800284][ T5803] team0: Port device team_slave_1 added [ 89.830655][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.830669][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.830685][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.839166][ T5801] team0: Port device team_slave_1 added [ 89.859857][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.859874][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.859899][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.887241][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.887258][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.887283][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.935786][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.935806][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.935834][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.941955][ T5799] team0: Port device team_slave_0 added [ 89.988857][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.988875][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.988900][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.008722][ T5799] team0: Port device team_slave_1 added [ 90.016223][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.016239][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.016272][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.018669][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.018682][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.018706][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.050283][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.050301][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.050327][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.156270][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.156296][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.156323][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.207131][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.207149][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.207175][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.223607][ T5802] hsr_slave_0: entered promiscuous mode [ 90.225343][ T5802] hsr_slave_1: entered promiscuous mode [ 90.257223][ T5798] hsr_slave_0: entered promiscuous mode [ 90.258534][ T5798] hsr_slave_1: entered promiscuous mode [ 90.260432][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 90.260533][ T5798] Cannot create hsr debugfs directory [ 90.349476][ T5803] hsr_slave_0: entered promiscuous mode [ 90.350401][ T5803] hsr_slave_1: entered promiscuous mode [ 90.350958][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 90.350976][ T5803] Cannot create hsr debugfs directory [ 90.394073][ T5801] hsr_slave_0: entered promiscuous mode [ 90.394962][ T5801] hsr_slave_1: entered promiscuous mode [ 90.395558][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 90.395579][ T5801] Cannot create hsr debugfs directory [ 90.493375][ T5799] hsr_slave_0: entered promiscuous mode [ 90.494211][ T5799] hsr_slave_1: entered promiscuous mode [ 90.494864][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 90.494881][ T5799] Cannot create hsr debugfs directory [ 91.412095][ T60] Bluetooth: hci2: command tx timeout [ 91.412145][ T60] Bluetooth: hci4: command tx timeout [ 91.412400][ T5118] Bluetooth: hci1: command tx timeout [ 91.491590][ T5118] Bluetooth: hci3: command tx timeout [ 91.542579][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.572392][ T5118] Bluetooth: hci0: command tx timeout [ 91.593140][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.597314][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.627682][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.630004][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.668171][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.686755][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.706686][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.809866][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.836596][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.848740][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.876158][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.879489][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.926016][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.948529][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.987071][ T5799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.117019][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.146972][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.161969][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.207852][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.218183][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.239531][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.266214][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.296124][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.453293][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.485239][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.489587][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.534944][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.539521][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.588036][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.598274][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.637235][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.671647][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.835473][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.865595][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.907445][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.921159][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.947856][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.982599][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.005534][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.017544][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.017909][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.028311][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.075861][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.132239][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.132373][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.148740][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.246238][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.293007][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.293118][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.331126][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.353534][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.353679][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.468747][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.492062][ T5118] Bluetooth: hci4: command tx timeout [ 93.492098][ T5118] Bluetooth: hci1: command tx timeout [ 93.492120][ T5118] Bluetooth: hci2: command tx timeout [ 93.565722][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.565956][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.572355][ T60] Bluetooth: hci3: command tx timeout [ 93.593290][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.653251][ T60] Bluetooth: hci0: command tx timeout [ 93.654528][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.654651][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.877076][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.968345][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.969933][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.033558][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.038308][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.038422][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.117314][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.230997][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.288657][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.288880][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.345314][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.345507][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.446084][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.609390][ T5802] veth0_vlan: entered promiscuous mode [ 94.694631][ T5802] veth1_vlan: entered promiscuous mode [ 94.728468][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.818420][ T5799] veth0_vlan: entered promiscuous mode [ 94.906084][ T5799] veth1_vlan: entered promiscuous mode [ 94.936581][ T5802] veth0_macvtap: entered promiscuous mode [ 94.980277][ T5802] veth1_macvtap: entered promiscuous mode [ 95.044422][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.107028][ T5803] veth0_vlan: entered promiscuous mode [ 95.119100][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.147541][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.154507][ T5799] veth0_macvtap: entered promiscuous mode [ 95.206545][ T5803] veth1_vlan: entered promiscuous mode [ 95.229380][ T5799] veth1_macvtap: entered promiscuous mode [ 95.230729][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.266013][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.266204][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.277416][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.286760][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.489052][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.571677][ T60] Bluetooth: hci2: command tx timeout [ 95.571716][ T60] Bluetooth: hci1: command tx timeout [ 95.571739][ T60] Bluetooth: hci4: command tx timeout [ 95.665179][ T5118] Bluetooth: hci3: command tx timeout [ 95.682121][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.698059][ T5798] veth0_vlan: entered promiscuous mode [ 95.736253][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.738989][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.743281][ T5118] Bluetooth: hci0: command tx timeout [ 95.748117][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.760649][ T5803] veth0_macvtap: entered promiscuous mode [ 95.784591][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.820127][ T5798] veth1_vlan: entered promiscuous mode [ 95.833121][ T5803] veth1_macvtap: entered promiscuous mode [ 96.195536][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.204943][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.204965][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.279393][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.338847][ T5801] veth0_vlan: entered promiscuous mode [ 96.370048][ T1290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.370073][ T1290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.380650][ T1028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.383474][ T5798] veth0_macvtap: entered promiscuous mode [ 96.397048][ T1028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.401113][ T1028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.401398][ T1028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.429536][ T5798] veth1_macvtap: entered promiscuous mode [ 96.530628][ T5801] veth1_vlan: entered promiscuous mode [ 96.549614][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.549635][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.809916][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.809940][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.877131][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.052331][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.176152][ T1124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.198931][ T1124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.200782][ T1124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.243359][ T1124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332109][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.332132][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.398482][ T5801] veth0_macvtap: entered promiscuous mode [ 97.556451][ T5801] veth1_macvtap: entered promiscuous mode [ 97.633903][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.633926][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.975580][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.154743][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.158435][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.158457][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.351243][ T1022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.354489][ T1022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.354756][ T1022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.354932][ T1022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.412809][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.412833][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.693570][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.157687][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.157720][ T31] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 99.157739][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.157793][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.157819][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 99.157845][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.169605][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.169638][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.169657][ T31] usb 3-1: Product: syz [ 99.169671][ T31] usb 3-1: Manufacturer: syz [ 99.217899][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.497405][ T5902] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.517799][ T5902] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.517835][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.517856][ T5902] usb 4-1: Product: syz [ 99.517872][ T5902] usb 4-1: Manufacturer: syz [ 99.517888][ T5902] usb 4-1: SerialNumber: syz [ 99.869969][ T5925] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.982149][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.982174][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.083326][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 100.083351][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 100.450008][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 100.450033][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 100.566644][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.566671][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.584301][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.803535][ T5900] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 100.803636][ T5900] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 100.803657][ T5900] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 100.803678][ T5900] usb 2-1: config 220 has no interface number 2 [ 100.949170][ T31] usb 3-1: USB disconnect, device number 2 [ 101.127204][ T5900] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 101.127313][ T5900] usb 2-1: config 220 interface 0 has no altsetting 0 [ 101.127336][ T5900] usb 2-1: config 220 interface 76 has no altsetting 0 [ 101.127355][ T5900] usb 2-1: config 220 interface 1 has no altsetting 0 [ 101.253104][ T5900] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 101.253160][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.253182][ T5900] usb 2-1: Product: syz [ 101.253206][ T5900] usb 2-1: Manufacturer: syz [ 101.253220][ T5900] usb 2-1: SerialNumber: syz [ 101.260164][ T5902] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 101.260204][ T5902] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 101.260226][ T5902] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 101.550716][ T5902] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 102.496994][ T5900] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 102.497121][ T5900] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 102.497152][ T5900] uvcvideo 2-1:220.0: No valid video chain found. [ 102.497308][ T5900] usb 2-1: selecting invalid altsetting 0 [ 102.594974][ T5902] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 102.631051][ T5900] usb 2-1: selecting invalid altsetting 0 [ 102.631093][ T5900] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 102.738593][ T5900] usb 2-1: USB disconnect, device number 2 [ 102.828492][ T5902] usb 4-1: USB disconnect, device number 2 [ 102.883828][ T5902] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 102.988425][ T5958] loop8: detected capacity change from 0 to 7 [ 103.028031][ T5958] Dev loop8: unable to read RDB block 7 [ 103.028078][ T5958] loop8: unable to read partition table [ 103.028311][ T5958] loop8: partition table beyond EOD, truncated [ 103.028344][ T5958] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 103.315665][ T5961] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18'. [ 103.482888][ T5965] process 'syz.0.20' launched './file1' with NULL argv: empty string added [ 103.643433][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.684429][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.530098][ T5981] 9pnet_fd: p9_fd_create_unix (5981): problem connecting socket: ./file0: -13 [ 104.568505][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.592965][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.115546][ T5972] dvmrp0: entered allmulticast mode [ 106.120603][ T191] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.269251][ T191] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.269596][ T191] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.269902][ T191] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.674283][ T6063] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 110.430882][ T6074] mmap: syz.1.60 (6074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.035381][ T6086] Bluetooth: MGMT ver 1.23 [ 112.061352][ T6110] input: syz0 as /devices/virtual/input/input5 [ 112.163848][ T6114] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.811664][ T5807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.964500][ T5807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.966136][ T5807] usb 5-1: config 1 interface 0 has no altsetting 0 [ 114.971284][ T5807] usb 5-1: string descriptor 0 read error: -22 [ 114.971433][ T5807] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 114.998077][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.495376][ T5807] hid (null): report_id 1010848821 is invalid [ 115.604823][ T5807] glorious 0003:22D4:1503.0001: report_id 1010848821 is invalid [ 115.604853][ T5807] glorious 0003:22D4:1503.0001: item 0 4 1 8 parsing failed [ 115.607638][ T5807] glorious 0003:22D4:1503.0001: probe with driver glorious failed with error -22 [ 115.637472][ T6176] binder: 6172:6176 ioctl c0306201 200000000080 returned -14 [ 115.637966][ T6176] binder: 6172:6176 ioctl c0306201 2000000003c0 returned -14 [ 115.731011][ T5807] usb 5-1: USB disconnect, device number 2 [ 116.134520][ T6005] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.296206][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.296247][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.296291][ T6005] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 116.296316][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.360991][ T37] audit: type=1326 audit(1776600547.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6197 comm="syz.0.108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7abfdc819 code=0x0 [ 116.419393][ T6005] usb 4-1: config 0 descriptor?? [ 116.876349][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 116.876392][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 116.876419][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 116.876444][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 116.876468][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 116.876494][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 116.876519][ T6005] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 117.029086][ T6005] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 117.045654][ T5935] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.160166][ T6005] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 117.198244][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 117.198298][ T5935] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 117.198321][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.279067][ T5935] usb 2-1: config 0 descriptor?? [ 117.280306][ T6207] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.365190][ T6005] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 117.479358][ T6005] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32 [ 117.548962][ T6207] netlink: 104 bytes leftover after parsing attributes in process `syz.1.111'. [ 117.613127][ T6005] usb 4-1: USB disconnect, device number 3 [ 117.616462][ T5935] usbhid 2-1:0.0: can't add hid device: -71 [ 117.616588][ T5935] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 117.839775][ T5935] usb 2-1: USB disconnect, device number 3 [ 118.167984][ T6226] netlink: 'syz.4.117': attribute type 3 has an invalid length. [ 119.515710][ T6255] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.129'. [ 120.375996][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.137'. [ 120.791665][ T5935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.969613][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 120.969683][ T5935] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 120.969707][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.049166][ T5935] usb 2-1: config 0 descriptor?? [ 121.055080][ T6274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.120663][ T6249] syz.0.126 (6249) used greatest stack depth: 19096 bytes left [ 121.526030][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 121.549318][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.609556][ T5935] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.609600][ T5935] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.609624][ T5935] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 121.615493][ T5935] asus 0003:0B05:1ABE.0003: unexpected long global item [ 121.619653][ T5935] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 121.619768][ T5935] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 121.625817][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.663402][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.690429][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.692906][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.719674][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.756872][ T5935] usb 2-1: USB disconnect, device number 4 [ 123.891947][ T5118] Bluetooth: hci4: command tx timeout [ 124.206038][ T6283] chnl_net:caif_netlink_parms(): no params data found [ 125.295476][ T37] audit: type=1326 audit(1776600556.840:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c42f5c819 code=0x0 [ 125.627884][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.628153][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.628399][ T6283] bridge_slave_0: entered allmulticast mode [ 125.658594][ T6283] bridge_slave_0: entered promiscuous mode [ 125.754455][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.754679][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.755349][ T6283] bridge_slave_1: entered allmulticast mode [ 125.756400][ T6333] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 125.790286][ T6283] bridge_slave_1: entered promiscuous mode [ 125.971651][ T5118] Bluetooth: hci4: command tx timeout [ 126.009421][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.153862][ T12] bridge_slave_1: left allmulticast mode [ 126.153988][ T12] bridge_slave_1: left promiscuous mode [ 126.236459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.194804][ T12] bridge_slave_0: left allmulticast mode [ 127.194837][ T12] bridge_slave_0: left promiscuous mode [ 127.195132][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.054633][ T5118] Bluetooth: hci4: command tx timeout [ 129.325370][ T37] audit: type=1326 audit(1776600560.