last executing test programs: 18.536023557s ago: executing program 2 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0xc010) 17.271195557s ago: executing program 2 (id=190): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000068a000000000000041f1f001801000020696c2500000000002020207ba1d8ff000000007ba1000000000000070100000400ffffb702000008"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa, &(0x7f00000009c0)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 16.945041595s ago: executing program 2 (id=193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x3487534ea0b0dbdf, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000240)) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0x604, 0x0) r4 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x11e, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffadff8cbcff0000000000000800450000270300000000019078ac1e0001ac1414aa040090780300000045000000000000000000000000000000ffffffff"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf, 0x4c831, r4, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 9.257030853s ago: executing program 1 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0x9807, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, 0x0) r8 = syz_ublk_add_dev(r5, r6, r7, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) syz_open_dev$ublk_chdev(0x0, r8, 0x2) 9.179622864s ago: executing program 2 (id=216): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000001080)="2b1c52ac82e71ea05b0c5e", 0x0, 0xb20c, 0x0, 0x0, 0x9c, 0x0, &(0x7f00000010c0)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac", 0x4}, 0x50) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00'}, 0x48) syz_open_dev$I2C(&(0x7f0000001bc0), 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000001c00)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001c80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000003f80)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000003fc0)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000004100)='n', 0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000004140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) syz_usb_connect$midi(0x0, 0x59, 0x0, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0xc0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000004480)=0x4, 0x4) connect$inet(r3, &(0x7f00000044c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004500), 0x0, 0xf00) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000001d00)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000001dc0)={0x2020}, 0x2020) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) 9.043095218s ago: executing program 4 (id=217): r0 = socket$inet6(0xa, 0x80802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200400d5, 0x0, 0x0) 8.891966434s ago: executing program 4 (id=218): unshare(0x2040400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x5e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000019300)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x22, {0x2, 0x4e23, @private=0xa010102}, 'vcan0\x00'}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019240)=0x7) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x5) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 8.891678249s ago: executing program 3 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x16, {0x2, 0x4e22, @private=0xa010102}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$key(0xf, 0x3, 0x2) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 7.020283575s ago: executing program 3 (id=221): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x1d, 0x0, &(0x7f0000002b00)) 6.366997564s ago: executing program 3 (id=223): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc1) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 6.290458685s ago: executing program 1 (id=225): move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000400)) 5.62562982s ago: executing program 4 (id=226): io_setup(0x2007, &(0x7f00000008c0)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000900)=[{}, {}], 0x0, 0x0) io_destroy(r0) 5.623866635s ago: executing program 3 (id=227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000400)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="04", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) setsockopt$inet_sctp_SCTP_REUSE_PORT(r4, 0x84, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) socket$key(0xf, 0x3, 0x2) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x37db, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000e300"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f0000002d40)=""/195, 0xc3, 0x591f) 5.188355064s ago: executing program 1 (id=229): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x802154}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x39c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1002, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x500, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x72}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 5.178736975s ago: executing program 2 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000800000003000000000000004959002c006504"], 0xff04) 3.987365197s ago: executing program 1 (id=233): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000200)="3f03fe7f0077140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000280)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.887223175s ago: executing program 2 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0x9807, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0, 0x0) r8 = syz_ublk_add_dev(r5, r6, r7, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) syz_open_dev$ublk_chdev(0x0, r8, 0x2) 3.759147671s ago: executing program 0 (id=236): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x3, 0x4}, {0x2, 0x9}}}}, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x4054) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = add_key(&(0x7f0000000440)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000002700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002800)='./file0\x00') prlimit64(r0, 0x8, &(0x7f0000000000)={0x0, 0x100000000}, &(0x7f0000000100)) add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, 0x0, 0x0, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) 3.519906094s ago: executing program 1 (id=237): unshare(0x2040400) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x5e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000019300)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x22, {0x2, 0x4e23, @private=0xa010102}, 'vcan0\x00'}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019240)=0x7) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x5) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.801340108s ago: executing program 0 (id=238): r0 = syz_open_dev$dvb_dvr(&(0x7f00000004c0), 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x6, r0, 0x0, 0x0, 0xfffffffffffff6a1, 0x0, 0x4}]) 1.65136242s ago: executing program 3 (id=239): move_pages(0x0, 