last executing test programs: 6m11.005426127s ago: executing program 3 (id=4): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000500)={0xd, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) 6m10.060717981s ago: executing program 3 (id=8): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0xc1}, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7ffd, 0xfffffffc, 0x0}) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 6m6.473339426s ago: executing program 3 (id=11): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) 5m53.392883358s ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x1, 0x13, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x5, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c15000000000000000400", 0x3234564e}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d000000ff0f00000400000006000000010000", @ANYRES64=r6], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000200)}, 0x1e) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 5m47.44747709s ago: executing program 4 (id=31): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m44.892766984s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000f00)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m43.339132103s ago: executing program 4 (id=36): r0 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) 5m42.997527884s ago: executing program 4 (id=39): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) 5m40.098107889s ago: executing program 3 (id=41): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000500)={0xd, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) 5m38.169880137s ago: executing program 3 (id=43): socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) 5m37.880635141s ago: executing program 4 (id=44): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0xd, 0x2}) epoll_create1(0x0) 5m36.02902515s ago: executing program 4 (id=47): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800ce4018008000300e8030000", 0x54}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='stacktrace', 0xa) 5m21.23413625s ago: executing program 32 (id=43): socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x189802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) 5m18.233524354s ago: executing program 33 (id=47): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800ce4018008000300e8030000", 0x54}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='stacktrace', 0xa) 3m15.58283428s ago: executing program 1 (id=222): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0xb8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x2000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x2008009, 0x4) 3m13.074412127s ago: executing program 1 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x651}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x43}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000001a80)=""/4106, 0x100a}, {0x0}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f00000003c0)=""/135, 0x87}], 0x6}, 0x9}], 0x4, 0x40010000, 0x0) 3m11.329595695s ago: executing program 1 (id=231): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3d35383a340890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000500)={0xd, 0x2}) epoll_create1(0x0) 3m10.27396228s ago: executing program 1 (id=232): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0xb8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x20, 0x140e, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x400c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x2000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x2008009, 0x4) 3m9.584607263s ago: executing program 1 (id=234): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) 3m7.466499709s ago: executing program 1 (id=236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0xffffffffffffffff, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000640)={0x3c9, 0x80000, 0xffffffffffffffff}) ioctl$TIOCNXCL(r2, 0x540d) openat$binder_debug(0xffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) io_setup(0xffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390404000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f0002000000"], 0x40}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101701) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0}) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x4, @local, 'veth0\x00'}}, 0x1e) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090212000180000000090400"], 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000007c0)="21346b29d9e3301987798f411ef43a420935595d968d9e8ea61f49b4e997363153f07a1e3620add73cd12dd3fa846b2fa70ee35b9484a24af516ddbb2361c38f3208a2000000000000000000000000c12295899825cd8e76246abfa5bd7257de7abd28ef8563491e9ae83821b654463e6b7fe9d49f02223a731ba73171bf1264351b3316a9e9db9f4c51cbfb8d7df12ad3bf42083198cb241707fd80b59584731a995bd019006e646b76da09488e1d640cd90bc36a9136fab70fbf6fefbaf74b9926c7e2645d14a1e3532323ba2302d05ac83649dc9e6ad184772936d50b987512d1d8fd1a59bdd15ee8375818960000000000000c55b61e0615b8ff09137007ae4cdaa31a2faad56c2c6eadf676626b22b869bdc85d16ff1cdb1ec86ff37e6a767f6a", 0xfffffffffffffdc5) vmsplice(r9, &(0x7f00000028c0)=[{&(0x7f0000000180)="af58439fcd1c3ba9c946e73d630b3a986f158b6f706b876e85a82c4f2a8bd09be7a8435018067008b6a6b015a885ce22d08b620ee9b584eefadf769ed0fc28d262bab40e69dca647855de6968686ee2f07d4914de16e160d67336930a05169d1334adf887f2fd6dbe29f3fc5", 0x6c}, {&(0x7f00000003c0)="742cc3321d5967d32481c6134a966059e3e53e97cfb16e9c4e79c8a44e26998cfd30ef2c2ab62fcc38e318020acdbf59114bee7c20906285862da4c36b781ce2305ab0a6d4d36818e823068866e2bd6037cc7d3ddb465b5ae2f22b5fce2ce9d44032dc6c7f88c983550f50e4bcfb019ebc53735f38357f7d2c3b0c9a24df775f8bac655f4764d2e7dfd99129fdfdfe2a345aa43e0ac069f3ad0bf0e5737d52aec9f14485ab5da399ef5a94577efa6a6b3fb09587df452af0ada2604891605b6ca60553c8ba69cfd164ed29c10758c42a7cd50ddaffbdb4bc46cc97443b91bfceb1a1e602848fd61724bca2ac640e", 0xee}, {0x0}, {&(0x7f0000000300)="66016b880b2bbd203b5f8264adb0fa31f78a67d23125afad58e9c9ab000f630b81d5c988634e0dfb1149e9b861a5b0d26df483344d6f7c833a29a20c3c8aec83abc20db3cdaf66a524798d07ba3b6d1bb35767d5662413925da692617d4a6a452341eef9e76fc7625ab6bf551d705ba50fcdd1496d95a81d3fd490d0622a3d59f578feb9719edc9b25", 0x89}, {&(0x7f0000000040)}, {&(0x7f00000005c0)="09a9a91a40ca276d174d3de5fd09ad2f620be3f6e8a2afb8e08d9aad7864abde5358bd26764559df3796485891c098b33e71fae75f4c9619ab1b4eaa090e7ad0f04cf93ed1cf02c934f255971dc729a4c4ac222dcb8dfd54b6c08a8beb92598af4576532afb40ef09812157c939e0db5d6e42af97463f3c57eea8f8f93929fdd9c964fe1eb8b408c526d5afe90f4dc972c2afc886d8eecd4042ad8d9470b08fcb0053d2cc1dee551eb20be40e7945cfb9ab54e719cd11f0d553b8ce890d364233dc7b74ad06b3db35ef32f31d36c64c2762b4cfbdf8f", 0xd6}, {&(0x7f00000017c0)="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"/2262, 0x8d6}], 0x7, 0x0) 2m50.972390683s ago: executing program 34 (id=236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0xffffffffffffffff, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000640)={0x3c9, 0x80000, 0xffffffffffffffff}) ioctl$TIOCNXCL(r2, 0x540d) openat$binder_debug(0xffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) io_setup(0xffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390404000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01980400419a04002000128008000100736974001400028008000300ac1414bb06000f0002000000"], 0x40}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101701) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0}) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x4, @local, 'veth0\x00'}}, 0x1e) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090212000180000000090400"], 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000007c0)="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", 0xfffffffffffffdc5) vmsplice(r9, &(0x7f00000028c0)=[{&(0x7f0000000180)="af58439fcd1c3ba9c946e73d630b3a986f158b6f706b876e85a82c4f2a8bd09be7a8435018067008b6a6b015a885ce22d08b620ee9b584eefadf769ed0fc28d262bab40e69dca647855de6968686ee2f07d4914de16e160d67336930a05169d1334adf887f2fd6dbe29f3fc5", 0x6c}, {&(0x7f00000003c0)="742cc3321d5967d32481c6134a966059e3e53e97cfb16e9c4e79c8a44e26998cfd30ef2c2ab62fcc38e318020acdbf59114bee7c20906285862da4c36b781ce2305ab0a6d4d36818e823068866e2bd6037cc7d3ddb465b5ae2f22b5fce2ce9d44032dc6c7f88c983550f50e4bcfb019ebc53735f38357f7d2c3b0c9a24df775f8bac655f4764d2e7dfd99129fdfdfe2a345aa43e0ac069f3ad0bf0e5737d52aec9f14485ab5da399ef5a94577efa6a6b3fb09587df452af0ada2604891605b6ca60553c8ba69cfd164ed29c10758c42a7cd50ddaffbdb4bc46cc97443b91bfceb1a1e602848fd61724bca2ac640e", 0xee}, {0x0}, {&(0x7f0000000300)="66016b880b2bbd203b5f8264adb0fa31f78a67d23125afad58e9c9ab000f630b81d5c988634e0dfb1149e9b861a5b0d26df483344d6f7c833a29a20c3c8aec83abc20db3cdaf66a524798d07ba3b6d1bb35767d5662413925da692617d4a6a452341eef9e76fc7625ab6bf551d705ba50fcdd1496d95a81d3fd490d0622a3d59f578feb9719edc9b25", 0x89}, {&(0x7f0000000040)}, {&(0x7f00000005c0)="09a9a91a40ca276d174d3de5fd09ad2f620be3f6e8a2afb8e08d9aad7864abde5358bd26764559df3796485891c098b33e71fae75f4c9619ab1b4eaa090e7ad0f04cf93ed1cf02c934f255971dc729a4c4ac222dcb8dfd54b6c08a8beb92598af4576532afb40ef09812157c939e0db5d6e42af97463f3c57eea8f8f93929fdd9c964fe1eb8b408c526d5afe90f4dc972c2afc886d8eecd4042ad8d9470b08fcb0053d2cc1dee551eb20be40e7945cfb9ab54e719cd11f0d553b8ce890d364233dc7b74ad06b3db35ef32f31d36c64c2762b4cfbdf8f", 0xd6}, {&(0x7f00000017c0)="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"/2262, 0x8d6}], 0x7, 0x0) 12.320209969s ago: executing program 5 (id=451): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) 10.916199284s ago: executing program 0 (id=453): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, &(0x7f0000000040)=0x1000) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x24008090) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0) ioctl(r0, 0x8b19, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0xfe8ee28a1d8eb870, 0x8, 0x6, 0x2, 0x40, 0x65f, 0x0, 0x6, 0x5}) close(r3) 8.921110965s ago: executing program 0 (id=455): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="e19909081d61", 0x6}], 0x2, 0x3, 0x9) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) fcntl$lock(r3, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) 7.091639212s ago: executing program 2 (id=457): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 6.867445078s ago: executing program 5 (id=458): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) clock_adjtime(0x1, &(0x7f0000000340)={0x7, 0x5, 0x2, 0x3ff, 0x1fffffffe00, 0x7ff, 0xff, 0x400, 0xc7d, 0x3, 0x5, 0x325, 0x8, 0x80, 0x8, 0x9, 0x4, 0x0, 0xffffffffffff0000, 0xfffffffffffffffc, 0x6, 0x5, 0x77a, 0x3b9, 0xffff, 0x4}) r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0x80, @empty, 0xbb25}}}, 0x3a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r9, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x30}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0xa, 0x1, 0x0) 5.59602167s ago: executing program 2 (id=459): open(&(0x7f00000001c0)='./bus\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x402) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x15}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x800d, @remote, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) rename(0x0, &(0x7f0000000500)='./file0\x00') 4.560280436s ago: executing program 5 (id=460): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030001ac0f"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.984456655s ago: executing program 2 (id=461): socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.876286098s ago: executing program 0 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000050401"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.71432038s ago: executing program 2 (id=463): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x20140, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161c050002311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000001640)="5273027e0a4e47ad", 0x8}], 0x3, 0x0, 0x7) capget(0x0, &(0x7f0000000740)={0x1, 0x7ff, 0xa10f, 0x8, 0x903, 0x1}) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') unshare(0x38060000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/slabinfo\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x719ac1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x6}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) 3.708644739s ago: executing program 5 (id=464): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r6 = socket(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5400000030000504010000000000000000000000400001803c0001800900010067617465000000002c000280180002000000000000000000000000000000000000000000100005800ce4018008000300e8030000", 0x54}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='stacktrace', 0xa) 3.512746525s ago: executing program 0 (id=465): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a99018c47ca5f0b0000000000000000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000400"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000400), 0x0) io_uring_enter(0xffffffffffffffff, 0x10062c4, 0xffffffdc, 0xa3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.724083084s ago: executing program 5 (id=466): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/9, 0xffffff64) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 1.434470191s ago: executing program 5 (id=467): mkdir(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0xc1}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7ffd, 0xfffffffc, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000100)={0x5, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x1, 0xe}) 1.1322169s ago: executing program 0 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x1, 0x13, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x5, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c15000000000000000400", 0x3234564e}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=r6], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.064030118s ago: executing program 2 (id=469): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0xb8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x20, 0x140e, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x400c000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x2000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x2008009, 0x4) 744.780102ms ago: executing program 2 (id=470): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 0 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1', 0x1) kernel console output (not intermixed with test programs): 94.079527][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.096274][ T5612] veth0_vlan: entered promiscuous mode [ 94.113525][ T5612] veth1_vlan: entered promiscuous mode [ 94.258948][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.310475][ T1021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.349326][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.560685][ T1021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.574839][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.614069][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.862575][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.900193][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.965314][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.989670][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.078990][ T5612] veth0_macvtap: entered promiscuous mode [ 95.131317][ T5789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.000190][ T5860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.003190][ T5612] veth1_macvtap: entered promiscuous mode [ 97.760427][ T5860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.763841][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.048022][ T5860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.056026][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.080676][ T5860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.172632][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.215303][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.271904][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.293434][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.335989][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.344599][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.353203][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.472145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.519916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.753032][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.898820][ T30] audit: type=1800 audit(1787095167.891:2): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="idVendor" dev="configfs" ino=9459 res=0 errno=0 [ 99.927887][ T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.961473][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.971303][ T5871] futex_wake_op: syz.1.10 tries to shift op by 144; fix this program [ 100.016035][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.037821][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.141050][ T1145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.179124][ T30] audit: type=1800 audit(1787095167.901:3): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="idProduct" dev="configfs" ino=9460 res=0 errno=0 [ 100.256071][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.671814][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.968122][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.978522][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.091489][ T5743] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.120409][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.145608][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.521237][ T5743] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 101.739730][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.962741][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.185192][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.370848][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.463851][ T5743] usb 1-1: config 0 descriptor?? [ 103.096049][ T29] IPVS: starting estimator thread 0... [ 104.117390][ T5895] comedi comedi1: reset error (fatal) [ 104.152525][ T5896] IPVS: using max 26 ests per chain, 62400 per kthread [ 104.661409][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.662497][ T5900] futex_wake_op: syz.1.15 tries to shift op by 144; fix this program [ 104.702131][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.680329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.277177][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 108.311698][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 108.793305][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 108.823172][ T5743] usbhid 1-1:0.0: can't add hid device: -32 [ 108.846694][ T5743] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 108.906848][ T5743] usb 1-1: USB disconnect, device number 2 [ 110.920543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.889563][ T5933] futex_wake_op: syz.5.24 tries to shift op by 144; fix this program [ 115.303606][ T5948] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 116.026852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.430412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.276584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.833925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.844026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.899327][ T5976] Zero length message leads to an empty skb [ 123.147288][ T5983] futex_wake_op: syz.2.38 tries to shift op by 144; fix this program [ 123.329700][ T5979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.768416][ T5979] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.186142][ T5990] warning: `syz.3.