last executing test programs: 2m16.628659702s ago: executing program 2 (id=260): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000031ccbdfea1b6ade371f3d91b1732f18000", @ANYRES32=0x0, @ANYBLOB="00d2020000000000300012800b00010069703667726500002000028014000700fe8000000000000000000000000000aa060011004e200000"], 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000840) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x800, 0x84501) r1 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x42001, 0x10) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=""/1, 0x1}, 0xfffffff7}], 0x1, 0x40010262, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m16.384352724s ago: executing program 2 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4) pipe(&(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x2) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 2m16.266834378s ago: executing program 3 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 2m16.061055163s ago: executing program 2 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 2m15.988641605s ago: executing program 3 (id=267): modify_ldt$read(0x1100, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x7}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xc, 0x4, 0x0, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0xfffffffc, 0x10000001}, @generic={0x0, 0x5, "04f6fe"}, @mptcp=@ack={0x1e, 0xb, 0x5a, 0x4, "26d43cb918893c"}]}}}}}}}, 0x0) 2m15.855259982s ago: executing program 3 (id=268): r0 = msgget$private(0x0, 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 2m15.825245969s ago: executing program 2 (id=271): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x23) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 2m13.330178343s ago: executing program 3 (id=275): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x6, 0x0, 0x3, 0x20001}, {0x6dc8, 0x6, 0x31, 0x3ff}, {0x2, 0x84, 0xfb, 0x8}]}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000200)="5c71f951c8c413551b2ac06c88a8", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000300)="1dc25645f4b230d1d8f005824c78ba746fd985a21b98b3e5e43365af3265c79d6c4ebbe9e141adc8175e5324bf3d689f7135bde2f706ee8025b986b0dcf5092de087fe86e34f9ec6f4b96b43cdd5dca80c626d7cba3c8fb772724a6221fde98137b0cf74b2ee3ebe28a1bfea19c38ee865b8a36e2b6246d04b36dfc8d05d1f30747c4b39e2b8391a66edd549000048bd110b093d9a764fc0c22a6bdc29ead4d876e60da144de739a924754a4bba218b74090874e0000003f5d65615630f39c92", 0x4}, 0x4c) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005040000000000000000", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_io_uring_setup(0x7e63, &(0x7f0000000240)={0x0, 0x71a6, 0x8, 0x1, 0x44}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f00000003c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd=r4, 0x8, 0x7, 0x2, 0xc, 0x1, {0x2, r12}}) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x2, 0x10001, &(0x7f0000000140)=[{&(0x7f0000000100)="206f9f97e2a21bda242c", 0xa}], 0x1, 0x17, 0x0, {0x0, r12}}) io_uring_enter(r0, 0x21ac, 0x0, 0x0, 0x0, 0x0) 2m12.581957284s ago: executing program 2 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x6, @raw_data="e20d12b5106d6334ca3d88db4ac9519298f93658132eef30ac9fad56d34e80705d161196a991f8628b29fdd809218a051c0ac2b43af9f7abc76374ec19ed45ae12f8b3cc26301e139d1ba1adfa6408686a542ef604311a130d3c6c459c95c69831dddec2030cd01c2ac6d43240f11d6bb70fca4fbb47ad04e701c6a275c6d61eff0fbc935493435597c423d8204ba86411c2ce452558f186b4e36554d88d006f61f9be29c5186f938d8673c2cbba5438def1d7a2e08d0d8fd15dd14d220d05f1c4dd6204c6658f0b"}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec970005183c00fe8000000000000000000000000000aaff020000000000000000400000000001"], 0xffe) 2m5.906489804s ago: executing program 2 (id=283): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_usb_connect(0x0, 0x32e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009050602ff03b302044911675ca184fb9bf74d8f18720d9e556046"], 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x20, 0x4, 0x43, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) 2m2.836631014s ago: executing program 3 (id=287): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000d0000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2m2.154558885s ago: executing program 3 (id=290): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002940)={0x18, 0x3, 0x0, {0x8}}, 0x18) 1m45.935747737s ago: executing program 32 (id=283): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) syz_usb_connect(0x0, 0x32e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009050602ff03b302044911675ca184fb9bf74d8f18720d9e556046"], 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x20, 0x4, 0x43, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) 1m45.4718161s ago: executing program 33 (id=290): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002940)={0x18, 0x3, 0x0, {0x8}}, 0x18) 41.392177129s ago: executing program 1 (id=520): ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000002280)={0x300, 0x1, 0x40}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) mount_setattr(r0, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x100000, {r0}}, 0xfffffffffffffe5f) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400), 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0xc1, 0xb3, 0x9a, 0x8, 0x4e6, 0x9, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0xe0, 0x22, [{{0x9, 0x4, 0xa2, 0x6, 0x0, 0x69, 0x4b, 0x1, 0x4d}}]}}]}}, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000002c0)=""/69) syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000000000300000008000300", @ANYRES32=r3], 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = userfaultfd(0x80801) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000022c0)={{r2}, "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"}) ioctl$UFFDIO_REGISTER(r4, 0x541b, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@mpls_delroute={0xa8, 0x19, 0x4, 0x70bd2b, 0x25dfdbff, {0x1c, 0x80, 0x10, 0x8, 0xfe, 0x0, 0xff, 0x3, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0x3}, {0x8, 0x0, 0x1}, {0x8005, 0x0, 0x1}, {0x7f}, {0xffff9, 0x0, 0x1}, {0x9}, {0x72}, {0xffffa}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x946}, {0x5}, {0x1, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0x2d, 0x0, 0x1}, {0x1}, {0xffffe}, {0x6, 0x0, 0x1}, {0x8001}, {0x7, 0x0, 0x1}, {0x5}, {0x3}, {0x8, 0x0, 0x1}, {0x8}, {0x81}, {0x9, 0x0, 0x1}, {0x5}]}, @RTA_OIF={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000010080001000174c5ed000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20}}, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) 39.414335491s ago: executing program 1 (id=526): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x7ffff01b}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000240)=""/79}, {&(0x7f0000000340)=""/167}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000008480)=""/95, 0x7ffff000}, {&(0x7f0000000180)=""/172}], 0x286, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000020000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 38.34631751s ago: executing program 0 (id=533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r4, r5+60000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x5, &(0x7f0000002000)={0xf1b4eb5cd1e69fca, 0x4, 0x0, 0xfffffffffffffffd}) fcntl$lock(r7, 0x26, &(0x7f0000000080)) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x2, 0x0, 0x7fff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000428bd7000fddbdf000300"/26, @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4004}, 0x400c0c0) fcntl$dupfd(r8, 0x0, r6) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010000000000ffffffff080000000c009900020000004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) 38.104338243s ago: executing program 1 (id=534): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000b00)="94"}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x680340, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl(r8, 0x3, &(0x7f0000000380)="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") socket$nl_generic(0x10, 0x3, 0x10) 36.880608947s ago: executing program 0 (id=546): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) r7 = memfd_create(&(0x7f0000000140)='/dev/vbi#\x00', 0x0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000240)={r7, 0x1, 0x8000, 0x1000}) 36.804982098s ago: executing program 6 (id=538): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x7ffff01b}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000240)=""/79}, {&(0x7f0000000340)=""/167}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000008480)=""/95, 0x7ffff000}, {&(0x7f0000000180)=""/172}], 0x286, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000020000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 35.897576605s ago: executing program 6 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000120a010300000000000000000300000508000340000000053800fff5090a010200000000000000000500000a0900020073797a320000000008000340000000400800054000000032080008400000000018020000020a0102000000000000000002000007ec000600528584703f183bb1ba38ffa7d7fd5f188ed6e1924bf557c7fcd64c32eae59eb94c89a8d80e10f656dfa1e8bfef12218dc6eaebc56b6ccd93f7ed23758f04c254aac88e65b142894f1fb7d17e225fd14a5635502701b840b3497ca97d8520e0b50a1b5ddeed2f5098f59b6dacef6c23db940902399a0d2b4376f39f9b79300c6c244e2bb4d8c663a64c72a159fe45033720f7d715ae9b50ba83b9db5d9659af28167fc983aff83858dc15566a05aea6e3193344beac22782ba496f00f628c475a642cf09769522eba622f25522fe3f8afe38c76ae7f894c1f0ff14c2d5bd49ecdc1144c6ce2aa0294080002400000000108000240000000020c000440"], 0x7f8}, 0x1, 0x0, 0x0, 0x40801}, 0x44000) 35.61138991s ago: executing program 6 (id=540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 35.569931216s ago: executing program 1 (id=541): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket(0x29, 0xa, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0x5}, @sack_perm, @mss={0x2, 0xfff}, @timestamp, @window], 0x20000000000002c3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 35.386421139s ago: executing program 5 (id=542): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x202, 0x400) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x1) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{0x0, 0x20c}, {&(0x7f0000002540)="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", 0xfdaa}, {&(0x7f0000000080)="c5bbc593cab6cbb6683ff5f648fd16b289782f1d95b4cacbc93090196bd54c8b7ebafea70b752ac1887a7858296fce807c9802dd0fc066c5477b232ebd3271ac3fb821299407032f90e853b901787337827dcfe77ce17940130928266ad44c6a948c8cb7fec8d28371cf65ce387b810dfa85b488", 0x74}], 0x3}}], 0x1, 0x2000c000) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x303480) r8 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r10, 0xc08c5335, &(0x7f0000000340)={0xfffffff3, 0xb, 0x1, 'queue1\x00', 0xdfa}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000003700)={'ip6gre0\x00', &(0x7f0000003680)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x2, 0x11, @mcast1, @mcast1, 0x7, 0x8007, 0x4, 0x2}}) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r12, &(0x7f0000000080)={0x11, 0x802, r9, 0x1, 0x0, 0x6, @local}, 0x14) close_range(r8, r7, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 34.639045515s ago: executing program 0 (id=544): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x7ffff01b}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000240)=""/79}, {&(0x7f0000000340)=""/167}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000008480)=""/95, 0x7ffff000}, {&(0x7f0000000180)=""/172}], 0x286, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000020000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 34.565352834s ago: executing program 6 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000304040000000200000000000200", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0xba01}, 0x400c910) 34.553158536s ago: executing program 4 (id=547): syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00287c22fc02144de43aff0000b29df0ff00000000000000000000ff0200000000000000aa92a14b00004bbfc141780000000020010000000000004000000000000001fc0100000000000000"], 0x0) 34.291360377s ago: executing program 4 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}}, 0x0) 34.271046287s ago: executing program 5 (id=549): socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c0000000109021200"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000fe8000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 33.90101979s ago: executing program 6 (id=550): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x5, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) close(r2) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b0905810310"], 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x1080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0xd4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) 33.767031771s ago: executing program 4 (id=551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) (async) r2 = fcntl$getown(r1, 0x9) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) (async) syz_open_procfs(r2, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf250100000008000800", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000c40)={0x20, r9, 0x0}) 33.715877208s ago: executing program 0 (id=552): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x55, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 33.029747775s ago: executing program 0 (id=553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000b00)="94"}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x680340, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl(r8, 0x3, &(0x7f0000000380)="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") socket$nl_generic(0x10, 0x3, 0x10) 32.451937011s ago: executing program 1 (id=554): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000180)={"0400", 0xff, 0x5, 0x4, 0x80800, 0x1, "010019b1cf000012b09882ffbf2000", '\x00', "f3ffffff", '\x00', ["8b59b494c1cbd6e4af000700", "ca8cacfffffffff4550400", "000000f6ffffff00", "0000000000000000051000"]}) 31.637751989s ago: executing program 1 (id=555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x680340, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl(r8, 0x3, &(0x7f0000000380)="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") socket$nl_generic(0x10, 0x3, 0x10) 31.637454991s ago: executing program 5 (id=556): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000001000000430000002b0000000000000712"], 0x30}, 0x0) 31.431147869s ago: executing program 5 (id=557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 30.682072355s ago: executing program 4 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000fffffff50000000000000a20000000000a05000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000004c0008800c00024000000000000000050c000140000000000000000a0c00024000000000000000040c000140000000000000b5eb0c00024000000000000000e50c00024000000000000000003c000000060a010400000000000000000100000008000b40000000041400048010000180090001006c617374000000000900010073797a3000"], 0xfc}}, 0x0) 29.983051612s ago: executing program 4 (id=559): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x202, 0x400) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x1) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{0x0, 0x20c}, {&(0x7f0000002540)="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", 0xfdaa}, {&(0x7f0000000080)="c5bbc593cab6cbb6683ff5f648fd16b289782f1d95b4cacbc93090196bd54c8b7ebafea70b752ac1887a7858296fce807c9802dd0fc066c5477b232ebd3271ac3fb821299407032f90e853b901787337827dcfe77ce17940130928266ad44c6a948c8cb7fec8d28371cf65ce387b810dfa85b488", 0x74}], 0x3}}], 0x1, 0x2000c000) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x303480) r8 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r10, 0xc08c5335, &(0x7f0000000340)={0xfffffff3, 0xb, 0x1, 'queue1\x00', 0xdfa}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000003700)={'ip6gre0\x00', &(0x7f0000003680)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0x2, 0x11, @mcast1, @mcast1, 0x7, 0x8007, 0x4, 0x2}}) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r12, &(0x7f0000000080)={0x11, 0x802, r9, 0x1, 0x0, 0x6, @local}, 0x14) close_range(r8, r7, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 29.695520835s ago: executing program 0 (id=560): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="4aa6ebbaadac821a088be79aff597e399b67bde0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d66ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40baddc0595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec395", 0xa0}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0x4000000f}], 0x1, 0x2101, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x4000, 0x1}) io_uring_enter(r6, 0x52de, 0xf62e, 0x8, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r12 = inotify_init1(0x0) inotify_add_watch(r12, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r11, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x8f28, 0x38, 0x1, 0x0, 0x2, 0xfffd}, [{0x3, 0x2, 0x4, 0xc, 0x1c8, 0x5, 0x1, 0x3}]}, 0x78) close(r11) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 27.292400508s ago: executing program 4 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000304040000000200000000000200", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0xba01}, 0x400c910) 27.289974294s ago: executing program 6 (id=571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe2f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x8, 0xa, 0x8000, 0x6}, {0x1, 0x2, 0x4, 0x9, 0x8}, 0x2a, 0x6, 0x1680}}]}}]}, 0x60}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x4, 0xffff1000, 0x1, 0xffffffffffffffff, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r9, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 26.009236273s ago: executing program 5 (id=562): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0xf5ff) 24.731248007s ago: executing program 5 (id=563): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x7ffff01b}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000240)=""/79}, {&(0x7f0000000340)=""/167}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000008480)=""/95, 0x7ffff000}, {&(0x7f0000000180)=""/172}], 0x286, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000020000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 8.351530525s ago: executing program 34 (id=560): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="4aa6ebbaadac821a088be79aff597e399b67bde0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d66ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40baddc0595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec395", 0xa0}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0x4000000f}], 0x1, 0x2101, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x4000, 0x1}) io_uring_enter(r6, 0x52de, 0xf62e, 0x8, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r12 = inotify_init1(0x0) inotify_add_watch(r12, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r11, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x8f28, 0x38, 0x1, 0x0, 0x2, 0xfffd}, [{0x3, 0x2, 0x4, 0xc, 0x1c8, 0x5, 0x1, 0x3}]}, 0x78) close(r11) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.115240176s ago: executing program 35 (id=555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1101, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a40)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x680340, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl(r8, 0x3, &(0x7f0000000380)="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") socket$nl_generic(0x10, 0x3, 0x10) 2.306014825s ago: executing program 36 (id=563): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x7ffff01b}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000240)=""/79}, {&(0x7f0000000340)=""/167}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000008480)=""/95, 0x7ffff000}, {&(0x7f0000000180)=""/172}], 0x286, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x1000}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000020000000000000ff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1.224766381s ago: executing program 37 (id=571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe2f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x8, 0xa, 0x8000, 0x6}, {0x1, 0x2, 0x4, 0x9, 0x8}, 0x2a, 0x6, 0x1680}}]}}]}, 0x60}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000240)={0x4, 0xffff1000, 0x1, 0xffffffffffffffff, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r9, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 0s ago: executing program 38 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000304040000000200000000000200", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0xba01}, 0x400c910) kernel console output (not intermixed with test programs): 7 using dummy_hcd [ 150.303025][ T5832] usb 1-1: USB disconnect, device number 4 [ 150.447721][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 150.470173][ T24] usb 4-1: too many configurations: 233, using maximum allowed: 8 [ 150.504859][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 150.530707][ T24] usb 4-1: can't read configurations, error -61 [ 150.554049][ T24] usb usb4-port1: attempt power cycle [ 150.718542][ T5889] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 150.747975][ T5889] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 150.853879][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 150.947600][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.043243][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 151.066130][ T5889] usb 2-1: USB disconnect, device number 10 [ 151.087905][ T24] usb 4-1: too many configurations: 233, using maximum allowed: 8 [ 151.162929][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.194616][ T24] usb 4-1: can't read configurations, error -61 [ 151.298673][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.337196][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.352483][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 151.421353][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.427595][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.490011][ T9] usb 3-1: config 0 descriptor?? [ 151.507798][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 151.525127][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 151.532587][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 151.567118][ T24] usb 4-1: too many configurations: 233, using maximum allowed: 8 [ 151.599921][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 151.601673][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.618665][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 151.636291][ T24] usb 4-1: can't read configurations, error -61 [ 151.644384][ T24] usb usb4-port1: unable to enumerate USB device [ 151.668003][ T9] usb 3-1: media controller created [ 151.681704][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.721167][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 151.754698][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 151.767969][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.790445][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 151.821292][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.834078][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.846866][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 151.873294][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 151.897559][ T5832] usb 1-1: device descriptor read/64, error -71 [ 151.919004][ T9] usb 3-1: USB disconnect, device number 6 [ 152.023327][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 152.113291][ T6617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.218'. [ 152.137532][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.277633][ T5832] usb 1-1: device descriptor read/64, error -71 [ 152.421006][ T5832] usb usb1-port1: attempt power cycle [ 152.731228][ T6636] program syz.3.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.787637][ T5832] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.828701][ T5832] usb 1-1: device descriptor read/8, error -71 [ 153.091041][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.111983][ T5832] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.161218][ T5832] usb 1-1: device descriptor read/8, error -71 [ 153.279660][ T9] usb 4-1: device descriptor read/64, error -71 [ 153.287908][ T5832] usb usb1-port1: unable to enumerate USB device [ 153.527761][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.687925][ T9] usb 4-1: device descriptor read/64, error -71 [ 153.808033][ T9] usb usb4-port1: attempt power cycle [ 154.177691][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.238218][ T9] usb 4-1: device descriptor read/8, error -71 [ 154.321633][ T6652] Cannot find del_set index 0 as target [ 154.487558][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.528312][ T9] usb 4-1: device descriptor read/8, error -71 [ 154.669016][ T9] usb usb4-port1: unable to enumerate USB device [ 154.935268][ T6664] sit0: entered promiscuous mode [ 154.966502][ T6664] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 155.010442][ T6664] netlink: 9 bytes leftover after parsing attributes in process `syz.4.234'. [ 155.028006][ T6666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.035605][ T6666] IPv6: NLM_F_CREATE should be set when creating new route [ 155.036441][ T5832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.359401][ T6672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.674602][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.778534][ T24] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 155.817622][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.967958][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.990095][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 156.011142][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 156.015837][ T24] usb 2-1: config 0 has no interfaces? [ 156.035718][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 156.057755][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 156.060475][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.095556][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.106244][ T6691] bridge0: entered promiscuous mode [ 156.116701][ T6691] macsec1: entered promiscuous mode [ 156.123425][ T24] usb 2-1: config 0 descriptor?? [ 156.140933][ T6691] macsec1: entered allmulticast mode [ 156.146420][ T6691] bridge0: entered allmulticast mode [ 156.148597][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.158394][ T6691] bridge0: port 3(macsec1) entered blocking state [ 156.174266][ T6691] bridge0: port 3(macsec1) entered disabled state [ 156.215613][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.228799][ T6691] bridge0: left allmulticast mode [ 156.241808][ T9] usb 1-1: Product: syz [ 156.255730][ T6691] bridge0: left promiscuous mode [ 156.257893][ T9] usb 1-1: Manufacturer: syz [ 156.265427][ T9] usb 1-1: SerialNumber: syz [ 156.380089][ T6678] team_slave_0: entered promiscuous mode [ 156.386228][ T6678] team_slave_1: entered promiscuous mode [ 156.393099][ T6678] vlan2: entered promiscuous mode [ 156.401406][ T6678] team0: entered promiscuous mode [ 156.513202][ T9] usb 1-1: 0:2 : does not exist [ 156.739693][ T9] usb 1-1: USB disconnect, device number 9 [ 156.740275][ T24] usb 2-1: USB disconnect, device number 11 [ 157.461135][ T6712] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 157.701718][ T6724] netlink: 52 bytes leftover after parsing attributes in process `syz.4.256'. [ 158.299096][ T6743] netlink: 44 bytes leftover after parsing attributes in process `syz.3.264'. [ 158.722521][ T6754] loop8: detected capacity change from 0 to 1 [ 160.097517][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.250293][ T6754] Dev loop8: unable to read RDB block 1 [ 160.283091][ T6754] loop8: unable to read partition table [ 160.348281][ T6754] loop8: partition table beyond EOD, truncated [ 160.396195][ T6754] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 160.437495][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.485508][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.552589][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.603188][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.611850][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.679704][ T6755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.771031][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.803576][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 160.845765][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 160.894384][ T5885] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.940487][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 160.989431][ T5885] usb 3-1: config 0 has no interface number 0 [ 161.149412][ T6767] netlink: 'syz.0.273': attribute type 14 has an invalid length. [ 161.157238][ T6767] netlink: 'syz.0.273': attribute type 12 has an invalid length. [ 161.165991][ T5885] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.284646][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.309972][ T5889] usb 2-1: USB disconnect, device number 12 [ 161.351923][ T5885] usb 3-1: Product: syz [ 161.384720][ T5885] usb 3-1: Manufacturer: syz [ 161.426537][ T5885] usb 3-1: SerialNumber: syz [ 161.484329][ T5885] usb 3-1: config 0 descriptor?? [ 161.539231][ T5885] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.698344][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 161.855679][ T5885] usb 3-1: qt2_attach - failed to power on unit: -71 [ 161.889378][ T5885] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 161.924458][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 161.947219][ T6780] netlink: 68 bytes leftover after parsing attributes in process `syz.0.276'. [ 161.977988][ T5885] usb 3-1: USB disconnect, device number 8 [ 161.986292][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.053900][ T9] usb 5-1: Product: syz [ 162.097510][ T9] usb 5-1: Manufacturer: syz [ 162.129370][ T9] usb 5-1: SerialNumber: syz [ 162.188653][ T9] usb 5-1: config 0 descriptor?? [ 162.582992][ T6788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.279'. [ 162.643103][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 162.659481][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 162.711363][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 162.721396][ T6788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.279'. [ 162.797972][ T9] usb 5-1: USB disconnect, device number 7 [ 167.837408][ C1] sched: DL replenish lagged too much [ 169.668981][ T6802] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.573549][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.637650][ T979] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.763677][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 170.781822][ T5885] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 170.798538][ T5885] usb 5-1: config 0 has no interface number 0 [ 170.815474][ T5885] usb 5-1: config 0 interface 184 has no altsetting 0 [ 170.822635][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 170.835935][ T979] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 170.855891][ T6807] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 170.881583][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.978261][ T5885] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 171.013263][ T979] usb 3-1: config 0 has no interface number 0 [ 171.022510][ T6807] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 171.042759][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.067647][ T979] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 171.085835][ T5885] usb 5-1: Product: syz [ 171.094506][ T5885] usb 5-1: Manufacturer: syz [ 171.496326][ T979] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.519751][ T5885] usb 5-1: SerialNumber: syz [ 171.564961][ T5885] usb 5-1: config 0 descriptor?? [ 171.613156][ T979] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 171.633323][ T5885] smsc75xx v1.0.0 [ 171.729845][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.809041][ T979] usb 3-1: Product: syz [ 171.813304][ T979] usb 3-1: Manufacturer: syz [ 171.933736][ T979] usb 3-1: SerialNumber: syz [ 172.022532][ T979] usb 3-1: config 0 descriptor?? [ 172.079304][ T6802] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.179350][ T979] usb-storage 3-1:0.231: USB Mass Storage device detected [ 172.230537][ T6818] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 29 [ 172.248445][ T5885] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 172.363777][ T5885] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 173.470222][ T5885] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 174.937529][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.098071][ T5885] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 179.227524][ T5885] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 180.405042][ T5885] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 180.475107][ T979] usb 3-1: USB disconnect, device number 9 [ 180.528257][ T9] usb 1-1: device descriptor read/all, error -71 [ 180.596369][ T5885] usb 5-1: USB disconnect, device number 8 [ 180.809713][ T6837] loop8: detected capacity change from 0 to 7 [ 180.921227][ T6837] Dev loop8: unable to read RDB block 7 [ 180.926901][ T6837] loop8: unable to read partition table [ 181.015481][ T6837] loop8: partition table beyond EOD, truncated [ 181.267612][ T6837] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.387638][ T5885] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 181.800050][ T5885] usb 2-1: device descriptor read/64, error -71 [ 182.107495][ T5885] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 182.417911][ T5885] usb 2-1: device descriptor read/64, error -71 [ 182.588098][ T5885] usb usb2-port1: attempt power cycle [ 183.367884][ T5885] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 188.599099][ T5885] usb 2-1: device descriptor read/8, error -71 [ 189.668317][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'. [ 192.106769][ T5885] hid-generic 8001:0006:0001.0004: unknown main item tag 0x1 [ 192.181812][ T5885] hid-generic 8001:0006:0001.0004: reserved main item tag 0xd [ 192.284271][ T5885] hid-generic 8001:0006:0001.0004: unknown main item tag 0x6 [ 192.418326][ T5885] hid-generic 8001:0006:0001.0004: item fetching failed at offset 21/77 [ 192.487516][ T5913] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.658253][ T5885] hid-generic 8001:0006:0001.0004: probe with driver hid-generic failed with error -22 [ 192.827512][ T5913] usb 2-1: device descriptor read/64, error -71 [ 193.277963][ T5913] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 