last executing test programs: 3m32.13207256s ago: executing program 2 (id=766): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m31.903806449s ago: executing program 2 (id=770): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80022}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x453, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40053}, 0x20000000) 3m31.719004456s ago: executing program 2 (id=774): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xf, 0x1c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 3m30.349507796s ago: executing program 2 (id=779): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x40000000, &(0x7f00000004c0)="b81c1d77be33a28590cebeecdfe10adbe00f6d546c275f5cff51bf0287aa37c226134f448937024dca6a8629fb54b98e0796c8991c9fcf6516bd2a4fe6bcafd0f775af8b31793d39aa6717cae514f3af5487def6fc2d838de337f12f47c2c49370ff2c579e603055af163140582104acd429adee7257ef5619854ef4e220ad70f7eaabd345bb9ebe330921ad5d34adfa39f967", 0x93, &(0x7f0000000040), 0x0, &(0x7f0000000400)="aa64c33538cfdd4fb7b050cdeb19a2707691ab0ff44a4da1fbcbfa58315c14bd370bba2b0c05c13916083a1321278b6ee6d661333e995171e5da8b372648cd515e2ef6d7004be69cca616bb80beb56aa3948c8dfa38a4fa0") signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x810) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) 3m28.503893303s ago: executing program 0 (id=791): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 3m28.411272238s ago: executing program 0 (id=794): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x3, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m25.51477388s ago: executing program 0 (id=798): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], 'B'}, @struct={0xd, 0x3, 0x0, 0x4, 0x0, 0x0, [{}, {}, {0x6}]}, @datasec={0x0, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x7, 0x3}, {0x2, 0x7, 0x3}], "980fe9"}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000600)=""/37, 0x82, 0x25, 0x1}, 0x28) 3m23.688007275s ago: executing program 0 (id=800): setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) 3m18.460799868s ago: executing program 0 (id=811): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x8010, 0xffffffffffffffff, 0xca273000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x2a060400) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x2b6}], 0x1}}], 0x1, 0xc0) sendto$inet(r2, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) 3m18.336574003s ago: executing program 0 (id=814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m18.276797666s ago: executing program 2 (id=815): r0 = socket(0x11, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) epoll_create1(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffff, 0xc01) dup(r2) 3m15.279787979s ago: executing program 2 (id=826): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113d000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3m14.141592134s ago: executing program 32 (id=826): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113d000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3m2.745476662s ago: executing program 33 (id=814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m50.932203739s ago: executing program 1 (id=885): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 2m48.438279139s ago: executing program 1 (id=889): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 2m48.054166049s ago: executing program 1 (id=892): creat(0x0, 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x2000041, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r6, 0xffffffffffffffff, 0x11, 0x0, r6}, 0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000c90500d6c8db001ddba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000", 0x90) 2m46.667930468s ago: executing program 1 (id=895): creat(0x0, 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x2000041, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r6, 0xffffffffffffffff, 0x11, 0x0, r6}, 0x14) 2m45.196867207s ago: executing program 1 (id=897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110710000000000950039a0b0290462"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2m45.090224783s ago: executing program 1 (id=898): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x40000000, &(0x7f00000004c0)="b81c1d77be33a28590cebeecdfe10adbe00f6d546c275f5cff51bf0287aa37c226134f448937024dca6a8629fb54b98e0796c8991c9fcf6516bd2a4fe6bcafd0f775af8b31793d39aa6717cae514f3af5487def6fc2d838de337f12f47c2c49370ff2c579e603055af163140582104acd429adee7257ef5619854ef4e220ad70f7eaabd345bb9ebe330921ad5d34adfa39f967", 0x93, &(0x7f0000000040), 0x0, &(0x7f0000000400)="aa64c33538cfdd4fb7b050cdeb19a2707691ab0ff44a4da1fbcbfa58315c14bd370bba2b0c05c13916083a1321278b6ee6d661333e995171e5da8b372648cd515e2ef6d7004be69cca616bb80beb56aa3948c8dfa38a4fa0") signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m29.067309221s ago: executing program 34 (id=898): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0x40000000, &(0x7f00000004c0)="b81c1d77be33a28590cebeecdfe10adbe00f6d546c275f5cff51bf0287aa37c226134f448937024dca6a8629fb54b98e0796c8991c9fcf6516bd2a4fe6bcafd0f775af8b31793d39aa6717cae514f3af5487def6fc2d838de337f12f47c2c49370ff2c579e603055af163140582104acd429adee7257ef5619854ef4e220ad70f7eaabd345bb9ebe330921ad5d34adfa39f967", 0x93, &(0x7f0000000040), 0x0, &(0x7f0000000400)="aa64c33538cfdd4fb7b050cdeb19a2707691ab0ff44a4da1fbcbfa58315c14bd370bba2b0c05c13916083a1321278b6ee6d661333e995171e5da8b372648cd515e2ef6d7004be69cca616bb80beb56aa3948c8dfa38a4fa0") signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m5.94538756s ago: executing program 3 (id=994): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}, "4339fba15e24ece1bf7a9bb1d04056ec3215f4d62e0d5f5802dfa28140f6797ff33042ef1838b60b"}}}}, 0x0) 2m4.716762575s ago: executing program 3 (id=995): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$inet6(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)='\"', 0x1}], 0x1}, 0x40800) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd700000000b0000000000", @ANYRES32=r2, @ANYBLOB="0100000000c000001c00128009000100626f6e64000000000c00028005000100"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="ffc30000011200000a0001"], 0x2c}}, 0x0) 2m0.741724s ago: executing program 3 (id=996): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xff}, 0x18) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_open_dev$loop(0x0, 0x80000001, 0x1a6c42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000d00)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getpgid(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x67) 2m0.058052841s ago: executing program 3 (id=998): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)) r4 = socket(0x840000000002, 0x3, 0x81) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid}]}) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x7fff}, {0x20, 0x0, 0x2, 0xfffff024}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 1m58.783612661s ago: executing program 3 (id=999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r3, 0x0, 0xfffffffffffffffc}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.655061905s ago: executing program 3 (id=1000): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42045}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 1m43.166026719s ago: executing program 35 (id=1000): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42045}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 10.677214375s ago: executing program 4 (id=1119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000100000008510000003000000180000000000000000000000000000009500000000e6ffff6caa00000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfefff010}, {0x6, 0xc, 0x3, 0x1000}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000900)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r4, @ANYBLOB="05", @ANYRES32=r3, @ANYRES16=r5, @ANYRES16], 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) socket(0x10, 0x803, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 9.931857715s ago: executing program 4 (id=1121): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x18, &(0x7f00000024c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000660b00000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x22}, 0x94) syz_usb_connect(0x0, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb00090504020900000000090588", @ANYBLOB="2a9d"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) setitimer(0x1, &(0x7f0000000000)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4681b30f0f050000000000000002"], 0xa74) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYBLOB="a2d4f153f077ce10a6609b55656095e29ef4f7a804dd89dd39fb66b1e8e993924ebbbfcd5f12e6edf3d8b6d799f5f2e502a0bb02d3ca8ca39e7fb4477248ff1efc1358686d944c7df5afd6e82c20998c9692ae040cfb6d38286244c5d81ff9367b2679a947", @ANYRESDEC=r3], 0x110) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) 9.2245896s ago: executing program 4 (id=1123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xef70, @private0}, 0x1c) close(r0) 7.036511222s ago: executing program 4 (id=1126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xef70, @private0}, 0x1c) close(r0) 5.901191019s ago: executing program 4 (id=1128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000100000008510000003000000180000000000000000000000000000009500000000e6ffff6caa00000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfefff010}, {0x6, 0xc, 0x3, 0x1000}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000900)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r4, @ANYBLOB="05", @ANYRES32=r3, @ANYRES16=r5, @ANYRES16], 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) socket(0x10, 0x803, 0x0) r8 = socket$kcm(0x10, 0x100000000002, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 5.807948582s ago: executing program 8 (id=1129): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_rr_get_interval(r0, &(0x7f0000000300)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r2) socket$packet(0x11, 0x0, 0x300) keyctl$link(0x8, r3, r2) 5.73007609s ago: executing program 8 (id=1130): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x840000000002, 0x3, 0x81) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@gid={'gid', 0x3d, r8}}]}) setxattr$system_posix_acl(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="040006000000000008000000", @ANYRES32=r6, @ANYBLOB="9347eb2b2d9a9dbba9cd14d92f7966ccf1054d0774b6a6cfbaf90000000000", @ANYRES32=r8, @ANYBLOB="100001000000000020000f0000000000"], 0x44, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x7fff}, {0x20, 0x0, 0x2, 0xfffff024}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) 4.716013769s ago: executing program 4 (id=1131): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_rr_get_interval(r0, &(0x7f0000000300)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r6) socket$packet(0x11, 0x0, 0x300) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) keyctl$link(0x8, r7, r6) 4.486582849s ago: executing program 8 (id=1132): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 3.114993649s ago: executing program 8 (id=1133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) syz_emit_ethernet(0x46, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @mcast2, @local, {[@hopopts={0x89}], {0x0, 0x0, 0x8}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r3, 0x0, 0x4000044) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) unshare(0x28040680) socket$inet6(0xa, 0x802, 0x88) ftruncate(r5, 0xffff) close(0x3) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0x0, 0x8000}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.811334701s ago: executing program 8 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x0, 0x8, 0x3b0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @local, 0x80, 0x0, 0x0, 0x20000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) dup3(r6, r7, 0x0) syz_clone(0x81400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) write(r5, &(0x7f0000000300)="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", 0x112) 0s ago: executing program 8 (id=1135): creat(0x0, 0xecf86c37d53049cc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x2000041, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, 0xffffffffffffffff, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, 0xffffffffffffffff, 0x11, 0x0, r5}, 0x11) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 213.926763][ C1] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 213.957682][ T7071] netlink: 'syz.2.319': attribute type 8 has an invalid length. [ 213.957704][ T7071] netlink: 'syz.2.319': attribute type 9 has an invalid length. [ 213.957717][ T7071] netlink: 'syz.2.319': attribute type 10 has an invalid length. [ 213.957730][ T7071] netlink: 72 bytes leftover after parsing attributes in process `syz.2.319'. [ 214.558466][ T5900] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.745493][ T7085] exFAT-fs (nullb0): invalid boot record signature [ 214.745510][ T7085] exFAT-fs (nullb0): failed to read boot sector [ 214.745519][ T7085] exFAT-fs (nullb0): failed to recognize exfat type [ 214.752981][ T5900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.753007][ T5900] usb 4-1: config 0 has no interface number 0 [ 214.755571][ T5900] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 214.755597][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.755618][ T5900] usb 4-1: Product: syz [ 214.755641][ T5900] usb 4-1: Manufacturer: syz [ 214.755656][ T5900] usb 4-1: SerialNumber: syz [ 214.871120][ T5900] usb 4-1: config 0 descriptor?? [ 215.564830][ T5900] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 216.053943][ T5900] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.055508][ T5900] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 216.055633][ T5900] usb 4-1: media controller created [ 216.082387][ T7103] 9pnet_fd: Insufficient options for proto=fd [ 216.315859][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.037144][ T7089] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.037188][ T7089] Bluetooth: hci1: command 0x0406 tx timeout [ 217.038005][ T7089] Bluetooth: hci3: command 0x0406 tx timeout [ 217.038038][ T7089] Bluetooth: hci2: command 0x0406 tx timeout [ 217.038065][ T7089] Bluetooth: hci4: command 0x0406 tx timeout [ 217.247374][ T38] kauditd_printk_skb: 82 callbacks suppressed [ 217.247393][ T38] audit: type=1326 audit(1761270491.819:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.248228][ T38] audit: type=1326 audit(1761270491.819:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.405551][ T38] audit: type=1326 audit(1761270491.979:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.421082][ T5900] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 