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.658101][ T5979] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.697993][ T5979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.706844][ T5979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.755602][ T5979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.832116][ T5979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.839321][ T5979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.120071][ T5979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.224490][ T5997] usb usb8: usbfs: process 5997 (syz.2.40) did not claim interface 0 before use [ 125.395501][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.011946][ T5979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.035454][ T5979] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.075972][ T5979] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.117065][ T5979] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 126.126411][ T5999] configfs-gadget.g1 gadget.0: HOST MAC 86:f6:22:9e:fb:78 [ 126.137614][ T5979] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 126.149268][ T5999] configfs-gadget.g1 gadget.0: MAC fe:43:36:53:19:bf [ 127.181522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 127.847815][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.854246][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.860605][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.886238][ T5979] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 127.927376][ T5979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.934109][ T5979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.979366][ T5979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.037101][ T5999] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 128.055552][ T5999] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 128.227885][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.315815][ T5610] Bluetooth: hci5: command 0x0c1a tx timeout [ 129.945810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.033381][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.039425][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.045448][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.140064][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.139710][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.144250][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 131.226323][ T6021] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.696064][ T6033] usb usb8: usbfs: process 6033 (syz.5.48) did not claim interface 0 before use [ 132.120561][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.127621][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.419033][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.753192][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762168][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.012135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 135.563437][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.563468][ T5610] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.569487][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.334640][ T30] audit: type=1800 audit(1787095203.595:4): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.52" name="idVendor" dev="configfs" ino=9074 res=0 errno=0 [ 137.277558][ T30] audit: type=1800 audit(1787095203.623:5): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.52" name="idProduct" dev="configfs" ino=9076 res=0 errno=0 [ 137.312334][ T30] audit: type=1800 audit(1787095203.652:6): pid=6050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.52" name="max_speed" dev="configfs" ino=9077 res=0 errno=0 [ 137.780461][ T6057] futex_wake_op: syz.1.54 tries to shift op by 144; fix this program [ 140.473426][ T6072] process 'syz.0.57' launched '/dev/fd/8' with NULL argv: empty string added [ 142.763017][ T5614] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 148.001076][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.010153][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.018621][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.027677][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.055339][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.820411][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.836148][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.845979][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.864734][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.883878][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.826051][ T5614] Bluetooth: hci6: command tx timeout [ 151.834893][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.114218][ T5614] Bluetooth: hci7: command tx timeout [ 152.227212][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.441226][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.617760][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.830545][ T6144] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 153.077136][ T5614] Bluetooth: hci6: command tx timeout [ 154.365731][ T5614] Bluetooth: hci7: command tx timeout [ 154.466883][ T6156] usb usb8: usbfs: process 6156 (syz.5.74) did not claim interface 0 before use [ 155.280993][ T5614] Bluetooth: hci6: command tx timeout [ 155.482922][ T30] audit: type=1800 audit(1787095221.442:7): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.75" name="max_speed" dev="configfs" ino=10059 res=0 errno=0 [ 157.664868][ T5614] Bluetooth: hci7: command tx timeout [ 157.670963][ T5610] Bluetooth: hci6: command tx timeout [ 159.460477][ T13] bridge_slave_1: left allmulticast mode [ 159.601368][ T13] bridge_slave_1: left promiscuous mode [ 159.631931][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.734324][ T13] bridge_slave_0: left allmulticast mode [ 159.747791][ T13] bridge_slave_0: left promiscuous mode [ 159.754200][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.767509][ T5614] Bluetooth: hci7: command tx timeout [ 160.938124][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.028339][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.102831][ T13] bond0 (unregistering): Released all slaves [ 162.486241][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.692085][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 164.865109][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 164.916608][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.980912][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.994893][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.004199][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.011460][ T6103] bridge_slave_0: entered allmulticast mode [ 165.020122][ T6103] bridge_slave_0: entered promiscuous mode [ 165.036862][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.103672][ T13] hsr_slave_0: left promiscuous mode [ 165.106796][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.140156][ T13] hsr_slave_1: left promiscuous mode [ 165.147702][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.148503][ T9] usb 3-1: config 0 descriptor?? [ 165.170012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.186372][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.193921][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.221698][ T13] veth1_macvtap: left promiscuous mode [ 165.227780][ T13] veth0_macvtap: left promiscuous mode [ 165.235676][ T13] veth1_vlan: left promiscuous mode [ 165.242240][ T13] veth0_vlan: left promiscuous mode [ 165.683282][ T29] IPVS: starting estimator thread 0... [ 165.808356][ T6230] IPVS: using max 27 ests per chain, 64800 per kthread [ 165.847062][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.892911][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.993064][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x6 [ 166.067942][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 166.094928][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 166.110823][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 166.146892][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 166.180760][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 166.391801][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 167.138609][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 167.165502][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 167.191055][ T9] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 167.217939][ T9] acrux 0003:1A34:0802.0001: item fetching failed at offset 37/41 [ 167.227049][ T9] acrux 0003:1A34:0802.0001: parse failed [ 167.271771][ T9] acrux 0003:1A34:0802.0001: probe with driver acrux failed with error -22 [ 167.390391][ T9] usb 3-1: USB disconnect, device number 2 [ 167.564694][ T6243] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 167.730388][ T13] team0 (unregistering): Port device team_slave_1 removed [ 167.828109][ T13] team0 (unregistering): Port device team_slave_0 removed [ 168.396680][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.430760][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.744926][ T6103] bridge_slave_1: entered allmulticast mode [ 170.803538][ T6103] bridge_slave_1: entered promiscuous mode [ 171.013849][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.214566][ T6103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.280304][ T6258] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.287328][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 171.308367][ T6103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.624704][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 172.674509][ T6265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.94'. [ 172.755721][ T6103] team0: Port device team_slave_0 added [ 172.801230][ T6103] team0: Port device team_slave_1 added [ 172.989418][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.016457][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.117650][ T6103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.398485][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.435786][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.464094][ T6279] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 173.497213][ T6103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.687810][ T6131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.032837][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.069334][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.100616][ T6116] bridge_slave_0: entered allmulticast mode [ 175.133862][ T6116] bridge_slave_0: entered promiscuous mode [ 175.420889][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.460164][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.498894][ T6116] bridge_slave_1: entered allmulticast mode [ 175.533656][ T6116] bridge_slave_1: entered promiscuous mode [ 176.471390][ T5772] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 176.633757][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 176.639710][ T5772] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.656036][ T5772] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 176.671977][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.681036][ T5772] usb 2-1: Product: syz [ 176.685224][ T5772] usb 2-1: Manufacturer: syz [ 176.690282][ T5772] usb 2-1: SerialNumber: syz [ 176.788865][ T5772] usb 2-1: config 0 descriptor?? [ 176.806215][ T6307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 176.816675][ T6103] hsr_slave_0: entered promiscuous mode [ 176.841564][ T6103] hsr_slave_1: entered promiscuous mode [ 176.850083][ T5772] hub 2-1:0.0: bad descriptor, ignoring hub [ 176.870459][ T6103] debugfs: 'hsr0' already exists in 'hsr' [ 176.877008][ T5772] hub 2-1:0.0: probe with driver hub failed with error -5 [ 176.893109][ T6103] Cannot create hsr debugfs directory [ 178.826665][ T6131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.910773][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 179.054272][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.095520][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.318336][ T6131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.377403][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.442865][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.593919][ T6116] team0: Port device team_slave_0 added [ 179.705074][ T6131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.778486][ T6116] team0: Port device team_slave_1 added [ 179.868985][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.903743][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.912362][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.963431][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.012755][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.108203][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.131504][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.256281][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.457097][ T6324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.494326][ T6324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.526718][ T6324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.627649][ T6324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.902891][ T6318] raw-gadget.0 gadget.1: failed to queue suspend event [ 180.925168][ T6324] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 181.648515][ T6324] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 181.672929][ T6116] hsr_slave_0: entered promiscuous mode [ 181.679630][ T6318] raw-gadget.0 gadget.1: failed to queue disconnect event [ 181.679708][ T6116] hsr_slave_1: entered promiscuous mode [ 181.704170][ T6116] debugfs: 'hsr0' already exists in 'hsr' [ 181.713387][ T6116] Cannot create hsr debugfs directory [ 181.870198][ T6324] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 181.993062][ T6324] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 182.027301][ T6324] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 182.042201][ T6324] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 182.112648][ T6131] bridge_slave_1: left allmulticast mode [ 182.135084][ T6131] bridge_slave_1: left promiscuous mode [ 182.142876][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.240646][ T6131] bridge_slave_0: left allmulticast mode [ 182.248027][ T6131] bridge_slave_0: left promiscuous mode [ 182.257555][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.665784][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.671885][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.752702][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.840623][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.943534][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.108'. [ 182.999862][ T6352] netlink: 64 bytes leftover after parsing attributes in process `syz.5.108'. [ 183.103560][ T5614] Bluetooth: hci6: command 0x0c1a tx timeout [ 183.630365][ T10] usb 2-1: USB disconnect, device number 2 [ 184.225664][ T5614] Bluetooth: hci7: command 0x0c1a tx timeout [ 184.689022][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.764515][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.795925][ T6131] bond0 (unregistering): Released all slaves [ 184.861753][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 185.411713][ T5614] Bluetooth: hci6: command 0x0c1a tx timeout [ 187.485923][ T5614] Bluetooth: hci7: command 0x0c1a tx timeout [ 187.604980][ T5610] Bluetooth: hci6: command 0x0c1a tx timeout [ 187.742450][ T6373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.591270][ T6384] usb usb8: usbfs: process 6384 (syz.2.116) did not claim interface 0 before use [ 188.805900][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 189.300990][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 189.316080][ T980] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.331145][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.345220][ T980] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.369554][ T980] usb 2-1: Product: syz [ 189.381525][ T980] usb 2-1: Manufacturer: syz [ 189.408196][ T980] usb 2-1: SerialNumber: syz [ 