193.381600][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.392003][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.400707][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.417777][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.425638][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.487697][ T5913] usb 2-1: device descriptor read/64, error -71 [ 193.508024][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.523573][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.541299][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.552098][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.582444][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.613012][ T5913] usb usb2-port1: attempt power cycle [ 194.017603][ T5913] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 194.081929][ T5913] usb 2-1: device descriptor read/8, error -71 [ 194.347594][ T5913] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 194.416513][ T5913] usb 2-1: device descriptor read/8, error -71 [ 194.468291][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.486005][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538199][ T5913] usb usb2-port1: unable to enumerate USB device [ 195.603514][ T5846] Bluetooth: hci2: command tx timeout [ 195.677763][ T5846] Bluetooth: hci5: command tx timeout [ 196.068758][ T5849] syz-executor (5849) used greatest stack depth: 20024 bytes left [ 196.546208][ T5887] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 196.767754][ T5913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.790020][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.805862][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.931401][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 196.970879][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.976894][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.992724][ T5913] usb 5-1: config 0 has no interfaces? [ 197.003119][ T5913] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.021909][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.050076][ T5913] usb 5-1: Product: syz [ 197.060511][ T5913] usb 5-1: Manufacturer: syz [ 197.065266][ T5887] usb 1-1: SerialNumber: syz [ 197.070199][ T5913] usb 5-1: SerialNumber: syz [ 197.109868][ T5913] usb 5-1: config 0 descriptor?? [ 197.111022][ T5887] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 197.125745][ T5887] usb-storage 1-1:1.0: USB Mass Storage device detected [ 197.144088][ T5887] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 197.173176][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 197.230370][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.300016][ T5887] scsi host1: usb-storage 1-1:1.0 [ 197.423637][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 197.423662][ T30] audit: type=1800 audit(1748809814.231:53): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.310" name="file0" dev="tmpfs" ino=320 res=0 errno=0 [ 197.463390][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.474189][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.609639][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.679730][ T5846] Bluetooth: hci2: command tx timeout [ 197.757518][ T5846] Bluetooth: hci5: command tx timeout [ 197.871029][ T6909] @: renamed from vlan0 (while UP) [ 198.242031][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 198.252287][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 198.425217][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.515817][ T6912] geneve2: entered promiscuous mode [ 198.521473][ T6912] geneve2: entered allmulticast mode [ 198.539288][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 199.757637][ T5846] Bluetooth: hci2: command tx timeout [ 199.837529][ T5846] Bluetooth: hci5: command tx timeout [ 199.854502][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.887215][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.951141][ T24] usb 1-1: USB disconnect, device number 12 [ 200.027658][ T6876] bridge_slave_0: entered allmulticast mode [ 200.035587][ T6876] bridge_slave_0: entered promiscuous mode [ 200.088943][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.113951][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.149320][ T5887] usb 5-1: USB disconnect, device number 9 [ 200.164584][ T6876] bridge_slave_1: entered allmulticast mode [ 200.190762][ T6876] bridge_slave_1: entered promiscuous mode [ 200.363117][ T6933] FAULT_INJECTION: forcing a failure. [ 200.363117][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 200.443253][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.0.319 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 200.443283][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.443295][ T6933] Call Trace: [ 200.443303][ T6933] [ 200.443312][ T6933] dump_stack_lvl+0x189/0x250 [ 200.443362][ T6933] ? __pfx____ratelimit+0x10/0x10 [ 200.443387][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.443418][ T6933] ? __pfx__printk+0x10/0x10 [ 200.443457][ T6933] ? __pfx___might_resched+0x10/0x10 [ 200.443482][ T6933] ? fs_reclaim_acquire+0x7d/0x100 [ 200.443507][ T6933] should_fail_ex+0x414/0x560 [ 200.443538][ T6933] should_failslab+0xa8/0x100 [ 200.443569][ T6933] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 200.443596][ T6933] ? __d_alloc+0x31/0x6f0 [ 200.443615][ T6933] ? look_up_lock_class+0x74/0x170 [ 200.443642][ T6933] __d_alloc+0x31/0x6f0 [ 200.443664][ T6933] ? __lock_acquire+0xab9/0xd20 [ 200.443689][ T6933] d_alloc_parallel+0xe0/0x14e0 [ 200.443729][ T6933] ? __d_lookup+0x66/0x780 [ 200.443757][ T6933] ? __pfx_d_alloc_parallel+0x10/0x10 [ 200.443806][ T6933] path_openat+0xa3b/0x3830 [ 200.443829][ T6933] ? arch_stack_walk+0xfc/0x150 [ 200.443891][ T6933] ? __pfx_path_openat+0x10/0x10 [ 200.443912][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.443951][ T6933] do_filp_open+0x1fa/0x410 [ 200.443971][ T6933] ? __lock_acquire+0xab9/0xd20 [ 200.443993][ T6933] ? __pfx_do_filp_open+0x10/0x10 [ 200.444038][ T6933] ? _raw_spin_unlock+0x28/0x50 [ 200.444057][ T6933] ? alloc_fd+0x64c/0x6c0 [ 200.444098][ T6933] do_sys_openat2+0x121/0x1c0 [ 200.444123][ T6933] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.444145][ T6933] ? ksys_write+0x22a/0x250 [ 200.444174][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 200.444198][ T6933] ? rcu_is_watching+0x15/0xb0 [ 200.444230][ T6933] __x64_sys_creat+0x8f/0xc0 [ 200.444275][ T6933] do_syscall_64+0xfa/0x3b0 [ 200.444300][ T6933] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.444324][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.444343][ T6933] ? clear_bhb_loop+0x60/0xb0 [ 200.444368][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.444388][ T6933] RIP: 0033:0x7faa97b8e969 [ 200.444414][ T6933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.444431][ T6933] RSP: 002b:00007faa989cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 200.444453][ T6933] RAX: ffffffffffffffda RBX: 00007faa97db5fa0 RCX: 00007faa97b8e969 [ 200.444467][ T6933] RDX: 0000000000000000 RSI: 00000000000000ac RDI: 0000200000000100 [ 200.444480][ T6933] RBP: 00007faa989cf090 R08: 0000000000000000 R09: 0000000000000000 [ 200.444492][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.444504][ T6933] R13: 0000000000000000 R14: 00007faa97db5fa0 R15: 00007faa97edfa28 [ 200.444536][ T6933] [ 200.451227][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 200.851336][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.931688][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.010708][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.259919][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.267156][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.301096][ T6877] bridge_slave_0: entered allmulticast mode [ 201.325782][ T6877] bridge_slave_0: entered promiscuous mode [ 201.429894][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.683755][ T6876] team0: Port device team_slave_0 added [ 201.752313][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.759910][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.778451][ T6877] bridge_slave_1: entered allmulticast mode [ 201.790366][ T6877] bridge_slave_1: entered promiscuous mode [ 201.847162][ T5846] Bluetooth: hci2: command tx timeout [ 201.906052][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.930886][ T5846] Bluetooth: hci5: command tx timeout [ 201.997171][ T6876] team0: Port device team_slave_1 added [ 202.216877][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.475418][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.511430][ T6961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.324'. [ 202.521038][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 202.533540][ T6961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.324'. [ 202.659317][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.694087][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.698731][ T6946] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 202.767590][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.790922][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.831092][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.847571][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.905673][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.266986][ T6975] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 203.342636][ T6877] team0: Port device team_slave_0 added [ 203.388461][ T6877] team0: Port device team_slave_1 added [ 203.416818][ T6876] hsr_slave_0: entered promiscuous mode [ 203.429991][ T6876] hsr_slave_1: entered promiscuous mode [ 203.445378][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.461588][ T6876] Cannot create hsr debugfs directory [ 203.778722][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.792544][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.823862][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.836265][ T49] bridge_slave_1: left allmulticast mode [ 203.843767][ T49] bridge_slave_1: left promiscuous mode [ 203.882007][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.939273][ T49] bridge_slave_0: left allmulticast mode [ 203.953518][ T49] bridge_slave_0: left promiscuous mode [ 203.961705][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.473191][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.484967][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.495576][ T49] bond0 (unregistering): Released all slaves [ 204.611674][ T49] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 204.625565][ T49] bond1 (unregistering): (slave vlan2): Releasing active interface [ 204.637099][ T49] bond1 (unregistering): Released all slaves [ 205.845431][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.875126][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.885696][ T49] bond0 (unregistering): Released all slaves [ 205.901533][ T49] bond1 (unregistering): Released all slaves [ 205.929409][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.937584][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.965448][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.345614][ T6877] hsr_slave_0: entered promiscuous mode [ 206.365501][ T6877] hsr_slave_1: entered promiscuous mode [ 206.372643][ T6877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.397593][ T6877] Cannot create hsr debugfs directory [ 207.005582][ T7010] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 207.041134][ T7010] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 207.048673][ T918] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 207.077317][ T7010] veth1_virt_wifi: entered allmulticast mode [ 207.086660][ T7010] veth1_virt_wifi: left allmulticast mode [ 207.230566][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 207.257004][ T918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.276331][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.304425][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.325477][ T918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.345807][ T918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.388269][ T918] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.403833][ T918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.444373][ T918] usb 2-1: Manufacturer: syz [ 207.453806][ T918] usb 2-1: config 0 descriptor?? [ 207.740420][ T49] hsr_slave_0: left promiscuous mode [ 207.762761][ T49] hsr_slave_1: left promiscuous mode [ 207.769712][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.786184][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.820683][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.874868][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.106751][ T49] hsr_slave_0: left promiscuous mode [ 208.129175][ T49] hsr_slave_1: left promiscuous mode [ 208.136463][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.171835][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.264366][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.273247][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.347620][ T918] rc_core: IR keymap rc-hauppauge not found [ 208.353969][ T918] Registered IR keymap rc-empty [ 208.405437][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.437615][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.471854][ T918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 208.479492][ T49] veth1_macvtap: left promiscuous mode [ 208.495508][ T49] veth0_macvtap: left promiscuous mode [ 208.496666][ T918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 208.502679][ T49] veth1_vlan: left promiscuous mode [ 208.522156][ T49] veth0_vlan: left promiscuous mode [ 208.531877][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.551961][ T49] veth1_macvtap: left promiscuous mode [ 208.559547][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.567204][ T49] veth0_macvtap: left promiscuous mode [ 208.573574][ T49] veth1_vlan: left promiscuous mode [ 208.579391][ T49] veth0_vlan: left promiscuous mode [ 208.586397][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.634271][ T7049] xt_bpf: check failed: parse error [ 208.651013][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.698222][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.757678][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.777620][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.797709][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.819850][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.847928][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 208.867638][ T5887] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 208.880755][ T918] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.897974][ T5913] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.907250][ T918] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.028612][ T5913] usb 5-1: device descriptor read/64, error -71 [ 209.098525][ T5887] usb 1-1: config 0 has no interfaces? [ 209.131216][ T5887] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 209.173127][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.186194][ T5887] usb 1-1: Product: syz [ 209.194586][ T5887] usb 1-1: Manufacturer: syz [ 209.206777][ T5887] usb 1-1: SerialNumber: syz [ 209.233080][ T5887] usb 1-1: config 0 descriptor?? [ 209.278730][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.437576][ T5913] usb 5-1: device descriptor read/64, error -71 [ 209.560949][ T5913] usb usb5-port1: attempt power cycle [ 209.972172][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 210.020392][ T5913] usb 5-1: device descriptor read/8, error -71 [ 210.266467][ T49] team0 (unregistering): Port device team_slave_1 removed [ 210.279442][ T5913] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 210.335276][ T5913] usb 5-1: device descriptor read/8, error -71 [ 210.352257][ T49] team0 (unregistering): Port device team_slave_0 removed [ 210.458100][ T5913] usb usb5-port1: unable to enumerate USB device [ 211.541480][ T49] team0 (unregistering): Port device team_slave_1 removed [ 211.595533][ T49] team0 (unregistering): Port device team_slave_0 removed [ 212.138515][ T9] usb 2-1: USB disconnect, device number 21 [ 212.314129][ T5887] IPVS: starting estimator thread 0... [ 212.322969][ T7057] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 212.428078][ T7058] IPVS: using max 29 ests per chain, 69600 per kthread [ 212.485531][ T6876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.546675][ T6876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.590252][ T6876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.609553][ T6876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.670336][ T5895] usb 1-1: USB disconnect, device number 13 [ 213.026744][ T6877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.095918][ T6877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.146092][ T6877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.216877][ T6877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.527074][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.916318][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.981463][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.988637][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.052442][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.112420][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.123041][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.131186][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.196571][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.309468][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 