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6390 comm="syz.1.182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b49d3c819 code=0x0 [ 129.378068][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.453692][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.495450][ T12] bond0 (unregistering): Released all slaves [ 129.561340][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.132243][ T5118] Bluetooth: hci4: command tx timeout [ 130.515905][ T6283] team0: Port device team_slave_0 added [ 130.542312][ T6283] team0: Port device team_slave_1 added [ 131.078131][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.078151][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.078176][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.165117][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.165133][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.165151][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.217582][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.284417][ T5886] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 131.346165][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.350740][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.362062][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.373079][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.509416][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.527648][ T5886] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 131.527682][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.527702][ T5886] usb 2-1: Product: syz [ 131.527717][ T5886] usb 2-1: Manufacturer: syz [ 131.527732][ T5886] usb 2-1: SerialNumber: syz [ 131.551081][ T5886] usb 2-1: config 0 descriptor?? [ 131.559226][ T5886] CoreChips 2-1:0.0: probe with driver CoreChips failed with error -22 [ 132.224903][ T6283] hsr_slave_0: entered promiscuous mode [ 132.226624][ T6283] hsr_slave_1: entered promiscuous mode [ 132.227679][ T6283] debugfs: 'hsr0' already exists in 'hsr' [ 132.227707][ T6283] Cannot create hsr debugfs directory [ 133.082408][ T12] hsr_slave_0: left promiscuous mode [ 133.098263][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098348][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.152082][ T12] hsr_slave_1: left promiscuous mode [ 133.163685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.204863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.303415][ T6455] capability: warning: `syz.0.203' uses 32-bit capabilities (legacy support in use) [ 133.571737][ T60] Bluetooth: hci2: command tx timeout [ 134.170258][ T5886] usb 2-1: USB disconnect, device number 5 [ 134.602476][ T12] team0 (unregistering): Port device team_slave_1 removed [ 134.653054][ T12] team0 (unregistering): Port device team_slave_0 removed [ 134.670789][ T6005] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.841573][ T6005] usb 4-1: Using ep0 maxpacket: 32 [ 134.846183][ T6005] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 134.846214][ T6005] usb 4-1: config 0 has no interface number 0 [ 134.846276][ T6005] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 134.851251][ T6005] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 134.851273][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.851285][ T6005] usb 4-1: Product: syz [ 134.851294][ T6005] usb 4-1: Manufacturer: syz [ 134.851303][ T6005] usb 4-1: SerialNumber: syz [ 134.868962][ T6005] usb 4-1: config 0 descriptor?? [ 134.919996][ T6476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.165893][ T6476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.425442][ T5463] 8021q: adding VLAN 0 to HW filter on device eth1 [ 135.651988][ T60] Bluetooth: hci2: command tx timeout [ 135.978267][ T6005] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 198 [ 136.274272][ T6005] usb 4-1: USB disconnect, device number 4 [ 136.934385][ T6507] trusted_key: syz.3.220 sent an empty control message without MSG_MORE. [ 137.642545][ T6414] chnl_net:caif_netlink_parms(): no params data found [ 137.731626][ T60] Bluetooth: hci2: command tx timeout [ 138.167241][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dc45000: rx timeout, send abort [ 138.170633][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805dc45000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.360728][ T6283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.442987][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 138.510586][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.727273][ T6283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.787772][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.140282][ T6283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.261523][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.300302][ T6283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.371382][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.811695][ T60] Bluetooth: hci2: command tx timeout [ 139.815880][ T5463] 8021q: adding VLAN 0 to HW filter on device eth2 [ 139.854004][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.854152][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.854415][ T6414] bridge_slave_0: entered allmulticast mode [ 139.859416][ T6414] bridge_slave_0: entered promiscuous mode [ 140.667165][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.788678][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.788905][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.789292][ T6414] bridge_slave_1: entered allmulticast mode [ 140.821243][ T6414] bridge_slave_1: entered promiscuous mode [ 140.859268][ T6587] syz.3.240 uses obsolete (PF_INET,SOCK_PACKET) [ 141.194781][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.271308][ T6414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.316853][ T6414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.459069][ T6596] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 142.021736][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.034837][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.136306][ T6414] team0: Port device team_slave_0 added [ 142.171611][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 142.179810][ T5902] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.179841][ T5902] usb 1-1: config 0 has no interface number 0 [ 142.179900][ T5902] usb 1-1: config 0 interface 184 has no altsetting 0 [ 142.195851][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.195886][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.195908][ T5902] usb 1-1: Product: syz [ 142.195925][ T5902] usb 1-1: Manufacturer: syz [ 142.195939][ T5902] usb 1-1: SerialNumber: syz [ 142.254617][ T5902] usb 1-1: config 0 descriptor?? [ 142.325561][ T6414] team0: Port device team_slave_1 added [ 142.740640][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.936188][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 142.936235][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.965022][ T6608] syz.3.246 (6608) used greatest stack depth: 17912 bytes left [ 143.009535][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.009556][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.009585][ T6414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.077825][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.077843][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.077868][ T6414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.265380][ T37] audit: type=1326 audit(1776600574.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b49d3c819 code=0x0 [ 143.363928][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 143.363961][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 143.363981][ T5902] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 143.364311][ T5902] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 143.439826][ T5902] usb 1-1: USB disconnect, device number 2 [ 143.539959][ T6414] hsr_slave_0: entered promiscuous mode [ 143.555913][ T6414] hsr_slave_1: entered promiscuous mode [ 144.460354][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 144.520630][ T6643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'. [ 144.770416][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 144.832464][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 145.455567][ T5463] 8021q: adding VLAN 0 to HW filter on device eth3 [ 146.021604][ T12] bridge_slave_1: left allmulticast mode [ 146.021634][ T12] bridge_slave_1: left promiscuous mode [ 146.021936][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.997009][ T12] bridge_slave_0: left allmulticast mode [ 146.997042][ T12] bridge_slave_0: left promiscuous mode [ 146.997400][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.180559][ T6686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 147.180754][ T6686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 147.261741][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.432434][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 147.438275][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 147.440763][ T5886] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 147.440816][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.440848][ T5886] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.440874][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.440913][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.441008][ T5886] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 147.441041][ T5886] usb 2-1: config 168 interface 0 has no altsetting 0 [ 147.499675][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 147.499718][ T5886] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 147.499757][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.499784][ T5886] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.499807][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.499832][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.499864][ T5886] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 147.499898][ T5886] usb 2-1: config 168 interface 0 has no altsetting 0 [ 147.505267][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 147.505306][ T5886] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 147.505357][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.505383][ T5886] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.505471][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.505497][ T5886] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.505523][ T5886] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 147.505549][ T5886] usb 2-1: config 168 interface 0 has no altsetting 0 [ 147.516211][ T5886] usb 2-1: string descriptor 0 read error: -22 [ 147.516352][ T5886] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.516375][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.636474][ T5886] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 147.843498][ T5807] usb 2-1: USB disconnect, device number 6 [ 148.893195][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.020689][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.078909][ T12] bond0 (unregistering): Released all slaves [ 149.175238][ T6679] Zero length message leads to an empty skb [ 149.556298][ T6702] pimreg: entered allmulticast mode [ 149.576673][ T6700] pimreg: left allmulticast mode [ 149.651621][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.814729][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 149.835156][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.845767][ T5902] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.883005][ T5807] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.883037][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.883058][ T5807] usb 4-1: Product: syz [ 149.883072][ T5807] usb 4-1: Manufacturer: syz [ 149.883087][ T5807] usb 4-1: SerialNumber: syz [ 149.929740][ T5807] usb 4-1: config 0 descriptor?? [ 149.945144][ T5807] smsc95xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 149.946437][ T5807] smsc95xx 4-1:0.0: probe with driver smsc95xx failed with error -22 [ 150.011624][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 150.014964][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.015021][ T5902] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.015048][ T5902] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.019506][ T5902] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 150.019525][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.019537][ T5902] usb 1-1: Product: syz [ 150.019546][ T5902] usb 1-1: Manufacturer: syz [ 150.019555][ T5902] usb 1-1: SerialNumber: syz [ 150.030700][ T5902] usb 1-1: config 0 descriptor?? [ 150.060380][ T5902] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 150.244036][ T5886] usb 4-1: USB disconnect, device number 5 [ 150.334704][ T5902] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 150.350845][ T5902] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 150.361406][ T5902] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 150.557384][ T5886] usb 1-1: USB disconnect, device number 3 [ 150.815068][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.842955][ T6283] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.134037][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.134201][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.184392][ T5803] cgroup: fork rejected by pids controller in /syz0 [ 152.407322][ T12] hsr_slave_0: left promiscuous mode [ 152.455085][ T12] hsr_slave_1: left promiscuous mode [ 152.456328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.456534][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.522706][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.522738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.704558][ T12] veth1_macvtap: left promiscuous mode [ 152.727360][ T12] veth0_macvtap: left promiscuous mode [ 152.736232][ T12] veth1_vlan: left promiscuous mode [ 152.736533][ T12] veth0_vlan: left promiscuous mode [ 154.586778][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'. [ 154.612674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 154.662329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 154.897613][ T6414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.958533][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.973977][ T5463] 8021q: adding VLAN 0 to HW filter on device eth4 [ 155.208452][ T6414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.252748][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.274758][ T6414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.394775][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.465187][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.465341][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.511372][ T6414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.616400][ T6414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.340061][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.382282][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.419435][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.441061][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.452681][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.943766][ T6414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.121580][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.190650][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.349166][ T5463] 8021q: adding VLAN 0 to HW filter on device eth5 [ 158.522746][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.550338][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.615374][ T5118] Bluetooth: hci3: command tx timeout [ 158.850768][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.850894][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.187170][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 159.825488][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.825610][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.825797][ T6778] bridge_slave_0: entered allmulticast mode [ 159.855831][ T6778] bridge_slave_0: entered promiscuous mode [ 159.881196][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.881340][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.883142][ T6778] bridge_slave_1: entered allmulticast mode [ 159.889279][ T6778] bridge_slave_1: entered promiscuous mode [ 160.166232][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.362436][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.665676][ T6778] team0: Port device team_slave_0 added [ 160.691679][ T5118] Bluetooth: hci3: command tx timeout [ 160.792991][ T6778] team0: Port device team_slave_1 added [ 160.910461][ T6283] veth0_vlan: entered promiscuous mode [ 160.989687][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.989706][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.989755][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.109803][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.109836][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.109870][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.137407][ T6871] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.319'. [ 161.137653][ T6871] netlink: Unknown conntrack attr (type=12, max=9) [ 161.196839][ T6283] veth1_vlan: entered promiscuous mode [ 161.380124][ T6876] faux_driver vkms: [drm] Unknown color mode 262147; guessing buffer size. [ 161.442200][ T6778] hsr_slave_0: entered promiscuous mode [ 161.443689][ T6778] hsr_slave_1: entered promiscuous mode [ 161.444703][ T6778] debugfs: 'hsr0' already exists in 'hsr' [ 161.444727][ T6778] Cannot create hsr debugfs directory [ 161.776858][ T5463] 8021q: adding VLAN 0 to HW filter on device eth6 [ 161.912766][ T6283] veth0_macvtap: entered promiscuous mode [ 162.164457][ T6283] veth1_macvtap: entered promiscuous mode [ 162.774567][ T5118] Bluetooth: hci3: command tx timeout [ 162.829431][ T6778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.096385][ T6414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.132245][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.181246][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.224320][ T1290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.224957][ T1290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.225553][ T1290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.226804][ T1290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.885829][ T6778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.931611][ T814] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.133632][ T814] usb 4-1: Using ep0 maxpacket: 32 [ 164.136568][ T814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 164.136605][ T814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.136630][ T814] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 164.136657][ T814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 164.145527][ T814] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 164.145558][ T814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.145578][ T814] usb 4-1: Product: syz [ 164.145592][ T814] usb 4-1: Manufacturer: syz [ 164.145608][ T814] usb 4-1: SerialNumber: syz [ 164.214099][ T814] usb 4-1: config 0 descriptor?? [ 164.474442][ T814] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 164.856196][ T5118] Bluetooth: hci3: command tx timeout [ 165.023988][ T5153] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 165.085446][ C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 165.274906][ T5153] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 165.352657][ T814] usb 4-1: USB disconnect, device number 6 [ 165.406837][ T6778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.707248][ T5463] 8021q: adding VLAN 0 to HW filter on device eth7 [ 166.095145][ T6778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.302444][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.302469][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.046188][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.046214][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.029480][ T6414] veth0_vlan: entered promiscuous mode [ 168.280300][ T6778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.452614][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.454302][ T6414] veth1_vlan: entered promiscuous mode [ 168.466055][ T6778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.595717][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.601085][ T6778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.650583][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.677154][ T6778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.847380][ T6778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.313909][ T6414] veth0_macvtap: entered promiscuous mode [ 169.407460][ T6414] veth1_macvtap: entered promiscuous mode [ 169.853340][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.199324][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.207811][ T5463] 8021q: adding VLAN 0 to HW filter on device eth8 [ 170.326115][ T191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.432632][ T191] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.472254][ T191] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.493054][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.671345][ T6999] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.346'. [ 170.676013][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.441090][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.689643][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.708424][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.800766][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.802917][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.814087][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.814112][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.060536][ T7012] overlayfs: upper fs does not support file handles, falling back to index=off. [ 172.101623][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.261578][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 172.267095][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.267125][ T31] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 172.279901][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 172.279932][ T31] usb 2-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 172.279954][ T31] usb 2-1: Product: syz [ 172.279970][ T31] usb 2-1: Manufacturer: syz [ 172.279984][ T31] usb 2-1: SerialNumber: syz [ 172.380164][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.380180][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.577194][ T31] usb 2-1: USB disconnect, device number 7 [ 173.583092][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.746238][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.746271][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 173.746292][ T10] usb 6-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 