189.439901][ T980] usb 2-1: config 0 descriptor?? [ 189.454171][ T6383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.499934][ T980] hub 2-1:0.0: bad descriptor, ignoring hub [ 189.521029][ T980] hub 2-1:0.0: probe with driver hub failed with error -5 [ 189.625527][ T5610] Bluetooth: hci7: command 0x0c1a tx timeout [ 189.787502][ T30] audit: type=1800 audit(1787095253.602:8): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.118" name="idVendor" dev="configfs" ino=11403 res=0 errno=0 [ 189.907726][ T6103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.078351][ T30] audit: type=1800 audit(1787095253.623:9): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.118" name="idProduct" dev="configfs" ino=11404 res=0 errno=0 [ 190.446807][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.660886][ T6131] hsr_slave_0: left promiscuous mode [ 190.697960][ T6131] hsr_slave_1: left promiscuous mode [ 190.751875][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.792586][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.082757][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.347992][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.833970][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.903363][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.319752][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.699334][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.926579][ T6131] veth1_macvtap: left promiscuous mode [ 192.946804][ T6131] veth0_macvtap: left promiscuous mode [ 192.958663][ T6131] veth1_vlan: left promiscuous mode [ 192.968645][ T6131] veth0_vlan: left promiscuous mode [ 195.318129][ T29] usb 2-1: USB disconnect, device number 3 [ 195.383262][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'. [ 195.482129][ T6424] netlink: 64 bytes leftover after parsing attributes in process `syz.2.123'. [ 198.011968][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.021196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.516956][ T30] audit: type=1800 audit(1787095262.073:10): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.127" name="idVendor" dev="configfs" ino=11462 res=0 errno=0 [ 198.557739][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 199.566036][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 200.248666][ T6103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.291607][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.331495][ T6103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.370810][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.418198][ T6103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.472050][ T6440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.497408][ T6103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.820871][ T6451] IPVS: sh: FWM 3 0x00000003 - no destination available [ 200.827925][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 201.232739][ T6116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.791020][ T6461] sctp: [Deprecated]: syz.2.132 (pid 6461) Use of int in max_burst socket option deprecated. [ 202.791020][ T6461] Use struct sctp_assoc_value instead [ 202.952440][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.001425][ T6116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 203.048411][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.083407][ T6458] netlink: 128 bytes leftover after parsing attributes in process `syz.2.132'. [ 203.130329][ T6458] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 203.249146][ T6116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 203.317746][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.411354][ T6116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 203.457917][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.893301][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.166532][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.005947][ T6103] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.306806][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.314031][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.429947][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.437138][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.493018][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.592818][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.599965][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.688816][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.696018][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.844879][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 209.417398][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'. [ 209.481266][ T6529] netlink: 64 bytes leftover after parsing attributes in process `syz.1.142'. [ 209.642654][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.656715][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.667525][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.676611][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.685658][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.898543][ T6544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.144'. [ 209.965573][ T6548] futex_wake_op: syz.1.145 tries to shift op by 144; fix this program [ 209.976507][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.943565][ T5614] Bluetooth: hci4: command tx timeout [ 214.205647][ T5614] Bluetooth: hci4: command tx timeout [ 214.720110][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.732200][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.741864][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.764578][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.774934][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.406956][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 215.434709][ T6600] netlink: 128 bytes leftover after parsing attributes in process `syz.5.155'. [ 215.443902][ T6600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.459827][ T6602] sctp: [Deprecated]: syz.5.155 (pid 6602) Use of int in max_burst socket option deprecated. [ 215.459827][ T6602] Use struct sctp_assoc_value instead [ 216.460583][ T5610] Bluetooth: hci4: command tx timeout [ 216.811869][ T6617] fuse: Bad value for 'fd' [ 216.933583][ T6615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.985720][ T6615] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 217.055804][ T5610] Bluetooth: hci5: command tx timeout [ 217.104936][ T6615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.140981][ T6615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.152352][ T1145] bridge_slave_1: left allmulticast mode [ 217.171534][ T1145] bridge_slave_1: left promiscuous mode [ 217.183597][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.197988][ T6615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 217.218941][ T6615] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 217.226413][ T1145] bridge_slave_0: left allmulticast mode [ 217.234718][ T1145] bridge_slave_0: left promiscuous mode [ 217.238610][ T6615] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 217.242121][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.311116][ T6615] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 217.361283][ T6615] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 217.392500][ T6615] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 217.438707][ T6615] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 217.689621][ T6620] Process accounting resumed [ 217.817285][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.882445][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.912516][ T1145] bond0 (unregistering): Released all slaves [ 218.077019][ T6644] comedi comedi0: Minor -4 is invalid! [ 218.210133][ T1145] hsr_slave_0: left promiscuous mode [ 218.251854][ T1145] hsr_slave_1: left promiscuous mode [ 218.312293][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.341876][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.047440][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 219.306692][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.382826][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 219.389039][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 219.469219][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 219.555802][ T5610] Bluetooth: hci5: command 0x040f tx timeout [ 220.698962][ T30] audit: type=1800 audit(1787095282.599:11): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.168" name="iface_name" dev="configfs" ino=12700 res=0 errno=0 [ 222.049629][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.050073][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 222.055682][ T5610] Bluetooth: hci5: command 0x040f tx timeout [ 222.135760][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 222.396773][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 223.818273][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 224.245904][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 224.322490][ T5610] Bluetooth: hci5: command 0x040f tx timeout [ 224.485291][ T6700] comedi comedi0: Minor -4 is invalid! [ 225.594015][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.601651][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.608877][ T6536] bridge_slave_0: entered allmulticast mode [ 225.617046][ T6536] bridge_slave_0: entered promiscuous mode [ 225.658991][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.674526][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.686853][ T6536] bridge_slave_1: entered allmulticast mode [ 225.695754][ T6536] bridge_slave_1: entered promiscuous mode [ 225.751142][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.813837][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.043008][ T6718] futex_wake_op: syz.2.178 tries to shift op by 144; fix this program [ 226.075231][ T6536] team0: Port device team_slave_0 added [ 226.618252][ T5610] Bluetooth: hci5: command 0x040f tx timeout [ 227.240819][ T6536] team0: Port device team_slave_1 added [ 228.827970][ T5610] Bluetooth: hci5: command 0x040f tx timeout [ 231.426575][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.438973][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.532465][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.770930][ T980] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 233.048956][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.095995][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.210766][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.232740][ T980] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 233.278762][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 233.289877][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.332266][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.375789][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.389225][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.414451][ T980] usb 6-1: config 0 descriptor?? [ 233.541448][ T6536] hsr_slave_0: entered promiscuous mode [ 233.548977][ T6536] hsr_slave_1: entered promiscuous mode [ 233.562104][ T6536] debugfs: 'hsr0' already exists in 'hsr' [ 233.586307][ T6536] Cannot create hsr debugfs directory [ 233.727069][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.748140][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.771405][ T6586] bridge_slave_0: entered allmulticast mode [ 233.792999][ T6586] bridge_slave_0: entered promiscuous mode [ 233.880858][ T5757] IPVS: starting estimator thread 0... [ 233.983174][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.994667][ T6754] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.166932][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.277687][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.303512][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.332119][ T6586] bridge_slave_1: entered allmulticast mode [ 235.372969][ T6586] bridge_slave_1: entered promiscuous mode [ 235.402030][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 235.430634][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 235.506691][ T980] usb 6-1: USB disconnect, device number 2 [ 236.509172][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.854034][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.276630][ T6586] team0: Port device team_slave_0 added [ 238.349617][ T6586] team0: Port device team_slave_1 added [ 238.351687][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'. [ 238.460920][ T6776] netlink: 64 bytes leftover after parsing attributes in process `syz.0.189'. [ 238.880452][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.935940][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.085860][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.134581][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.176527][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.416715][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.198310][ T6586] hsr_slave_0: entered promiscuous mode [ 243.234363][ T6586] hsr_slave_1: entered promiscuous mode [ 243.455033][ T6586] debugfs: 'hsr0' already exists in 'hsr' [ 243.491170][ T6586] Cannot create hsr debugfs directory [ 243.728638][ T1145] bridge_slave_1: left allmulticast mode [ 243.749390][ T1145] bridge_slave_1: left promiscuous mode [ 245.400327][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.604714][ T1145] bridge_slave_0: left allmulticast mode [ 245.640797][ T1145] bridge_slave_0: left promiscuous mode [ 245.672275][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.205344][ T6836] usb usb8: usbfs: process 6836 (syz.0.199) did not claim interface 0 before use [ 249.046502][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.117094][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.166959][ T1145] bond0 (unregistering): Released all slaves [ 249.167744][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'. [ 249.277203][ T6839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.202'. [ 249.383896][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 249.611274][ T1145] hsr_slave_0: left promiscuous mode [ 249.643591][ T1145] hsr_slave_1: left promiscuous mode [ 249.686936][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.720179][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.742614][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 250.848557][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 252.707314][ T6861] random: crng reseeded on system resumption [ 252.849080][ T6861] jffs2: notice: (6861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.058500][ T6895] futex_wake_op: syz.5.208 tries to shift op by 144; fix this program [ 259.942554][ T6536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.036136][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.067159][ T6536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.113218][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.988235][ T6536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 262.034927][ T6913] usb usb8: usbfs: process 6913 (syz.2.213) did not claim interface 0 before use [ 262.049634][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.095844][ T6536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 262.162548][ T6536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.804303][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.979110][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.033761][ T6923] random: crng reseeded on system resumption [ 263.118430][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.125558][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.252561][ T6931] jffs2: notice: (6931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 263.698867][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.706053][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.895854][ T6586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.909303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.915602][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.973904][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.015313][ T6586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.054586][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.118952][ T6586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 264.175232][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.214566][ T6586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 264.291954][ T6586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.508410][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'. [ 264.591652][ T6944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.216'. [ 264.823250][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.963359][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.048899][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.056139][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.132698][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.139854][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.724704][ T5614] Bluetooth: hci6: command 0x1003 tx timeout [ 267.731947][ T5610] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 270.707806][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.794322][ T185] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 272.710354][ T185] usb 3-1: device descriptor read/all, error -71 [ 272.947784][ T7025] usb usb8: usbfs: process 7025 (syz.2.225) did not claim interface 0 before use [ 273.224808][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.745211][ T7046] usb usb8: usbfs: process 7046 (syz.0.228) did not claim interface 0 before use [ 276.027564][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.040050][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.055926][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.070400][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.082263][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.577866][ T6586] veth0_vlan: entered promiscuous mode [ 276.670598][ T6586] veth1_vlan: entered promiscuous mode [ 276.869260][ T7084] netlink: 'syz.5.221': attribute type 9 has an invalid length. [ 278.508283][ T5614] Bluetooth: hci6: command tx timeout [ 279.712911][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.722094][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.731721][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.740359][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.757219][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.295808][ T5610] Bluetooth: hci6: command tx timeout [ 281.986717][ T5610] Bluetooth: hci4: command tx timeout [ 283.506852][ T5610] Bluetooth: hci6: command tx timeout [ 284.288204][ T5610] Bluetooth: hci4: command tx timeout [ 284.599818][ T7157] netlink: 'syz.0.248': attribute type 9 has an invalid length. [ 285.737074][ T5614] Bluetooth: hci6: command tx timeout [ 286.534119][ T5614] Bluetooth: hci4: command tx timeout [ 288.754273][ T5614] Bluetooth: hci4: command tx timeout [ 289.807343][ T5789] bridge_slave_1: left allmulticast mode [ 289.834307][ T5789] bridge_slave_1: left promiscuous mode [ 289.851084][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.907564][ T5789] bridge_slave_0: left allmulticast mode [ 289.935049][ T5789] bridge_slave_0: left promiscuous mode [ 289.960892][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.292353][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.335207][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.376236][ T5789] bond0 (unregistering): Released all slaves [ 291.661285][ T5789] hsr_slave_0: left promiscuous mode [ 291.668083][ T5789] hsr_slave_1: left promiscuous mode [ 291.676876][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.685672][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.450194][ T5743] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 293.532242][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 293.570538][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 293.631037][ T5743] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 293.666379][ T5743] usb 2-1: config 128 interface 0 has no altsetting 0 [ 293.682639][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.922659][ T30] audit: type=1326 audit(1787095351.200:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7200 comm="syz.0.257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb60f59e0d9 code=0x0 [ 294.307497][ T7177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.106926][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.123882][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.138512][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.152835][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.167287][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.458141][ T5743] usb 2-1: string descriptor 0 read error: -71 [ 300.098854][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.141653][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.186213][ T7065] bridge_slave_0: entered allmulticast mode [ 300.212516][ T5743] usb 2-1: selecting invalid altsetting 3 [ 300.218444][ T5743] comedi comedi5: could not set alternate setting 3 in high speed [ 300.226826][ T5743] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 300.279964][ T7065] bridge_slave_0: entered promiscuous mode [ 300.291727][ T5743] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 300.344506][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.356313][ T5610] Bluetooth: hci5: command tx timeout [ 300.407255][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.606012][ T7065] bridge_slave_1: entered allmulticast mode [ 300.650221][ T7065] bridge_slave_1: entered promiscuous mode [ 300.690266][ T5743] usb 2-1: USB disconnect, device number 4 [ 302.099639][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 302.608916][ T5610] Bluetooth: hci5: command tx timeout [ 303.645187][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.681478][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.692103][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.699493][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.706756][ T7102] bridge_slave_0: entered allmulticast mode [ 303.715090][ T7102] bridge_slave_0: entered promiscuous mode [ 303.856091][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.873417][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.898547][ T7102] bridge_slave_1: entered allmulticast mode [ 303.917164][ T7102] bridge_slave_1: entered promiscuous mode [ 303.935663][ T7065] team0: Port device team_slave_0 added [ 304.001286][ T7065] team0: Port device team_slave_1 added [ 304.335469][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.936309][ T5610] Bluetooth: hci5: command tx timeout [ 306.298673][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.353178][ T5610] Bluetooth: hci5: command tx timeout [ 307.367940][ T7273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.380600][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.390361][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.431064][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.190302][ T7102] team0: Port device team_slave_0 added [ 308.284658][ T5789] bridge_slave_1: left allmulticast mode [ 308.302410][ T5789] bridge_slave_1: left promiscuous mode [ 308.327663][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.349065][ T30] audit: type=1326 audit(1787095364.515:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7300 comm="syz.0.274" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb60f59e0d9 code=0x0 [ 308.384919][ T5789] bridge_slave_0: left allmulticast mode [ 308.398680][ T5789] bridge_slave_0: left promiscuous mode [ 308.410311][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.634446][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.656820][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.669125][ T5789] bond0 (unregistering): Released all slaves [ 310.743801][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.752366][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.846060][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.000866][ T7102] team0: Port device team_slave_1 added [ 311.226730][ T5789] hsr_slave_0: left promiscuous mode [ 311.264408][ T5789] hsr_slave_1: left promiscuous mode [ 311.287108][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.322761][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.368619][ T5789] veth1_vlan: left promiscuous mode [ 311.393257][ T5789] veth0_vlan: left promiscuous mode [ 312.881272][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 312.984056][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 313.349773][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 313.411000][ T7337] netlink: 64 bytes leftover after parsing attributes in process `syz.0.281'. [ 313.436990][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.461239][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.496980][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.547398][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 313.633915][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.645907][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.724559][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.791345][ T7065] hsr_slave_0: entered promiscuous mode [ 313.814157][ T7065] hsr_slave_1: entered promiscuous mode [ 313.842031][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 313.855992][ T7065] Cannot create hsr debugfs directory [ 314.322478][ T7102] hsr_slave_0: entered promiscuous mode [ 314.365390][ T7102] hsr_slave_1: entered promiscuous mode [ 314.388513][ T7102] debugfs: 'hsr0' already exists in 'hsr' [ 314.413389][ T7102] Cannot create hsr debugfs directory [ 315.729194][ T1145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.104979][ T1145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.293010][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 316.637742][ T1145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.297396][ T7347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.801909][ T1145] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.214949][ T5614] Bluetooth: hci1: command 0x1003 tx timeout [ 321.222307][ T5610] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 322.064128][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.080282][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.093423][ T7229] bridge_slave_0: entered allmulticast mode [ 322.124754][ T7229] bridge_slave_0: entered promiscuous mode [ 322.616195][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.633774][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.667537][ T7229] bridge_slave_1: entered allmulticast mode [ 322.685824][ T7229] bridge_slave_1: entered promiscuous mode [ 322.752614][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.836128][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.234554][ T7229] team0: Port device team_slave_0 added [ 323.307539][ T7229] team0: Port device team_slave_1 added [ 323.351491][ T1145] bridge_slave_1: left allmulticast mode [ 323.358884][ T1145] bridge_slave_1: left promiscuous mode [ 323.371576][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.441382][ T1145] bridge_slave_0: left allmulticast mode [ 323.461828][ T1145] bridge_slave_0: left promiscuous mode [ 323.481611][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.527170][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.292'. [ 323.606567][ T7413] netlink: 64 bytes leftover after parsing attributes in process `syz.0.292'. [ 323.669568][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 324.867113][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.910407][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.933820][ T1145] bond0 (unregistering): Released all slaves [ 325.624353][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.635642][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.691272][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.509522][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.5.293'. [ 326.538599][ T7427] netlink: 'syz.5.293': attribute type 10 has an invalid length. [ 327.473000][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.491647][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.553137][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.583530][ T7429] netlink: 'syz.5.293': attribute type 1 has an invalid length. [ 327.596326][ T7427] team0: Device vxcan0 is of different type [ 327.996944][ T5610] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 328.003480][ T5614] Bluetooth: hci1: command 0x1003 tx timeout [ 328.390818][ T7229] hsr_slave_0: entered promiscuous mode [ 328.870145][ T7229] hsr_slave_1: entered promiscuous mode [ 328.896796][ T7229] debugfs: 'hsr0' already exists in 'hsr' [ 328.905769][ T7229] Cannot create hsr debugfs directory [ 330.087872][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.094389][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.730318][ T1145] hsr_slave_0: left promiscuous mode [ 330.757559][ T1145] hsr_slave_1: left promiscuous mode [ 330.780482][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.820558][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.879245][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.899244][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.957992][ T1145] veth1_macvtap: left promiscuous mode [ 330.982659][ T1145] veth0_macvtap: left promiscuous mode [ 331.063089][ T1145] veth1_vlan: left promiscuous mode [ 331.186655][ T1145] veth0_vlan: left promiscuous mode [ 332.652712][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 332.725520][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 333.082162][ T7476] random: crng reseeded on system resumption [ 333.280648][ T7476] jffs2: notice: (7476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 333.893021][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 334.561504][ T7065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.593442][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 334.610665][ T7065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.631630][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.720820][ T7065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.799340][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.831655][ T7065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.880655][ T7065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.012292][ T7508] netlink: 'syz.5.304': attribute type 2 has an invalid length. [ 335.104107][ T7102] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 335.172311][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.206978][ T7102] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 335.241850][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.268840][ T7102] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 335.282837][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.331827][ T7102] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 336.920735][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.207792][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.255671][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.288053][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.295209][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.370114][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.377295][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.480941][ T7513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.539552][ T7229] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 338.634593][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.681296][ T7229] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 338.736513][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.976682][ T7229] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 339.671925][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.725393][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.763913][ T7229] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 339.960441][ T7229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.657100][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.674976][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.685162][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.701357][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.069039][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.961072][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.013347][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.139116][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.210961][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.258151][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.265379][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.363790][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.371000][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.465614][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.472841][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.566800][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.574028][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.312826][ T5614] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 343.399858][ T5605] Bluetooth: hci7: command 0x1003 tx timeout [ 343.421816][ T5605] Bluetooth: hci1: command tx timeout [ 344.258922][ T5605] Bluetooth: hci3: connection err: -111 [ 345.031196][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.043383][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.060126][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.092443][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.109558][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.876701][ T5614] Bluetooth: hci1: command tx timeout [ 347.407319][ T5610] Bluetooth: hci6: command tx timeout [ 347.927664][ T5605] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 348.133036][ T5605] Bluetooth: hci1: command tx timeout [ 349.629360][ T1145] bridge_slave_1: left allmulticast mode [ 349.650475][ T1145] bridge_slave_1: left promiscuous mode [ 349.661015][ T5605] Bluetooth: hci6: command tx timeout [ 349.673072][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.740083][ T1145] bridge_slave_0: left allmulticast mode [ 349.760989][ T1145] bridge_slave_0: left promiscuous mode [ 349.777676][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.148170][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 350.336346][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 350.353801][ T5605] Bluetooth: hci1: command tx timeout [ 350.361282][ T5880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.407268][ T5880] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 350.433486][ T5880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.451574][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.460126][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 350.470698][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.482918][ T5880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.526035][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.549197][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.608098][ T1145] bond0 (unregistering): Released all slaves [ 351.137073][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 351.245125][ T5880] usb 6-1: usb_control_msg returned -71 [ 351.279098][ T5880] usbtmc 6-1:16.0: can't read capabilities [ 351.291330][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.336720][ T5880] usb 6-1: USB disconnect, device number 3 [ 351.918853][ T5605] Bluetooth: hci6: command tx timeout [ 352.289391][ T1145] hsr_slave_0: left promiscuous mode [ 352.429544][ T5736] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 352.860217][ T5736] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 