217.459843][ T38] audit: type=1326 audit(1761270491.979:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.459899][ T38] audit: type=1326 audit(1761270492.039:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.472479][ T38] audit: type=1326 audit(1761270492.049:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.562421][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 90 seconds [ 217.607947][ T38] audit: type=1326 audit(1761270492.139:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.608010][ T38] audit: type=1326 audit(1761270492.179:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.608060][ T38] audit: type=1326 audit(1761270492.179:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.608111][ T38] audit: type=1326 audit(1761270492.179:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7109 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 217.829649][ T5808] Bluetooth: hci2: unexpected event for opcode 0x2874 [ 217.928703][ T5900] usb 4-1: USB disconnect, device number 17 [ 218.324246][ T7124] veth1_to_bond: left allmulticast mode [ 218.505744][ T7128] binder: 7119:7128 ioctl c0306201 200000000240 returned -11 [ 219.422566][ T7130] exFAT-fs (nullb0): invalid boot record signature [ 219.422584][ T7130] exFAT-fs (nullb0): failed to read boot sector [ 219.422594][ T7130] exFAT-fs (nullb0): failed to recognize exfat type [ 219.988411][ T981] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 220.122452][ T981] usb 2-1: device descriptor read/64, error -71 [ 220.291035][ T7164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.368476][ T981] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 220.508510][ T981] usb 2-1: device descriptor read/64, error -71 [ 220.619524][ T981] usb usb2-port1: attempt power cycle [ 221.126373][ T981] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 221.151076][ T981] usb 2-1: device descriptor read/8, error -71 [ 221.271697][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 221.272982][ T7178] netlink: 'syz.4.356': attribute type 8 has an invalid length. [ 221.273002][ T7178] netlink: 'syz.4.356': attribute type 9 has an invalid length. [ 221.273016][ T7178] netlink: 'syz.4.356': attribute type 10 has an invalid length. [ 221.273030][ T7178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.356'. [ 221.388440][ T981] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 221.409550][ T981] usb 2-1: device descriptor read/8, error -71 [ 221.518972][ T981] usb usb2-port1: unable to enumerate USB device [ 222.221995][ T7197] bond3: entered allmulticast mode [ 222.222717][ T7197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.723552][ T7213] netlink: 'syz.4.368': attribute type 4 has an invalid length. [ 222.753679][ T7213] netlink: 'syz.4.368': attribute type 4 has an invalid length. [ 222.844222][ T7213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.368'. [ 223.531125][ T1236] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 223.681203][ T1236] usb 2-1: Using ep0 maxpacket: 16 [ 223.684634][ T1236] usb 2-1: config 4 has an invalid interface number: 57 but max is 0 [ 223.684663][ T1236] usb 2-1: config 4 has no interface number 0 [ 223.684713][ T1236] usb 2-1: config 4 interface 57 altsetting 64 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 223.684744][ T1236] usb 2-1: config 4 interface 57 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 16 [ 223.684770][ T1236] usb 2-1: config 4 interface 57 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 223.684794][ T1236] usb 2-1: config 4 interface 57 has no altsetting 0 [ 223.688510][ T1236] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=5d.c3 [ 223.688542][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.688566][ T1236] usb 2-1: Product: syz [ 223.688582][ T1236] usb 2-1: Manufacturer: syz [ 223.688597][ T1236] usb 2-1: SerialNumber: syz [ 223.710730][ T1236] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 223.710780][ T1236] usb 2-1: no configuration chosen from 1 choice [ 224.146555][ T7253] netlink: 'syz.2.387': attribute type 4 has an invalid length. [ 224.208137][ T7260] netlink: 'syz.2.387': attribute type 4 has an invalid length. [ 224.267343][ T7263] tap0: tun_chr_ioctl cmd 1074025675 [ 224.267366][ T7263] tap0: persist enabled [ 224.284197][ T7263] bridge: RTM_NEWNEIGH with invalid ether address [ 224.573348][ T7267] netlink: 1 bytes leftover after parsing attributes in process `syz.2.392'. [ 224.818390][ T5887] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 224.948416][ T5887] usb 3-1: device descriptor read/64, error -71 [ 225.188479][ T5887] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 225.229184][ T7294] FAT-fs (loop1): unable to read boot sector [ 225.318531][ T5887] usb 3-1: device descriptor read/64, error -71 [ 225.429945][ T5887] usb usb3-port1: attempt power cycle [ 225.768541][ T5887] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 225.792022][ T5887] usb 3-1: device descriptor read/8, error -71 [ 226.048432][ T5887] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 226.069826][ T5887] usb 3-1: device descriptor read/8, error -71 [ 226.180631][ T5887] usb usb3-port1: unable to enumerate USB device [ 226.213309][ T31] usb 2-1: USB disconnect, device number 16 [ 228.427299][ T7341] FAT-fs (loop9): unable to read boot sector [ 230.109403][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 230.311312][ T5878] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 230.461084][ T5878] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 230.461111][ T5878] usb 1-1: config 0 has no interface number 0 [ 230.461138][ T5878] usb 1-1: too many endpoints for config 0 interface 213 altsetting 155: 233, using maximum allowed: 30 [ 230.461174][ T5878] usb 1-1: config 0 interface 213 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 233 [ 230.461201][ T5878] usb 1-1: config 0 interface 213 has no altsetting 0 [ 230.461234][ T5878] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 230.461255][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.468042][ T5878] usb 1-1: config 0 descriptor?? [ 230.850368][ T7369] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 231.339396][ T5887] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 231.468858][ T981] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 231.496300][ T5887] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 231.496332][ T5887] usb 3-1: config 0 has no interface number 0 [ 231.525699][ T5887] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 231.525728][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.525748][ T5887] usb 3-1: Product: syz [ 231.525763][ T5887] usb 3-1: Manufacturer: syz [ 231.525778][ T5887] usb 3-1: SerialNumber: syz [ 231.564197][ T5887] usb 3-1: config 0 descriptor?? [ 231.581648][ T5887] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 231.641844][ T981] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 231.641872][ T981] usb 2-1: config 0 has no interface number 0 [ 231.642132][ T981] usb 2-1: too many endpoints for config 0 interface 213 altsetting 155: 233, using maximum allowed: 30 [ 231.642175][ T981] usb 2-1: config 0 interface 213 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 233 [ 231.642202][ T981] usb 2-1: config 0 interface 213 has no altsetting 0 [ 231.642373][ T981] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 231.642472][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.722762][ T981] usb 2-1: config 0 descriptor?? [ 231.836079][ T5887] qmi_wwan 3-1:0.172: probe with driver qmi_wwan failed with error -22 [ 232.044351][ T38] kauditd_printk_skb: 49 callbacks suppressed [ 232.044371][ T38] audit: type=1326 audit(1761270506.619:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.046012][ T38] audit: type=1326 audit(1761270506.619:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.046827][ T38] audit: type=1326 audit(1761270506.619:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.047789][ T38] audit: type=1326 audit(1761270506.619:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.050275][ T38] audit: type=1326 audit(1761270506.619:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.167620][ T38] audit: type=1326 audit(1761270506.739:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.171867][ T38] audit: type=1326 audit(1761270506.739:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.356877][ T38] audit: type=1326 audit(1761270506.929:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.362998][ T38] audit: type=1326 audit(1761270506.939:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.368169][ T38] audit: type=1326 audit(1761270506.939:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7371 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 232.761835][ T5878] usb 1-1: string descriptor 0 read error: -71 [ 232.781159][ T5878] usb 1-1: Cannot read MAC address [ 232.781439][ T5878] MOSCHIP usb-ethernet driver 1-1:0.213: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 232.814714][ T5878] usb 1-1: USB disconnect, device number 8 [ 233.365376][ T7391] syz.3.436 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.974515][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.994221][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.036182][ T7405] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 234.168434][ T5887] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 234.208457][ T5878] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.293548][ T981] usb 2-1: string descriptor 0 read error: -71 [ 234.315679][ T981] usb 2-1: Cannot read MAC address [ 234.315971][ T981] MOSCHIP usb-ethernet driver 2-1:0.213: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 234.341042][ T5878] usb 5-1: device descriptor read/64, error -71 [ 234.343429][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.363991][ T5887] usb 1-1: not running at top speed; connect to a high speed hub [ 234.375839][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.375869][ T5887] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.375891][ T5887] usb 1-1: config 1 has no interface number 1 [ 234.375939][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 234.375990][ T5887] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 234.433345][ T981] usb 2-1: USB disconnect, device number 17 [ 234.434385][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.434413][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.434435][ T5887] usb 1-1: Product: syz [ 234.434450][ T5887] usb 1-1: Manufacturer: syz [ 234.434464][ T5887] usb 1-1: SerialNumber: syz [ 234.578502][ T5878] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 234.709074][ T5878] usb 5-1: device descriptor read/64, error -71 [ 234.784107][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.828514][ T5878] usb usb5-port1: attempt power cycle [ 235.436841][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.802664][ T5878] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 235.853349][ T5878] usb 5-1: device descriptor read/8, error -71 [ 236.117133][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 236.140194][ T5878] usb 5-1: device descriptor read/8, error -71 [ 236.155816][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.220126][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.248951][ T5878] usb usb5-port1: unable to enumerate USB device [ 236.275429][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'. [ 236.351249][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 237.582078][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.587767][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.587830][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 237.587857][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 157 [ 237.611651][ T31] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 237.611686][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.611707][ T31] usb 2-1: Product: syz [ 237.611723][ T31] usb 2-1: Manufacturer: syz [ 237.611740][ T31] usb 2-1: SerialNumber: syz [ 237.655005][ T31] usb 2-1: config 0 descriptor?? [ 237.657986][ T7417] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 237.663092][ T7417] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 237.697496][ C1] usb 2-1: NFC: Urb failure (status -71) [ 237.720273][ T5887] hub 1-1:1.0: Invalid hub with more than one config or interface [ 237.720317][ T5887] hub 1-1:1.0: probe with driver hub failed with error -22 [ 237.720707][ C1] usb 2-1: NFC: Urb failure (status -71) [ 237.730177][ T31] usb 2-1: NFC: Unable to get FW version [ 237.752295][ T31] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -71 [ 237.786597][ T5887] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 237.902789][ T31] usb 2-1: USB disconnect, device number 18 [ 238.089707][ T5887] usb 1-1: USB disconnect, device number 9 [ 238.098484][ T7428] netlink: 'syz.0.450': attribute type 3 has an invalid length. [ 238.098504][ T7428] netlink: 'syz.0.450': attribute type 28 has an invalid length. [ 238.098519][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.450'. [ 238.351861][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.815401][ T7437] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 239.768397][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.921758][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.923204][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.923266][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 239.923294][ T5887] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 157 [ 240.215417][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 240.215439][ T38] audit: type=1326 audit(1761270514.529:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.215498][ T38] audit: type=1326 audit(1761270514.529:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.215775][ T38] audit: type=1326 audit(1761270514.529:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.215826][ T38] audit: type=1326 audit(1761270514.529:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.215930][ T38] audit: type=1326 audit(1761270514.529:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.215981][ T38] audit: type=1326 audit(1761270514.529:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.216254][ T38] audit: type=1326 audit(1761270514.529:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.216306][ T38] audit: type=1326 audit(1761270514.529:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.216413][ T38] audit: type=1326 audit(1761270514.529:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.216463][ T38] audit: type=1326 audit(1761270514.529:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7468 