173.746314][ T10] usb 6-1: config 220 has no interface number 2 [ 173.746392][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 173.746421][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 173.746440][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 173.746459][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 173.837490][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 173.837525][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.837547][ T10] usb 6-1: Product: syz [ 173.837562][ T10] usb 6-1: Manufacturer: syz [ 173.837578][ T10] usb 6-1: SerialNumber: syz [ 174.324554][ T10] usb 6-1: selecting invalid altsetting 0 [ 174.325046][ T10] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 174.325076][ T10] uvcvideo 6-1:220.0: No valid video chain found. [ 174.435583][ T10] usb 6-1: selecting invalid altsetting 0 [ 174.435623][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 174.461126][ T10] usb 6-1: USB disconnect, device number 2 [ 174.524347][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.810371][ T6778] veth0_vlan: entered promiscuous mode [ 174.980473][ T6778] veth1_vlan: entered promiscuous mode [ 175.186045][ T6778] veth0_macvtap: entered promiscuous mode [ 175.311216][ T6778] veth1_macvtap: entered promiscuous mode [ 175.472341][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.503738][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.616187][ T1124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.616952][ T1124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.617011][ T1124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.617050][ T1124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.299371][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.299396][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.603987][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.604011][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.743809][ T7103] ======================================================= [ 177.743809][ T7103] WARNING: The mand mount option has been deprecated and [ 177.743809][ T7103] and is ignored by this kernel. Remove the mand [ 177.743809][ T7103] option from the mount to silence this warning. [ 177.743809][ T7103] ======================================================= [ 179.802651][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.398'. [ 179.811338][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.398'. [ 179.973407][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 179.973436][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.399'. [ 179.973462][ T7164] netlink: 'syz.5.399': attribute type 12 has an invalid length. [ 180.062947][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 180.062974][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.399'. [ 180.063001][ T7164] netlink: 'syz.5.399': attribute type 12 has an invalid length. [ 180.069657][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.070448][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.119665][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.119719][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.114980][ T814] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.271626][ T814] usb 2-1: Using ep0 maxpacket: 32 [ 181.275411][ T814] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 181.275446][ T814] usb 2-1: config 0 has no interface number 0 [ 181.275495][ T814] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.275519][ T814] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 181.275548][ T814] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 181.275577][ T814] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 181.275603][ T814] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 181.275629][ T814] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.275652][ T814] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.275791][ T814] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.275816][ T814] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.275841][ T814] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.280478][ T814] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 181.280514][ T814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.280536][ T814] usb 2-1: Product: syz [ 181.280552][ T814] usb 2-1: Manufacturer: syz [ 181.280568][ T814] usb 2-1: SerialNumber: syz [ 181.475349][ T814] usb 2-1: config 0 descriptor?? [ 181.477370][ T7180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.586597][ T814] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 181.586619][ T814] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 181.686449][ T814] scsi host1: microtekX6 [ 181.744678][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 181.860904][ T12] microtek usb (rev 0.4.3): error -90 submitting URB [ 181.904159][ T58] microtek usb (rev 0.4.3): error -90 submitting URB [ 181.957244][ T58] microtek usb (rev 0.4.3): error -90 submitting URB [ 181.993548][ T58] microtek usb (rev 0.4.3): error -90 submitting URB [ 181.998294][ T814] usb 2-1: USB disconnect, device number 8 [ 186.609061][ T7304] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 189.476121][ T814] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.725573][ T814] usb 4-1: Using ep0 maxpacket: 8 [ 189.749803][ T814] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 189.749867][ T814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.749893][ T814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.749920][ T814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.749947][ T814] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.750014][ T814] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.750038][ T814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.047502][ T814] usb 4-1: usb_control_msg returned -32 [ 190.047561][ T814] usbtmc 4-1:16.0: can't read capabilities [ 190.414458][ T7352] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 190.414623][ T7357] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 190.415860][ T31] usb 4-1: USB disconnect, device number 7 [ 190.903764][ T31] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 191.085775][ T31] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 191.085842][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 191.085868][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.085894][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 191.085919][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.085964][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.085989][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.266126][ T31] usbtmc 4-1:16.0: bulk endpoints not found [ 191.472889][ T31] usb 4-1: USB disconnect, device number 8 [ 191.927712][ T7371] bridge1: entered promiscuous mode [ 191.927744][ T7371] bridge1: entered allmulticast mode [ 192.077959][ T7371] team0: Port device bridge1 added [ 194.540877][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540956][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.880266][ T7525] binder: 7524:7525 ioctl c0306201 0 returned -14 [ 200.144017][ T7555] fuse: Bad value for 'fd' [ 200.561781][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.691467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.711460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.721459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 200.764954][ T7566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.086718][ T1124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.594796][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.671746][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.676654][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.692272][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.694051][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.861292][ T1124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.620139][ T1124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.711811][ T7697] tipc: Enabling not permitted [ 205.711851][ T7697] tipc: Enabling of bearer rejected, failed to enable media [ 205.811731][ T5118] Bluetooth: hci0: command tx timeout [ 206.338302][ T1124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.748287][ T7721] netlink: 'syz.1.569': attribute type 2 has an invalid length. [ 206.748312][ T7721] netlink: 1324 bytes leftover after parsing attributes in process `syz.1.569'. [ 206.967195][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 207.891943][ T5118] Bluetooth: hci0: command tx timeout [ 207.924345][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.925852][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.926128][ T7642] bridge_slave_0: entered allmulticast mode [ 207.929397][ T7642] bridge_slave_0: entered promiscuous mode [ 208.339281][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 208.356261][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.356401][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.356659][ T7642] bridge_slave_1: entered allmulticast mode [ 208.392527][ T7642] bridge_slave_1: entered promiscuous mode [ 208.957608][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.179124][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.262717][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.441603][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 209.447942][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 209.447998][ T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 209.448028][ T10] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 209.448057][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.448093][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 209.448119][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.476409][ T10] usb 7-1: config 0 descriptor?? [ 209.585040][ T1124] bridge_slave_1: left allmulticast mode [ 209.585075][ T1124] bridge_slave_1: left promiscuous mode [ 209.585428][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.706797][ T1124] bridge_slave_0: left allmulticast mode [ 209.706831][ T1124] bridge_slave_0: left promiscuous mode [ 209.739556][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.971703][ T5118] Bluetooth: hci0: command tx timeout [ 210.034190][ T10] hid_parser_main: 74 callbacks suppressed [ 210.034218][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034249][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034276][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034301][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034326][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034352][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034378][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034403][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034428][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.034454][ T10] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 210.257073][ T10] konepure 0003:1E7D:2DB4.0004: hidraw0: USB HID v0.0a Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0 [ 210.338340][ T10] usb 7-1: USB disconnect, device number 2 [ 210.479046][ T7818] fido_id[7818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 211.973726][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 211.999681][ T7846] binder: BINDER_SET_CONTEXT_MGR already set [ 211.999699][ T7846] binder: 7844:7846 ioctl 4018620d 200000000040 returned -16 [ 212.051843][ T5118] Bluetooth: hci0: command tx timeout [ 212.183991][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.272539][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.341240][ T1124] bond0 (unregistering): Released all slaves [ 212.914560][ T7642] team0: Port device team_slave_0 added [ 212.933027][ T7642] team0: Port device