352.926391][ T1145] hsr_slave_1: left promiscuous mode [ 352.987542][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.060190][ T5736] usb 1-1: config 1 has an invalid interface number: 13 but max is 0 [ 353.116951][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.177385][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.233537][ T5736] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 353.374047][ T5736] usb 1-1: config 1 has no interface number 1 [ 353.502038][ T5736] usb 1-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 353.645904][ T5736] usb 1-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.771020][ T5736] usb 1-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 353.904206][ T5736] usb 1-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 354.041415][ T5736] usb 1-1: config 1 interface 13 has no altsetting 0 [ 354.146609][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.189944][ T5605] Bluetooth: hci6: command tx timeout [ 354.229736][ T5736] usb 1-1: Product: syz [ 354.262704][ T5736] usb 1-1: Manufacturer: syz [ 354.316378][ T5736] usb 1-1: SerialNumber: syz [ 354.658646][ T5736] usb 1-1: can't set config #1, error -71 [ 354.725034][ T5736] usb 1-1: USB disconnect, device number 3 [ 359.004996][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 359.140024][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 359.141285][ T7731] futex_wake_op: syz.5.329 tries to shift op by 144; fix this program [ 360.486249][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.496897][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.511245][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.519674][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.529299][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.129543][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.147484][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.185620][ T7587] bridge_slave_0: entered allmulticast mode [ 361.210879][ T7587] bridge_slave_0: entered promiscuous mode [ 361.244532][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.271112][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.295542][ T7587] bridge_slave_1: entered allmulticast mode [ 361.327279][ T7587] bridge_slave_1: entered promiscuous mode [ 361.548898][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.685648][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.181723][ T7765] usb usb8: usbfs: process 7765 (syz.0.328) did not claim interface 0 before use [ 362.844624][ T5605] Bluetooth: hci4: command tx timeout [ 363.005594][ T7587] team0: Port device team_slave_0 added [ 363.040910][ T7587] team0: Port device team_slave_1 added [ 363.361012][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.377072][ T7773] sctp: [Deprecated]: syz.0.332 (pid 7773) Use of int in max_burst socket option deprecated. [ 363.377072][ T7773] Use struct sctp_assoc_value instead [ 363.435321][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.628337][ T7748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.695223][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.771947][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.780053][ T7748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.795170][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.820373][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.861774][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.895569][ T7748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.912094][ T7748] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 363.919494][ T7772] netlink: 128 bytes leftover after parsing attributes in process `syz.0.332'. [ 363.938544][ T7772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 363.957043][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'. [ 363.997078][ T7780] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 364.034344][ T7748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.044314][ T7777] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 364.091873][ T7748] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.139253][ T7748] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.243315][ T7748] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 364.326409][ T7780] team0: Device vxcan0 is of different type [ 364.346901][ T7748] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 364.480956][ T7748] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 364.593738][ T7748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.749865][ T7795] fuse: Bad value for 'fd' [ 364.756703][ T7795] comedi comedi0: Minor -4 is invalid! [ 365.527905][ T7748] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 365.830209][ T5605] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.920857][ T5605] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.073701][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.320793][ T5605] Bluetooth: hci6: command 0x0c1a tx timeout [ 366.351991][ T7748] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 366.375216][ T7587] hsr_slave_0: entered promiscuous mode [ 366.382314][ T7587] hsr_slave_1: entered promiscuous mode [ 366.768393][ T5605] Bluetooth: hci4: command 0x040f tx timeout [ 366.809764][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 366.832011][ T5757] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 367.795235][ T5757] usb 3-1: device descriptor read/all, error -71 [ 368.065991][ T5605] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.507151][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.514207][ T5605] Bluetooth: hci6: command 0x0c1a tx timeout [ 368.895325][ T5605] Bluetooth: hci4: command 0x040f tx timeout [ 369.890599][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.915833][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.936446][ T7634] bridge_slave_0: entered allmulticast mode [ 369.954265][ T7634] bridge_slave_0: entered promiscuous mode [ 369.980527][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.002537][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.024033][ T7634] bridge_slave_1: entered allmulticast mode [ 370.044192][ T7634] bridge_slave_1: entered promiscuous mode [ 370.141268][ T7835] comedi comedi0: Minor -4 is invalid! [ 370.414098][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.531195][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.673880][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.680019][ T5605] Bluetooth: hci6: command 0x0c1a tx timeout [ 370.886524][ T7832] random: crng reseeded on system resumption [ 371.047087][ T7832] jffs2: notice: (7832) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 371.109966][ T5605] Bluetooth: hci4: command 0x040f tx timeout [ 371.485254][ T7634] team0: Port device team_slave_0 added [ 372.159011][ T7634] team0: Port device team_slave_1 added [ 372.486972][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.507129][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.539730][ T7864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.572759][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.607446][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.622599][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.683280][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.336151][ T5605] Bluetooth: hci4: command 0x040f tx timeout [ 373.356727][ T7876] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 373.447580][ T1145] bridge_slave_1: left allmulticast mode [ 373.470255][ T1145] bridge_slave_1: left promiscuous mode [ 373.504440][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.544209][ T1145] bridge_slave_0: left allmulticast mode [ 373.560287][ T1145] bridge_slave_0: left promiscuous mode [ 373.582900][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.089216][ T185] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 374.348482][ T185] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 374.488063][ T185] usb 1-1: config 1 has an invalid interface number: 13 but max is 0 [ 374.587937][ T185] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.706515][ T185] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 374.790341][ T185] usb 1-1: config 1 has no interface number 1 [ 374.861548][ T185] usb 1-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 374.989250][ T185] usb 1-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 375.122579][ T185] usb 1-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 375.276526][ T185] usb 1-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 375.471231][ T185] usb 1-1: config 1 interface 13 has no altsetting 0 [ 375.574772][ T5605] Bluetooth: hci4: command 0x040f tx timeout [ 375.593259][ T185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.697970][ T185] usb 1-1: Product: syz [ 375.765674][ T185] usb 1-1: Manufacturer: syz [ 375.822790][ T185] usb 1-1: SerialNumber: syz [ 376.811121][ T185] usb-storage 1-1:1.0: USB Mass Storage device detected [ 376.892780][ T185] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 376.932857][ T185] scsi host1: usb-storage 1-1:1.0 [ 376.969336][ T185] usb-storage 1-1:1.13: USB Mass Storage device detected [ 377.004338][ T185] usb-storage 1-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 377.028862][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.245914][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.264711][ T7905] comedi comedi0: Minor -4 is invalid! [ 377.365662][ T7908] usb usb8: usbfs: process 7908 (syz.2.350) did not claim interface 0 before use [ 378.104302][ T1145] bond0 (unregistering): Released all slaves [ 378.450445][ T30] audit: type=1326 audit(1787095429.801:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.5.353" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc60e99e0d9 code=0x0 [ 378.472674][ T7634] hsr_slave_0: entered promiscuous mode [ 379.277890][ T7634] hsr_slave_1: entered promiscuous mode [ 379.288779][ T7634] debugfs: 'hsr0' already exists in 'hsr' [ 379.295553][ T7634] Cannot create hsr debugfs directory [ 379.486204][ T185] usb 1-1: USB disconnect, device number 4 [ 381.294611][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 381.321676][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.345256][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.359042][ T7736] bridge_slave_0: entered allmulticast mode [ 381.373940][ T7736] bridge_slave_0: entered promiscuous mode [ 381.618675][ T1145] hsr_slave_0: left promiscuous mode [ 381.636060][ T1145] hsr_slave_1: left promiscuous mode [ 381.650299][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.664941][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.857903][ T7934] sctp: [Deprecated]: syz.0.356 (pid 7934) Use of int in max_burst socket option deprecated. [ 381.857903][ T7934] Use struct sctp_assoc_value instead [ 382.604846][ T5605] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 382.798471][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 382.912216][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 383.702896][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.737163][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.764958][ T7736] bridge_slave_1: entered allmulticast mode [ 383.796631][ T7736] bridge_slave_1: entered promiscuous mode [ 383.836011][ T7933] netlink: 128 bytes leftover after parsing attributes in process `syz.0.356'. [ 383.876667][ T7933] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 384.116569][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.618808][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.857390][ T5743] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 385.116506][ T5743] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 385.180088][ T5743] usb 3-1: config 1 has an invalid interface number: 13 but max is 0 [ 385.235404][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.305341][ T5743] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 385.368217][ T5743] usb 3-1: config 1 has no interface number 1 [ 385.407326][ T5743] usb 3-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 385.478924][ T5743] usb 3-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.543041][ T5743] usb 3-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 385.625035][ T5743] usb 3-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 385.695376][ T5743] usb 3-1: config 1 interface 13 has no altsetting 0 [ 385.777021][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.835594][ T5743] usb 3-1: Product: syz [ 385.879240][ T5743] usb 3-1: Manufacturer: syz [ 385.911528][ T5743] usb 3-1: SerialNumber: syz [ 386.235746][ T5743] usb-storage 3-1:1.0: USB Mass Storage device detected [ 386.385742][ T5743] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 386.451058][ T5743] scsi host1: usb-storage 3-1:1.0 [ 386.587467][ T7736] team0: Port device team_slave_0 added [ 386.835309][ T7736] team0: Port device team_slave_1 added [ 387.020585][ T5743] usb-storage 3-1:1.13: USB Mass Storage device detected [ 387.158150][ T5743] usb-storage 3-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 387.557622][ T5743] usb 3-1: USB disconnect, device number 7 [ 387.875563][ T7966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 387.945050][ T7968] netlink: 64 bytes leftover after parsing attributes in process `syz.0.364'. [ 388.005552][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.012628][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.042509][ T7736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.056218][ T7736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.063386][ T7736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.089730][ T7736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.101139][ T7587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 388.247632][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.445785][ T7587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.473540][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.501520][ T7587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.545949][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.736811][ T7587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.774623][ T7587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.964916][ T7736] hsr_slave_0: entered promiscuous mode [ 390.972578][ T7736] hsr_slave_1: entered promiscuous mode [ 390.979057][ T7736] debugfs: 'hsr0' already exists in 'hsr' [ 390.987185][ T7736] Cannot create hsr debugfs directory [ 391.165456][ T5772] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 391.370299][ T5772] usb 1-1: Using ep0 maxpacket: 16 [ 391.389386][ T5772] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.436210][ T5772] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.457341][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.486667][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 391.523951][ T5772] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 391.555742][ T5772] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.595312][ T5772] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.611275][ T1145] bridge_slave_1: left allmulticast mode [ 391.619527][ T5772] usb 1-1: Manufacturer: syz [ 391.627199][ T1145] bridge_slave_1: left promiscuous mode [ 391.642074][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.656962][ T5772] usb 1-1: config 0 descriptor?? [ 391.694697][ T1145] bridge_slave_0: left allmulticast mode [ 391.717780][ T1145] bridge_slave_0: left promiscuous mode [ 391.731893][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.460989][ T5772] rc_core: IR keymap rc-hauppauge not found [ 392.472433][ T5772] Registered IR keymap rc-empty [ 392.489978][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.502177][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.513726][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.524616][ T1145] bond0 (unregistering): Released all slaves [ 392.531753][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.574366][ T5772] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 392.615105][ T5772] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 392.672011][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.709530][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.731825][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.755285][ T1145] hsr_slave_0: left promiscuous mode [ 392.768866][ T1145] hsr_slave_1: left promiscuous mode [ 392.774757][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.786927][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.800520][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.816045][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.849875][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 392.881777][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 393.034249][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 394.068772][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 394.103459][ T5772] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 394.268456][ T5772] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 394.277848][ T5772] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 394.314122][ T5772] usb 1-1: USB disconnect, device number 5 [ 394.710319][ T5879] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 394.932898][ T5879] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 395.023282][ T5879] usb 6-1: config 1 has an invalid interface number: 13 but max is 0 [ 395.058930][ T5879] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.133663][ T5879] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 395.225630][ T5879] usb 6-1: config 1 has no interface number 1 [ 395.306932][ T5879] usb 6-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 395.386133][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.392950][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.496691][ T5879] usb 