214.348867][ T9] usb 5-1: config 0 has no interfaces? [ 214.356419][ T9] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 214.356443][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.356458][ T9] usb 5-1: Product: syz [ 214.356469][ T9] usb 5-1: Manufacturer: syz [ 214.356480][ T9] usb 5-1: SerialNumber: syz [ 214.367904][ T9] usb 5-1: config 0 descriptor?? [ 214.374248][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.374396][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.376528][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.376633][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.446681][ T6876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.446739][ T6876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.575923][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 214.575963][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 214.581720][ T7090] dummy0: entered promiscuous mode [ 214.587004][ T7090] bond0: entered promiscuous mode [ 214.587028][ T7090] bond_slave_0: entered promiscuous mode [ 214.587209][ T7090] bond_slave_1: entered promiscuous mode [ 214.609282][ T7090] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 214.609345][ T7090] Cannot create hsr debugfs directory [ 214.678979][ T5895] usb 5-1: USB disconnect, device number 14 [ 214.709167][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.726669][ T6877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.138580][ T6876] veth0_vlan: entered promiscuous mode [ 215.157916][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.406378][ T6876] veth1_vlan: entered promiscuous mode [ 215.570485][ T6877] veth0_vlan: entered promiscuous mode [ 215.628423][ T6876] veth0_macvtap: entered promiscuous mode [ 215.651595][ T6877] veth1_vlan: entered promiscuous mode [ 215.667279][ T6876] veth1_macvtap: entered promiscuous mode [ 215.790409][ T6877] veth0_macvtap: entered promiscuous mode [ 215.813626][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.843679][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.884700][ T6877] veth1_macvtap: entered promiscuous mode [ 215.913255][ T6876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.951490][ T6876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.972669][ T6876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.987725][ T7123] netlink: 'syz.4.357': attribute type 10 has an invalid length. [ 215.997890][ T6876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.014550][ T7125] loop8: detected capacity change from 0 to 7 [ 216.031981][ T6855] Dev loop8: unable to read RDB block 7 [ 216.040170][ T6855] loop8: unable to read partition table [ 216.046118][ T6855] loop8: partition table beyond EOD, truncated [ 216.074163][ T7125] Dev loop8: unable to read RDB block 7 [ 216.091779][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.109070][ T7125] loop8: unable to read partition table [ 216.118314][ T7125] loop8: partition table beyond EOD, truncated [ 216.124601][ T7125] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.181577][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.386974][ T6877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.430448][ T6877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.447325][ T6877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.456473][ T6877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.606494][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.635553][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.746336][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.756691][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.787522][ T5885] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 216.875562][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.941539][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.980155][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 217.016030][ T5885] usb 1-1: config 5 has an invalid interface number: 162 but max is 0 [ 217.073844][ T5885] usb 1-1: config 5 has no interface number 0 [ 217.096659][ T5885] usb 1-1: config 5 interface 162 has no altsetting 0 [ 217.106149][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.112914][ T5885] usb 1-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 217.133598][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.137585][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.144220][ T5885] usb 1-1: Product: syz [ 217.228150][ T5885] usb 1-1: Manufacturer: syz [ 217.249357][ T5885] usb 1-1: SerialNumber: syz [ 217.304210][ T7153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.311579][ T7153] IPv6: NLM_F_CREATE should be set when creating new route [ 217.484548][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.504892][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.514211][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 217.572868][ T5885] usb-storage 1-1:5.162: USB Mass Storage device detected [ 217.580363][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 217.622014][ T5885] usb-storage 1-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.15.0-syzkaller-10769-g7d4e49a77d99) [ 217.622014][ T5885] Please send a copy of this message to and [ 217.649779][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.656629][ T7165] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.368'. [ 217.760526][ T5885] usb 1-1: USB disconnect, device number 14 [ 217.770222][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.824056][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.852957][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.891489][ T9] usb 2-1: config 0 descriptor?? [ 218.382478][ T7184] netlink: 80 bytes leftover after parsing attributes in process `syz.5.374'. [ 218.530995][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 218.613022][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input10 [ 218.688411][ T7192] netlink: 'syz.4.378': attribute type 3 has an invalid length. [ 218.908275][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 219.088348][ T7207] netlink: 72 bytes leftover after parsing attributes in process `syz.6.383'. [ 219.154962][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.163805][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.295991][ T24] usb 2-1: USB disconnect, device number 22 [ 219.358344][ T7208] fido_id[7208]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 219.367590][ T5887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.565486][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 219.577627][ T918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.603246][ T5887] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 219.643388][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.657890][ T5887] usb 5-1: config 0 has no interface number 0 [ 219.664184][ T5887] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 219.674933][ T5887] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 55438, setting to 1024 [ 219.677698][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.6.387'. [ 219.688871][ T5887] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 219.759967][ T5887] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.787518][ T918] usb 6-1: Using ep0 maxpacket: 32 [ 219.819947][ T918] usb 6-1: no configurations [ 219.825929][ T918] usb 6-1: can't read configurations, error -22 [ 219.858013][ T5887] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 219.883266][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.900619][ T5887] usb 5-1: Product: syz [ 219.915291][ T5887] usb 5-1: Manufacturer: syz [ 219.935554][ T5887] usb 5-1: SerialNumber: syz [ 220.007886][ T5887] usb 5-1: config 0 descriptor?? [ 220.017903][ T918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.043696][ T7206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.057771][ T7206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.214489][ T918] usb 6-1: Using ep0 maxpacket: 32 [ 220.229694][ T918] usb 6-1: no configurations [ 220.243047][ T918] usb 6-1: can't read configurations, error -22 [ 220.267830][ T918] usb usb6-port1: attempt power cycle [ 220.411260][ T5887] usb 5-1: probing VID:PID(0424:012C) [ 220.419398][ T5887] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 220.455458][ T5887] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 220.473058][ T5887] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 220.520609][ T5887] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 220.545955][ T5887] usb 5-1: USB disconnect, device number 15 [ 220.786644][ T918] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 220.824305][ T918] usb 6-1: Using ep0 maxpacket: 32 [ 220.830318][ T918] usb 6-1: no configurations [ 220.835057][ T918] usb 6-1: can't read configurations, error -22 [ 220.988114][ T918] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 221.032573][ T918] usb 6-1: Using ep0 maxpacket: 32 [ 221.038832][ T7253] fuse: root generation should be zero [ 221.056247][ T918] usb 6-1: no configurations [ 221.061669][ T918] usb 6-1: can't read configurations, error -22 [ 221.084893][ T918] usb usb6-port1: unable to enumerate USB device [ 221.381721][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 222.342434][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 222.382948][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 222.558400][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 222.563423][ T7292] FAULT_INJECTION: forcing a failure. [ 222.563423][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 222.591261][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.4.408 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 222.591284][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.591293][ T7292] Call Trace: [ 222.591300][ T7292] [ 222.591307][ T7292] dump_stack_lvl+0x189/0x250 [ 222.591333][ T7292] ? __pfx____ratelimit+0x10/0x10 [ 222.591353][ T7292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.591374][ T7292] ? __pfx__printk+0x10/0x10 [ 222.591394][ T7292] ? __pfx___might_resched+0x10/0x10 [ 222.591412][ T7292] ? fs_reclaim_acquire+0x7d/0x100 [ 222.591449][ T7292] should_fail_ex+0x414/0x560 [ 222.591471][ T7292] should_failslab+0xa8/0x100 [ 222.591496][ T7292] __kmalloc_cache_noprof+0x70/0x3d0 [ 222.591516][ T7292] ? udmabuf_create+0xc8/0xf70 [ 222.591535][ T7292] ? do_user_addr_fault+0xbc1/0x1390 [ 222.591554][ T7292] udmabuf_create+0xc8/0xf70 [ 222.591574][ T7292] ? do_user_addr_fault+0xc8a/0x1390 [ 222.591595][ T7292] ? irqentry_exit+0x74/0x90 [ 222.591613][ T7292] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.591631][ T7292] ? irqentry_exit+0x74/0x90 [ 222.591647][ T7292] ? exc_page_fault+0x9f/0xf0 [ 222.591667][ T7292] ? __pfx_udmabuf_create+0x10/0x10 [ 222.591693][ T7292] ? rep_movs_alternative+0x4a/0x90 [ 222.591708][ T7292] ? _copy_from_user+0x94/0xb0 [ 222.591726][ T7292] udmabuf_ioctl+0x25c/0x2c0 [ 222.591748][ T7292] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 222.591769][ T7292] ? __fget_files+0x2a/0x420 [ 222.591784][ T7292] ? __fget_files+0x2a/0x420 [ 222.591797][ T7292] ? __fget_files+0x3a0/0x420 [ 222.591809][ T7292] ? __fget_files+0x2a/0x420 [ 222.591825][ T7292] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.591843][ T7292] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 222.591863][ T7292] __se_sys_ioctl+0xfc/0x170 [ 222.591884][ T7292] do_syscall_64+0xfa/0x3b0 [ 222.591903][ T7292] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.591919][ T7292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.591934][ T7292] ? clear_bhb_loop+0x60/0xb0 [ 222.591951][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.591966][ T7292] RIP: 0033:0x7f4065b8e969 [ 222.591979][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.591992][ T7292] RSP: 002b:00007f4066920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.592007][ T7292] RAX: ffffffffffffffda RBX: 00007f4065db5fa0 RCX: 00007f4065b8e969 [ 222.592018][ T7292] RDX: 0000200000000080 RSI: 0000000040087543 RDI: 0000000000000003 [ 222.592027][ T7292] RBP: 00007f4066920090 R08: 0000000000000000 R09: 0000000000000000 [ 222.592036][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.592044][ T7292] R13: 0000000000000000 R14: 00007f4065db5fa0 R15: 00007f4065edfa28 [ 222.592066][ T7292] [ 222.868262][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.081277][ T7296] loop8: detected capacity change from 0 to 1 [ 223.090464][ T6855] Dev loop8: unable to read RDB block 1 [ 223.097727][ T6855] loop8: unable to read partition table [ 223.105007][ T6855] loop8: partition table beyond EOD, truncated [ 223.187733][ T7296] Dev loop8: unable to read RDB block 1 [ 223.228331][ T7296] loop8: unable to read partition table [ 223.238935][ T7296] loop8: partition table beyond EOD, truncated [ 223.328255][ T7296] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 223.947310][ T7321] netlink: 'syz.1.416': attribute type 3 has an invalid length. [ 224.067118][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'. [ 224.107788][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.417'. [ 224.184080][ T7332] FAULT_INJECTION: forcing a failure. [ 224.184080][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 224.416748][ T7332] CPU: 1 UID: 0 PID: 7332 Comm: syz.1.419 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 224.416778][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.416791][ T7332] Call Trace: [ 224.416800][ T7332] [ 224.416808][ T7332] dump_stack_lvl+0x189/0x250 [ 224.416843][ T7332] ? __pfx____ratelimit+0x10/0x10 [ 224.416869][ T7332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.416900][ T7332] ? __pfx__printk+0x10/0x10 [ 224.416929][ T7332] ? __pfx___might_resched+0x10/0x10 [ 224.416954][ T7332] ? fs_reclaim_acquire+0x7d/0x100 [ 224.417000][ T7332] should_fail_ex+0x414/0x560 [ 224.417031][ T7332] ? file_tty_write+0x2a6/0x990 [ 224.417058][ T7332] should_failslab+0xa8/0x100 [ 224.417090][ T7332] __kvmalloc_node_noprof+0x168/0x600 [ 224.417121][ T7332] ? file_tty_write+0x2a6/0x990 [ 224.417157][ T7332] file_tty_write+0x2a6/0x990 [ 224.417197][ T7332] iter_file_splice_write+0x93a/0x1000 [ 224.417256][ T7332] ? __pfx_iter_file_splice_write+0x10/0x10 [ 224.417290][ T7332] ? __pfx_copy_splice_read+0x10/0x10 [ 224.417316][ T7332] ? look_up_lock_class+0x74/0x170 [ 224.417357][ T7332] ? __pfx_iter_file_splice_write+0x10/0x10 [ 224.417387][ T7332] direct_splice_actor+0x101/0x160 [ 224.417422][ T7332] splice_direct_to_actor+0x5a5/0xcc0 [ 224.417473][ T7332] ? __pfx_direct_splice_actor+0x10/0x10 [ 224.417502][ T7332] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 224.417532][ T7332] ? __pfx_aa_file_perm+0x10/0x10 [ 224.417569][ T7332] do_splice_direct+0x181/0x270 [ 224.417603][ T7332] ? __pfx_do_splice_direct+0x10/0x10 [ 224.417633][ T7332] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 224.417654][ T7332] ? bpf_lsm_file_permission+0x9/0x20 [ 224.417679][ T7332] ? security_file_permission+0x75/0x290 [ 224.417704][ T7332] ? rw_verify_area+0x258/0x650 [ 224.417735][ T7332] do_sendfile+0x4da/0x7e0 [ 224.417755][ T7332] ? __pfx_vfs_write+0x10/0x10 [ 224.417788][ T7332] ? __pfx_do_sendfile+0x10/0x10 [ 224.417807][ T7332] ? __fget_files+0x3a0/0x420 [ 224.417838][ T7332] __se_sys_sendfile64+0x13e/0x190 [ 224.417861][ T7332] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 224.417879][ T7332] ? rcu_is_watching+0x15/0xb0 [ 224.417911][ T7332] ? do_syscall_64+0xbe/0x3b0 [ 224.417942][ T7332] do_syscall_64+0xfa/0x3b0 [ 224.417975][ T7332] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.417999][ T7332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.418019][ T7332] ? clear_bhb_loop+0x60/0xb0 [ 224.418045][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.418063][ T7332] RIP: 0033:0x7f81af98e969 [ 224.418082][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.418099][ T7332] RSP: 002b:00007f81b070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.418119][ T7332] RAX: ffffffffffffffda RBX: 00007f81afbb5fa0 RCX: 00007f81af98e969 [ 224.418133][ T7332] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 224.418144][ T7332] RBP: 00007f81b070f090 R08: 0000000000000000 R09: 0000000000000000 [ 224.418156][ T7332] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000002 [ 224.418169][ T7332] R13: 0000000000000000 R14: 00007f81afbb5fa0 R15: 00007f81afcdfa28 [ 224.418200][ T7332] [ 225.677944][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.857813][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 225.921380][ T9] usb 5-1: config 162 has an invalid interface number: 161 but max is 1 [ 225.985576][ T9] usb 5-1: config 162 has an invalid interface number: 187 but max is 1 [ 226.051720][ T9] usb 5-1: config 162 has no interface number 0 [ 226.189079][ T9] usb 5-1: config 162 has no interface number 1 [ 226.326994][ T9] usb 5-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.397983][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 226.601136][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 226.627533][ T9] usb 5-1: config 162 interface 187 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 226.638735][ T5888] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 