team_slave_1 added [ 213.090086][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.090106][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.090136][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.191054][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.191073][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.191102][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.294096][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 213.965282][ T7861] syz.6.626 (7861) used greatest stack depth: 17728 bytes left [ 216.061616][ T814] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 216.215228][ T7642] hsr_slave_0: entered promiscuous mode [ 216.216441][ T814] usb 2-1: Using ep0 maxpacket: 32 [ 216.233961][ T7642] hsr_slave_1: entered promiscuous mode [ 216.249010][ T814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.249047][ T814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.249090][ T814] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.249115][ T814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.304497][ T7642] debugfs: 'hsr0' already exists in 'hsr' [ 216.304534][ T7642] Cannot create hsr debugfs directory [ 216.340097][ T814] usb 2-1: config 0 descriptor?? [ 216.352894][ T814] hub 2-1:0.0: USB hub found [ 216.792088][ T814] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 216.794799][ T1124] hsr_slave_0: left promiscuous mode [ 216.820906][ T814] usbhid 2-1:0.0: can't add hid device: -71 [ 216.821046][ T814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 216.889819][ T1124] hsr_slave_1: left promiscuous mode [ 216.917970][ T814] usb 2-1: USB disconnect, device number 9 [ 217.001681][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.001707][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.093969][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.094002][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.472400][ T1124] veth1_macvtap: left promiscuous mode [ 217.472518][ T1124] veth0_macvtap: left promiscuous mode [ 217.515753][ T1124] veth1_vlan: left promiscuous mode [ 217.515930][ T1124] veth0_vlan: left promiscuous mode [ 218.601466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.621457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.631458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.641458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.651465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.661455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 218.671451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 221.322154][ T37] audit: type=1326 audit(1776600908.754:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.1.675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b49d3c819 code=0x0 [ 221.406538][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 221.560798][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 221.800886][ T8010] binder: 8009:8010 unknown command 0 [ 221.800911][ T8010] binder: 8009:8010 ioctl c0306201 200000000080 returned -22 [ 222.655003][ T8034] io-wq is not configured for unbound workers [ 222.683590][ T5463] 8021q: adding VLAN 0 to HW filter on device eth9 [ 223.743762][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.821099][ T814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 223.904454][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.904492][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.904535][ T31] usb 2-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 223.904562][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.975154][ T814] usb 1-1: Using ep0 maxpacket: 16 [ 224.004726][ T31] usb 2-1: config 0 descriptor?? [ 224.026062][ T814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.026095][ T814] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 224.062502][ T814] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 224.062537][ T814] usb 1-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 224.062557][ T814] usb 1-1: Product: syz [ 224.062571][ T814] usb 1-1: Manufacturer: syz [ 224.062586][ T814] usb 1-1: SerialNumber: syz [ 224.507383][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.508090][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.773322][ T31] hid (null): invalid report_count 43684 [ 224.773351][ T31] hid (null): global environment stack underflow [ 224.773376][ T31] hid (null): invalid report_size 28056 [ 224.817772][ T31] hid_parser_main: 31 callbacks suppressed [ 224.823916][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.823958][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.823983][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824006][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824030][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824053][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824076][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824099][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824122][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.824146][ T31] hid-generic 0003:0B05:1AFE.0005: unknown main item tag 0x0 [ 224.830048][ T31] hid-generic 0003:0B05:1AFE.0005: invalid report_count 43684 [ 224.830069][ T31] hid-generic 0003:0B05:1AFE.0005: item 0 2 1 9 parsing failed [ 224.842327][ T31] hid-generic 0003:0B05:1AFE.0005: probe with driver hid-generic failed with error -22 [ 225.082620][ T31] usb 2-1: USB disconnect, device number 10 [ 225.430210][ T7642] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 225.500572][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.513615][ T7642] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 225.687810][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.691224][ T7642] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 225.800810][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.811939][ T7642] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 225.888180][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.132516][ T6005] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 226.229829][ T5463] 8021q: adding VLAN 0 to HW filter on device eth10 [ 226.281649][ T6005] usb 2-1: Using ep0 maxpacket: 32 [ 226.285760][ T6005] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 226.285793][ T6005] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.298271][ T6005] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 226.298301][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.298321][ T6005] usb 2-1: Product: syz [ 226.298335][ T6005] usb 2-1: Manufacturer: syz [ 226.298348][ T6005] usb 2-1: SerialNumber: syz [ 226.342968][ T6005] usb 2-1: config 0 descriptor?? [ 226.508027][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.588763][ T6005] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 226.650717][ T814] usb 1-1: USB disconnect, device number 4 [ 226.934059][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.250890][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.251198][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.658044][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.658436][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.838951][ T6005] gspca_sunplus: reg_w_1 err -71 [ 227.839062][ T6005] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 227.962975][ T6005] usb 2-1: USB disconnect, device number 11 [ 228.072607][ T5887] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 228.241719][ T5887] usb 7-1: Using ep0 maxpacket: 16 [ 228.264888][ T5887] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 228.264924][ T5887] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.281911][ T5887] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.281942][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.281961][ T5887] usb 7-1: Product: syz [ 228.281975][ T5887] usb 7-1: Manufacturer: syz [ 228.281989][ T5887] usb 7-1: SerialNumber: syz [ 228.444333][ T5887] usb 7-1: config 0 descriptor?? [ 228.596800][ T5887] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 228.596841][ T5887] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 228.917918][ T8149] ip6gre1: entered promiscuous mode [ 228.917951][ T8149] ip6gre1: entered allmulticast mode [ 229.002960][ T5463] 8021q: adding VLAN 0 to HW filter on device eth11 [ 229.088936][ T5887] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 229.110987][ T5887] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 229.739183][ T8158] input: syz1 as /devices/virtual/input/input7 [ 229.950464][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.959578][ T5887] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 229.966353][ T5887] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 229.968458][ T5887] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 229.968888][ T5887] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 229.971164][ T5887] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 229.973256][ T5887] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 230.023084][ T5887] usb 7-1: USB disconnect, device number 3 [ 232.400186][ T7642] veth0_vlan: entered promiscuous mode [ 232.419852][ T7642] veth1_vlan: entered promiscuous mode [ 232.497889][ T7642] veth0_macvtap: entered promiscuous mode [ 232.559295][ T7642] veth1_macvtap: entered promiscuous mode [ 233.327692][ T5463] 8021q: adding VLAN 0 to HW filter on device eth12 [ 233.375837][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.406864][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.451705][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.452394][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.452440][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.452480][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.061562][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 236.221729][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 236.224088][ T9] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 236.224114][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.249077][ T9] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 236.249107][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.249127][ T9] usb 2-1: Product: syz [ 236.249141][ T9] usb 2-1: Manufacturer: syz [ 236.249154][ T9] usb 2-1: SerialNumber: syz [ 236.310282][ T9] usb 2-1: config 0 descriptor?? [ 236.331306][ T9] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 236.355408][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.355435][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.991093][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.991119][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.239206][ T814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.640940][ T814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.641031][ T814] usb 1-1: no configurations [ 238.641046][ T814] usb 1-1: can't read configurations, error -22 [ 238.834851][ T9] usb 2-1: USB disconnect, device number 12 [ 243.361587][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 243.541652][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 243.566755][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.566816][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.566846][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.566868][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.566892][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.640932][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.640967][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 243.640987][ T10] usb 8-1: Manufacturer: syz [ 243.690860][ T10] usb 8-1: config 0 descriptor?? [ 244.141506][ T10] rc_core: IR keymap rc-hauppauge not found [ 244.141532][ T10] Registered IR keymap rc-empty [ 