6-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.611924][ T5879] usb 6-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.748701][ T5879] usb 6-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 396.070588][ T5879] usb 6-1: config 1 interface 13 has no altsetting 0 [ 396.171903][ T5879] usb 6-1: string descriptor 0 read error: -71 [ 396.183375][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.219546][ T5879] usb 6-1: can't set config #1, error -71 [ 396.237998][ T5879] usb 6-1: USB disconnect, device number 4 [ 398.141085][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 398.177344][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 398.570309][ T8022] ======================================================= [ 398.570309][ T8022] WARNING: The mand mount option has been deprecated and [ 398.570309][ T8022] and is ignored by this kernel. Remove the mand [ 398.570309][ T8022] option from the mount to silence this warning. [ 398.570309][ T8022] ======================================================= [ 398.689664][ T7634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.725332][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.733305][ T7634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.760452][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.819527][ T7634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.856510][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.967076][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.986107][ T7634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 399.001150][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.363099][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.399665][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.406825][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.103553][ T8038] binder: BINDER_SET_CONTEXT_MGR already set [ 400.127885][ T8038] binder: 8037:8038 ioctl 4018620d 200000004a80 returned -16 [ 400.173075][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.180269][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.307883][ T7587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.319518][ T7587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.507101][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.048541][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.482168][ T5736] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 402.775592][ T5736] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 403.002886][ T5736] usb 1-1: config 1 has an invalid interface number: 13 but max is 0 [ 403.128406][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.311306][ T5736] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 403.474180][ T5736] usb 1-1: config 1 has no interface number 1 [ 403.595929][ T5736] usb 1-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 403.753915][ T5736] usb 1-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.868027][ T5736] usb 1-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.997081][ T5736] usb 1-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 404.257793][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.265029][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.278862][ T5736] usb 1-1: config 1 interface 13 has no altsetting 0 [ 405.405031][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.412246][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.482208][ T5736] usb 1-1: string descriptor 0 read error: -71 [ 405.593992][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.631643][ T5736] usb 1-1: can't set config #1, error -71 [ 405.670646][ T5736] usb 1-1: USB disconnect, device number 6 [ 405.767288][ T7736] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.792565][ T7736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.817903][ T7736] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.831933][ T7736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.862612][ T7736] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.888329][ T7736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.897458][ T7736] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 405.928356][ T7736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.972307][ T8069] random: crng reseeded on system resumption [ 406.318668][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.328408][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.338099][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.348606][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.356223][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.351179][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.790647][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.845337][ T5610] Bluetooth: hci1: command tx timeout [ 408.873937][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.881052][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.026238][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.033463][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.042522][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'. [ 409.101372][ T8110] netlink: 64 bytes leftover after parsing attributes in process `syz.2.389'. [ 409.850931][ T7736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.196205][ T8123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 410.218427][ T8123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 410.229100][ T8123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 410.238157][ T8123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 410.248498][ T8123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 410.290468][ T5605] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 410.498391][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 410.773790][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 410.818950][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.831573][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.062049][ T8123] Bluetooth: hci1: command tx timeout [ 411.124532][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.290079][ T10] usb 3-1: Product: syz [ 411.314394][ T10] usb 3-1: Manufacturer: syz [ 411.334369][ T10] usb 3-1: SerialNumber: syz [ 411.448526][ T13] bridge_slave_1: left allmulticast mode [ 411.454519][ T13] bridge_slave_1: left promiscuous mode [ 411.465458][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.485406][ T13] bridge_slave_0: left allmulticast mode [ 411.494508][ T13] bridge_slave_0: left promiscuous mode [ 411.504203][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.644665][ T10] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 411.681935][ T10] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -71! [ 411.740852][ T10] speedtch 3-1:1.0: probe with driver speedtch failed with error -71 [ 412.047121][ T10] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 412.064859][ T185] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 412.302294][ T10] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -71! [ 412.338009][ T185] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 412.418202][ T10] speedtch 3-1:1.1: probe with driver speedtch failed with error -71 [ 412.446910][ T8123] Bluetooth: hci7: command tx timeout [ 412.486566][ T185] usb 6-1: config 1 has an invalid interface number: 13 but max is 0 [ 412.596400][ T185] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.744483][ T185] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 412.785878][ T10] usb 3-1: USB disconnect, device number 8 [ 412.874027][ T185] usb 6-1: config 1 has no interface number 1 [ 412.987271][ T185] usb 6-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 413.172017][ T185] usb 6-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.312751][ T8123] Bluetooth: hci1: command tx timeout [ 413.338191][ T185] usb 6-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 413.501371][ T185] usb 6-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 413.708428][ T185] usb 6-1: config 1 interface 13 has no altsetting 0 [ 413.856944][ T185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.978890][ T185] usb 6-1: Product: syz [ 414.063983][ T185] usb 6-1: Manufacturer: syz [ 414.156373][ T185] usb 6-1: SerialNumber: syz [ 414.699358][ T8123] Bluetooth: hci7: command tx timeout [ 416.503429][ T8123] Bluetooth: hci1: command tx timeout [ 416.642272][ T185] usb-storage 6-1:1.0: USB Mass Storage device detected [ 416.699539][ T185] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 416.774217][ T185] scsi host1: usb-storage 6-1:1.0 [ 416.900802][ T185] usb-storage 6-1:1.13: USB Mass Storage device detected [ 416.943838][ T185] usb-storage 6-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 416.951912][ T8123] Bluetooth: hci7: command tx timeout [ 417.217095][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.269708][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.297425][ T13] bond0 (unregistering): Released all slaves [ 419.204936][ T5605] Bluetooth: hci7: command tx timeout [ 419.295501][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 419.472140][ T185] usb 6-1: USB disconnect, device number 5 [ 419.651119][ T5605] Bluetooth: hci5: command 0x1003 tx timeout [ 419.658761][ T8123] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 420.304788][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 420.362388][ T8193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.401'. [ 420.376442][ T8195] netlink: 'syz.5.403': attribute type 9 has an invalid length. [ 420.395910][ T13] hsr_slave_0: left promiscuous mode [ 420.402452][ T13] hsr_slave_1: left promiscuous mode [ 420.409392][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.471627][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.868448][ T13] team0 (unregistering): Port device team_slave_1 removed [ 420.915769][ T13] team0 (unregistering): Port device team_slave_0 removed [ 421.716854][ T8215] comedi comedi0: Minor -4 is invalid! [ 422.409665][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.418151][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.426659][ T8079] bridge_slave_0: entered allmulticast mode [ 422.451354][ T8079] bridge_slave_0: entered promiscuous mode [ 422.488769][ T7736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.504281][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.523358][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.546579][ T8079] bridge_slave_1: entered allmulticast mode [ 422.573357][ T8079] bridge_slave_1: entered promiscuous mode [ 424.852189][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.703233][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.566620][ T8079] team0: Port device team_slave_0 added [ 426.745724][ T8079] team0: Port device team_slave_1 added [ 426.847341][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.322017][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.330305][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.340912][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.355252][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.746269][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.786506][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.860055][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.899160][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.5.414'. [ 428.003750][ T8288] netlink: 64 bytes leftover after parsing attributes in process `syz.5.414'. [ 428.024880][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.053881][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.109960][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.505518][ T8079] hsr_slave_0: entered promiscuous mode [ 428.525005][ T8079] hsr_slave_1: entered promiscuous mode [ 428.894915][ T13] bridge_slave_1: left allmulticast mode [ 428.900869][ T13] bridge_slave_1: left promiscuous mode [ 428.906732][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.919199][ T13] bridge_slave_0: left allmulticast mode [ 428.927427][ T13] bridge_slave_0: left promiscuous mode [ 428.934201][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.624174][ T5605] Bluetooth: hci5: command tx timeout [ 429.712161][ T8183] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 429.884708][ T29] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 429.919050][ T8183] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 429.949949][ T8183] usb 3-1: config 1 has an invalid interface number: 13 but max is 0 [ 429.984957][ T8183] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.033217][ T8183] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 430.074391][ T8183] usb 3-1: config 1 has no interface number 1 [ 430.109293][ T8183] usb 3-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 430.168939][ T8183] usb 3-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 430.214237][ T8183] usb 3-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 430.256553][ T8183] usb 3-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 430.335109][ T8183] usb 3-1: config 1 interface 13 has no altsetting 0 [ 430.398594][ T8183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.438876][ T8183] usb 3-1: Product: syz [ 430.463020][ T8183] usb 3-1: Manufacturer: syz [ 430.484728][ T8183] usb 3-1: SerialNumber: syz [ 430.730367][ T8183] usb-storage 3-1:1.0: USB Mass Storage device detected [ 430.967721][ T8183] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 431.022297][ T8183] scsi host1: usb-storage 3-1:1.0 [ 431.242640][ T8183] usb-storage 3-1:1.13: USB Mass Storage device detected [ 431.285020][ T8183] usb-storage 3-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 431.372453][ T29] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 431.377814][ T8183] usb 3-1: USB disconnect, device number 9 [ 431.389627][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.403900][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.415457][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.434503][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.465904][ T29] usb 6-1: config 0 descriptor?? [ 431.534257][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.549622][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.573519][ T13] bond0 (unregistering): Released all slaves [ 431.708508][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.724882][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.736696][ T8121] bridge_slave_0: entered allmulticast mode [ 431.747048][ T8121] bridge_slave_0: entered promiscuous mode [ 431.757075][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.765785][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.773133][ T8121] bridge_slave_1: entered allmulticast mode [ 431.786545][ T8121] bridge_slave_1: entered promiscuous mode [ 431.817227][ T13] hsr_slave_0: left promiscuous mode [ 431.830922][ T13] hsr_slave_1: left promiscuous mode [ 431.837407][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.852478][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.859717][ T5605] Bluetooth: hci5: command tx timeout [ 432.054475][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.088042][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.126220][ T29] hid_parser_main: 8 callbacks suppressed [ 432.126240][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x6 [ 432.159821][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.172486][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.190527][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.213821][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.223430][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.230677][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.240656][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.248011][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.254934][ T29] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 432.264862][ T29] acrux 0003:1A34:0802.0002: item fetching failed at offset 37/41 [ 432.274199][ T29] acrux 0003:1A34:0802.0002: parse failed [ 432.280934][ T29] acrux 0003:1A34:0802.0002: probe with driver acrux failed with error -22 [ 432.347941][ T13] team0 (unregistering): Port device team_slave_1 removed [ 432.370579][ T13] team0 (unregistering): Port device team_slave_0 removed [ 432.588936][ T8121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.650408][ T8121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.757084][ T8121] team0: Port device team_slave_0 added [ 432.785513][ T8121] team0: Port device team_slave_1 added [ 432.978238][ T8121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.006910][ T8121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.056304][ T8121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.074951][ T8121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.091825][ T8121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.110236][ T5605] Bluetooth: hci5: command tx timeout [ 434.592541][ T8121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.363273][ T8123] Bluetooth: hci5: command tx timeout [ 436.721070][ T5605] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 437.162057][ T8121] hsr_slave_0: entered promiscuous mode [ 437.208505][ T8121] hsr_slave_1: entered promiscuous mode [ 437.237873][ T8121] debugfs: 'hsr0' already exists in 'hsr' [ 437.255050][ T8364] netlink: 28 bytes leftover after parsing attributes in process `syz.5.425'. [ 437.267786][ T8121] Cannot create hsr debugfs directory [ 437.313326][ T8366] netlink: 64 bytes leftover after parsing attributes in process `syz.5.425'. [ 437.362667][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 437.418720][ T8370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.426'. [ 437.467899][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 439.486250][ T5880] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 439.992608][ T5880] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 440.018607][ T5880] usb 1-1: config 1 has an