0x1efe, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000400)) 1.452091046s ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900e70000000000fbdbdf251c140000fe"], 0x24}}, 0x0) r1 = eventfd2(0x9, 0x80000) io_submit(0x0, 0x3, &(0x7f0000001540)=[0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x8, 0x80, r0, 0x0, 0x0, 0x4d01, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000001400), 0x0, 0x6, 0x0, 0x1, r1}]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x6, "0000000006000000007000"}) r3 = syz_open_pts(r2, 0x40040) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) 1.413677136s ago: executing program 0 (id=241): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x13}, 0x1c, 0x0}}], 0x1, 0x1c000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200400d5, 0x0, 0x0) 1.276057377s ago: executing program 0 (id=242): set_mempolicy(0x8006, &(0x7f0000000080)=0xfff, 0x3) r0 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_out(r0, 0x3d87eb9fb34264a4, 0x0) 1.275751209s ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000004c0)="34000000070000000000000003", 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "119b435d82ec9dc3847470fe14fb9ae89519d4987f9eb3305a758f7be41d94214b65280409dbe8e6ae54e502ca0de76c4de3613b4b5b12e228283cb20f0750e25c"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x144}}, 0x20050800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000100)={@dev, @local, @broadcast}, &(0x7f0000000140)=0xc) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 996.088642ms ago: executing program 0 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000040000701fcffffff00000100017c0000040042800c00018006000600800a0000240002800c00"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 764.350807ms ago: executing program 0 (id=245): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mknod$loop(&(0x7f0000006800)='./file0/../file0/file0\x00', 0x200, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000069c0)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000006840), 0x1, 0x0) readv(r0, &(0x7f0000006880)=[{0x0}, {&(0x7f00000068c0)=""/183, 0xb7}], 0x2) 371.862556ms ago: executing program 1 (id=246): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys_sec\x00', &(0x7f0000000400)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(r0, &(0x7f0000000800)=""/9, 0xfffffd87) 226.577556ms ago: executing program 4 (id=247): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x3}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=248): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x20000000, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x8400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x0, 0x4, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. syzkaller login: [ 79.084638][ T5595] cgroup: Unknown subsys name 'net' [ 79.336621][ T5595] cgroup: Unknown subsys name 'cpuset' [ 79.380898][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.050302][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.714420][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.749784][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.756084][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.774443][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.777143][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.793232][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.795471][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.795942][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.798400][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.799832][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.801349][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.801728][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.805626][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.879512][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.894542][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.058215][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.069796][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.083003][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.084820][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.088543][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.089795][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.123815][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.129821][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.130868][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.157400][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.302407][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.318442][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.321924][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.343975][ T5607] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.345162][ T5606] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.345440][ T5609] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.361407][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.992914][ T5620] Bluetooth: hci4: command tx timeout [ 85.993082][ T5620] Bluetooth: hci0: command tx timeout [ 86.023094][ T5610] infiniband rxe0: set active [ 86.023117][ T5610] infiniband rxe0: added rxe_eth0 [ 86.057091][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.072585][ T5614] Bluetooth: hci1: command tx timeout [ 86.098176][ T5610] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 86.098217][ T5610] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 86.098253][ T5610] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 86.198172][ T5610] RDS/IB: rxe0: added [ 86.198857][ T5610] smc: adding ib device rxe0 with port count 1 [ 86.199054][ T5610] smc: ib device rxe0 port 1 has no pnetid [ 86.230412][ T5620] Bluetooth: hci2: command tx timeout [ 86.230718][ T5614] Bluetooth: hci3: command tx timeout [ 86.313216][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.382601][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.629487][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.690809][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.926006][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.255356][ T30] cfg80211: failed to load regulatory.db [ 87.681581][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.980802][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.983401][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.984140][ T5608] bridge_slave_0: entered allmulticast mode [ 87.987921][ T5608] bridge_slave_0: entered promiscuous mode [ 88.070883][ T5620] Bluetooth: hci4: command tx timeout [ 88.071055][ T5614] Bluetooth: hci0: command tx timeout [ 88.091385][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.092901][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.092991][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.093317][ T5608] bridge_slave_1: entered allmulticast mode [ 88.102432][ T5608] bridge_slave_1: entered promiscuous mode [ 