244.142182][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.170032][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.212016][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 244.268462][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input8 [ 244.349471][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.361827][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.400395][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.414641][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.431598][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.462291][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.481783][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.501659][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.539163][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.551674][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 244.614959][ T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.614989][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.659993][ T10] usb 8-1: USB disconnect, device number 2 [ 247.815502][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 251.495689][ T8479] netlink: 'syz.7.830': attribute type 1 has an invalid length. [ 251.608155][ T8479] erspan1: entered allmulticast mode [ 253.536637][ T37] audit: type=1326 audit(1776600941.084:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8502 comm="syz.1.838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b49d3c819 code=0x0 [ 253.600307][ T8508] netlink: 220 bytes leftover after parsing attributes in process `syz.7.839'. [ 253.600332][ T8508] netlink: 'syz.7.839': attribute type 2 has an invalid length. [ 256.318832][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.318914][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.921428][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 259.101551][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 259.356674][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.850'. [ 259.503910][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.503947][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.503988][ T31] usb 8-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 259.504012][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.536590][ T31] usb 8-1: config 0 descriptor?? [ 260.579950][ T8551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.883028][ T31] hid (null): invalid report_count 43684 [ 260.883055][ T31] hid (null): global environment stack underflow [ 260.883081][ T31] hid (null): invalid report_size 28056 [ 261.019220][ T31] hid_parser_main: 174 callbacks suppressed [ 261.019248][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.019280][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.019307][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.019334][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.019361][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.019387][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.029736][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.029767][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.029791][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.029814][ T31] hid-generic 0003:0B05:1AFE.0006: unknown main item tag 0x0 [ 261.034040][ T31] hid-generic 0003:0B05:1AFE.0006: invalid report_count 43684 [ 261.034064][ T31] hid-generic 0003:0B05:1AFE.0006: item 0 2 1 9 parsing failed [ 261.034978][ T31] hid-generic 0003:0B05:1AFE.0006: probe with driver hid-generic failed with error -22 [ 262.102230][ T31] usb 8-1: USB disconnect, device number 3 [ 263.626015][ T5807] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 263.773324][ T5807] usb 8-1: Using ep0 maxpacket: 16 [ 263.777946][ T5807] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.778005][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.778037][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.778061][ T5807] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.778087][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.853838][ T5807] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.853874][ T5807] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.853898][ T5807] usb 8-1: Manufacturer: syz [ 263.918022][ T5807] usb 8-1: config 0 descriptor?? [ 263.980360][ T43] bridge_slave_1: left allmulticast mode [ 263.980392][ T43] bridge_slave_1: left promiscuous mode [ 263.980677][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.185072][ T43] bridge_slave_0: left allmulticast mode [ 264.185106][ T43] bridge_slave_0: left promiscuous mode [ 264.185402][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.295659][ T43] dvmrp0: left allmulticast mode [ 264.341691][ T5865] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 264.358486][ T5807] rc_core: IR keymap rc-hauppauge not found [ 264.358508][ T5807] Registered IR keymap rc-empty [ 264.358682][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.379913][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.401945][ T5807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 264.406353][ T5807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 264.463957][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.492691][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.494029][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.494065][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.495949][ T5865] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 264.495978][ T5865] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 264.495999][ T5865] usb 2-1: Manufacturer: syz [ 264.548729][ T5865] usb 2-1: config 0 descriptor?? [ 264.559795][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.581651][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.606519][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.622120][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.641576][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.662208][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.694161][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.716676][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 264.798553][ T5807] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 264.798584][ T5807] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 264.855302][ T5807] usb 8-1: USB disconnect, device number 4 [ 265.263271][ T5865] hid (null): unknown global tag 0xe [ 265.271208][ T5865] cougar 0003:060B:700A.0007: unknown global tag 0xe [ 265.271226][ T5865] cougar 0003:060B:700A.0007: item 0 1 1 14 parsing failed [ 265.275212][ T5865] cougar 0003:060B:700A.0007: parse failed [ 265.275320][ T5865] cougar 0003:060B:700A.0007: probe with driver cougar failed with error -22 [ 266.037904][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.139443][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.204005][ T43] bond0 (unregistering): Released all slaves [ 267.194681][ T814] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 267.202012][ T10] usb 2-1: USB disconnect, device number 13 [ 267.351585][ T814] usb 7-1: Using ep0 maxpacket: 16 [ 267.393862][ T814] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 243, changing to 7 [ 267.396723][ T814] usb 7-1: language id specifier not provided by device, defaulting to English [ 267.411075][ T814] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 267.411106][ T814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.411126][ T814] usb 7-1: Product: Ћ [ 267.411148][ T814] usb 7-1: Manufacturer: 㐊 [ 267.411162][ T814] usb 7-1: SerialNumber: syz [ 267.676878][ T814] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 268.724824][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.781001][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.409241][ T8719] binder: BINDER_SET_CONTEXT_MGR already set [ 276.409259][ T8719] binder: 8717:8719 ioctl 4018620d 200000004a80 returned -16 [ 277.593562][ T814] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 278.926557][ T814] usb 7-1: USB disconnect, device number 4 [ 280.219841][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.518592][ T37] audit: type=1800 audit(1776600968.064:8): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.919" name="file1" dev="overlay" ino=122 res=0 errno=0 [ 281.951687][ T43] hsr_slave_0: left promiscuous mode [ 282.930181][ T43] hsr_slave_1: left promiscuous mode [ 282.932217][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.932243][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.037230][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.037263][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.192201][ T43] veth1_macvtap: left promiscuous mode [ 283.192331][ T43] veth0_macvtap: left promiscuous mode [ 283.192627][ T43] veth1_vlan: left promiscuous mode [ 283.192821][ T43] veth0_vlan: left promiscuous mode [ 283.667228][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 287.453814][ T43] team0 (unregistering): Port device team_slave_1 removed [ 287.529880][ T43] team0 (unregistering): Port device team_slave_0 removed [ 288.171525][ T814] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 288.439789][ T814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.439855][ T814] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 288.439880][ T814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.466189][ T814] usb 2-1: config 0 descriptor?? [ 288.564359][ T814] pwc: Askey VC010 type 2 USB webcam detected. [ 288.682101][ T814] pwc: send_video_command error -71 [ 288.682122][ T814] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 288.682262][ T814] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 288.699904][ T814] usb 2-1: USB disconnect, device number 14 [ 295.478877][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.977'. [ 299.868807][ T8983] Bluetooth: MGMT ver 1.23 [ 299.868847][ T8983] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 305.011564][ T814] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 305.213259][ T814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.213300][ T814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.217572][ T814] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 305.217605][ T814] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 305.217628][ T814] usb 7-1: Manufacturer: syz [ 305.355019][ T814] usb 7-1: config 0 descriptor?? [ 307.849546][ T814] hid (null): unknown global tag 0xe [ 307.853333][ T814] cougar 0003:060B:700A.0008: unknown global tag 0xe [ 307.853349][ T814] cougar 0003:060B:700A.0008: item 0 1 1 14 parsing failed [ 307.853821][ T814] cougar 0003:060B:700A.0008: parse failed [ 307.853890][ T814] cougar 0003:060B:700A.0008: probe with driver cougar failed with error -22 [ 309.305448][ T6005] usb 7-1: USB disconnect, device number 5 [ 311.054820][ T5807] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 311.059788][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 312.311679][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 312.314294][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.314353][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.314384][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.314407][ T5807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.314430][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.342110][ T5807] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.342151][ T5807] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.342172][ T5807] usb 1-1: Manufacturer: syz [ 312.411185][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 312.411225][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.411271][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 312.411297][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.503860][ T5807] usb 1-1: config 