invalid interface number: 13 but max is 0 [ 440.048367][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.077905][ T5880] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 440.094000][ T5880] usb 1-1: config 1 has no interface number 1 [ 440.116382][ T5880] usb 1-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 440.145017][ T5880] usb 1-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 440.169428][ T5880] usb 1-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 440.189720][ T5880] usb 1-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 440.229187][ T5880] usb 1-1: config 1 interface 13 has no altsetting 0 [ 440.254958][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.283588][ T5880] usb 1-1: Product: syz [ 440.307021][ T5880] usb 1-1: Manufacturer: syz [ 440.324263][ T5880] usb 1-1: SerialNumber: syz [ 440.385021][ T5880] usb-storage 1-1:1.0: USB Mass Storage device detected [ 440.443738][ T5880] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 440.479757][ T5880] scsi host1: usb-storage 1-1:1.0 [ 440.549728][ T5880] usb-storage 1-1:1.13: USB Mass Storage device detected [ 440.594868][ T5880] usb-storage 1-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 440.714822][ T5880] usb 1-1: USB disconnect, device number 7 [ 440.800111][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.825875][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.836712][ T8265] bridge_slave_0: entered allmulticast mode [ 440.850462][ T8265] bridge_slave_0: entered promiscuous mode [ 440.866412][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.878310][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.887047][ T8265] bridge_slave_1: entered allmulticast mode [ 440.898271][ T8265] bridge_slave_1: entered promiscuous mode [ 441.012198][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.166302][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.365382][ T8079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 441.421499][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.443876][ T8079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 441.484098][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.538119][ T8425] random: crng reseeded on system resumption [ 441.559037][ T8265] team0: Port device team_slave_0 added [ 441.581500][ T8079] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 441.728725][ T8425] jffs2: notice: (8425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 442.306930][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.416389][ T13] bridge_slave_1: left allmulticast mode [ 442.457063][ T13] bridge_slave_1: left promiscuous mode [ 442.493679][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.532342][ T13] bridge_slave_0: left allmulticast mode [ 442.552937][ T13] bridge_slave_0: left promiscuous mode [ 442.583329][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.749643][ T30] audit: type=1326 audit(1787095489.599:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.0.435" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb60f59e0d9 code=0x0 [ 443.330802][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'. [ 443.389447][ T8452] netlink: 64 bytes leftover after parsing attributes in process `syz.2.437'. [ 444.235534][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.367977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.399601][ T13] bond0 (unregistering): Released all slaves [ 444.695607][ T8265] team0: Port device team_slave_1 added [ 444.730235][ T8079] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 447.687745][ T8079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.373886][ T13] hsr_slave_0: left promiscuous mode [ 449.387720][ T13] hsr_slave_1: left promiscuous mode [ 449.394926][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.406783][ T8477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.413413][ T8477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.420778][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.430706][ T8477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.457969][ T8477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.482036][ T8477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 449.508459][ T8477] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 449.536161][ T8477] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 449.556151][ T8477] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 449.587897][ T8477] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 449.612388][ T8477] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 449.618416][ T8477] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 449.638925][ T8477] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 449.928737][ T13] team0 (unregistering): Port device team_slave_1 removed [ 450.447510][ T13] team0 (unregistering): Port device team_slave_0 removed [ 451.613987][ T8123] Bluetooth: hci2: command 0x0c1a tx timeout [ 451.614947][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.620115][ T5605] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.700963][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.787291][ T8123] Bluetooth: hci7: command 0x0c1a tx timeout [ 451.794146][ T5605] Bluetooth: hci5: command 0x0c1a tx timeout [ 452.279599][ T30] audit: type=1326 audit(1787095498.397:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.2.448" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7361d9e0d9 code=0x0 [ 453.737950][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.777658][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.885467][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.954127][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 454.041732][ T5605] Bluetooth: hci5: command 0x0c1a tx timeout [ 454.047797][ T5605] Bluetooth: hci7: command 0x0c1a tx timeout [ 454.209683][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.231939][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.390529][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.834176][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.452'. [ 454.892161][ T8527] netlink: 64 bytes leftover after parsing attributes in process `syz.0.452'. [ 455.210982][ T8265] hsr_slave_0: entered promiscuous mode [ 455.244322][ T8265] hsr_slave_1: entered promiscuous mode [ 455.269276][ T8265] debugfs: 'hsr0' already exists in 'hsr' [ 455.291156][ T8265] Cannot create hsr debugfs directory [ 455.459417][ T8541] netlink: 112 bytes leftover after parsing attributes in process `syz.2.454'. [ 455.807758][ T5619] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 456.156385][ T5619] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 456.207505][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.293591][ T5605] Bluetooth: hci7: command 0x0c1a tx timeout [ 456.304297][ T5605] Bluetooth: hci5: command 0x0c1a tx timeout [ 456.360159][ T5619] usb 3-1: config 1 has an invalid interface number: 13 but max is 0 [ 456.458799][ T5619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.571415][ T5619] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 457.018248][ T5619] usb 3-1: config 1 has no interface number 1 [ 457.270286][ T5619] usb 3-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 457.482513][ T5619] usb 3-1: config 1 interface 13 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.678033][ T5619] usb 3-1: config 1 interface 13 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 457.883763][ T5619] usb 3-1: config 1 interface 13 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 458.112580][ T5619] usb 3-1: config 1 interface 13 has no altsetting 0 [ 458.283385][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.421845][ T5619] usb 3-1: Product: syz [ 458.486690][ T5619] usb 3-1: Manufacturer: syz [ 458.565636][ T5619] usb 3-1: SerialNumber: syz [ 458.684228][ T5619] usb 3-1: can't set config #1, error -71 [ 458.761429][ T5619] usb 3-1: USB disconnect, device number 10 [ 459.267655][ T8121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.285124][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.313904][ T8121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.334539][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.349706][ T8121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.578759][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.628076][ T8121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 461.490627][ T30] audit: type=1326 audit(1787095506.281:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7361d9e0d9 code=0x0 [ 461.673998][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.929083][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.937139][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.230928][ T8583] netlink: 64 bytes leftover after parsing attributes in process `syz.5.460'. [ 462.310975][ T8588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 462.367658][ T8590] netlink: 64 bytes leftover after parsing attributes in process `syz.0.462'. [ 462.456957][ T8596] futex_wake_op: syz.5.464 tries to shift op by 144; fix this program [ 462.488093][ T8079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.558401][ T8592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 462.893759][ T8592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.080310][ T8592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.263934][ T8592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.372627][ T8079] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.479788][ T8592] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 464.133602][ T8592] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 464.272764][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.279985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.637732][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.644917][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.703697][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 464.770027][ T8121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.798578][ T8079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.844047][ T8121] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.885562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.892733][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.089514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.096734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.155549][ T8123] Bluetooth: hci2: command 0x0c1a tx timeout [ 465.317264][ T8123] Bluetooth: hci3: command 0x0c1a tx timeout [ 465.479360][ T8123] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.750881][ T8123] Bluetooth: hci7: command 0x0c1a tx timeout [ 466.028103][ T8265] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.072034][ T8265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.088779][ T8265] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.113202][ T8265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.156736][ T8265] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.185311][ T8265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.239301][ T8265] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.298202][ T8265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.358709][ T8123] Bluetooth: hci5: command 0x0c1a tx timeout [ 466.429061][ T8634] smpboot: CPU 1 is now offline [ 466.821046][ T8637] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 466.928736][ T8625] ------------[ cut here ]------------ [ 466.929221][ T8625] [ 466.929228][ T8625] ====================================================== [ 466.929237][ T8625] WARNING: possible circular locking dependency detected [ 466.929250][ T8625] syzkaller #0 Tainted: G L [ 466.929262][ T8625] ------------------------------------------------------ [ 466.929271][ T8625] syz.2.470/8625 is trying to acquire lock: [ 466.929282][ T8625] ffffffff8eb4c040 (console_owner){..-.}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 466.929342][ T8625] [ 466.929342][ T8625] but task is already holding lock: [ 466.929350][ T8625] ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 466.929405][ T8625] [ 466.929405][ T8625] which lock already depends on the new lock. [ 466.929405][ T8625] [ 466.929413][ T8625] [ 466.929413][ T8625] the existing dependency chain (in reverse order) is: [ 466.929421][ T8625] [ 466.929421][ T8625] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 466.929452][ T8625] _raw_spin_lock_nested+0x32/0x50 [ 466.929485][ T8625] raw_spin_rq_lock_nested+0x2d/0x160 [ 466.929510][ T8625] _task_rq_lock+0xc0/0x440 [ 466.929535][ T8625] cgroup_move_task+0x9a/0x350 [ 466.929569][ T8625] css_set_move_task+0x62d/0x820 [ 466.929600][ T8625] cgroup_post_fork+0x209/0x9b0 [ 466.929631][ T8625] copy_process+0x4062/0x43e0 [ 466.929655][ T8625] kernel_clone+0x2d7/0x940 [ 466.929680][ T8625] rest_init+0xbf/0x3a0 [ 466.929703][ T8625] start_kernel+0x392/0x3e0 [ 466.929737][ T8625] x86_64_start_reservations+0x24/0x30 [ 466.929764][ T8625] x86_64_start_kernel+0x137/0x1b0 [ 466.929791][ T8625] common_startup_64+0x13e/0x157 [ 466.929814][ T8625] [ 466.929814][ T8625] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 466.929844][ T8625] _raw_spin_lock_irqsave+0x40/0x60 [ 466.929873][ T8625] try_to_wake_up+0x67/0x14d0 [ 466.929905][ T8625] autoremove_wake_function+0x17/0x100 [ 466.929926][ T8625] __wake_up_common_lock+0x13a/0x1f0 [ 466.929949][ T8625] rpm_resume+0x12e2/0x16d0 [ 466.929981][ T8625] rpm_resume+0x8b0/0x16d0 [ 466.930013][ T8625] rpm_resume+0x8b0/0x16d0 [ 466.930044][ T8625] __pm_runtime_resume+0x11c/0x180 [ 466.930079][ T8625] usb_autopm_get_interface+0x20/0xf0 [ 466.930113][ T8625] _chaoskey_fill+0x1bc/0xa70 [ 466.930147][ T8625] chaoskey_read+0x1ed/0x690 [ 466.930180][ T8625] vfs_read+0x213/0xa80 [ 466.930212][ T8625] ksys_read+0x150/0x270 [ 466.930244][ T8625] do_syscall_64+0x174/0x580 [ 466.930278][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.930301][ T8625] [ 466.930301][ T8625] -> #3 (&dev->power.wait_queue){....}-{3:3}: [ 466.930332][ T8625] _raw_spin_lock_irqsave+0x40/0x60 [ 466.930361][ T8625] __wake_up_common_lock+0x30/0x1f0 [ 466.930382][ T8625] rpm_resume+0x12e2/0x16d0 [ 466.930414][ T8625] __pm_runtime_resume+0x11c/0x180 [ 466.930446][ T8625] __device_attach+0x20c/0x450 [ 466.930479][ T8625] device_initial_probe+0xa1/0xd0 [ 466.930512][ T8625] bus_probe_device+0x12a/0x220 [ 466.930537][ T8625] device_add+0x7d7/0xb80 [ 466.930566][ T8625] serial_base_port_add+0x18f/0x270 [ 466.930602][ T8625] serial_core_register_port+0x37f/0x2840 [ 466.930629][ T8625] serial8250_register_8250_port+0x16b4/0x2090 [ 466.930655][ T8625] serial_pnp_probe+0x56a/0x7f0 [ 466.930679][ T8625] pnp_device_probe+0x30b/0x4c0 [ 466.930704][ T8625] really_probe+0x254/0xae0 [ 466.930723][ T8625] __driver_probe_device+0x1e8/0x360 [ 466.930756][ T8625] driver_probe_device+0x4f/0x240 [ 466.930776][ T8625] __driver_attach+0x339/0x600 [ 466.930809][ T8625] bus_for_each_dev+0x23b/0x2c0 [ 466.930833][ T8625] bus_add_driver+0x345/0x670 [ 466.930859][ T8625] driver_register+0x23a/0x320 [ 466.930880][ T8625] serial8250_init+0x8f/0x160 [ 466.930913][ T8625] do_one_initcall+0x250/0x870 [ 466.930944][ T8625] do_initcall_level+0x10a/0x1a0 [ 466.930965][ T8625] do_initcalls+0x59/0xa0 [ 466.930983][ T8625] kernel_init_freeable+0x29d/0x3e0 [ 466.931003][ T8625] kernel_init+0x22/0x1d0 [ 466.931026][ T8625] ret_from_fork+0x514/0xb70 [ 466.931056][ T8625] ret_from_fork_asm+0x1a/0x30 [ 466.931091][ T8625] [ 466.931091][ T8625] -> #2 (&dev->power.lock){-...}-{3:3}: [ 466.931121][ T8625] _raw_spin_lock_irqsave+0x40/0x60 [ 466.931150][ T8625] __pm_runtime_resume+0x10f/0x180 [ 466.931182][ T8625] __uart_start+0x171/0x460 [ 466.931208][ T8625] uart_write+0x251/0x9f0 [ 466.931234][ T8625] n_tty_write+0xd49/0x11e0 [ 466.931253][ T8625] file_tty_write+0x50d/0x9f0 [ 466.931279][ T8625] vfs_write+0x612/0xba0 [ 466.931311][ T8625] ksys_write+0x150/0x270 [ 466.931344][ T8625] do_syscall_64+0x174/0x580 [ 466.931378][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.931399][ T8625] [ 466.931399][ T8625] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 466.931429][ T8625] _raw_spin_lock_irqsave+0x40/0x60 [ 466.931458][ T8625] serial8250_console_write+0x153/0x1ba0 [ 466.931489][ T8625] console_flush_all+0x6ea/0xaf0 [ 466.931510][ T8625] console_unlock+0xd1/0x1c0 [ 466.931544][ T8625] vprintk_emit+0x485/0x560 [ 466.931578][ T8625] _printk+0xdd/0x130 [ 466.931598][ T8625] register_console+0xbc3/0xfc0 [ 466.931620][ T8625] univ8250_console_init+0x3a/0x70 [ 466.931653][ T8625] console_init+0x10b/0x4a0 [ 466.931681][ T8625] start_kernel+0x238/0x3e0 [ 466.931713][ T8625] x86_64_start_reservations+0x24/0x30 [ 466.931741][ T8625] x86_64_start_kernel+0x137/0x1b0 [ 466.931767][ T8625] common_startup_64+0x13e/0x157 [ 466.931789][ T8625] [ 466.931789][ T8625] -> #0 (console_owner){..-.