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 240.217862][ T5887] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 240.217893][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.217916][ T5887] usb 1-1: Product: syz [ 240.217932][ T5887] usb 1-1: Manufacturer: syz [ 240.217946][ T5887] usb 1-1: SerialNumber: syz [ 241.490161][ T5887] usb 1-1: config 0 descriptor?? [ 241.494065][ T7461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.494687][ T7461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.522616][ C0] usb 1-1: NFC: Urb failure (status -71) [ 241.523905][ C0] usb 1-1: NFC: Urb failure (status -71) [ 241.690721][ T5887] usb 1-1: NFC: Unable to get FW version [ 241.691072][ T5887] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -71 [ 241.737523][ T5887] usb 1-1: USB disconnect, device number 10 [ 242.183932][ T7481] FAT-fs (loop7): unable to read boot sector [ 242.592754][ T7490] netlink: 'syz.0.473': attribute type 6 has an invalid length. [ 242.598590][ T7490] wg1: entered promiscuous mode [ 242.598618][ T7490] wg1: entered allmulticast mode [ 242.805240][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 242.882625][ T10] usb 3-1: USB disconnect, device number 19 [ 243.258399][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 243.258438][ T5900] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 243.431071][ T5900] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 243.431101][ T5900] usb 1-1: config 0 has no interface number 0 [ 243.431135][ T5900] usb 1-1: too many endpoints for config 0 interface 213 altsetting 155: 233, using maximum allowed: 30 [ 243.431181][ T5900] usb 1-1: config 0 interface 213 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 233 [ 243.431211][ T5900] usb 1-1: config 0 interface 213 has no altsetting 0 [ 243.431247][ T5900] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 243.431271][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.441486][ T5900] usb 1-1: config 0 descriptor?? [ 243.533547][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.535217][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 243.557315][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.557345][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.597200][ T10] usb 3-1: string descriptor 0 read error: -22 [ 243.597360][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.597386][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.660833][ T10] usb 3-1: 0:2 : does not exist [ 244.181497][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 244.242792][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 244.247574][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 244.283174][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 244.364135][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 244.400571][ T10] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 244.424324][ T10] usb 3-1: USB disconnect, device number 20 [ 244.577889][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.203275][ T5900] usb 1-1: string descriptor 0 read error: -71 [ 246.208420][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 246.216068][ T5900] usb 1-1: Cannot read MAC address [ 246.216389][ T5900] MOSCHIP usb-ethernet driver 1-1:0.213: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 246.336276][ T5900] usb 1-1: USB disconnect, device number 11 [ 246.356361][ T7529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.484'. [ 246.356392][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.484'. [ 246.529916][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 246.688346][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 246.690880][ T31] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 246.696228][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 246.696258][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.696280][ T31] usb 2-1: Product: syz [ 246.696296][ T31] usb 2-1: Manufacturer: syz [ 246.696312][ T31] usb 2-1: SerialNumber: syz [ 247.136974][ T38] kauditd_printk_skb: 145 callbacks suppressed [ 247.136991][ T38] audit: type=1326 audit(1761270521.709:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 247.137036][ T38] audit: type=1326 audit(1761270521.709:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 247.137186][ T38] audit: type=1326 audit(1761270521.709:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 247.137225][ T38] audit: type=1326 audit(1761270521.709:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 247.140207][ T38] audit: type=1326 audit(1761270521.719:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 247.228819][ T38] audit: type=1326 audit(1761270521.759:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7542 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 247.619488][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 120 seconds [ 247.987731][ T31] port100 2-1:8.0: NFC: Could not find bulk-in or bulk-out endpoint [ 248.031600][ T31] usb 2-1: USB disconnect, device number 19 [ 248.164781][ T7515] syz.4.481 (7515) used greatest stack depth: 17616 bytes left [ 252.682572][ T5170] udevd[5170]: worker [6060] /devices/virtual/block/nbd0 is taking a long time [ 261.027676][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.027780][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.238697][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 264.388623][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 264.392049][ T9] usb 3-1: unable to get BOS descriptor set [ 264.396118][ T9] usb 3-1: config 0 has no interfaces? [ 264.419663][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.419693][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.419732][ T9] usb 3-1: Product: syz [ 264.419747][ T9] usb 3-1: Manufacturer: syz [ 264.419763][ T9] usb 3-1: SerialNumber: syz [ 264.436448][ T9] usb 3-1: config 0 descriptor?? [ 265.921843][ T31] usb 3-1: USB disconnect, device number 21 [ 266.122519][ T38] audit: type=1326 audit(1761270540.699:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.122587][ T38] audit: type=1326 audit(1761270540.699:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.123618][ T38] audit: type=1326 audit(1761270540.699:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.127743][ T38] audit: type=1326 audit(1761270540.699:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.127896][ T38] audit: type=1326 audit(1761270540.699:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.136077][ T38] audit: type=1326 audit(1761270540.709:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.136226][ T38] audit: type=1326 audit(1761270540.709:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.137191][ T38] audit: type=1326 audit(1761270540.709:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.137532][ T38] audit: type=1326 audit(1761270540.709:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.140661][ T38] audit: type=1326 audit(1761270540.709:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7608 comm="syz.2.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 266.324196][ T7602] syz.0.505 (7602) used greatest stack depth: 17584 bytes left [ 266.637600][ T7616] exFAT-fs (nullb0): invalid boot record signature [ 266.637617][ T7616] exFAT-fs (nullb0): failed to read boot sector [ 266.637627][ T7616] exFAT-fs (nullb0): failed to recognize exfat type [ 266.679420][ T7615] netlink: 68 bytes leftover after parsing attributes in process `syz.0.509'. [ 271.239961][ T7685] netlink: 'syz.1.531': attribute type 1 has an invalid length. [ 272.097378][ T7689] syz.2.532 (7689) used greatest stack depth: 17512 bytes left [ 276.040034][ T7722] fuse: Bad value for 'fd' [ 276.131155][ T7725] IPv4: Oversized IP packet from 172.20.20.24 [ 276.133040][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 276.134250][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 277.591731][ T7743] vxcan3: entered promiscuous mode [ 277.591760][ T7743] vxcan3: entered allmulticast mode [ 278.744381][ T7743] mmap: syz.3.550 (7743) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 278.762284][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 150 seconds [ 278.798389][ T7743] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 278.810494][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.345748][ T7760] FAT-fs (loop9): unable to read boot sector [ 279.606915][ T7762] FAT-fs (loop1): unable to read boot sector [ 279.921383][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 280.181898][ T7765] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 280.212400][ T7765] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 280.394339][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 280.394360][ T38] audit: type=1326 audit(1761270554.969:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 280.395738][ T38] audit: type=1326 audit(1761270554.969:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 281.042813][ T38] audit: type=1326 audit(1761270555.599:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 281.506437][ T38] audit: type=1326 audit(1761270555.709:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 281.508146][ T38] audit: type=1326 audit(1761270556.079:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 281.588317][ T38] audit: type=1326 audit(1761270556.149:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 281.588387][ T38] audit: type=1326 audit(1761270556.149:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 281.998954][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.076108][ T38] audit: type=1326 audit(1761270556.649:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x0 [ 282.168546][ T5903] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 282.331004][ T5903] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 282.331035][ T5903] usb 5-1: config 1 has no interface number 1 [ 282.331083][ T5903] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.333926][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.333957][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.333980][ T5903] usb 5-1: Product: syz [ 282.333996][ T5903] usb 5-1: Manufacturer: syz [ 282.334012][ T5903] usb 5-1: SerialNumber: syz [ 282.617355][ T5903] usb 5-1: found format II with max.bitrate = 3, frame size=7 [ 282.617419][ T5903] usb 5-1: 2:1: All rates were zero [ 282.649352][ T5903] usb 5-1: USB disconnect, device number 13 [ 282.681765][ T7809] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 282.730364][ T7809] netlink: 'syz.2.575': attribute type 4 has an invalid length. [ 282.802681][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.950302][ T38] audit: type=1326 audit(1761270557.529:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7813 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 282.952566][ T38] audit: type=1326 audit(1761270557.529:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7813 comm="syz.2.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 284.384467][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.326366][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.456894][ T7846] netlink: 68 bytes leftover after parsing attributes in process `syz.3.588'. [ 285.468338][ T981] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 285.567210][ T38] kauditd_printk_skb: 37 callbacks suppressed [ 285.567230][ T38] audit: type=1326 audit(1761270560.139:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.567655][ T38] audit: type=1326 audit(1761270560.139:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.578359][ T38] audit: type=1326 audit(1761270560.149:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.578910][ T38] audit: type=1326 audit(1761270560.149:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.579328][ T38] audit: type=1326 audit(1761270560.159:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.579646][ T38] audit: type=1326 audit(1761270560.159:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.580187][ T38] audit: type=1326 audit(1761270560.159:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.580756][ T38] audit: type=1326 audit(1761270560.159:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.581208][ T38] audit: type=1326 audit(1761270560.159:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.581615][ T38] audit: type=1326 audit(1761270560.159:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7851 comm="syz.3.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 285.637904][ T981] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 285.637940][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.637962][ T981] usb 2-1: config 0 has no interface number 0 [ 285.638020][ T981] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 285.638050][ T981] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 285.638083][ T981] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 285.638109][ T981] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 285.644272][ T981] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 285.644309][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.644334][ T981] usb 2-1: Product: syz [ 285.644350][ T981] usb 2-1: Manufacturer: syz [ 285.644367][ T981] usb 2-1: SerialNumber: syz [ 285.668949][ T981] usb 2-1: config 0 descriptor?? [ 285.697744][ T981] symbolserial 2-1:0.175: symbol converter detected [ 285.739740][ T981] usb 2-1: symbol converter now attached to ttyUSB0 [ 285.915171][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.982235][ T981] usb 2-1: USB disconnect, device number 20 [ 286.319985][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.365654][ T981] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 286.378030][ T981] symbolserial 2-1:0.175: device disconnected [ 286.513378][ T7864] FAT-fs (loop9): unable to read boot sector [ 286.824293][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.283485][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.683435][ T7880] netlink: 68 bytes leftover after parsing attributes in process `syz.4.600'. [ 288.286875][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.429682][ T7893] FAT-fs (loop3): unable to read boot sector [ 288.677420][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.193276][ T7900] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 289.279428][ T7899] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 290.880630][ T7932] netlink: 'syz.4.616': attribute type 4 has an invalid length. [ 290.921819][ T38] kauditd_printk_skb: 90 callbacks suppressed [ 290.921875][ T38] audit: type=1326 audit(1761270565.469:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 290.922096][ T38] audit: type=1326 audit(1761270565.469:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz.3.