0 descriptor?? [ 312.540499][ T5807] usb 1-1: can't set config #0, error -71 [ 312.583593][ T9] usb 7-1: config 0 descriptor?? [ 312.586036][ T5807] usb 1-1: USB disconnect, device number 7 [ 312.657469][ T9] usb 7-1: can't set config #0, error -71 [ 312.722538][ T9] usb 7-1: USB disconnect, device number 6 [ 317.430291][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430370][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.831576][ T5865] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 327.031294][ T5865] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.031330][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.031551][ T5865] usb 8-1: Product: syz [ 327.031568][ T5865] usb 8-1: Manufacturer: syz [ 327.031582][ T5865] usb 8-1: SerialNumber: syz [ 327.757817][ T5865] usb 8-1: config 0 descriptor?? [ 327.984934][ T5865] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 328.151585][ T5807] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 328.412452][ T5807] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 328.416344][ T5807] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 328.418212][ T5807] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 328.421062][ T5807] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 328.424422][ T5807] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 328.428130][ T5807] usb 2-1: config index 4 descriptor too short (expected 65505, got 72) [ 328.443043][ T5807] usb 2-1: config index 5 descriptor too short (expected 65505, got 72) [ 328.444631][ T5807] usb 2-1: config index 6 descriptor too short (expected 65505, got 72) [ 328.448110][ T5807] usb 2-1: config index 7 descriptor too short (expected 65505, got 72) [ 328.464657][ T5807] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 328.464693][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.464715][ T5807] usb 2-1: Product: syz [ 328.464731][ T5807] usb 2-1: Manufacturer: syz [ 328.464747][ T5807] usb 2-1: SerialNumber: syz [ 328.583240][ T5807] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.881415][ T5807] usb 2-1: USB disconnect, device number 15 [ 329.891557][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 330.564694][ T10] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 330.575303][ T5807] usb 2-1: ath9k_htc: USB layer deinitialized [ 330.707508][ T5865] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 330.741597][ T5865] usb 8-1: USB disconnect, device number 5 [ 331.159875][ T5812] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 331.160027][ T5812] Bluetooth: hci2: Dropping invalid advertising data [ 331.160074][ T5812] Bluetooth: hci2: Malformed LE Event: 0x02 [ 339.860568][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1126'. [ 343.461506][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 343.628362][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.628399][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.628422][ T9] usb 7-1: Product: syz [ 343.628438][ T9] usb 7-1: Manufacturer: syz [ 343.628453][ T9] usb 7-1: SerialNumber: syz [ 343.706869][ T9] usb 7-1: config 0 descriptor?? [ 348.657989][ T9] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 348.658094][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 348.746793][ T9] usb 7-1: USB disconnect, device number 7 [ 354.838748][ T9441] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 354.838783][ T9441] overlayfs: failed to set xattr on upper [ 354.838793][ T9441] overlayfs: ...falling back to redirect_dir=nofollow. [ 354.838802][ T9441] overlayfs: ...falling back to index=off. [ 354.838810][ T9441] overlayfs: ...falling back to uuid=null. [ 355.046935][ T9442] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 355.046975][ T9442] overlayfs: failed to set xattr on upper [ 355.046985][ T9442] overlayfs: ...falling back to redirect_dir=nofollow. [ 355.046994][ T9442] overlayfs: ...falling back to index=off. [ 355.047002][ T9442] overlayfs: ...falling back to uuid=null. [ 355.047333][ T9442] overlayfs: conflicting lowerdir path [ 356.407736][ T9454] ./file0: Can't lookup blockdev [ 358.503960][ T9465] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 358.503981][ T9465] PKCS7: Only support pkcs7_signedData type [ 360.313892][ T9470] sg_write: data in/out 32731/14 bytes for SCSI command 0xa-- guessing data in; [ 360.313892][ T9470] program syz.6.1153 not setting count and/or reply_len properly [ 364.552354][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 364.552386][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.552420][ [ 364.552420][ T5812] Tainted: [L]=SOFTLOCKUP [ 364.552428][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.552442][ T5812] Workqueue: hci1 hci_rx_work [ 364.552480][ T5812] Call Trace: [ 364.552489][ T5812] [ 364.552499][ T5812] dump_stack_lvl+0xe8/0x150 [ 364.552540][ T5812] sysfs_create_dir_ns+0x271/0x2a0 [ 364.552592][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 364.552619][ T5812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 364.552652][ T5812] ? rt_spin_unlock+0x160/0x200 [ 364.552679][ T5812] kobject_add_internal+0x631/0xd10 [ 364.552732][ T5812] kobject_add+0x163/0x240 [ 364.552778][ T5812] ? __pfx_kobject_add+0x10/0x10 [ 364.552820][ T5812] ? get_device_parent+0x370/0x3a0 [ 364.552853][ T5812] device_add+0x408/0xb80 [ 364.552886][ T5812] hci_conn_add_sysfs+0xd5/0x210 [ 364.552921][ T5812] le_conn_complete_evt+0x10e6/0x16b0 [ 364.552958][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 364.552985][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.553016][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.553048][ T5812] ? skb_pull_data+0xfb/0x200 [ 364.553084][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 364.553127][ T5812] hci_event_packet+0x659/0xef0 [ 364.553165][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 364.553186][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 364.553220][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 364.553250][ T5812] ? rt_spin_unlock+0x14f/0x200 [ 364.553284][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 364.553313][ T5812] hci_rx_work+0x3ee/0x1040 [ 364.553354][ T5812] ? process_scheduled_works+0xa70/0x1860 [ 364.553390][ T5812] process_scheduled_works+0xb5d/0x1860 [ 364.553457][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.553496][ T5812] ? assign_work+0x3d5/0x5e0 [ 364.553535][ T5812] worker_thread+0xa53/0xfc0 [ 364.553590][ T5812] kthread+0x388/0x470 [ 364.553619][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 364.553638][ T5812] ? __pfx_kthread+0x10/0x10 [ 364.553667][ T5812] ret_from_fork+0x514/0xb70 [ 364.553708][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 364.553754][ T5812] ? __switch_to+0xc79/0x1410 [ 364.553789][ T5812] ? __pfx_kthread+0x10/0x10 [ 364.553819][ T5812] ret_from_fork_asm+0x1a/0x30 [ 364.553864][ T5812] [ 364.553924][ T5812] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 364.553967][ T5812] Bluetooth: hci1: failed to register connection device [ 364.764761][ T5812] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 364.764792][ T5812] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 364.764819][ T5812] CPU: 0 UID: 0 PID: 5812 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.764851][ T5812] Tainted: [L]=SOFTLOCKUP [ 364.764859][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.764874][ T5812] Workqueue: hci1 hci_rx_work [ 364.764912][ T5812] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 364.764940][ T5812] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 364.764960][ T5812] RSP: 0018:ffffc90004b9f4d0 EFLAGS: 00010202 [ 364.764979][ T5812] RAX: dffffc0000000000 RBX: ffffffff88f21c31 RCX: 0000000080000001 [ 364.764998][ T5812] RDX: 0000000000000000 RSI: ffffffff88f21c31 RDI: 000000000000006b [ 364.765014][ T5812] RBP: ffffffff8a2938fa R08: 0000000000000001 R09: 0000000000000000 [ 364.765029][ T5812] R10: dffffc0000000000 R11: ffffffff8a2938b0 R12: 0000000000000000 [ 364.765045][ T5812] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 364.765060][ T5812] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 364.765079][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.765096][ T5812] CR2: 000000110c379d91 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 364.765118][ T5812] Call Trace: [ 364.765126][ T5812] [ 364.765134][ T5812] __kasan_check_byte+0x12/0x40 [ 364.765170][ T5812] lock_acquire+0x84/0x350 [ 364.765201][ T5812] lock_sock_nested+0x41/0x130 [ 364.765230][ T5812] ? l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 364.765263][ T5812] l2cap_sock_new_connection_cb+0x4a/0x2e0 [ 364.765291][ T5812] l2cap_connect_cfm+0x368/0x1560 [ 364.765318][ T5812] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 364.765341][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.765367][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.765393][ T5812] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.765421][ T5812] ? mutex_lock_nested+0x152/0x1d0 [ 364.765452][ T5812] ? hci_connect_cfm+0x2c/0x140 [ 364.765498][ T5812] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 364.765523][ T5812] hci_connect_cfm+0x95/0x140 [ 364.765558][ T5812] le_conn_complete_evt+0x1134/0x16b0 [ 364.765586][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 364.765609][ T5812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.765636][ T5812] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.765663][ T5812] ? skb_pull_data+0xfb/0x200 [ 364.765691][ T5812] hci_le_conn_complete_evt+0x187/0x470 [ 364.765727][ T5812] hci_event_packet+0x659/0xef0 [ 364.765756][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 364.765777][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 364.765810][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 364.765838][ T5812] ? rt_spin_unlock+0x14f/0x200 [ 364.765863][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 364.765888][ T5812] hci_rx_work+0x3ee/0x1040 [ 364.765922][ T5812] ? process_scheduled_works+0xa70/0x1860 [ 364.765958][ T5812] process_scheduled_works+0xb5d/0x1860 [ 364.766005][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.766042][ T5812] ? assign_work+0x3d5/0x5e0 [ 364.766076][ T5812] worker_thread+0xa53/0xfc0 [ 364.766108][ T5812] kthread+0x388/0x470 [ 364.766134][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 364.766153][ T5812] ? __pfx_kthread+0x10/0x10 [ 364.766180][ T5812] ret_from_fork+0x514/0xb70 [ 364.766216][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 364.766250][ T5812] ? __switch_to+0xc79/0x1410 [ 364.766281][ T5812] ? __pfx_kthread+0x10/0x10 [ 364.766307][ T5812] ret_from_fork_asm+0x1a/0x30 [ 364.766339][ T5812] [ 364.766347][ T5812] Modules linked in: [ 364.766399][ T5812] ---[ end trace 0000000000000000 ]--- [ 364.766417][ T5812] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 364.768237][ T5812] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 364.768261][ T5812] RSP: 0018:ffffc90004b9f4d0 EFLAGS: 00010202 [ 364.768319][ T5812] RAX: dffffc0000000000 RBX: ffffffff88f21c31 RCX: 0000000080000001 [ 364.768353][ T5812] RDX: 0000000000000000 RSI: ffffffff88f21c31 RDI: 000000000000006b [ 364.768369][ T5812] RBP: ffffffff8a2938fa R08: 0000000000000001 R09: 0000000000000000 [ 364.768384][ T5812] R10: dffffc0000000000 R11: ffffffff8a2938b0 R12: 0000000000000000 [ 364.768400][ T5812] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 364.768416][ T5812] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 364.768434][ T5812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.768449][ T5812] CR2: 000000110c379d91 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 364.768485][ T5812] Kernel panic - not syncing: Fatal exception [ 364.769026][ T5812] Kernel Offset: disabled