}-{0:0}: [ 466.931819][ T8625] __lock_acquire+0x1520/0x2cf0 [ 466.931848][ T8625] lock_acquire+0x106/0x350 [ 466.931875][ T8625] console_flush_all+0x693/0xaf0 [ 466.931897][ T8625] console_unlock+0xd1/0x1c0 [ 466.931930][ T8625] vprintk_emit+0x485/0x560 [ 466.931963][ T8625] _printk+0xdd/0x130 [ 466.931983][ T8625] __report_bug+0x349/0x570 [ 466.932017][ T8625] report_bug+0x16a/0x220 [ 466.932049][ T8625] handle_bug+0x9c/0x200 [ 466.932074][ T8625] exc_invalid_op+0x1a/0x50 [ 466.932096][ T8625] asm_exc_invalid_op+0x1a/0x20 [ 466.932116][ T8625] update_rq_clock+0x34d/0x560 [ 466.932142][ T8625] __schedule+0x388e/0x56c0 [ 466.932170][ T8625] preempt_schedule_common+0x82/0xd0 [ 466.932201][ T8625] preempt_schedule_thunk+0x16/0x40 [ 466.932223][ T8625] _raw_spin_unlock+0x3f/0x50 [ 466.932251][ T8625] __zap_vma_range+0x4082/0x4f20 [ 466.932282][ T8625] unmap_vmas+0x390/0x550 [ 466.932310][ T8625] exit_mmap+0x293/0x9f0 [ 466.932333][ T8625] __mmput+0x118/0x420 [ 466.932352][ T8625] exit_mm+0x221/0x2d0 [ 466.932382][ T8625] do_exit+0x6cd/0x2360 [ 466.932412][ T8625] do_group_exit+0x22d/0x2f0 [ 466.932442][ T8625] __x64_sys_exit_group+0x3f/0x40 [ 466.932474][ T8625] x64_sys_call+0x2237/0x2250 [ 466.932506][ T8625] do_syscall_64+0x174/0x580 [ 466.932540][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.932562][ T8625] [ 466.932562][ T8625] other info that might help us debug this: [ 466.932562][ T8625] [ 466.932570][ T8625] Chain exists of: [ 466.932570][ T8625] console_owner --> &p->pi_lock --> &rq->__lock [ 466.932570][ T8625] [ 466.932605][ T8625] Possible unsafe locking scenario: [ 466.932605][ T8625] [ 466.932612][ T8625] CPU0 CPU1 [ 466.932620][ T8625] ---- ---- [ 466.932627][ T8625] lock(&rq->__lock); [ 466.932642][ T8625] lock(&p->pi_lock); [ 466.932658][ T8625] lock(&rq->__lock); [ 466.932675][ T8625] lock(console_owner); [ 466.932690][ T8625] [ 466.932690][ T8625] *** DEADLOCK *** [ 466.932690][ T8625] [ 466.932696][ T8625] 5 locks held by syz.2.470/8625: [ 466.932709][ T8625] #0: ffff88807cb5d038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 466.932765][ T8625] #1: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 466.932819][ T8625] #2: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 466.932877][ T8625] #3: ffffffff8eb4c0a0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 466.932928][ T8625] #4: ffffffff8ea33938 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 466.932982][ T8625] [ 466.932982][ T8625] stack backtrace: [ 466.932996][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.2.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.933026][ T8625] Tainted: [L]=SOFTLOCKUP [ 466.933034][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 466.933048][ T8625] Call Trace: [ 466.933056][ T8625] [ 466.933070][ T8625] dump_stack_lvl+0xe8/0x150 [ 466.933101][ T8625] print_circular_bug+0x2e1/0x300 [ 466.933140][ T8625] check_noncircular+0x12e/0x150 [ 466.933180][ T8625] __lock_acquire+0x1520/0x2cf0 [ 466.933223][ T8625] ? console_flush_all+0x123/0xaf0 [ 466.933246][ T8625] lock_acquire+0x106/0x350 [ 466.933274][ T8625] ? console_flush_all+0x123/0xaf0 [ 466.933299][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933328][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933354][ T8625] ? do_raw_spin_unlock+0xf5/0x210 [ 466.933379][ T8625] ? console_flush_all+0x123/0xaf0 [ 466.933403][ T8625] console_flush_all+0x693/0xaf0 [ 466.933425][ T8625] ? console_flush_all+0x123/0xaf0 [ 466.933450][ T8625] ? console_flush_all+0x123/0xaf0 [ 466.933477][ T8625] ? __pfx_console_flush_all+0x10/0x10 [ 466.933502][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933529][ T8625] ? is_printk_cpu_sync_owner+0x32/0x40 [ 466.933558][ T8625] console_unlock+0xd1/0x1c0 [ 466.933595][ T8625] ? __pfx_console_unlock+0x10/0x10 [ 466.933629][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933656][ T8625] ? _raw_spin_unlock_irqrestore+0x20/0x80 [ 466.933688][ T8625] ? _printk+0xdd/0x130 [ 466.933709][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933738][ T8625] vprintk_emit+0x485/0x560 [ 466.933775][ T8625] ? __pfx_vprintk_emit+0x10/0x10 [ 466.933816][ T8625] _printk+0xdd/0x130 [ 466.933840][ T8625] ? __pfx__printk+0x10/0x10 [ 466.933863][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933891][ T8625] ? find_bug+0xa5/0x370 [ 466.933923][ T8625] ? update_rq_clock+0x34d/0x560 [ 466.933950][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.933977][ T8625] ? update_rq_clock+0x34d/0x560 [ 466.934005][ T8625] __report_bug+0x349/0x570 [ 466.934042][ T8625] ? update_rq_clock+0x34d/0x560 [ 466.934074][ T8625] ? __pfx___report_bug+0x10/0x10 [ 466.934108][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.934134][ T8625] ? __lock_acquire+0x683/0x2cf0 [ 466.934166][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.934196][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.934223][ T8625] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.934246][ T8625] ? update_rq_clock+0x34d/0x560 [ 466.934273][ T8625] report_bug+0x16a/0x220 [ 466.934308][ T8625] ? update_rq_clock+0x34d/0x560 [ 466.934334][ T8625] ? update_rq_clock+0x34f/0x560 [ 466.934361][ T8625] handle_bug+0x9c/0x200 [ 466.934384][ T8625] exc_invalid_op+0x1a/0x50 [ 466.934407][ T8625] asm_exc_invalid_op+0x1a/0x20 [ 466.934429][ T8625] RIP: 0010:update_rq_clock+0x34d/0x560 [ 466.934457][ T8625] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 cb 28 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 20 bd 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 466.934477][ T8625] RSP: 0018:ffffc90003a87318 EFLAGS: 00010046 [ 466.934496][ T8625] RAX: 0000000000000000 RBX: ffff8880b873b300 RCX: 0000000000000002 [ 466.934511][ T8625] RDX: 0000000000000000 RSI: ffffffff8e4b3e80 RDI: ffffffff8c4bdc80 [ 466.934528][ T8625] RBP: dffffc0000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 466.934545][ T8625] R10: dffffc0000000000 R11: ffffffff819fdfa0 R12: ffff8880269fa728 [ 466.934563][ T8625] R13: dffffc0000000001 R14: ffff8880b873c1c8 R15: ffff8880b873b300 [ 466.934583][ T8625] ? __pfx_pick_task_stop+0x10/0x10 [ 466.934615][ T8625] ? update_rq_clock+0x8f/0x560 [ 466.934641][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.934670][ T8625] __schedule+0x388e/0x56c0 [ 466.934715][ T8625] ? __pfx___schedule+0x10/0x10 [ 466.934745][ T8625] ? irqentry_exit+0x218/0x910 [ 466.934781][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.934807][ T8625] ? irqentry_exit+0x218/0x910 [ 466.934844][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 466.934869][ T8625] preempt_schedule_common+0x82/0xd0 [ 466.934902][ T8625] preempt_schedule_thunk+0x16/0x40 [ 466.934929][ T8625] _raw_spin_unlock+0x3f/0x50 [ 466.934959][ T8625] __zap_vma_range+0x4082/0x4f20 [ 466.935017][ T8625] ? __pfx___zap_vma_range+0x10/0x10 [ 466.935053][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935083][ T8625] ? mas_find+0xab1/0xcf0 [ 466.935118][ T8625] ? unmap_vmas+0x1b9/0x550 [ 466.935150][ T8625] unmap_vmas+0x390/0x550 [ 466.935185][ T8625] ? __pfx_unmap_vmas+0x10/0x10 [ 466.935226][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935255][ T8625] exit_mmap+0x293/0x9f0 [ 466.935281][ T8625] ? __pfx_exit_mmap+0x10/0x10 [ 466.935318][ T8625] ? __pfx_exit_aio+0x10/0x10 [ 466.935356][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935383][ T8625] ? arch_uprobe_clear_state+0x1c8/0x240 [ 466.935417][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935444][ T8625] ? uprobe_clear_state+0x2ac/0x3e0 [ 466.935468][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935497][ T8625] __mmput+0x118/0x420 [ 466.935521][ T8625] exit_mm+0x221/0x2d0 [ 466.935554][ T8625] do_exit+0x6cd/0x2360 [ 466.935588][ T8625] ? try_to_wake_up+0x8c5/0x14d0 [ 466.935624][ T8625] ? __pfx_do_exit+0x10/0x10 [ 466.935655][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 466.935680][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935707][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.935734][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 466.935762][ T8625] do_group_exit+0x22d/0x2f0 [ 466.935795][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.935819][ T8625] __x64_sys_exit_group+0x3f/0x40 [ 466.935853][ T8625] x64_sys_call+0x2237/0x2250 [ 466.935887][ T8625] do_syscall_64+0x174/0x580 [ 466.935921][ T8625] ? trace_irq_disable+0x3b/0x140 [ 466.935952][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.935976][ T8625] RIP: 0033:0x7f7361d9e0d9 [ 466.935993][ T8625] Code: Unable to access opcode bytes at 0x7f7361d9e0af. [ 466.936005][ T8625] RSP: 002b:00007ffc2dcc7518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 466.936027][ T8625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7361d9e0d9 [ 466.936043][ T8625] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.936057][ T8625] RBP: 00007ffc2dcc757c R08: 0000000000000000 R09: 00000000000927c0 [ 466.936076][ T8625] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000085 [ 466.936090][ T8625] R13: 00000000000927c0 R14: 000000000006bfdb R15: 00007ffc2dcc75d0 [ 466.936115][ T8625] [ 468.371686][ T8625] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 468.371705][ T8625] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x34d/0x560, CPU#0: syz.2.470/8625 [ 468.389456][ T8625] Modules linked in: [ 468.393343][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.2.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.404098][ T8625] Tainted: [L]=SOFTLOCKUP [ 468.408401][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.418437][ T8625] RIP: 0010:update_rq_clock+0x34d/0x560 [ 468.423981][ T8625] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 cb 28 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 20 bd 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 468.443576][ T8625] RSP: 0018:ffffc90003a87318 EFLAGS: 00010046 [ 468.449635][ T8625] RAX: 0000000000000000 RBX: ffff8880b873b300 RCX: 0000000000000002 [ 468.457589][ T8625] RDX: 0000000000000000 RSI: ffffffff8e4b3e80 RDI: ffffffff8c4bdc80 [ 468.465544][ T8625] RBP: dffffc0000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 468.473502][ T8625] R10: dffffc0000000000 R11: ffffffff819fdfa0 R12: ffff8880269fa728 [ 468.481460][ T8625] R13: dffffc0000000001 R14: ffff8880b873c1c8 R15: ffff8880b873b300 [ 468.489419][ T8625] FS: 0000000000000000(0000) GS:ffff888124f3f000(0000) knlGS:0000000000000000 [ 468.498331][ T8625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.504896][ T8625] CR2: 00007faf4fcfd440 CR3: 000000005b61d000 CR4: 0000000000350ef0 [ 468.512855][ T8625] Call Trace: [ 468.516118][ T8625] [ 468.519032][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.524674][ T8625] __schedule+0x388e/0x56c0 [ 468.529196][ T8625] ? __pfx___schedule+0x10/0x10 [ 468.534044][ T8625] ? irqentry_exit+0x218/0x910 [ 468.538813][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.544438][ T8625] ? irqentry_exit+0x218/0x910 [ 468.549210][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 468.554578][ T8625] preempt_schedule_common+0x82/0xd0 [ 468.559864][ T8625] preempt_schedule_thunk+0x16/0x40 [ 468.565057][ T8625] _raw_spin_unlock+0x3f/0x50 [ 468.569733][ T8625] __zap_vma_range+0x4082/0x4f20 [ 468.574693][ T8625] ? __pfx___zap_vma_range+0x10/0x10 [ 468.579980][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.585604][ T8625] ? mas_find+0xab1/0xcf0 [ 468.589937][ T8625] ? unmap_vmas+0x1b9/0x550 [ 468.594447][ T8625] unmap_vmas+0x390/0x550 [ 468.598791][ T8625] ? __pfx_unmap_vmas+0x10/0x10 [ 468.603650][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.609279][ T8625] exit_mmap+0x293/0x9f0 [ 468.613516][ T8625] ? __pfx_exit_mmap+0x10/0x10 [ 468.618283][ T8625] ? __pfx_exit_aio+0x10/0x10 [ 468.622964][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.628588][ T8625] ? arch_uprobe_clear_state+0x1c8/0x240 [ 468.634222][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.639847][ T8625] ? uprobe_clear_state+0x2ac/0x3e0 [ 468.645053][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.650686][ T8625] __mmput+0x118/0x420 [ 468.654748][ T8625] exit_mm+0x221/0x2d0 [ 468.658817][ T8625] do_exit+0x6cd/0x2360 [ 468.662975][ T8625] ? try_to_wake_up+0x8c5/0x14d0 [ 468.667916][ T8625] ? __pfx_do_exit+0x10/0x10 [ 468.672504][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 468.677867][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.683492][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.689132][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 468.694502][ T8625] do_group_exit+0x22d/0x2f0 [ 468.699097][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.705154][ T8625] __x64_sys_exit_group+0x3f/0x40 [ 468.710180][ T8625] x64_sys_call+0x2237/0x2250 [ 468.714859][ T8625] do_syscall_64+0x174/0x580 [ 468.719451][ T8625] ? trace_irq_disable+0x3b/0x140 [ 468.724472][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.730353][ T8625] RIP: 0033:0x7f7361d9e0d9 [ 468.734753][ T8625] Code: Unable to access opcode bytes at 0x7f7361d9e0af. [ 468.741752][ T8625] RSP: 002b:00007ffc2dcc7518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 468.750158][ T8625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7361d9e0d9 [ 468.758124][ T8625] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.766081][ T8625] RBP: 00007ffc2dcc757c R08: 0000000000000000 R09: 00000000000927c0 [ 468.774041][ T8625] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000085 [ 468.781997][ T8625] R13: 00000000000927c0 R14: 000000000006bfdb R15: 00007ffc2dcc75d0 [ 468.789968][ T8625] [ 468.792973][ T8625] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 468.800239][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.2.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.811020][ T8625] Tainted: [L]=SOFTLOCKUP [ 468.815329][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.825372][ T8625] Call Trace: [ 468.828639][ T8625] [ 468.831558][ T8625] vpanic+0x56c/0xa60 [ 468.835550][ T8625] ? __pfx__printk+0x10/0x10 [ 468.840133][ T8625] ? __pfx_vpanic+0x10/0x10 [ 468.844646][ T8625] ? is_bpf_text_address+0x292/0x2b0 [ 468.849931][ T8625] ? is_bpf_text_address+0x26/0x2b0 [ 468.855133][ T8625] panic+0xc5/0xd0 [ 468.858854][ T8625] ? __pfx_panic+0x10/0x10 [ 468.863278][ T8625] __warn+0x315/0x4c0 [ 468.867256][ T8625] ? update_rq_clock+0x34d/0x560 [ 468.872189][ T8625] ? update_rq_clock+0x34d/0x560 [ 468.877121][ T8625] __report_bug+0x276/0x570 [ 468.881630][ T8625] ? update_rq_clock+0x34d/0x560 [ 468.886565][ T8625] ? __pfx___report_bug+0x10/0x10 [ 468.891597][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.897221][ T8625] ? __lock_acquire+0x683/0x2cf0 [ 468.902156][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.907787][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.913420][ T8625] ? do_raw_spin_lock+0x12b/0x2f0 [ 468.918450][ T8625] ? update_rq_clock+0x34d/0x560 [ 468.923386][ T8625] report_bug+0x16a/0x220 [ 468.927726][ T8625] ? update_rq_clock+0x34d/0x560 [ 468.932662][ T8625] ? update_rq_clock+0x34f/0x560 [ 468.937602][ T8625] handle_bug+0x9c/0x200 [ 468.941849][ T8625] exc_invalid_op+0x1a/0x50 [ 468.946348][ T8625] asm_exc_invalid_op+0x1a/0x20 [ 468.951191][ T8625] RIP: 0010:update_rq_clock+0x34d/0x560 [ 468.956734][ T8625] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 cb 28 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 20 bd 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 468.976334][ T8625] RSP: 0018:ffffc90003a87318 EFLAGS: 00010046 [ 468.982397][ T8625] RAX: 0000000000000000 RBX: ffff8880b873b300 RCX: 0000000000000002 [ 468.990355][ T8625] RDX: 0000000000000000 RSI: ffffffff8e4b3e80 RDI: ffffffff8c4bdc80 [ 468.998314][ T8625] RBP: dffffc0000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 469.006449][ T8625] R10: dffffc0000000000 R11: ffffffff819fdfa0 R12: ffff8880269fa728 [ 469.014409][ T8625] R13: dffffc0000000001 R14: ffff8880b873c1c8 R15: ffff8880b873b300 [ 469.022373][ T8625] ? __pfx_pick_task_stop+0x10/0x10 [ 469.027577][ T8625] ? update_rq_clock+0x8f/0x560 [ 469.032420][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.038048][ T8625] __schedule+0x388e/0x56c0 [ 469.042573][ T8625] ? __pfx___schedule+0x10/0x10 [ 469.047422][ T8625] ? irqentry_exit+0x218/0x910 [ 469.052193][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.057817][ T8625] ? irqentry_exit+0x218/0x910 [ 469.062588][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 469.067958][ T8625] preempt_schedule_common+0x82/0xd0 [ 469.073249][ T8625] preempt_schedule_thunk+0x16/0x40 [ 469.078442][ T8625] _raw_spin_unlock+0x3f/0x50 [ 469.083119][ T8625] __zap_vma_range+0x4082/0x4f20 [ 469.088095][ T8625] ? __pfx___zap_vma_range+0x10/0x10 [ 469.093388][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.099017][ T8625] ? mas_find+0xab1/0xcf0 [ 469.103362][ T8625] ? unmap_vmas+0x1b9/0x550 [ 469.107875][ T8625] unmap_vmas+0x390/0x550 [ 469.112209][ T8625] ? __pfx_unmap_vmas+0x10/0x10 [ 469.117071][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.122699][ T8625] exit_mmap+0x293/0x9f0 [ 469.126936][ T8625] ? __pfx_exit_mmap+0x10/0x10 [ 469.131708][ T8625] ? __pfx_exit_aio+0x10/0x10 [ 469.136394][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.142032][ T8625] ? arch_uprobe_clear_state+0x1c8/0x240 [ 469.147691][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.153325][ T8625] ? uprobe_clear_state+0x2ac/0x3e0 [ 469.158516][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.164149][ T8625] __mmput+0x118/0x420 [ 469.168212][ T8625] exit_mm+0x221/0x2d0 [ 469.172284][ T8625] do_exit+0x6cd/0x2360 [ 469.176441][ T8625] ? try_to_wake_up+0x8c5/0x14d0 [ 469.181381][ T8625] ? __pfx_do_exit+0x10/0x10 [ 469.185972][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 469.191336][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.196964][ T8625] ? srso_alias_return_thunk+0x5/0xfbef5 [ 469.202588][ T8625] ? preempt_schedule_thunk+0x16/0x40 [ 469.207955][ T8625] do_group_exit+0x22d/0x2f0 [ 469.212546][ T8625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.218601][ T8625] __x64_sys_exit_group+0x3f/0x40 [ 469.223625][ T8625] x64_sys_call+0x2237/0x2250 [ 469.228304][ T8625] do_syscall_64+0x174/0x580 [ 469.232898][ T8625] ? trace_irq_disable+0x3b/0x140 [ 469.237920][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.243807][ T8625] RIP: 0033:0x7f7361d9e0d9 [ 469.248213][ T8625] Code: Unable to access opcode bytes at 0x7f7361d9e0af. [ 469.255213][ T8625] RSP: 002b:00007ffc2dcc7518 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 469.263619][ T8625] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7361d9e0d9 [ 469.271583][ T8625] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.279543][ T8625] RBP: 00007ffc2dcc757c R08: 0000000000000000 R09: 00000000000927c0 [ 469.287505][ T8625] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000085 [ 469.295464][ T8625] R13: 00000000000927c0 R14: 000000000006bfdb R15: 00007ffc2dcc75d0 [ 469.303435][ T8625] [ 469.306648][ T8625] Kernel Offset: disabled [ 469.310962][ T8625] Rebooting in 86400 seconds..