226.669252][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.721896][ T5888] usb 2-1: Product: syz [ 226.726139][ T5888] usb 2-1: Manufacturer: syz [ 226.760143][ T5888] usb 2-1: SerialNumber: syz [ 226.788358][ T9] usb 5-1: config 162 interface 187 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 226.860956][ T5888] usb 2-1: config 0 descriptor?? [ 226.903026][ T9] usb 5-1: config 162 interface 187 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 227.055668][ T9] usb 5-1: config 162 interface 187 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 227.135554][ T9] usb 5-1: config 162 interface 187 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 227.181947][ T5888] usb_8dev 2-1:0.0 can0: sending command message failed [ 227.202154][ T5888] usb_8dev 2-1:0.0 can0: can't get firmware version [ 227.220788][ T9] usb 5-1: config 162 interface 161 has no altsetting 0 [ 227.266167][ T9] usb 5-1: config 162 interface 187 has no altsetting 0 [ 227.338861][ T9] usb 5-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 227.348638][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.356790][ T9] usb 5-1: Product: syz [ 227.430428][ T9] usb 5-1: Manufacturer: syz [ 227.488591][ T5888] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 227.513455][ T5888] usb 2-1: USB disconnect, device number 23 [ 227.546387][ T9] usb 5-1: SerialNumber: syz [ 227.844547][ T7381] FAULT_INJECTION: forcing a failure. [ 227.844547][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 227.947505][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.1.430 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 227.947536][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.947562][ T7381] Call Trace: [ 227.947570][ T7381] [ 227.947579][ T7381] dump_stack_lvl+0x189/0x250 [ 227.947616][ T7381] ? __pfx____ratelimit+0x10/0x10 [ 227.947640][ T7381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.947668][ T7381] ? __pfx__printk+0x10/0x10 [ 227.947687][ T7381] ? __pfx___might_resched+0x10/0x10 [ 227.947706][ T7381] ? fs_reclaim_acquire+0x7d/0x100 [ 227.947733][ T7381] should_fail_ex+0x414/0x560 [ 227.947768][ T7381] should_failslab+0xa8/0x100 [ 227.947798][ T7381] __kmalloc_noprof+0xcb/0x4f0 [ 227.947827][ T7381] ? __d_alloc+0x31/0x6f0 [ 227.947842][ T7381] ? __d_alloc+0xb7/0x6f0 [ 227.947860][ T7381] __d_alloc+0xb7/0x6f0 [ 227.947875][ T7381] ? __lock_acquire+0xab9/0xd20 [ 227.947899][ T7381] d_alloc_parallel+0xe0/0x14e0 [ 227.947940][ T7381] ? __d_lookup+0x66/0x780 [ 227.947967][ T7381] ? __pfx_d_alloc_parallel+0x10/0x10 [ 227.948001][ T7381] path_openat+0xa3b/0x3830 [ 227.948019][ T7381] ? arch_stack_walk+0xfc/0x150 [ 227.948077][ T7381] ? __pfx_path_openat+0x10/0x10 [ 227.948100][ T7381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.948139][ T7381] do_filp_open+0x1fa/0x410 [ 227.948156][ T7381] ? __lock_acquire+0xab9/0xd20 [ 227.948173][ T7381] ? __pfx_do_filp_open+0x10/0x10 [ 227.948215][ T7381] ? _raw_spin_unlock+0x28/0x50 [ 227.948236][ T7381] ? alloc_fd+0x64c/0x6c0 [ 227.948276][ T7381] do_sys_openat2+0x121/0x1c0 [ 227.948299][ T7381] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.948316][ T7381] ? ksys_write+0x22a/0x250 [ 227.948337][ T7381] ? __pfx_ksys_write+0x10/0x10 [ 227.948366][ T7381] __x64_sys_creat+0x8f/0xc0 [ 227.948394][ T7381] do_syscall_64+0xfa/0x3b0 [ 227.948420][ T7381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.948437][ T7381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.948454][ T7381] ? clear_bhb_loop+0x60/0xb0 [ 227.948471][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.948485][ T7381] RIP: 0033:0x7f81af98e969 [ 227.948497][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.948514][ T7381] RSP: 002b:00007f81b070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 227.948535][ T7381] RAX: ffffffffffffffda RBX: 00007f81afbb5fa0 RCX: 00007f81af98e969 [ 227.948549][ T7381] RDX: 0000000000000000 RSI: 00000000000000ac RDI: 0000200000000100 [ 227.948561][ T7381] RBP: 00007f81b070f090 R08: 0000000000000000 R09: 0000000000000000 [ 227.948573][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.948585][ T7381] R13: 0000000000000000 R14: 00007f81afbb5fa0 R15: 00007f81afcdfa28 [ 227.948616][ T7381] [ 229.887616][ T7416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.913322][ T7416] netlink: 'syz.6.435': attribute type 1 has an invalid length. [ 230.287878][ T9] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 230.429092][ T7420] vlan2: entered allmulticast mode [ 230.436289][ T9] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 230.494180][ T7420] veth1_to_team: entered allmulticast mode [ 230.571754][ T9] usb 5-1: USB disconnect, device number 16 [ 231.267584][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 231.356590][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.386838][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.438891][ T9] usb 5-1: device descriptor read/64, error -71 [ 231.625475][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 231.660663][ T979] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 231.717498][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.919350][ T9] usb 5-1: device descriptor read/64, error -71 [ 232.037959][ T9] usb usb5-port1: attempt power cycle [ 232.064717][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.443'. [ 232.147498][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.443'. [ 232.397533][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 232.429626][ T9] usb 5-1: device descriptor read/8, error -71 [ 232.691664][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 232.814191][ T9] usb 5-1: device descriptor read/8, error -71 [ 232.938728][ T9] usb usb5-port1: unable to enumerate USB device [ 232.966559][ T7469] netlink: 'syz.5.447': attribute type 1 has an invalid length. [ 232.990781][ T7469] vlan2: entered allmulticast mode [ 232.996130][ T7469] veth1: entered allmulticast mode [ 234.077588][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.778579][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 235.076238][ T5888] usb 6-1: config 162 has an invalid interface number: 161 but max is 1 [ 235.151056][ T5888] usb 6-1: config 162 has an invalid interface number: 187 but max is 1 [ 235.187536][ T5888] usb 6-1: config 162 has no interface number 0 [ 235.193858][ T5888] usb 6-1: config 162 has no interface number 1 [ 235.237721][ T5888] usb 6-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.303036][ T5888] usb 6-1: config 162 interface 187 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 235.339424][ T5888] usb 6-1: config 162 interface 187 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 235.366346][ T5888] usb 6-1: config 162 interface 187 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 235.396928][ T5888] usb 6-1: config 162 interface 187 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 235.447605][ T5888] usb 6-1: config 162 interface 187 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 235.527425][ T5888] usb 6-1: config 162 interface 161 has no altsetting 0 [ 235.545215][ T5888] usb 6-1: config 162 interface 187 has no altsetting 0 [ 235.574776][ T5888] usb 6-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 235.593988][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.617567][ T5888] usb 6-1: Product: syz [ 235.621851][ T5888] usb 6-1: Manufacturer: syz [ 235.637129][ T5888] usb 6-1: SerialNumber: syz [ 235.891431][ T7506] FAULT_INJECTION: forcing a failure. [ 235.891431][ T7506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.037448][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.1.456 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 236.037492][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.037505][ T7506] Call Trace: [ 236.037512][ T7506] [ 236.037521][ T7506] dump_stack_lvl+0x189/0x250 [ 236.037555][ T7506] ? __pfx____ratelimit+0x10/0x10 [ 236.037581][ T7506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.037609][ T7506] ? __pfx__printk+0x10/0x10 [ 236.037632][ T7506] ? fs_reclaim_acquire+0x7d/0x100 [ 236.037661][ T7506] should_fail_ex+0x414/0x560 [ 236.037691][ T7506] prepare_alloc_pages+0x213/0x610 [ 236.037721][ T7506] __alloc_frozen_pages_noprof+0x123/0x370 [ 236.037747][ T7506] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.037779][ T7506] ? policy_nodemask+0x27c/0x720 [ 236.037804][ T7506] ? __lock_acquire+0xab9/0xd20 [ 236.037832][ T7506] alloc_pages_mpol+0x232/0x4a0 [ 236.037867][ T7506] vma_alloc_folio_noprof+0xe4/0x200 [ 236.037896][ T7506] ? page_table_check_set+0x18d/0x730 [ 236.037926][ T7506] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 236.037969][ T7506] folio_prealloc+0x30/0x180 [ 236.038001][ T7506] __handle_mm_fault+0x2c88/0x5620 [ 236.038049][ T7506] ? __pfx___handle_mm_fault+0x10/0x10 [ 236.038087][ T7506] ? follow_page_pte+0x8d6/0x14b0 [ 236.038123][ T7506] handle_mm_fault+0x40a/0x8e0 [ 236.038161][ T7506] __get_user_pages+0x1af4/0x30b0 [ 236.038223][ T7506] ? __pfx___get_user_pages+0x10/0x10 [ 236.038248][ T7506] ? __gup_longterm_locked+0x309/0x15b0 [ 236.038273][ T7506] ? down_read_killable+0x1d1/0x350 [ 236.038300][ T7506] ? try_get_folio+0x633/0x660 [ 236.038337][ T7506] __gup_longterm_locked+0x3e3/0x15b0 [ 236.038384][ T7506] gup_fast_fallback+0x1cd4/0x2260 [ 236.038448][ T7506] ? __pfx_gup_fast_fallback+0x10/0x10 [ 236.038482][ T7506] ? rcu_is_watching+0x15/0xb0 [ 236.038507][ T7506] ? io_pin_pages+0x9a/0x1a0 [ 236.038535][ T7506] ? is_valid_gup_args+0x11f/0x200 [ 236.038563][ T7506] ? pin_user_pages_fast+0x4d/0xb0 [ 236.038591][ T7506] io_pin_pages+0xb5/0x1a0 [ 236.038623][ T7506] io_region_pin_pages+0x7d/0x190 [ 236.038658][ T7506] io_create_region+0x386/0x480 [ 236.038697][ T7506] io_allocate_scq_urings+0x235/0x7f0 [ 236.038729][ T7506] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 236.038749][ T7506] ? cap_capable+0x11f/0x460 [ 236.038773][ T7506] ? security_capable+0xbd/0x2e0 [ 236.038803][ T7506] io_uring_create+0x52b/0xb60 [ 236.038831][ T7506] __se_sys_io_uring_setup+0x264/0x270 [ 236.038856][ T7506] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 236.038893][ T7506] ? rcu_is_watching+0x15/0xb0 [ 236.038923][ T7506] ? do_syscall_64+0xbe/0x3b0 [ 236.038953][ T7506] do_syscall_64+0xfa/0x3b0 [ 236.038975][ T7506] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.038998][ T7506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.039017][ T7506] ? clear_bhb_loop+0x60/0xb0 [ 236.039040][ T7506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.039057][ T7506] RIP: 0033:0x7f81af98e969 [ 236.039075][ T7506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.039092][ T7506] RSP: 002b:00007f81b070efc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 236.039112][ T7506] RAX: ffffffffffffffda RBX: 00007f81afbb5fa0 RCX: 00007f81af98e969 [ 236.039127][ T7506] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000002c0c [ 236.039139][ T7506] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 236.039151][ T7506] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 236.039163][ T7506] R13: 0000000000000000 R14: 0000000000002c0c R15: 0000000000000000 [ 236.039191][ T7506] [ 236.837687][ T918] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 237.045771][ T918] usb 5-1: device descriptor read/64, error -71 [ 237.227587][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.317930][ T918] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 237.517611][ T918] usb 5-1: device descriptor read/64, error -71 [ 237.585069][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 237.633846][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.654936][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.674398][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.695403][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.709658][ T918] usb usb5-port1: attempt power cycle [ 237.716172][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.739367][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.917700][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.925807][ T24] usb 7-1: Manufacturer: syz [ 238.076956][ T24] usb 7-1: config 0 descriptor?? [ 238.097626][ T5888] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 238.139468][ T5888] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 238.147975][ T918] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 238.210166][ T918] usb 5-1: device descriptor read/8, error -71 [ 238.216915][ T5888] usb 6-1: USB disconnect, device number 6 [ 238.469912][ T918] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.492896][ T24] rc_core: IR keymap rc-hauppauge not found [ 238.510979][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.524128][ T24] Registered IR keymap rc-empty [ 238.529576][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.529803][ T918] usb 5-1: device descriptor read/8, error -71 [ 238.548618][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.568596][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 238.593310][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.624466][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 238.673637][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 238.686857][ T7529] openvswitch: netlink: Message has 24 unknown bytes. [ 238.707777][ T7529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.727947][ T918] usb usb5-port1: unable to enumerate USB device [ 238.750828][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 238.847940][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 238.858743][ T7529] kvm: apic: phys broadcast and lowest prio [ 238.907619][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 238.989624][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.022116][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.067720][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.114318][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.157595][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.177727][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 239.195732][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.239663][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.267264][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 239.328485][ T24] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.385161][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 239.399046][ T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 239.406434][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.426056][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 239.454596][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 239.492283][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 239.507840][ T24] usb 7-1: USB disconnect, device number 2 [ 239.545503][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.583437][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.634833][ T9] usb 1-1: SerialNumber: syz [ 239.698065][ T7535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.750433][ T9] cdc_acm 1-1:1.0: skipping garbage [ 239.775337][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 239.814972][ T9] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 239.828945][ T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 240.145337][ T9] usb 1-1: USB disconnect, device number 15 [ 240.412417][ T7565] loop6: detected capacity change from 0 to 7 [ 240.420887][ T7565] Dev loop6: unable to read RDB block 7 [ 240.426580][ T7565] loop6: unable to read partition table [ 240.434577][ T7565] loop6: partition table beyond EOD, truncated [ 240.442211][ T7565] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.699397][ T7590] trusted_key: encrypted_key: keyword '_z„N”W÷Ìult' not recognized [ 242.027653][ T5885] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 242.300944][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.334097][ T5885] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 242.427661][ T5885] usb 1-1: config 6 has no interface number 0 [ 242.480863][ T5885] usb 1-1: config 6 interface 200 has no altsetting 0 [ 242.495470][ T5885] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 242.505731][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.515440][ T5885] usb 1-1: Product: syz [ 242.521954][ T5885] usb 1-1: Manufacturer: syz [ 242.529728][ T5885] usb 1-1: SerialNumber: syz [ 243.479822][ T5885] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 243.538815][ T5885] dvb-usb: bulk message failed: -71 (3/0) [ 243.617240][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.647107][ T48] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 243.660993][ T5885] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 243.701597][ T5885] usb 1-1: media controller created [ 243.822880][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.833730][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 243.891994][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.921716][ T48] usb 7-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 243.963684][ T5885] dvb-usb: bulk message failed: -71 (6/0) [ 243.979799][ T5885] dvb-usb: bulk message failed: -71 (6/0) [ 243.986503][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.017040][ T5885] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 244.033778][ T48] usb 7-1: config 0 descriptor?? [ 244.088020][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 