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 291.762677][ T38] audit: type=1326 audit(1761270566.339:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 291.886975][ T38] audit: type=1326 audit(1761270566.419:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 292.146712][ T38] audit: type=1326 audit(1761270566.719:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 292.425646][ T38] audit: type=1326 audit(1761270566.929:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 292.425816][ T38] audit: type=1326 audit(1761270566.979:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7930 comm="syz.0.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f35eefc9 code=0x7ffc0000 [ 292.686456][ T7936] netlink: 'syz.4.616': attribute type 4 has an invalid length. [ 296.434136][ T5903] hid-generic 09BC:0006:09A3.0001: item fetching failed at offset 0/2 [ 296.436935][ T5903] hid-generic 09BC:0006:09A3.0001: probe with driver hid-generic failed with error -22 [ 296.448726][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 296.618679][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 296.621202][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 296.621234][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.647290][ T9] usb 2-1: config 0 descriptor?? [ 296.667209][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 296.863680][ T9] usb 2-1: Detected FT232B [ 297.843752][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 297.858306][ T38] audit: type=1326 audit(1761270572.429:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7997 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7fc00000 [ 297.900027][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 297.950963][ T9] usb 2-1: USB disconnect, device number 21 [ 297.970645][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 297.971417][ T9] ftdi_sio 2-1:0.0: device disconnected [ 298.089657][ T8009] Illegal XDP return value 4294967294 on prog (id 105) dev N/A, expect packet loss! [ 298.458494][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.278942][ T5878] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 299.780710][ T5878] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 299.780762][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.810765][ T5878] usb 3-1: config 0 descriptor?? [ 300.298542][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 301.226720][ T38] audit: type=1326 audit(1761270575.799:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 301.440360][ T5878] usb 3-1: Cannot set autoneg [ 301.440661][ T5878] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 301.741933][ T38] audit: type=1326 audit(1761270576.309:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 301.771188][ T38] audit: type=1326 audit(1761270576.319:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 301.794157][ T38] audit: type=1326 audit(1761270576.369:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 301.827830][ T9] usb 3-1: USB disconnect, device number 22 [ 301.930736][ T38] audit: type=1326 audit(1761270576.369:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.3.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 302.308542][ T8057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.665'. [ 302.308575][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 309.172903][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 180 seconds [ 309.864250][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.894468][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.918956][ T8134] bridge0: entered allmulticast mode [ 309.940008][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.940195][ T8128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.963482][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.963651][ T8128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.964868][ T8128] bridge0: entered promiscuous mode [ 310.029065][ T5808] Bluetooth: Frame is too long (len 202, expected len 4) [ 320.578388][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 320.743383][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.743403][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.745384][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 320.745405][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.745420][ T9] usb 2-1: SerialNumber: syz [ 322.403817][ T5808] Bluetooth: hci2: command 0x0406 tx timeout [ 322.404211][ T5900] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 322.465988][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.466065][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.567431][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.567485][ T5900] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 322.567510][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.644617][ T5900] usb 5-1: config 0 descriptor?? [ 322.680156][ T9] usb 2-1: 0:2 : does not exist [ 322.680317][ T9] usb 2-1: unit 5: unexpected type 0x0d [ 322.784832][ T9] usb 2-1: USB disconnect, device number 22 [ 323.107636][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.885599][ T38] audit: type=1326 audit(1761270598.459:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8248 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 323.886936][ T38] audit: type=1326 audit(1761270598.459:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8248 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 323.941323][ T38] audit: type=1326 audit(1761270598.519:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8248 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 323.943030][ T38] audit: type=1326 audit(1761270598.519:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8248 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 323.943979][ T38] audit: type=1326 audit(1761270598.519:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8248 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0d29efc9 code=0x7ffc0000 [ 324.368781][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 324.487668][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 324.487798][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 324.505381][ T5900] usb 5-1: USB disconnect, device number 14 [ 324.531605][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.531638][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.634486][ T10] usb 2-1: config 0 descriptor?? [ 324.652666][ T10] cp210x 2-1:0.0: cp210x converter detected [ 325.070494][ T10] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 325.071790][ T10] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 325.103415][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 325.309175][ T5887] usb 2-1: USB disconnect, device number 23 [ 325.340178][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.340995][ T5887] cp210x 2-1:0.0: device disconnected [ 325.979387][ T5801] Bluetooth: hci2: unexpected cc 0x0809 length: 68 > 4 [ 325.979426][ T5801] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 329.437316][ T38] audit: type=1326 audit(1761270603.999:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.437394][ T38] audit: type=1326 audit(1761270604.009:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.437442][ T38] audit: type=1326 audit(1761270604.009:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.437489][ T38] audit: type=1326 audit(1761270604.009:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.437535][ T38] audit: type=1326 audit(1761270604.009:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.437583][ T38] audit: type=1326 audit(1761270604.009:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.666705][ T38] audit: type=1326 audit(1761270604.239:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.666769][ T38] audit: type=1326 audit(1761270604.239:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.710195][ T38] audit: type=1326 audit(1761270604.239:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 329.710259][ T38] audit: type=1326 audit(1761270604.289:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6304eeefc9 code=0x7ffc0000 [ 330.551177][ T8349] netlink: 'syz.0.776': attribute type 32 has an invalid length. [ 331.882988][ T8369] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96 [ 340.218046][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 210 seconds [ 344.994342][ T8485] fuse: Bad value for 'fd' [ 345.654591][ T5801] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 346.815272][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.145647][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.558973][ T8524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.835'. [ 349.842331][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.856618][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.858006][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.863752][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.865567][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.114703][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.485955][ T5808] Bluetooth: hci1: command tx timeout [ 354.541345][ T5808] Bluetooth: hci1: command tx timeout [ 355.111475][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.712593][ T5808] Bluetooth: hci1: command tx timeout [ 359.189843][ T5808] Bluetooth: hci1: command tx timeout [ 359.879460][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.134982][ T37] bridge_slave_1: left allmulticast mode [ 360.135099][ T37] bridge_slave_1: left promiscuous mode [ 360.137368][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.280373][ T37] bridge_slave_0: left allmulticast mode [ 360.280401][ T37] bridge_slave_0: left promiscuous mode [ 360.280596][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.439838][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.457836][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.467662][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.481336][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.482279][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.612576][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.568508][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.098736][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.242686][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.596977][ T5801] Bluetooth: hci5: command tx timeout [ 363.645697][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.091042][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.915708][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.691627][ T5801] Bluetooth: hci5: command tx timeout [ 367.738654][ T5801] Bluetooth: hci5: command tx timeout [ 369.836292][ T5801] Bluetooth: hci5: command tx timeout [ 370.289883][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.349237][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.393604][ T37] bond0 (unregistering): Released all slaves [ 370.560830][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 240 seconds [ 370.877403][ T8686] syzkaller0: entered promiscuous mode [ 370.877431][ T8686] syzkaller0: entered allmulticast mode [ 372.555364][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 377.838387][ T37] hsr_slave_0: left promiscuous mode [ 377.888464][ T37] hsr_slave_1: left promiscuous mode [ 377.890722][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.890969][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.959675][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.959718][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.257072][ T37] veth1_macvtap: left promiscuous mode [ 378.257350][ T37] veth0_macvtap: left promiscuous mode [ 378.257702][ T37] veth1_vlan: left promiscuous mode [ 378.258048][ T37] veth0_vlan: left promiscuous mode [ 381.507216][ T5170] udevd[5170]: worker [6060] /devices/virtual/block/nbd0 timeout; kill it [ 381.510129][ T37] team0 (unregistering): Port device team_slave_1 removed [ 381.525544][ T5170] udevd[5170]: seq 11306 '/devices/virtual/block/nbd0' killed [ 381.750111][ T37] team0 (unregistering): Port device team_slave_0 removed [ 383.912596][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.912701][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.180866][ T8771] wg2: entered promiscuous mode [ 384.180894][ T8771] wg2: entered allmulticast mode [ 384.814031][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.814364][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.816627][ T8526] bridge_slave_0: entered allmulticast mode [ 384.834158][ T8526] bridge_slave_0: entered promiscuous mode [ 385.826344][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.826497][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.826741][ T8526] bridge_slave_1: entered allmulticast mode [ 385.859794][ T8526] bridge_slave_1: entered promiscuous mode [ 388.903404][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.068895][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.434577][ T8526] team0: Port device team_slave_0 added [ 392.505371][ T8526] team0: Port device team_slave_1 added [ 392.779642][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.782764][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.786405][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.787511][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.802435][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.129451][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.129471][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.129502][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.239213][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.239231][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.239262][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.961885][ T5808] Bluetooth: hci3: command tx timeout [ 396.448656][ T8526] hsr_slave_0: entered promiscuous mode [ 396.450265][ T8526] hsr_slave_1: entered promiscuous mode [ 396.451215][ T8526] debugfs: 'hsr0' already exists in 'hsr' [ 396.451241][ T8526] Cannot create hsr debugfs directory [ 396.451880][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 397.981178][ T5801] Bluetooth: hci3: command tx timeout [ 398.712796][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.155623][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.530327][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.573375][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.573528][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.573777][ T8603] bridge_slave_0: entered allmulticast mode [ 399.576315][ T8603] bridge_slave_0: entered promiscuous mode [ 