244.155678][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 244.191016][ T5885] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 244.270795][ T5885] usb 1-1: USB disconnect, device number 16 [ 244.307776][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 244.426835][ T5885] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 244.481670][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 244.503913][ T9] usb 2-1: config 0 has no interfaces? [ 244.522345][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 244.532404][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.541630][ T9] usb 2-1: Product: syz [ 244.566755][ T9] usb 2-1: Manufacturer: syz [ 244.576268][ T48] waltop 0003:172F:0037.0006: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.6-1/input0 [ 244.578867][ T9] usb 2-1: SerialNumber: syz [ 244.624880][ T9] usb 2-1: config 0 descriptor?? [ 244.702854][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.721153][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.816131][ T30] audit: type=1326 audit(1748809861.631:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 244.854464][ T30] audit: type=1326 audit(1748809861.631:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 244.859728][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 244.891844][ T979] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 244.897826][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 244.930614][ T7622] dummy0: entered promiscuous mode [ 244.935899][ T30] audit: type=1326 audit(1748809861.671:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 244.960427][ T7622] bond0: entered promiscuous mode [ 244.965608][ T7622] bond_slave_0: entered promiscuous mode [ 244.974682][ T7622] bond_slave_1: entered promiscuous mode [ 244.982101][ T7622] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 244.989974][ T7622] Cannot create hsr debugfs directory [ 244.995539][ T7622] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 245.014877][ T7622] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 245.026491][ T30] audit: type=1326 audit(1748809861.671:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 245.067467][ T30] audit: type=1326 audit(1748809861.671:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 245.099263][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 245.100143][ T48] usb 2-1: USB disconnect, device number 25 [ 245.125620][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.134881][ T30] audit: type=1326 audit(1748809861.701:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa97b8d2d0 code=0x7ffc0000 [ 245.179976][ T979] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 245.198119][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.203419][ T30] audit: type=1326 audit(1748809861.701:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 245.220794][ T979] usb 5-1: Product: syz [ 245.259830][ T979] usb 5-1: Manufacturer: syz [ 245.266686][ T979] usb 5-1: SerialNumber: syz [ 245.269060][ T7645] geneve2: left promiscuous mode [ 245.283661][ T979] usb 5-1: config 0 descriptor?? [ 245.326257][ T30] audit: type=1326 audit(1748809861.701:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 245.393156][ T30] audit: type=1326 audit(1748809861.701:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 245.440540][ T30] audit: type=1326 audit(1748809861.701:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7639 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa97b8e969 code=0x7ffc0000 [ 245.487207][ T7651] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 245.497484][ T5885] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 245.516925][ T979] usb 5-1: USB disconnect, device number 25 [ 245.705710][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.760047][ T5885] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 245.791261][ T5885] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 245.805763][ T7662] Cannot find del_set index 0 as target [ 245.827555][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.861944][ T5885] usb 6-1: config 0 descriptor?? [ 245.881380][ T5885] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 245.892329][ T5885] dvb-usb: bulk message failed: -22 (3/0) [ 245.913992][ T5885] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 245.969036][ T5885] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 245.996123][ T5885] usb 6-1: media controller created [ 246.015922][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.074270][ T5885] dvb-usb: bulk message failed: -22 (6/0) [ 246.114215][ T5885] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 246.156488][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 246.178533][ T5885] dvb-usb: schedule remote query interval to 150 msecs. [ 246.178560][ T5885] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 246.189768][ T5885] usb 6-1: USB disconnect, device number 7 [ 246.250946][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 246.316563][ T5885] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 246.414970][ T48] usb 7-1: USB disconnect, device number 3 [ 246.616396][ T7680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.497'. [ 246.652356][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.652682][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.677620][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.716775][ T918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.787540][ T5885] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 246.849253][ T7682] bond1 (unregistering): Released all slaves [ 246.917545][ T48] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 246.974123][ T5885] usb 5-1: Invalid ep0 maxpacket: 16 [ 246.991101][ T7689] xt_CT: No such helper "snmp" [ 247.078355][ T48] usb 7-1: Using ep0 maxpacket: 32 [ 247.110830][ T48] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.127455][ T48] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.128034][ T5885] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 247.136319][ T48] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.155111][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.193477][ T48] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.213554][ T48] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.260224][ T48] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.283019][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.305498][ T5885] usb 5-1: Invalid ep0 maxpacket: 16 [ 247.311612][ T5885] usb usb5-port1: attempt power cycle [ 247.347726][ T48] usb 7-1: config 0 descriptor?? [ 247.373105][ T7699] binder: BINDER_SET_CONTEXT_MGR already set [ 247.380472][ T7699] binder: 7693:7699 ioctl 4018620d 200000000040 returned -16 [ 247.396537][ T7699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.500'. [ 247.642771][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.654713][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.676814][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.685902][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.697762][ T5885] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 247.743012][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.752622][ T5885] usb 5-1: Invalid ep0 maxpacket: 16 [ 247.854244][ T48] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.897589][ T5885] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 248.028561][ T5885] usb 5-1: Invalid ep0 maxpacket: 16 [ 248.040053][ T5885] usb usb5-port1: unable to enumerate USB device [ 249.764504][ T48] usb 7-1: USB disconnect, device number 4 [ 249.788745][ T48] usblp0: removed [ 250.018632][ T7734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.507'. [ 250.727536][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.977462][ T48] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 251.207428][ T48] usb 7-1: Using ep0 maxpacket: 32 [ 251.219901][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.266092][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.292997][ T48] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.317286][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.338008][ T7755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.345276][ T7755] IPv6: NLM_F_CREATE should be set when creating new route [ 251.417571][ T48] usb 7-1: config 0 descriptor?? [ 251.427048][ T48] hub 7-1:0.0: USB hub found [ 251.650407][ T48] hub 7-1:0.0: 1 port detected [ 251.857221][ T48] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 251.917550][ T48] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 251.948553][ T48] usbhid 7-1:0.0: can't add hid device: -71 [ 251.954565][ T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 252.048508][ T48] usb 7-1: USB disconnect, device number 5 [ 252.286782][ T7768] bond1 (unregistering): Released all slaves [ 252.364730][ T7772] QAT: Device 127 not found [ 252.404227][ T7780] netlink: 136 bytes leftover after parsing attributes in process `syz.4.515'. [ 252.456294][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 252.757966][ T7797] binder: BINDER_SET_CONTEXT_MGR already set [ 252.764102][ T7797] binder: 7783:7797 ioctl 4018620d 200000000040 returned -16 [ 252.781287][ T7797] netlink: 48 bytes leftover after parsing attributes in process `syz.5.516'. [ 253.647615][ T5885] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 253.837953][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 253.855446][ T5885] usb 2-1: config 5 has an invalid interface number: 162 but max is 0 [ 253.879765][ T5885] usb 2-1: config 5 has no interface number 0 [ 253.906458][ T5885] usb 2-1: config 5 interface 162 has no altsetting 0 [ 253.970714][ T5885] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 254.050199][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.084329][ T5885] usb 2-1: Product: syz [ 254.093706][ T5885] usb 2-1: Manufacturer: syz [ 254.106249][ T5885] usb 2-1: SerialNumber: syz [ 254.385804][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 254.402726][ T5885] usb-storage 2-1:5.162: USB Mass Storage device detected [ 254.424625][ T5885] usb-storage 2-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.15.0-syzkaller-10769-g7d4e49a77d99) [ 254.424625][ T5885] Please send a copy of this message to and [ 254.546776][ T5885] usb 2-1: USB disconnect, device number 26 [ 254.957542][ T48] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 255.139602][ T48] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 255.190485][ T48] usb 5-1: config 0 has no interface number 0 [ 255.239671][ T48] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 255.275731][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.339012][ T48] usb 5-1: Product: syz [ 255.362148][ T48] usb 5-1: Manufacturer: syz [ 255.389541][ T48] usb 5-1: SerialNumber: syz [ 255.477343][ T48] usb 5-1: config 0 descriptor?? [ 255.819583][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.826066][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853659][ T48] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 255.864246][ T48] asix 5-1:0.239: probe with driver asix failed with error -71 [ 255.958796][ T48] usb 5-1: USB disconnect, device number 30 [ 256.005502][ T7858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.012838][ T7858] IPv6: NLM_F_CREATE should be set when creating new route [ 256.035233][ T7846] bond1 (unregistering): Released all slaves [ 256.429394][ T918] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 256.482259][ T7865] netlink: 136 bytes leftover after parsing attributes in process `syz.0.533'. [ 256.496993][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 256.636411][ T918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.666017][ T918] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.691902][ T918] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.711171][ T918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 256.754581][ T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 256.793410][ T918] usb 5-1: Product: syz [ 256.813692][ T918] usb 5-1: Manufacturer: syz [ 256.833794][ T918] usb 5-1: SerialNumber: syz [ 256.906100][ T7875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.534'. [ 257.080207][ T918] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 257.213624][ T7880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.535'. [ 257.302382][ T24] usb 5-1: USB disconnect, device number 31 [ 257.313824][ T24] usblp0: removed [ 257.326476][ T7861] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 257.333060][ T7861] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.399411][ T7861] vhci_hcd vhci_hcd.0: Device attached [ 257.477310][ T7881] vhci_hcd: connection closed [ 257.522956][ T12] vhci_hcd: stop threads [ 257.564001][ T12] vhci_hcd: release socket [ 257.622613][ T12] vhci_hcd: disconnect device [ 257.649118][ T918] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 257.691232][ T918] usb 41-1: enqueue for inactive port 0 [ 257.888002][ T918] vhci_hcd: vhci_device speed not set [ 259.413309][ T7916] bond1 (unregistering): Released all slaves [ 259.597638][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.073352][ T7933] macsec1: entered promiscuous mode [ 260.110105][ T7933] bridge0: entered promiscuous mode [ 260.140434][ T7933] macsec1: entered allmulticast mode [ 260.183547][ T7933] bridge0: entered allmulticast mode [ 260.256578][ T7933] bridge0: port 3(macsec1) entered blocking state [ 260.294608][ T7933] bridge0: port 3(macsec1) entered disabled state [ 260.306391][ T7933] bridge0: left allmulticast mode [ 260.323216][ T7933] bridge0: left promiscuous mode [ 260.577614][ T5885] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 260.790872][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.840997][ T5885] usb 6-1: config 0 has no interfaces? [ 260.897506][ T5885] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 260.995111][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.016977][ T7958] loop2: detected capacity change from 0 to 7 [ 261.027515][ T7958] Dev loop2: unable to read RDB block 7 [ 261.033115][ T7958] loop2: unable to read partition table [ 261.057770][ T7958] loop2: partition table beyond EOD, truncated [ 261.061759][ T5885] usb 6-1: config 0 descriptor?? [ 261.218707][ T7958] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 261.262783][ T5888] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 261.332703][ T7939] team_slave_0: entered promiscuous mode [ 261.338449][ T7939] team_slave_1: entered promiscuous mode [ 261.345783][ T7939] vlan2: entered promiscuous mode [ 261.363037][ T7939] team0: entered promiscuous mode [ 261.499598][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 262.008495][ T5885] usb 6-1: USB disconnect, device number 8 [ 262.497056][ T7971] binder: BINDER_SET_CONTEXT_MGR already set [ 262.523566][ T7973] netlink: 48 bytes leftover after parsing attributes in process `syz.0.553'. [ 262.551166][ T7971] binder: 7965:7971 ioctl 4018620d 2000000000c0 returned -16 [ 264.104706][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.555'. [ 264.673872][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 264.745440][ T5888] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 264.855827][ T8001] bond1 (unregistering): Released all slaves [ 264.987664][ T5888] usb 7-1: can't read configurations, error -71 [ 267.461753][ T8017] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 268.962961][ T8022] macsec1: entered promiscuous mode [ 268.987516][ T8022] bridge0: entered promiscuous mode [ 269.005108][ T8022] macsec1: entered allmulticast mode [ 269.101763][ T8022] bridge0: entered allmulticast mode [ 269.470977][ T8022] bridge0: port 1(macsec1) entered blocking state [ 269.538896][ T8022] bridge0: port 1(macsec1) entered disabled state [ 270.309995][ T8022] bridge0: left allmulticast mode [ 270.427598][ T8022] bridge0: left promiscuous mode [ 276.252131][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.341133][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.374955][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.389511][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.402582][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.413379][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.675552][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.713682][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.722235][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.730703][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.739167][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.429012][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.439167][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.447094][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.455960][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.468103][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.572295][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.610619][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.649980][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.658051][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.667286][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.676969][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.684635][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.693591][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.701580][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.713897][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.717789][ T5836] Bluetooth: hci0: command tx timeout [ 307.986633][ T5836] Bluetooth: hci3: command tx timeout [ 307.986643][ T5843] Bluetooth: hci4: command tx timeout [ 307.987203][ T5843] Bluetooth: hci5: command tx timeout [ 308.003484][ T5836] Bluetooth: hci6: command tx timeout [ 308.238503][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.797717][ T5836] Bluetooth: hci0: command tx timeout [ 310.096898][ T5836] Bluetooth: hci5: command tx timeout [ 310.096934][ T51] Bluetooth: hci4: command tx timeout [ 310.108939][ T5846] Bluetooth: hci6: command tx timeout [ 310.114435][ T5843] Bluetooth: hci3: command tx timeout [ 310.880566][ T5843] Bluetooth: hci0: command tx timeout [ 311.025261][ T8033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.219860][ T8033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.296622][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 311.365244][ T8033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.404945][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 311.601404][ T8033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.669633][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 311.735240][ T8057] chnl_net:caif_netlink_parms(): no params data found [ 311.951820][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.963490][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.971267][ T8056] bridge_slave_0: entered allmulticast mode [ 311.980996][ T8056] bridge_slave_0: entered promiscuous mode [ 311.999569][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.006733][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.014347][ T8056] bridge_slave_1: entered allmulticast mode [ 312.022420][ T8056] bridge_slave_1: entered promiscuous mode [ 312.160737][ T5843] Bluetooth: hci5: command tx timeout [ 312.167465][ T51] Bluetooth: hci3: command tx timeout [ 312.173747][ T5846] Bluetooth: hci4: command tx timeout [ 312.173757][ T5836] Bluetooth: hci6: command tx timeout [ 312.260879][ T8066] chnl_net:caif_netlink_parms(): no params data found [ 312.316011][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.337159][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.346883][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.354677][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.362156][ T8065] bridge_slave_0: entered allmulticast mode [ 312.370396][ T8065] bridge_slave_0: entered promiscuous mode [ 312.379406][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.386544][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.395351][ T8065] bridge_slave_1: entered allmulticast mode [ 312.409427][ T8065] bridge_slave_1: entered promiscuous mode [ 312.561290][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.641498][ T8056] team0: Port device team_slave_0 added [ 312.673843][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.710488][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.723294][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.730715][ T8057] bridge_slave_0: entered allmulticast mode [ 312.738693][ T8057] bridge_slave_0: entered promiscuous mode [ 312.752940][ T8056] team0: Port device team_slave_1 added [ 312.796751][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.807239][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.825529][ T8062] bridge_slave_0: entered allmulticast mode [ 312.834972][ T8062] bridge_slave_0: entered promiscuous mode [ 312.956452][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.964748][ T5843] Bluetooth: hci0: command tx timeout [ 312.983547][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.995788][ T8057] bridge_slave_1: entered allmulticast mode [ 313.015186][ T8057] bridge_slave_1: entered promiscuous mode [ 313.081941][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.097570][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.104957][ T8062] bridge_slave_1: entered allmulticast mode [ 313.124459][ T8062] bridge_slave_1: entered promiscuous mode [ 313.163162][ T8065] team0: Port device team_slave_0 added [ 313.214601][ T8033] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.306950][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.331176][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.367617][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.389660][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.396660][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.425113][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.464907][ T8065] team0: Port device team_slave_1 added [ 313.488656][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.495815][ T8066] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.503562][ T8066] bridge_slave_0: entered allmulticast mode [ 313.511947][ T8066] bridge_slave_0: entered promiscuous mode [ 313.525768][ T8057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.542107][ T8057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.608569][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.656277][ T8033] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.763622][ T8033] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.791566][ T8066] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.805603][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.814089][ T8066] bridge_slave_1: entered allmulticast mode [ 313.822604][ T8066] bridge_slave_1: entered promiscuous mode [ 313.930617][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.948954][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.955961][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.994819][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.043233][ T8033] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.112953][ T8057] team0: Port device team_slave_0 added [ 314.130879][ T8057] team0: Port device team_slave_1 added [ 314.194161][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.201429][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.239748][ T5843] Bluetooth: hci6: command tx timeout [ 314.243396][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.245180][ T5843] Bluetooth: hci5: command tx timeout [ 314.262009][ T51] Bluetooth: hci3: command tx timeout [ 314.269337][ T51] Bluetooth: hci4: command tx timeout [ 314.276286][ T8066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.295519][ T8066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.359959][ T8056] hsr_slave_0: entered promiscuous mode [ 314.366395][ T8056] hsr_slave_1: entered promiscuous mode [ 314.468709][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.475718][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.522389][ T8057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.605717][ T8062] team0: Port device team_slave_0 added [ 314.624640][ T8062] team0: Port device team_slave_1 added [ 314.691839][ T8066] team0: Port device team_slave_0 added [ 314.702497][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.714839][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.756823][ T8057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.857157][ T8066] team0: Port device team_slave_1 added [ 314.993963][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.007490][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.046531][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.153222][ T8065] hsr_slave_0: entered promiscuous mode [ 315.172953][ T8065] hsr_slave_1: entered promiscuous mode [ 315.184400][ T8065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.195704][ T8065] Cannot create hsr debugfs directory [ 315.221989][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.229206][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.257001][ T8062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.279488][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.286483][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.312685][ T8066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.331035][ T8057] hsr_slave_0: entered promiscuous mode [ 315.338032][ T8057] hsr_slave_1: entered promiscuous mode [ 315.344211][ T8057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.352186][ T8057] Cannot create hsr debugfs directory [ 315.398901][ T8066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.405884][ T8066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.432258][ T8066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.626538][ T8033] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.795459][ T8033] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.816336][ T8066] hsr_slave_0: entered promiscuous mode [ 315.824719][ T8066] hsr_slave_1: entered promiscuous mode [ 315.831384][ T8066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.839364][ T8066] Cannot create hsr debugfs directory [ 315.875049][ T8062] hsr_slave_0: entered promiscuous mode [ 315.882610][ T8062] hsr_slave_1: entered promiscuous mode [ 315.889374][ T8062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.896974][ T8062] Cannot create hsr debugfs directory [ 316.034093][ T8033] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.168442][ T8033] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.312532][ T8056] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.323973][ T8056] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 316.339899][ T8056] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 316.415610][ T8056] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 316.636734][ T8057] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 316.874872][ T8057] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 316.926912][ T8057] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 316.991634][ T8033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.026487][ T8057] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 317.212410][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219095][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.260115][ T8033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.388786][ T8033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.563551][ T8033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.701159][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.911477][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.935280][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.994741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.001935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.119928][ T8033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.162291][ T8065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.174735][ T8065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.241588][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.248855][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.285884][ T8033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.304239][ T8065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.339466][ T8065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.418373][ T8033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.445998][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.582693][ T8033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.658601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.665755][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.774765][ T8062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 318.792637][ T8062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 318.821102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.828350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.903933][ T8062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 318.919946][ T8062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 319.283133][ T8033] bridge_slave_1: left allmulticast mode [ 319.292652][ T8033] bridge_slave_1: left promiscuous mode [ 319.300014][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.318668][ T8033] bridge_slave_0: left allmulticast mode [ 319.324393][ T8033] bridge_slave_0: left promiscuous mode [ 319.330660][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.347207][ T8033] bridge_slave_1: left allmulticast mode [ 319.353229][ T8033] bridge_slave_1: left promiscuous mode [ 319.362147][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.374359][ T8033] bridge_slave_0: left allmulticast mode [ 319.382380][ T8033] bridge_slave_0: left promiscuous mode [ 319.389133][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.402324][ T8033] bridge_slave_1: left allmulticast mode [ 319.409135][ T8033] bridge_slave_1: left promiscuous mode [ 319.415269][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.435098][ T8033] bridge_slave_0: left allmulticast mode [ 319.445278][ T8033] bridge_slave_0: left promiscuous mode [ 319.453413][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.260273][ T8033] bond0 (unregistering): left promiscuous mode [ 320.266507][ T8033] bond_slave_0: left promiscuous mode [ 320.273342][ T8033] bond_slave_1: left promiscuous mode [ 320.283400][ T8033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.295331][ T8033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.306261][ T8033] bond0 (unregistering): Released all slaves [ 320.625639][ T8033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.637962][ T8033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.649031][ T8033] bond0 (unregistering): Released all slaves [ 320.965977][ T8033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.977576][ T8033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.987987][ T8033] bond0 (unregistering): Released all slaves [ 321.390512][ T8033] bond0 (unregistering): left promiscuous mode [ 321.396734][ T8033] bond_slave_0: left promiscuous mode [ 321.403991][ T8033] bond_slave_1: left promiscuous mode [ 321.411853][ T8033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.423215][ T8033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.433606][ T8033] bond0 (unregistering): Released all slaves [ 321.853188][ T8033] bond0 (unregistering): left promiscuous mode [ 321.859596][ T8033] bond_slave_0: left promiscuous mode [ 321.865139][ T8033] bond_slave_1: left promiscuous mode [ 321.872296][ T8033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.885290][ T8033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.896293][ T8033] bond0 (unregistering): Released all slaves [ 321.926419][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.154033][ T8033] : left promiscuous mode [ 322.312735][ T8057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.384475][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.416883][ T8033] tipc: Left network mode [ 322.442266][ T8056] veth0_vlan: entered promiscuous mode [ 322.578575][ T8056] veth1_vlan: entered promiscuous mode [ 322.665470][ T8066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.676483][ T8066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.701773][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.722595][ T8066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.747176][ T8066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.764135][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.783814][ T8057] veth0_vlan: entered promiscuous mode [ 322.822104][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.829296][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.912681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.919966][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.947832][ T8062] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.029001][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.036156][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.047125][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.054345][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.065233][ T8057] veth1_vlan: entered promiscuous mode [ 323.158079][ T8056] veth0_macvtap: entered promiscuous mode [ 323.215097][ T8056] veth1_macvtap: entered promiscuous mode [ 323.341831][ T8065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.393328][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.464580][ T8057] veth0_macvtap: entered promiscuous mode [ 323.476560][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.495858][ T8056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.505750][ T8056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.514920][ T8056] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.525191][ T8056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.581685][ T8057] veth1_macvtap: entered promiscuous mode [ 323.673351][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.702351][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.724300][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.794737][ T8066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.831572][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.966892][ T8057] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.982047][ T8057] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.994408][ T8057] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.008462][ T8057] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.049516][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.152043][ T8065] veth0_vlan: entered promiscuous mode [ 324.163280][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.176508][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.213601][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.220753][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.258522][ T8062] veth0_vlan: entered promiscuous mode [ 324.288689][ T8065] veth1_vlan: entered promiscuous mode [ 324.304649][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.311835][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.324104][ T8062] veth1_vlan: entered promiscuous mode [ 324.355331][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.363574][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.367675][ T8033] dummy0: left promiscuous mode [ 324.382551][ T8033] hsr_slave_0: left promiscuous mode [ 324.389239][ T8033] hsr_slave_1: left promiscuous mode [ 324.395241][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.404906][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.413143][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.422679][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.435179][ T8033] hsr_slave_0: left promiscuous mode [ 324.441860][ T8033] hsr_slave_1: left promiscuous mode [ 324.448304][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.455746][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.466578][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.475521][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.488756][ T8033] hsr_slave_0: left promiscuous mode [ 324.494715][ T8033] hsr_slave_1: left promiscuous mode [ 324.500877][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.508379][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.516281][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.524343][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.532979][ T8033] dummy0: left promiscuous mode [ 324.545073][ T8033] hsr_slave_0: left promiscuous mode [ 324.551786][ T8033] hsr_slave_1: left promiscuous mode [ 324.558280][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.565730][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.575688][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.586201][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.594637][ T8033] dummy0: left promiscuous mode [ 324.604765][ T8033] hsr_slave_0: left promiscuous mode [ 324.611066][ T8033] hsr_slave_1: left promiscuous mode [ 324.616915][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.625750][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.634142][ T8033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.643245][ T8033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.715006][ T8033] veth1_macvtap: left promiscuous mode [ 324.720735][ T8033] veth0_macvtap: left promiscuous mode [ 324.726424][ T8033] veth1_vlan: left promiscuous mode [ 324.731880][ T8033] veth0_vlan: left promiscuous mode [ 324.739627][ T8033] veth1_macvtap: left promiscuous mode [ 324.745182][ T8033] veth0_macvtap: left promiscuous mode [ 324.750989][ T8033] veth1_vlan: left promiscuous mode [ 324.756305][ T8033] veth0_vlan: left promiscuous mode [ 324.763462][ T8033] veth1_macvtap: left promiscuous mode [ 324.769139][ T8033] veth0_macvtap: left promiscuous mode [ 324.774756][ T8033] veth1_vlan: left promiscuous mode [ 324.780522][ T8033] veth0_vlan: left promiscuous mode [ 324.789121][ T8033] veth1_macvtap: left promiscuous mode [ 324.794701][ T8033] veth0_macvtap: left promiscuous mode [ 324.801069][ T8033] veth1_vlan: left promiscuous mode [ 324.806428][ T8033] veth0_vlan: left promiscuous mode [ 324.813531][ T8033] veth1_macvtap: left promiscuous mode [ 324.819198][ T8033] veth0_macvtap: left promiscuous mode [ 324.825783][ T8033] veth1_vlan: left promiscuous mode [ 324.831471][ T8033] veth0_vlan: left promiscuous mode [ 325.725533][ T8033] team_slave_1 (unregistering): left promiscuous mode [ 325.736867][ T8033] team0 (unregistering): Port device team_slave_1 removed [ 325.783660][ T8033] team_slave_0 (unregistering): left promiscuous mode [ 325.796008][ T8033] team0 (unregistering): Port device team_slave_0 removed [ 326.647283][ T8033] team_slave_1 (unregistering): left promiscuous mode [ 326.663594][ T8033] team0 (unregistering): Port device team_slave_1 removed [ 326.706002][ T8033] team_slave_0 (unregistering): left promiscuous mode [ 326.716285][ T8033] team0 (unregistering): Port device team_slave_0 removed [ 327.594142][ T8033] team0 (unregistering): Port device team_slave_1 removed [ 327.644133][ T8033] team0 (unregistering): Port device team_slave_0 removed [ 328.516060][ T8033] team0 (unregistering): Port device team_slave_1 removed [ 328.561909][ T8033] team0 (unregistering): Port device team_slave_0 removed [ 329.362303][ T8033] team0 (unregistering): Port device team_slave_1 removed [ 329.406340][ T8033] team0 (unregistering): Port device team_slave_0 removed [ 329.893987][ T8056] ================================================================== [ 329.902111][ T8056] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 329.909792][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.909849][ T8056] Write of size 8 at addr ffff888056e3f408 by task syz-executor/8056 [ 329.925703][ T8056] [ 329.925718][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz-executor Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 329.925742][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.925768][ T8056] Call Trace: [ 329.925777][ T8056] [ 329.925788][ T8056] dump_stack_lvl+0x189/0x250 [ 329.925826][ T8056] ? __virt_addr_valid+0x1c8/0x5c0 [ 329.925858][ T8056] ? rcu_is_watching+0x15/0xb0 [ 329.925886][ T8056] ? __kasan_check_byte+0x12/0x40 [ 329.925918][ T8056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.925949][ T8056] ? rcu_is_watching+0x15/0xb0 [ 329.925976][ T8056] ? lock_release+0x4b/0x3e0 [ 329.926004][ T8056] ? __virt_addr_valid+0x1c8/0x5c0 [ 329.926033][ T8056] ? __virt_addr_valid+0x4a5/0x5c0 [ 329.926064][ T8056] print_report+0xd2/0x2b0 [ 329.926092][ T8056] ? binder_add_device+0x5f/0xa0 [ 329.926113][ T8056] kasan_report+0x118/0x150 [ 329.926146][ T8056] ? binder_add_device+0x5f/0xa0 [ 329.926171][ T8056] binder_add_device+0x5f/0xa0 [ 329.926193][ T8056] binderfs_binder_device_create+0x9e7/0xc40 [ 329.926221][ T8056] ? __pfx_binderfs_binder_device_create+0x10/0x10 [ 329.926246][ T8056] ? do_raw_spin_unlock+0x122/0x240 [ 329.926267][ T8056] binderfs_fill_super+0xa0e/0xe90 [ 329.926293][ T8056] ? __pfx_binderfs_fill_super+0x10/0x10 [ 329.926333][ T8056] ? shrinker_register+0x16b/0x230 [ 329.926358][ T8056] ? sget_fc+0x962/0xa40 [ 329.926384][ T8056] ? __pfx_set_anon_super_fc+0x10/0x10 [ 329.926411][ T8056] ? __pfx_binderfs_fill_super+0x10/0x10 [ 329.926432][ T8056] get_tree_nodev+0xb8/0x150 [ 329.926461][ T8056] vfs_get_tree+0x8f/0x2b0 [ 329.926492][ T8056] do_new_mount+0x24a/0xa40 [ 329.926528][ T8056] __se_sys_mount+0x317/0x410 [ 329.926551][ T8056] ? __pfx___se_sys_mount+0x10/0x10 [ 329.926574][ T8056] ? do_syscall_64+0xbe/0x3b0 [ 329.926601][ T8056] ? __x64_sys_mount+0x20/0xc0 [ 329.926621][ T8056] do_syscall_64+0xfa/0x3b0 [ 329.926648][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.926669][ T8056] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.926691][ T8056] ? clear_bhb_loop+0x60/0xb0 [ 329.926715][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.926735][ T8056] RIP: 0033:0x7f56b359010a [ 329.926756][ T8056] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.926775][ T8056] RSP: 002b:00007f56b38dff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.926798][ T8056] RAX: ffffffffffffffda RBX: 00007f56b3610e74 RCX: 00007f56b359010a [ 329.926814][ T8056] RDX: 00007f56b36208cb RSI: 00007f56b3610e74 RDI: 00007f56b36208cb [ 329.926833][ T8056] RBP: 00007f56b36110bd R08: 0000000000000000 R09: 0000000000000000 [ 329.926847][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56b35ec1a8 [ 329.926861][ T8056] R13: 00007f56b35ec180 R14: 0000000000000009 R15: 0000000000000000 [ 329.926884][ T8056] [ 329.926892][ T8056] [ 329.932209][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.940004][ T8056] Allocated by task 36: [ 329.940019][ T8056] kasan_save_track+0x3e/0x80 [ 329.940047][ T8056] __kasan_kmalloc+0x93/0xb0 [ 329.940072][ T8056] __kmalloc_cache_noprof+0x230/0x3d0 [ 329.940097][ T8056] batadv_forw_packet_alloc+0x1e9/0x390 [ 329.940126][ T8056] batadv_iv_ogm_queue_add+0x85f/0xd30 [ 329.994020][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.995818][ T8056] batadv_iv_ogm_schedule+0xabd/0xea0 [ 330.004935][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.005343][ T8056] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 330.066472][ T8062] veth0_macvtap: entered promiscuous mode [ 330.067795][ T8056] process_scheduled_works+0xade/0x17b0 [ 330.067826][ T8056] worker_thread+0x8a0/0xda0 [ 330.067849][ T8056] kthread+0x711/0x8a0 [ 330.295377][ T8056] ret_from_fork+0x3fc/0x770 [ 330.299982][ T8056] ret_from_fork_asm+0x1a/0x30 [ 330.304749][ T8056] [ 330.307072][ T8056] Freed by task 3557: [ 330.311063][ T8056] kasan_save_track+0x3e/0x80 [ 330.315756][ T8056] kasan_save_free_info+0x46/0x50 [ 330.320786][ T8056] __kasan_slab_free+0x62/0x70 [ 330.325558][ T8056] kfree+0x18e/0x440 [ 330.329472][ T8056] process_scheduled_works+0xade/0x17b0 [ 330.335020][ T8056] worker_thread+0x8a0/0xda0 [ 330.339621][ T8056] kthread+0x711/0x8a0 [ 330.343691][ T8056] ret_from_fork+0x3fc/0x770 [ 330.348299][ T8056] ret_from_fork_asm+0x1a/0x30 [ 330.353062][ T8056] [ 330.355388][ T8056] Last potentially related work creation: [ 330.361102][ T8056] kasan_save_stack+0x3e/0x60 [ 330.365780][ T8056] kasan_record_aux_stack+0xbd/0xd0 [ 330.370979][ T8056] insert_work+0x3d/0x330 [ 330.375312][ T8056] __queue_work+0xbd9/0xfe0 [ 330.379843][ T8056] call_timer_fn+0x17b/0x5f0 [ 330.384441][ T8056] __run_timer_base+0x646/0x860 [ 330.389293][ T8056] run_timer_softirq+0xb7/0x180 [ 330.394161][ T8056] handle_softirqs+0x283/0x870 [ 330.398929][ T8056] __irq_exit_rcu+0xca/0x1f0 [ 330.403524][ T8056] irq_exit_rcu+0x9/0x30 [ 330.407773][ T8056] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 330.413414][ T8056] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.419406][ T8056] [ 330.421731][ T8056] The buggy address belongs to the object at ffff888056e3f400 [ 330.421731][ T8056] which belongs to the cache kmalloc-512 of size 512 [ 330.435786][ T8056] The buggy address is located 8 bytes inside of [ 330.435786][ T8056] freed 512-byte region [ffff888056e3f400, ffff888056e3f600) [ 330.449408][ T8056] [ 330.451730][ T8056] The buggy address belongs to the physical page: [ 330.458145][ T8056] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56e3c [ 330.466904][ T8056] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 330.475399][ T8056] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 330.483037][ T8056] page_type: f5(slab) [ 330.487022][ T8056] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 330.495609][ T8056] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 330.504195][ T8056] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 330.512868][ T8056] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 330.521743][ T8056] head: 00fff00000000002 ffffea00015b8f01 00000000ffffffff 00000000ffffffff [ 330.530429][ T8056] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 330.539097][ T8056] page dumped because: kasan: bad access detected [ 330.545505][ T8056] page_owner tracks the page as allocated [ 330.551218][ T8056] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1150, tgid 1150 (kworker/u8:7), ts 98848653154, free_ts 98846787105 [ 330.572586][ T8056] post_alloc_hook+0x240/0x2a0 [ 330.577369][ T8056] get_page_from_freelist+0x21e4/0x22c0 [ 330.582920][ T8056] __alloc_frozen_pages_noprof+0x181/0x370 [ 330.588729][ T8056] alloc_pages_mpol+0x232/0x4a0 [ 330.593586][ T8056] allocate_slab+0x8a/0x3b0 [ 330.598105][ T8056] ___slab_alloc+0xbfc/0x1480 [ 330.602781][ T8056] __kmalloc_cache_noprof+0x296/0x3d0 [ 330.608162][ T8056] __ipv6_dev_mc_inc+0x420/0xaf0 [ 330.613112][ T8056] addrconf_dad_work+0x3d0/0x14b0 [ 330.618154][ T8056] process_scheduled_works+0xade/0x17b0 [ 330.623714][ T8056] worker_thread+0x8a0/0xda0 [ 330.628313][ T8056] kthread+0x711/0x8a0 [ 330.632389][ T8056] ret_from_fork+0x3fc/0x770 [ 330.636984][ T8056] ret_from_fork_asm+0x1a/0x30 [ 330.641873][ T8056] page last free pid 5848 tgid 5848 stack trace: [ 330.648200][ T8056] __free_frozen_pages+0xc71/0xe70 [ 330.653315][ T8056] stack_depot_save_flags+0x445/0x900 [ 330.658703][ T8056] kasan_save_track+0x4f/0x80 [ 330.663384][ T8056] __kasan_kmalloc+0x93/0xb0 [ 330.667985][ T8056] __kmalloc_cache_noprof+0x230/0x3d0 [ 330.673379][ T8056] addr_event+0xc3/0x470 [ 330.677655][ T8056] inet6addr_event+0x9f/0xd0 [ 330.682254][ T8056] notifier_call_chain+0x1b6/0x3e0 [ 330.687374][ T8056] atomic_notifier_call_chain+0xda/0x180 [ 330.693017][ T8056] ipv6_add_addr+0xda9/0x1090 [ 330.697709][ T8056] addrconf_add_linklocal+0x28c/0x6c0 [ 330.703088][ T8056] addrconf_addr_gen+0x490/0x580 [ 330.708152][ T8056] addrconf_init_auto_addrs+0x711/0xb50 [ 330.713719][ T8056] addrconf_notify+0xacc/0x1010 [ 330.718579][ T8056] notifier_call_chain+0x1b6/0x3e0 [ 330.723722][ T8056] netif_state_change+0x284/0x3a0 [ 330.728768][ T8056] [ 330.731092][ T8056] Memory state around the buggy address: [ 330.736732][ T8056] ffff888056e3f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.744797][ T8056] ffff888056e3f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 330.752954][ T8056] >ffff888056e3f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.761013][ T8056] ^ [ 330.765338][ T8056] ffff888056e3f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.773425][ T8056] ffff888056e3f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 330.781504][ T8056] ================================================================== [ 330.869413][ T8065] veth0_macvtap: entered promiscuous mode [ 330.879894][ T8065] veth1_macvtap: entered promiscuous mode [ 330.900315][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.912122][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.924197][ T8065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.951647][ T8065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.960866][ T8065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.977400][ T8065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.030402][ T8056] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 331.037659][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz-executor Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 331.049494][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.059579][ T8056] Call Trace: [ 331.062877][ T8056] [ 331.065828][ T8056] dump_stack_lvl+0x99/0x250 [ 331.070456][ T8056] ? __asan_memcpy+0x40/0x70 [ 331.075074][ T8056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.080315][ T8056] ? __pfx__printk+0x10/0x10 [ 331.084944][ T8056] panic+0x2db/0x790 [ 331.088878][ T8056] ? __pfx_panic+0x10/0x10 [ 331.093350][ T8056] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 331.099279][ T8056] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.105637][ T8056] ? print_memory_metadata+0x314/0x400 [ 331.111131][ T8056] ? binder_add_device+0x5f/0xa0 [ 331.116092][ T8056] check_panic_on_warn+0x89/0xb0 [ 331.121058][ T8056] ? binder_add_device+0x5f/0xa0 [ 331.126022][ T8056] end_report+0x78/0x160 [ 331.130304][ T8056] kasan_report+0x129/0x150 [ 331.134845][ T8056] ? binder_add_device+0x5f/0xa0 [ 331.139810][ T8056] binder_add_device+0x5f/0xa0 [ 331.144610][ T8056] binderfs_binder_device_create+0x9e7/0xc40 [ 331.150639][ T8056] ? __pfx_binderfs_binder_device_create+0x10/0x10 [ 331.157175][ T8056] ? do_raw_spin_unlock+0x122/0x240 [ 331.162417][ T8056] binderfs_fill_super+0xa0e/0xe90 [ 331.167560][ T8056] ? __pfx_binderfs_fill_super+0x10/0x10 [ 331.173219][ T8056] ? shrinker_register+0x16b/0x230 [ 331.178340][ T8056] ? sget_fc+0x962/0xa40 [ 331.182589][ T8056] ? __pfx_set_anon_super_fc+0x10/0x10 [ 331.188057][ T8056] ? __pfx_binderfs_fill_super+0x10/0x10 [ 331.193692][ T8056] get_tree_nodev+0xb8/0x150 [ 331.198292][ T8056] vfs_get_tree+0x8f/0x2b0 [ 331.202718][ T8056] do_new_mount+0x24a/0xa40 [ 331.207237][ T8056] __se_sys_mount+0x317/0x410 [ 331.211926][ T8056] ? __pfx___se_sys_mount+0x10/0x10 [ 331.217132][ T8056] ? do_syscall_64+0xbe/0x3b0 [ 331.221821][ T8056] ? __x64_sys_mount+0x20/0xc0 [ 331.226589][ T8056] do_syscall_64+0xfa/0x3b0 [ 331.231101][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.237185][ T8056] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.243351][ T8056] ? clear_bhb_loop+0x60/0xb0 [ 331.248078][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.253979][ T8056] RIP: 0033:0x7f56b359010a [ 331.258407][ T8056] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.278193][ T8056] RSP: 002b:00007f56b38dff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.286620][ T8056] RAX: ffffffffffffffda RBX: 00007f56b3610e74 RCX: 00007f56b359010a [ 331.294596][ T8056] RDX: 00007f56b36208cb RSI: 00007f56b3610e74 RDI: 00007f56b36208cb [ 331.302574][ T8056] RBP: 00007f56b36110bd R08: 0000000000000000 R09: 0000000000000000 [ 331.310556][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56b35ec1a8 [ 331.318531][ T8056] R13: 00007f56b35ec180 R14: 0000000000000009 R15: 0000000000000000 [ 331.326511][ T8056] [ 331.329839][ T8056] Kernel Offset: disabled [ 331.334169][ T8056] Rebooting in 86400 seconds..