399.636388][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.636556][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.636721][ T8603] bridge_slave_1: entered allmulticast mode [ 399.640188][ T8603] bridge_slave_1: entered promiscuous mode [ 400.794030][ T5801] Bluetooth: hci3: command tx timeout [ 401.308382][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 270 seconds [ 401.627677][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.757084][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.795003][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.867601][ T5801] Bluetooth: hci3: command tx timeout [ 403.041602][ T8603] team0: Port device team_slave_0 added [ 403.062265][ T8603] team0: Port device team_slave_1 added [ 403.515840][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.515860][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.515892][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.651689][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.651716][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.651745][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.802522][ T8826] chnl_net:caif_netlink_parms(): no params data found [ 403.996908][ T8526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.139357][ T8526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.190723][ T8603] hsr_slave_0: entered promiscuous mode [ 405.192161][ T8603] hsr_slave_1: entered promiscuous mode [ 405.193166][ T8603] debugfs: 'hsr0' already exists in 'hsr' [ 405.193189][ T8603] Cannot create hsr debugfs directory [ 405.390502][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.442787][ T8526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.475576][ T8526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.917712][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.153449][ T8526] kthread_run failed with err -4 [ 407.159847][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.159986][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.160241][ T8826] bridge_slave_0: entered allmulticast mode [ 407.164237][ T8826] bridge_slave_0: entered promiscuous mode [ 407.663549][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.670377][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.672481][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.675124][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.677387][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.790118][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.831368][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.831540][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.831777][ T8826] bridge_slave_1: entered allmulticast mode [ 408.834622][ T8826] bridge_slave_1: entered promiscuous mode [ 409.870782][ T5801] Bluetooth: hci0: command tx timeout [ 410.848892][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.932585][ T8826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.981234][ T8826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.303422][ T8826] team0: Port device team_slave_0 added [ 411.347772][ T8826] team0: Port device team_slave_1 added [ 411.806727][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.806745][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.806775][ T8826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.898379][ T5801] Bluetooth: hci0: command tx timeout [ 411.938654][ T8826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.938671][ T8826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.938701][ T8826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.560886][ T37] bridge_slave_1: left allmulticast mode [ 413.560917][ T37] bridge_slave_1: left promiscuous mode [ 413.561174][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.892371][ T5801] Bluetooth: hci0: command tx timeout [ 414.894871][ T37] bridge_slave_0: left allmulticast mode [ 414.894898][ T37] bridge_slave_0: left promiscuous mode [ 414.895163][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.066356][ T37] bridge_slave_1: left allmulticast mode [ 415.066386][ T37] bridge_slave_1: left promiscuous mode [ 415.066720][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.319481][ T37] bridge_slave_0: left allmulticast mode [ 415.319524][ T37] bridge_slave_0: left promiscuous mode [ 415.319786][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.346851][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 416.363545][ T9] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 416.363577][ T9] usb 5-1: config 0 has no interface number 0 [ 416.363630][ T9] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 416.363657][ T9] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.367743][ T9] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 416.367771][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.367786][ T9] usb 5-1: Product: syz [ 416.367796][ T9] usb 5-1: Manufacturer: syz [ 416.367809][ T9] usb 5-1: SerialNumber: syz [ 416.437963][ T9] usb 5-1: config 0 descriptor?? [ 416.448850][ T9] ums-karma 5-1:0.46: USB Mass Storage device detected [ 416.520665][ T9] ums-karma 5-1:0.46: probe with driver ums-karma failed with error -5 [ 416.705644][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 416.938563][ T5801] Bluetooth: hci0: command tx timeout [ 418.268489][ T37] bond0 (unregistering): left promiscuous mode [ 418.268512][ T37] bond_slave_0: left promiscuous mode [ 418.268693][ T37] bond_slave_1: left promiscuous mode [ 418.290620][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.338855][ T37] bond_slave_0: left allmulticast mode [ 418.359239][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.399039][ T37] bond_slave_1: left allmulticast mode [ 418.401604][ T37] bond0 (unregistering): Released all slaves [ 418.421612][ T37] bond1 (unregistering): Released all slaves [ 418.892111][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.895653][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.906063][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.909701][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.910820][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.981044][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.039605][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.111440][ T37] bond0 (unregistering): Released all slaves [ 420.140435][ T8826] hsr_slave_0: entered promiscuous mode [ 420.141878][ T8826] hsr_slave_1: entered promiscuous mode [ 420.142911][ T8826] debugfs: 'hsr0' already exists in 'hsr' [ 420.142937][ T8826] Cannot create hsr debugfs directory [ 420.327591][ T10] usb 5-1: USB disconnect, device number 15 [ 420.396730][ T9099] netlink: 'syz.3.996': attribute type 4 has an invalid length. [ 420.478365][ T9102] netlink: 'syz.3.996': attribute type 4 has an invalid length. [ 420.497851][ T38] kauditd_printk_skb: 17 callbacks suppressed [ 420.497870][ T38] audit: type=1326 audit(1761270695.069:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.499283][ T38] audit: type=1326 audit(1761270695.079:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.501800][ T38] audit: type=1326 audit(1761270695.079:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.502395][ T38] audit: type=1326 audit(1761270695.079:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.503066][ T38] audit: type=1326 audit(1761270695.079:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.503532][ T38] audit: type=1326 audit(1761270695.079:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.503877][ T38] audit: type=1326 audit(1761270695.079:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.504305][ T38] audit: type=1326 audit(1761270695.079:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.504631][ T38] audit: type=1326 audit(1761270695.079:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.505036][ T38] audit: type=1326 audit(1761270695.079:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9100 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 420.949358][ T5808] Bluetooth: hci1: command tx timeout [ 421.237287][ T9107] exFAT-fs (nullb0): invalid boot record signature [ 421.237308][ T9107] exFAT-fs (nullb0): failed to read boot sector [ 421.237319][ T9107] exFAT-fs (nullb0): failed to recognize exfat type [ 423.019343][ T5808] Bluetooth: hci1: command tx timeout [ 424.101716][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 424.488739][ T37] dummy0: left promiscuous mode [ 425.857406][ T5808] Bluetooth: hci1: command tx timeout [ 425.898246][ T37] hsr_slave_0: left promiscuous mode [ 425.954779][ T37] hsr_slave_1: left promiscuous mode [ 425.955786][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.955811][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.009133][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.009163][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.228315][ T37] hsr_slave_0: left promiscuous mode [ 426.248362][ T37] hsr_slave_1: left promiscuous mode [ 426.249179][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.249205][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.299981][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.300011][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.407860][ T37] veth1_macvtap: left promiscuous mode [ 426.407933][ T37] veth0_macvtap: left promiscuous mode [ 426.408102][ T37] veth1_vlan: left promiscuous mode [ 426.409245][ T37] veth0_vlan: left promiscuous mode [ 426.528928][ T37] veth1_macvtap: left promiscuous mode [ 426.529047][ T37] veth0_macvtap: left promiscuous mode [ 426.529460][ T37] veth1_vlan: left promiscuous mode [ 426.532837][ T37] veth0_vlan: left promiscuous mode [ 427.908378][ T5808] Bluetooth: hci1: command tx timeout [ 428.799173][ T37] team0 (unregistering): Port device team_slave_1 removed [ 429.029818][ T37] team0 (unregistering): Port device team_slave_0 removed [ 429.311068][ T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 429.460657][ T31] usb 5-1: config 0 has an invalid interface number: 46 but max is 0 [ 429.460694][ T31] usb 5-1: config 0 has no interface number 0 [ 429.460758][ T31] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.460776][ T31] usb 5-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.463212][ T31] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 429.463236][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.463251][ T31] usb 5-1: Product: syz [ 429.463261][ T31] usb 5-1: Manufacturer: syz [ 429.463271][ T31] usb 5-1: SerialNumber: syz [ 429.467847][ T31] usb 5-1: config 0 descriptor?? [ 429.497063][ T31] ums-karma 5-1:0.46: USB Mass Storage device detected [ 429.585891][ T31] ums-karma 5-1:0.46: probe with driver ums-karma failed with error -5 [ 429.750102][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1004'. [ 431.938525][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 300 seconds [ 433.169134][ T37] team0 (unregistering): Port device team_slave_1 removed [ 433.368968][ T37] team0 (unregistering): Port device team_slave_0 removed [ 435.739978][ T31] usb 5-1: USB disconnect, device number 16 [ 436.413732][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.413845][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.414020][ T8995] bridge_slave_0: entered allmulticast mode [ 436.416067][ T8995] bridge_slave_0: entered promiscuous mode [ 436.481114][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.481342][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.481549][ T8995] bridge_slave_1: entered allmulticast mode [ 436.518757][ T8995] bridge_slave_1: entered promiscuous mode [ 438.111731][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.112054][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 438.200982][ T8826] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 438.275152][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 438.275171][ T38] audit: type=1326 audit(1761270712.849:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.275468][ T38] audit: type=1326 audit(1761270712.849:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.275889][ T38] audit: type=1326 audit(1761270712.849:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.277855][ T38] audit: type=1326 audit(1761270712.849:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.278135][ T38] audit: type=1326 audit(1761270712.849:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.324447][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.388247][ T8826] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 438.408960][ T38] audit: type=1326 audit(1761270712.909:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.409012][ T38] audit: type=1326 audit(1761270712.919:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.409055][ T38] audit: type=1326 audit(1761270712.919:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.409100][ T38] audit: type=1326 audit(1761270712.919:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.409143][ T38] audit: type=1326 audit(1761270712.919:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9161 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 438.472574][ T9163] exFAT-fs (nullb0): invalid boot record signature [ 438.472594][ T9163] exFAT-fs (nullb0): failed to read boot sector [ 438.472606][ T9163] exFAT-fs (nullb0): failed to recognize exfat type [ 438.711390][ T8826] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 438.729433][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.734586][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.736091][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.737863][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.740826][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.035198][ T8826] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 439.179474][ T8995] team0: Port device team_slave_0 added [ 439.181780][ T9094] chnl_net:caif_netlink_parms(): no params data found [ 439.193603][ T8995] team0: Port device team_slave_1 added [ 439.774659][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.774676][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.774705][ T8995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.809766][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.809786][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.809821][ T8995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.314384][ T9094] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.314535][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.314752][ T9094] bridge_slave_0: entered allmulticast mode [ 440.317648][ T9094] bridge_slave_0: entered promiscuous mode [ 440.469571][ T9094] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.469794][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.470031][ T9094] bridge_slave_1: entered allmulticast mode [ 440.473191][ T9094] bridge_slave_1: entered promiscuous mode [ 440.505119][ T8995] hsr_slave_0: entered promiscuous mode [ 440.506927][ T8995] hsr_slave_1: entered promiscuous mode [ 440.958364][ T5808] Bluetooth: hci5: command tx timeout [ 441.971964][ T9094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.623165][ T9094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.018663][ T5808] Bluetooth: hci5: command tx timeout [ 443.545715][ T9094] team0: Port device team_slave_0 added [ 443.561386][ T9094] team0: Port device team_slave_1 added [ 443.839407][ T9094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.839420][ T9094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.839440][ T9094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.995316][ T9094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.995346][ T9094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.995394][ T9094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.098334][ T5808] Bluetooth: hci5: command tx timeout [ 445.410404][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.410662][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.188627][ T5808] Bluetooth: hci5: command tx timeout [ 447.191008][ T9213] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 447.242443][ T9214] netlink: 'syz.4.1014': attribute type 4 has an invalid length. [ 447.272100][ T9094] hsr_slave_0: entered promiscuous mode [ 447.273259][ T9094] hsr_slave_1: entered promiscuous mode [ 447.273935][ T9094] debugfs: 'hsr0' already exists in 'hsr' [ 447.273956][ T9094] Cannot create hsr debugfs directory [ 447.534491][ T9166] chnl_net:caif_netlink_parms(): no params data found [ 447.858831][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 447.858848][ T38] audit: type=1326 audit(1761270722.439:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.862311][ T38] audit: type=1326 audit(1761270722.439:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.862714][ T38] audit: type=1326 audit(1761270722.439:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.863047][ T38] audit: type=1326 audit(1761270722.439:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.863602][ T38] audit: type=1326 audit(1761270722.439:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.863898][ T38] audit: type=1326 audit(1761270722.439:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.864183][ T38] audit: type=1326 audit(1761270722.439:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.864550][ T38] audit: type=1326 audit(1761270722.439:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.865072][ T38] audit: type=1326 audit(1761270722.439:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 447.865351][ T38] audit: type=1326 audit(1761270722.439:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9226 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 450.024522][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.024798][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.024987][ T9166] bridge_slave_0: entered allmulticast mode [ 450.027986][ T9166] bridge_slave_0: entered promiscuous mode [ 450.094885][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.095030][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.095236][ T9166] bridge_slave_1: entered allmulticast mode [ 450.097262][ T9166] bridge_slave_1: entered promiscuous mode [ 450.628102][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.672258][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.716789][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.188304][ T9166] team0: Port device team_slave_0 added [ 451.204241][ T9166] team0: Port device team_slave_1 added [ 451.370477][ T37] bridge_slave_1: left allmulticast mode [ 451.370513][ T37] bridge_slave_1: left promiscuous mode [ 451.370715][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.429614][ T37] bridge_slave_0: left allmulticast mode [ 451.429647][ T37] bridge_slave_0: left promiscuous mode [ 451.429945][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.534398][ T37] bridge_slave_1: left allmulticast mode [ 451.534429][ T37] bridge_slave_1: left promiscuous mode [ 451.534701][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.599917][ T37] bridge_slave_0: left allmulticast mode [ 451.599946][ T37] bridge_slave_0: left promiscuous mode [ 451.600204][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.969375][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.049164][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.111778][ T37] bond0 (unregistering): Released all slaves [ 452.419475][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.481531][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.495564][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.497335][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.501736][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.504081][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.575599][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.630974][ T37] bond0 (unregistering): Released all slaves [ 452.803211][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.803230][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.803259][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.867605][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.867624][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.867655][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.971207][ T8995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.026887][ T8995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.301868][ T8995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.620678][ T8995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 453.771273][ T9166] hsr_slave_0: entered promiscuous mode [ 453.772552][ T9166] hsr_slave_1: entered promiscuous mode [ 453.773464][ T9166] debugfs: 'hsr0' already exists in 'hsr' [ 453.773486][ T9166] Cannot create hsr debugfs directory [ 453.948510][ T37] hsr_slave_0: left promiscuous mode [ 453.968499][ T37] hsr_slave_1: left promiscuous mode [ 453.969340][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.020357][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.158429][ T37] hsr_slave_0: left promiscuous mode [ 454.178920][ T37] hsr_slave_1: left promiscuous mode [ 454.179878][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.220352][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.538592][ T5808] Bluetooth: hci2: command tx timeout [ 454.919171][ T37] team0 (unregistering): Port device team_slave_1 removed [ 455.089097][ T37] team0 (unregistering): Port device team_slave_0 removed [ 456.618642][ T5808] Bluetooth: hci2: command tx timeout [ 457.627728][ T37] team0 (unregistering): Port device team_slave_1 removed [ 458.064798][ T37] team0 (unregistering): Port device team_slave_0 removed [ 458.712106][ T5808] Bluetooth: hci2: command tx timeout [ 459.185161][ T9295] IPv4: Oversized IP packet from 172.20.20.24 [ 459.185519][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 459.186230][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 460.778766][ T5808] Bluetooth: hci2: command tx timeout [ 461.367046][ T9268] chnl_net:caif_netlink_parms(): no params data found [ 461.638410][ T9094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.710451][ T9094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.845211][ T9094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.021917][ T9094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.035633][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 330 seconds [ 462.299521][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.346139][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.346447][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.346661][ T9268] bridge_slave_0: entered allmulticast mode [ 462.351562][ T9268] bridge_slave_0: entered promiscuous mode [ 462.424013][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.425670][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.426032][ T9268] bridge_slave_1: entered allmulticast mode [ 462.436908][ T9268] bridge_slave_1: entered promiscuous mode [ 462.698556][ T9268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.734454][ T9268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.839107][ T9166] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 462.952257][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.952559][ T9166] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 462.996402][ T9268] team0: Port device team_slave_0 added [ 463.002816][ T9166] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 463.033260][ T9268] team0: Port device team_slave_1 added [ 463.033737][ T9166] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 463.201899][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.202054][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.405633][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.405647][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.405667][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.631933][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.631964][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.631985][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.637954][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.638139][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.102526][ T9268] hsr_slave_0: entered promiscuous mode [ 464.103541][ T9268] hsr_slave_1: entered promiscuous mode [ 464.104440][ T9268] debugfs: 'hsr0' already exists in 'hsr' [ 464.104460][ T9268] Cannot create hsr debugfs directory [ 466.111470][ T9094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.350875][ T9094] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.455626][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.475140][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.475973][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.630151][ T37] bridge_slave_1: left allmulticast mode [ 466.630193][ T37] bridge_slave_1: left promiscuous mode [ 466.630439][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.750255][ T37] bridge_slave_0: left allmulticast mode [ 466.750287][ T37] bridge_slave_0: left promiscuous mode [ 466.750568][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.041195][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 467.211086][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 467.211886][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 467.213383][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.213406][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.213426][ T10] usb 5-1: config 1 has no interface number 1 [ 467.213474][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 467.213532][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 467.216592][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.216622][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.216644][ T10] usb 5-1: Product: syz [ 467.216660][ T10] usb 5-1: Manufacturer: syz [ 467.216677][ T10] usb 5-1: SerialNumber: syz [ 467.731110][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.765595][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.767499][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.771850][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.776465][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.239292][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.329152][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.394832][ T37] bond0 (unregistering): Released all slaves [ 469.581263][ T10] hub 5-1:1.0: Invalid hub with more than one config or interface [ 469.581306][ T10] hub 5-1:1.0: probe with driver hub failed with error -22 [ 469.600355][ T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 469.651551][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.651698][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.741234][ T10] usb 5-1: USB disconnect, device number 17 [ 469.903163][ T5801] Bluetooth: hci3: command tx timeout [ 469.940953][ T6099] udevd[6099]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.190497][ T37] hsr_slave_0: left promiscuous mode [ 470.229067][ T37] hsr_slave_1: left promiscuous mode [ 470.230231][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.289566][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.049163][ T37] team0 (unregistering): Port device team_slave_1 removed [ 471.180386][ T37] team0 (unregistering): Port device team_slave_0 removed [ 471.978387][ T5801] Bluetooth: hci3: command tx timeout [ 472.092286][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.001036][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.001266][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.055112][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.056009][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.881600][ T9386] chnl_net:caif_netlink_parms(): no params data found [ 474.092071][ T5801] Bluetooth: hci3: command tx timeout [ 474.358410][ T5903] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 474.403440][ T9268] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 474.513216][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.513976][ T5903] usb 5-1: not running at top speed; connect to a high speed hub [ 474.515560][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.515582][ T5903] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 474.515603][ T5903] usb 5-1: config 1 has no interface number 1 [ 474.515648][ T5903] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 474.515688][ T5903] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 474.594173][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.594204][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.594225][ T5903] usb 5-1: Product: syz [ 474.594240][ T5903] usb 5-1: Manufacturer: syz [ 474.594255][ T5903] usb 5-1: SerialNumber: syz [ 474.600466][ T9268] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 474.828449][ T9268] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 474.898061][ T9386] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.905660][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.905926][ T9386] bridge_slave_0: entered allmulticast mode [ 474.923976][ T9386] bridge_slave_0: entered promiscuous mode [ 474.941973][ T9268] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 475.001147][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.015487][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.015754][ T9386] bridge_slave_1: entered allmulticast mode [ 475.032060][ T9386] bridge_slave_1: entered promiscuous mode [ 475.334278][ T9386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.337349][ T9094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.395501][ T5903] hub 5-1:1.0: Invalid hub with more than one config or interface [ 475.395545][ T5903] hub 5-1:1.0: probe with driver hub failed with error -22 [ 475.413316][ T9386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.457041][ T5903] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 475.521154][ T5903] usb 5-1: USB disconnect, device number 18 [ 475.580376][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.028663][ T9386] team0: Port device team_slave_0 added [ 476.066403][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.081061][ T9386] team0: Port device team_slave_1 added [ 476.149759][ T5801] Bluetooth: hci3: command tx timeout [ 477.627721][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.627746][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.627772][ T9386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.683279][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.683297][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.683336][ T9386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.447955][ T9386] hsr_slave_0: entered promiscuous mode [ 478.455877][ T9386] hsr_slave_1: entered promiscuous mode [ 478.456850][ T9386] debugfs: 'hsr0' already exists in 'hsr' [ 478.456876][ T9386] Cannot create hsr debugfs directory [ 478.921021][ T9094] veth0_vlan: entered promiscuous mode [ 479.161961][ T9094] veth1_vlan: entered promiscuous mode [ 479.163677][ T9166] veth0_vlan: entered promiscuous mode [ 479.444424][ T37] bridge_slave_1: left allmulticast mode [ 479.444450][ T37] bridge_slave_1: left promiscuous mode [ 479.444666][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.545028][ T37] bridge_slave_0: left allmulticast mode [ 479.545057][ T37] bridge_slave_0: left promiscuous mode [ 479.545327][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.790867][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.811427][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.813700][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.815503][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.816407][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.028457][ T31] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 481.191499][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 481.192103][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 481.193270][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.193294][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 481.193317][ T31] usb 5-1: config 1 has no interface number 1 [ 481.193360][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 481.193393][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 481.196508][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.196537][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.196562][ T31] usb 5-1: Product: syz [ 481.196577][ T31] usb 5-1: Manufacturer: syz [ 481.196592][ T31] usb 5-1: SerialNumber: syz [ 481.908412][ T5808] Bluetooth: hci0: command tx timeout [ 482.552310][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.612572][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.633534][ T37] bond0 (unregistering): Released all slaves [ 482.675986][ T9268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.938970][ T9166] veth1_vlan: entered promiscuous mode [ 483.017822][ T31] hub 5-1:1.0: Invalid hub with more than one config or interface [ 483.017868][ T31] hub 5-1:1.0: probe with driver hub failed with error -22 [ 483.045478][ T31] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 483.122691][ T31] usb 5-1: USB disconnect, device number 19 [ 483.209707][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.260510][ T37] hsr_slave_0: left promiscuous mode [ 483.302662][ T37] hsr_slave_1: left promiscuous mode [ 483.304615][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.339371][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.578759][ T31] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 483.746499][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 483.747316][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 483.753915][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.753940][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 483.753962][ T31] usb 5-1: config 1 has no interface number 1 [ 483.754008][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 483.754037][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 483.756457][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.756483][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.756498][ T31] usb 5-1: Product: syz [ 483.756508][ T31] usb 5-1: Manufacturer: syz [ 483.756518][ T31] usb 5-1: SerialNumber: syz [ 483.978395][ T5808] Bluetooth: hci0: command tx timeout [ 484.528989][ T37] team0 (unregistering): Port device team_slave_1 removed [ 484.784248][ T37] team0 (unregistering): Port device team_slave_0 removed [ 486.068614][ T5808] Bluetooth: hci0: command tx timeout [ 487.330421][ T31] hub 5-1:1.0: Invalid hub with more than one config or interface [ 487.330465][ T31] hub 5-1:1.0: probe with driver hub failed with error -22 [ 487.361307][ T31] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 487.417894][ T9268] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.471547][ T31] usb 5-1: USB disconnect, device number 20 [ 487.556586][ T6099] udevd[6099]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.640629][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.640857][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.142917][ T5808] Bluetooth: hci0: command tx timeout [ 488.783360][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.783559][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.818102][ T9166] veth0_macvtap: entered promiscuous mode [ 488.851539][ T9166] veth1_macvtap: entered promiscuous mode [ 489.087202][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.186493][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.245538][ T9487] chnl_net:caif_netlink_parms(): no params data found [ 489.397032][ T38] kauditd_printk_skb: 109 callbacks suppressed [ 489.397052][ T38] audit: type=1326 audit(488.978:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 489.397105][ T38] audit: type=1326 audit(488.978:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 489.397153][ T38] audit: type=1326 audit(488.978:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 489.397198][ T38] audit: type=1326 audit(488.978:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 489.397256][ T38] audit: type=1326 audit(488.978:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 489.397307][ T38] audit: type=1326 audit(488.978:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9512 comm="syz.4.1055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 489.598474][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.723502][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.746177][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.763783][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.777182][ T9386] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 489.860476][ T9386] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 490.031734][ T9386] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 490.392172][ T9386] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.435746][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.435940][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.436106][ T9487] bridge_slave_0: entered allmulticast mode [ 490.438012][ T9487] bridge_slave_0: entered promiscuous mode [ 490.453308][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.453485][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.453747][ T9487] bridge_slave_1: entered allmulticast mode [ 490.456980][ T9487] bridge_slave_1: entered promiscuous mode [ 490.643213][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 490.800644][ T9] usb 5-1: config index 0 descriptor too short (expected 61256, got 72) [ 490.800675][ T9] usb 5-1: config 1 has an invalid interface number: 0 but max is -1 [ 490.800697][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.800718][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 490.800785][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 490.803184][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.803214][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 490.803235][ T9] usb 5-1: SerialNumber: syz [ 490.835070][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.897991][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 490.898018][ T9] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 490.898044][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 491.100566][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.101130][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.220264][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.604639][ T9487] team0: Port device team_slave_0 added [ 491.787586][ T9487] team0: Port device team_slave_1 added [ 491.887030][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.887053][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.098340][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 360 seconds [ 492.205034][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.207430][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.207446][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.207498][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.295475][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.295490][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.295511][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.370952][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.370975][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.662350][ T9487] hsr_slave_0: entered promiscuous mode [ 492.663715][ T9487] hsr_slave_1: entered promiscuous mode [ 493.952035][ T9] usb 5-1: USB disconnect, device number 21 [ 496.291577][ T5644] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 496.499719][ T37] bridge_slave_1: left allmulticast mode [ 496.499749][ T37] bridge_slave_1: left promiscuous mode [ 496.499993][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.531201][ T5644] usb 9-1: unable to get BOS descriptor or descriptor too short [ 496.532375][ T5644] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.532430][ T5644] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 496.532456][ T5644] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 157 [ 496.534803][ T5644] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 496.534822][ T5644] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.534836][ T5644] usb 9-1: Product: syz [ 496.534846][ T5644] usb 9-1: Manufacturer: syz [ 496.534856][ T5644] usb 9-1: SerialNumber: syz [ 496.550619][ T5644] usb 9-1: config 0 descriptor?? [ 496.553314][ T9559] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 496.553620][ T9559] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 496.564179][ C1] usb 9-1: NFC: Urb failure (status -71) [ 496.565703][ C1] usb 9-1: NFC: Urb failure (status -71) [ 496.569790][ T5644] usb 9-1: NFC: Unable to get FW version [ 496.608373][ T5644] pn533_usb 9-1:0.0: probe with driver pn533_usb failed with error -71 [ 496.637595][ T37] bridge_slave_0: left allmulticast mode [ 496.637627][ T37] bridge_slave_0: left promiscuous mode [ 496.637894][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.492547][ T9569] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 498.544692][ T9570] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 499.389427][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.449830][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.471386][ T37] bond0 (unregistering): Released all slaves [ 499.645797][ T10] usb 9-1: USB disconnect, device number 2 [ 501.018443][ T37] hsr_slave_0: left promiscuous mode [ 501.058333][ T37] hsr_slave_1: left promiscuous mode [ 501.059175][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.102417][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.170214][ T37] veth1_vlan: left promiscuous mode [ 501.170378][ T37] veth0_vlan: left promiscuous mode [ 505.052710][ T38] audit: type=1326 audit(504.638:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.052772][ T38] audit: type=1326 audit(504.638:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.052818][ T38] audit: type=1326 audit(504.638:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.052862][ T38] audit: type=1326 audit(504.638:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.052907][ T38] audit: type=1326 audit(504.638:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.052951][ T38] audit: type=1326 audit(504.638:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.052995][ T38] audit: type=1326 audit(504.638:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.053926][ T38] audit: type=1326 audit(504.638:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.054146][ T38] audit: type=1326 audit(504.638:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 505.054191][ T38] audit: type=1326 audit(504.638:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7cbc8efc9 code=0x7ffc0000 [ 507.251672][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.251859][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.530369][ T37] team0 (unregistering): Port device team_slave_1 removed [ 513.710400][ T37] team0 (unregistering): Port device team_slave_0 removed [ 514.980430][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.985537][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.986822][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.993249][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.995665][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.089833][ T5808] Bluetooth: hci1: command tx timeout [ 520.133964][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1097'. [ 520.138722][ T5808] Bluetooth: hci1: command tx timeout [ 521.722578][ T9683] ipvlan1: entered promiscuous mode [ 521.953846][ T9386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.278505][ T5808] Bluetooth: hci1: command tx timeout [ 522.390342][ T6561] block nbd0: Possible stuck request ffff888024c35080: control (read@0,4096B). Runtime 390 seconds [ 523.971156][ T9386] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.127463][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.127692][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.298813][ T5808] Bluetooth: hci1: command tx timeout [ 524.592941][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.593107][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.880060][ T9723] IPv4: Oversized IP packet from 172.20.20.24 [ 526.880502][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 526.880687][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 527.251834][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 527.967218][ T9487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 528.115114][ T9487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 528.321433][ T9747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.339714][ T9747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.341422][ T9747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.342716][ T9747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.343671][ T9747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.855245][ T9487] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.379203][ T9487] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.458518][ T5808] Bluetooth: hci2: command tx timeout [ 530.553759][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.553969][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.554174][ T9659] bridge_slave_0: entered allmulticast mode [ 530.557241][ T9659] bridge_slave_0: entered promiscuous mode [ 530.571847][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.571994][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.572209][ T9659] bridge_slave_1: entered allmulticast mode [ 530.575642][ T9659] bridge_slave_1: entered promiscuous mode [ 530.784863][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.807532][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.046359][ T9659] team0: Port device team_slave_0 added [ 531.075838][ T9659] team0: Port device team_slave_1 added [ 531.359719][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.359738][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.359768][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.420632][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.420650][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.420679][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.781251][ T1106] bridge_slave_1: left allmulticast mode [ 531.781281][ T1106] bridge_slave_1: left promiscuous mode [ 531.781518][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.538301][ T9747] Bluetooth: hci2: command tx timeout [ 532.704360][ T1106] bridge_slave_0: left allmulticast mode [ 532.704392][ T1106] bridge_slave_0: left promiscuous mode [ 532.704860][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.619820][ T9747] Bluetooth: hci2: command tx timeout [ 536.698572][ T9747] Bluetooth: hci2: command tx timeout [ 540.966882][ T39] INFO: task udevd:6060 blocked for more than 143 seconds. [ 540.966908][ T39] Not tainted syzkaller #0 [ 540.966920][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 540.966930][ T39] task:udevd state:D stack:21832 pid:6060 tgid:6060 ppid:5170 task_flags:0x400140 flags:0x00080003 [ 540.967007][ T39] Call Trace: [ 540.967021][ T39] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 540.967036][ T39] __schedule+0x16f3/0x4c20 [ 540.967099][ T39] ? __pfx___schedule+0x10/0x10 [ 540.967142][ T39] ? schedule+0x91/0x360 [ 540.967173][ T39] schedule+0x165/0x360 [ 540.967203][ T39] io_schedule+0x81/0xe0 [ 540.967232][ T39] folio_wait_bit_common+0x6b5/0xb90 [ 540.967265][ T39] ? filemap_get_entry+0xad/0x2f0 [ 540.967313][ T39] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 540.967345][ T39] ? __pfx_wake_page_function+0x10/0x10 [ 540.967374][ T39] ? filemap_add_folio+0x3db/0x620 [ 540.967401][ T39] ? __filemap_get_folio+0x7f6/0xa40 [ 540.967440][ T39] ? __filemap_get_folio+0x6ed/0xa40 [ 540.967468][ T39] ? __pfx_blkdev_read_folio+0x10/0x10 [ 540.967497][ T39] do_read_cache_folio+0x1a4/0x560 [ 540.967532][ T39] ? __pfx_blkdev_read_folio+0x10/0x10 [ 540.967559][ T39] read_part_sector+0xb8/0x2b0 [ 540.967595][ T39] adfspart_check_POWERTEC+0x8c/0xf30 [ 540.967630][ T39] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 540.967665][ T39] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 540.967697][ T39] ? set_page_refcounted+0xa0/0x1e0 [ 540.967742][ T39] bdev_disk_changed+0x75f/0x14b0 [ 540.967800][ T39] ? __pfx_bdev_disk_changed+0x10/0x10 [ 540.967844][ T39] blkdev_get_whole+0x2e5/0x480 [ 540.967885][ T39] bdev_open+0x31e/0xcc0 [ 540.967942][ T39] blkdev_open+0x46c/0x610 [ 540.967967][ T39] ? __pfx_blkdev_open+0x10/0x10 [ 540.967988][ T39] do_dentry_open+0x9b1/0x1350 [ 540.968037][ T39] vfs_open+0x3b/0x350 [ 540.968054][ T39] ? path_openat+0x2ed9/0x3840 [ 540.968082][ T39] path_openat+0x2ef1/0x3840 [ 540.968183][ T39] ? try_to_take_rt_mutex+0x840/0xb00 [ 540.968250][ T39] ? __pfx_path_openat+0x10/0x10 [ 540.968275][ T39] ? do_raw_spin_lock+0x121/0x290 [ 540.968311][ T39] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 540.968339][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.968367][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 540.968403][ T39] do_filp_open+0x1fa/0x410 [ 540.968434][ T39] ? __pfx_do_filp_open+0x10/0x10 [ 540.968454][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 540.968508][ T39] ? alloc_fd+0x64f/0x6c0 [ 540.968549][ T39] do_sys_openat2+0x121/0x1c0 [ 540.968573][ T39] ? __pfx_do_sys_openat2+0x10/0x10 [ 540.968617][ T39] __x64_sys_openat+0x138/0x170 [ 540.968646][ T39] do_syscall_64+0xfa/0xfa0 [ 540.968672][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.968699][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.968722][ T39] ? clear_bhb_loop+0x60/0xb0 [ 540.968748][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.968780][ T39] RIP: 0033:0x7f47ac651407 [ 540.968799][ T39] RSP: 002b:00007ffdea9c4f50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 540.968820][ T39] RAX: ffffffffffffffda RBX: 00007f47ac563880 RCX: 00007f47ac651407 [ 540.968836][ T39] RDX: 00000000000a0800 RSI: 0000562646b36840 RDI: ffffffffffffff9c [ 540.968852][ T39] RBP: 0000562646b2a910 R08: 0000000000000000 R09: 0000000000000000 [ 540.968865][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 0000562646ba84e0 [ 540.968879][ T39] R13: 0000562646b38190 R14: 0000000000000000 R15: 0000562646ba84e0 [ 540.968913][ T39] [ 540.968969][ T39] [ 540.968969][ T39] Showing all locks held in the system: [ 540.968984][ T39] 2 locks held by ktimers/0/16: [ 540.968999][ T39] 1 lock held by khungtaskd/39: [ 540.969010][ T39] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 540.969068][ T39] 3 locks held by kworker/u8:3/58: [ 540.969080][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 540.969141][ T39] #1: ffffc9000124fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 540.969196][ T39] #2: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 540.969259][ T39] 4 locks held by kworker/u8:5/1106: [ 540.969272][ T39] 3 locks held by kworker/u8:6/1166: [ 540.969284][ T39] #0: ffff88814d612138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 540.969339][ T39] #1: ffffc90004c97ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 540.969414][ T39] #2: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 540.969489][ T39] 2 locks held by kworker/u8:10/3555: [ 540.969502][ T39] 6 locks held by kworker/u8:12/3622: [ 540.969516][ T39] 2 locks held by dhcpcd/5465: [ 540.969528][ T39] #0: ffff888038932920 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 540.969594][ T39] #1: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 540.969657][ T39] 2 locks held by getty/5558: [ 540.969668][ T39] #0: ffff88823bf708a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 540.969722][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 540.969795][ T39] 3 locks held by kworker/1:6/5903: [ 540.969808][ T39] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 540.969865][ T39] #1: ffffc90005267ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 540.969922][ T39] #2: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 540.969985][ T39] 1 lock held by udevd/6060: [ 540.969996][ T39] #0: ffff88802478e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 540.970060][ T39] 1 lock held by syz-executor/9487: [ 540.970072][ T39] #0: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 540.970135][ T39] 2 locks held by syz-executor/9659: [ 540.970148][ T39] #0: ffffffff8dfecf40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 540.970204][ T39] #1: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 540.970267][ T39] 1 lock held by syz-executor/9745: [ 540.970280][ T39] #0: ffffffff8e862e38 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 540.970335][ T39] 1 lock held by syz.4.1131/9812: [ 540.970348][ T39] 1 lock held by syz-executor/9824: [ 540.970360][ T39] [ 540.970366][ T39] ============================================= [ 540.970366][ T39] [ 540.970380][ T39] NMI backtrace for cpu 0 [ 540.970400][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.970424][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.970436][ T39] Call Trace: [ 540.970444][ T39] [ 540.970453][ T39] dump_stack_lvl+0x189/0x250 [ 540.970495][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.970530][ T39] ? __pfx__printk+0x10/0x10 [ 540.970570][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 540.970595][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 540.970620][ T39] ? __pfx__printk+0x10/0x10 [ 540.970651][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 540.970678][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 540.970703][ T39] watchdog+0xf60/0xfa0 [ 540.970741][ T39] ? watchdog+0x1e2/0xfa0 [ 540.970786][ T39] kthread+0x711/0x8a0 [ 540.970821][ T39] ? __pfx_watchdog+0x10/0x10 [ 540.970850][ T39] ? __pfx_kthread+0x10/0x10 [ 540.970880][ T39] ? rt_spin_unlock+0x150/0x200 [ 540.970907][ T39] ? rt_spin_unlock+0x161/0x200 [ 540.970927][ T39] ? __pfx_kthread+0x10/0x10 [ 540.970961][ T39] ret_from_fork+0x4bc/0x870 [ 540.970991][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 540.971026][ T39] ? __switch_to_asm+0x39/0x70 [ 540.971047][ T39] ? __switch_to_asm+0x33/0x70 [ 540.971067][ T39] ? __pfx_kthread+0x10/0x10 [ 540.971101][ T39] ret_from_fork_asm+0x1a/0x30 [ 540.971142][ T39] [ 540.971150][ T39] Sending NMI from CPU 0 to CPUs 1: [ 540.971176][ C1] NMI backtrace for cpu 1 [ 540.971191][ C1] CPU: 1 UID: 0 PID: 3622 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 540.971212][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 540.971224][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 540.971251][ C1] RIP: 0010:unwind_get_return_address+0x3b/0x90 [ 540.971279][ C1] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 db f9 ac 00 48 8b 3b e8 83 d3 18 00 85 c0 74 14 [ 540.971297][ C1] RSP: 0018:ffffc9000d9d7088 EFLAGS: 00000246 [ 540.971311][ C1] RAX: 0000000000000000 RBX: ffffc9000d9d70f0 RCX: ea833475499bd900 [ 540.971326][ C1] RDX: 0000000000000005 RSI: ffffffff8cf62de9 RDI: ffffc9000d9d70a8 [ 540.971339][ C1] RBP: ffffc9000d9d7130 R08: ffffc9000d9d7870 R09: 0000000000000000 [ 540.971352][ C1] R10: ffffc9000d9d70f8 R11: fffff52001b3ae21 R12: ffff888030d2da00 [ 540.971366][ C1] R13: 1ffff92001b3ae40 R14: dffffc0000000000 R15: 1ffff92001b3ae1e [ 540.971380][ C1] FS: 0000000000000000(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 540.971395][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.971408][ C1] CR2: 000020000031c030 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 540.971424][ C1] Call Trace: [ 540.971431][ C1] [ 540.971438][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 540.971460][ C1] arch_stack_walk+0xfc/0x150 [ 540.971488][ C1] ? __kmalloc_node_track_caller_noprof+0x2a8/0x7e0 [ 540.971518][ C1] stack_trace_save+0x9c/0xe0 [ 540.971543][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 540.971569][ C1] save_stack+0xf7/0x1f0 [ 540.971593][ C1] ? __pfx_save_stack+0x10/0x10 [ 540.971614][ C1] ? post_alloc_hook+0x240/0x2a0 [ 540.971638][ C1] ? get_page_from_freelist+0x28c0/0x2960 [ 540.971662][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 540.971690][ C1] ? alloc_pages_mpol+0xd1/0x380 [ 540.971715][ C1] ? allocate_slab+0x96/0x3a0 [ 540.971733][ C1] ? ___slab_alloc+0xb12/0x13f0 [ 540.971748][ C1] ? __slab_alloc+0xc6/0x1f0 [ 540.971768][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.971796][ C1] __set_page_owner+0x8d/0x4b0 [ 540.971820][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 540.971844][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 540.971867][ C1] post_alloc_hook+0x240/0x2a0 [ 540.971894][ C1] get_page_from_freelist+0x28c0/0x2960 [ 540.971948][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 540.971979][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 540.972013][ C1] ? policy_nodemask+0x27c/0x720 [ 540.972040][ C1] alloc_pages_mpol+0xd1/0x380 [ 540.972068][ C1] allocate_slab+0x96/0x3a0 [ 540.972089][ C1] ___slab_alloc+0xb12/0x13f0 [ 540.972108][ C1] ? __alloc_skb+0x142/0x2d0 [ 540.972129][ C1] __slab_alloc+0xc6/0x1f0 [ 540.972144][ C1] ? __alloc_skb+0x142/0x2d0 [ 540.972162][ C1] __kmalloc_node_track_caller_noprof+0x2a8/0x7e0 [ 540.972188][ C1] ? __alloc_skb+0x142/0x2d0 [ 540.972203][ C1] ? rcu_is_watching+0x15/0xb0 [ 540.972221][ C1] ? __alloc_skb+0x142/0x2d0 [ 540.972237][ C1] kmalloc_reserve+0x136/0x290 [ 540.972257][ C1] __alloc_skb+0x142/0x2d0 [ 540.972276][ C1] nsim_dev_trap_report_work+0x29f/0xbc0 [ 540.972309][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 540.972332][ C1] process_scheduled_works+0xae1/0x17b0 [ 540.972370][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 540.972402][ C1] worker_thread+0x8a0/0xda0 [ 540.972437][ C1] kthread+0x711/0x8a0 [ 540.972465][ C1] ? __pfx_worker_thread+0x10/0x10 [ 540.972488][ C1] ? __pfx_kthread+0x10/0x10 [ 540.972513][ C1] ? rt_spin_unlock+0x150/0x200 [ 540.972540][ C1] ? rt_spin_unlock+0x161/0x200 [ 540.972557][ C1] ? __pfx_kthread+0x10/0x10 [ 540.972584][ C1] ret_from_fork+0x4bc/0x870 [ 540.972607][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 540.972632][ C1] ? __switch_to_asm+0x39/0x70 [ 540.972650][ C1] ? __switch_to_asm+0x33/0x70 [ 540.972667][ C1] ? __pfx_kthread+0x10/0x10 [ 540.972695][ C1] ret_from_fork_asm+0x1a/0x30 [ 540.972723][ C1] [ 543.710509][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.769092][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.791230][ T1106] bond0 (unregistering): Released all slaves [ 544.968927][ T1106] hsr_slave_0: left promiscuous mode [ 545.008532][ T1106] hsr_slave_1: left promiscuous mode [ 545.009285][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.061858][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.219020][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 546.419805][ T1106] team0 (unregistering): Port device team_slave_0 removed