88.124868][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.124986][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.125171][ T5609] bridge_slave_0: entered allmulticast mode [ 88.135804][ T5609] bridge_slave_0: entered promiscuous mode [ 88.154256][ T5614] Bluetooth: hci1: command tx timeout [ 88.180427][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.180538][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.180760][ T5607] bridge_slave_0: entered allmulticast mode [ 88.184629][ T5607] bridge_slave_0: entered promiscuous mode [ 88.261544][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.261679][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.261847][ T5609] bridge_slave_1: entered allmulticast mode [ 88.264308][ T5609] bridge_slave_1: entered promiscuous mode [ 88.265736][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.265857][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.266004][ T5607] bridge_slave_1: entered allmulticast mode [ 88.274685][ T5607] bridge_slave_1: entered promiscuous mode [ 88.310378][ T5614] Bluetooth: hci3: command tx timeout [ 88.310418][ T5614] Bluetooth: hci2: command tx timeout [ 88.455145][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.503521][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.503875][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.504578][ T5606] bridge_slave_0: entered allmulticast mode [ 88.531857][ T5606] bridge_slave_0: entered promiscuous mode [ 88.563522][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.568959][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.576407][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.581451][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.581590][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.581831][ T5606] bridge_slave_1: entered allmulticast mode [ 88.586627][ T5606] bridge_slave_1: entered promiscuous mode [ 88.652142][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.673686][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.779178][ T5608] team0: Port device team_slave_0 added [ 88.804589][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.837374][ T5608] team0: Port device team_slave_1 added [ 88.849731][ T5607] team0: Port device team_slave_0 added [ 88.858137][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.859904][ T5609] team0: Port device team_slave_0 added [ 88.895470][ T5607] team0: Port device team_slave_1 added [ 88.895662][ T5610] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.921908][ T5609] team0: Port device team_slave_1 added [ 89.054509][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.054530][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.054573][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.104083][ T5606] team0: Port device team_slave_0 added [ 89.612872][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.612899][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.612923][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.615953][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.615971][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.615988][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.618438][ T5606] team0: Port device team_slave_1 added [ 89.641595][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.641614][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.641639][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.662050][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.662067][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.662092][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.713907][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.713925][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.713950][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.789672][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.789698][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.789724][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.856554][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.856573][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.856599][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.979539][ T5608] hsr_slave_0: entered promiscuous mode [ 89.988252][ T5608] hsr_slave_1: entered promiscuous mode [ 90.026666][ T5607] hsr_slave_0: entered promiscuous mode [ 90.027511][ T5607] hsr_slave_1: entered promiscuous mode [ 90.028778][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 90.028894][ T5607] Cannot create hsr debugfs directory [ 90.060513][ T5609] hsr_slave_0: entered promiscuous mode [ 90.061297][ T5609] hsr_slave_1: entered promiscuous mode [ 90.061864][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 90.061887][ T5609] Cannot create hsr debugfs directory [ 90.160348][ T5620] Bluetooth: hci0: command tx timeout [ 90.160385][ T5620] Bluetooth: hci4: command tx timeout [ 90.230635][ T5614] Bluetooth: hci1: command tx timeout [ 90.343765][ T5606] hsr_slave_0: entered promiscuous mode [ 90.344564][ T5606] hsr_slave_1: entered promiscuous mode [ 90.345149][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 90.345172][ T5606] Cannot create hsr debugfs directory [ 90.400304][ T5614] Bluetooth: hci2: command tx timeout [ 90.400321][ T5620] Bluetooth: hci3: command tx timeout [ 91.124135][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.124278][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.124427][ T5610] bridge_slave_0: entered allmulticast mode [ 91.125743][ T5610] bridge_slave_0: entered promiscuous mode [ 91.128734][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.128885][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.129364][ T5610] bridge_slave_1: entered allmulticast mode [ 91.180721][ T5610] bridge_slave_1: entered promiscuous mode [ 91.182977][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.241545][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.269961][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.297681][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.323149][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.367815][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.371196][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.408015][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.437216][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.442164][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.526151][ T5610] team0: Port device team_slave_0 added [ 91.534676][ T5610] team0: Port device team_slave_1 added [ 91.594851][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.594869][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.594892][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.617825][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.617844][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.617869][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.704807][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.733266][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.737835][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.772658][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.776816][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.803246][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.856705][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.893707][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.923411][ T5610] hsr_slave_0: entered promiscuous mode [ 91.924201][ T5610] hsr_slave_1: entered promiscuous mode [ 91.924709][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 91.924731][ T5610] Cannot create hsr debugfs directory [ 92.127931][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.155554][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.189203][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.216194][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.231280][ T5614] Bluetooth: hci4: command tx timeout [ 92.231313][ T5614] Bluetooth: hci0: command tx timeout [ 92.236954][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.292744][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.310790][ T5614] Bluetooth: hci1: command tx timeout [ 92.337820][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.363061][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.470414][ T5614] Bluetooth: hci3: command tx timeout [ 92.470447][ T5614] Bluetooth: hci2: command tx timeout [ 92.736682][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.763500][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.778109][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.813489][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.818277][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.838445][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.874365][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.915339][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.043240][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.065842][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.104467][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.125957][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.153963][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.173396][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.194042][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.199530][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.234268][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.313480][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.353096][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.379320][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.379593][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.425173][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.425306][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.508224][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.558688][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.574479][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.574596][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.625085][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.625171][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.689170][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.736063][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.736196][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.762028][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.804046][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.804174][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.954239][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.982282][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.039404][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.039568][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.109662][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.109793][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.212994][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.353593][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.353824][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.426685][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.426776][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.136478][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.509731][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.677617][ T5608] veth0_vlan: entered promiscuous mode [ 95.822872][ T5608] veth1_vlan: entered promiscuous mode [ 96.221011][ T5608] veth0_macvtap: entered promiscuous mode [ 96.266931][ T5608] veth1_macvtap: entered promiscuous mode [ 96.287963][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.301242][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.441739][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.466415][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.508250][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.532661][ T5606] veth0_vlan: entered promiscuous mode [ 96.606016][ T5606] veth1_vlan: entered promiscuous mode [ 96.779326][ T5609] veth0_vlan: entered promiscuous mode [ 96.856421][ T5607] veth0_vlan: entered promiscuous mode [ 97.156221][ T5610] veth0_vlan: entered promiscuous mode [ 97.158898][ T5607] veth1_vlan: entered promiscuous mode [ 97.173245][ T5609] veth1_vlan: entered promiscuous mode [ 97.273278][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.273302][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.301586][ T5610] veth1_vlan: entered promiscuous mode [ 97.333766][ T5606] veth0_macvtap: entered promiscuous mode [ 97.456634][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.456658][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.458007][ T5606] veth1_macvtap: entered promiscuous mode [ 97.603369][ T5607] veth0_macvtap: entered promiscuous mode [ 97.610700][ T5609] veth0_macvtap: entered promiscuous mode [ 97.627365][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.644467][ T5607] veth1_macvtap: entered promiscuous mode [ 97.665925][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.666436][ T5609] veth1_macvtap: entered promiscuous mode [ 97.709768][ T5610] veth0_macvtap: entered promiscuous mode [ 97.743523][ T5610] veth1_macvtap: entered promiscuous mode [ 97.793586][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.830701][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.927725][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.005752][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.093670][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.122961][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.303413][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.381849][ T203] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.644551][ T5825] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.935496][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.935518][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.648726][ T1406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.175724][ T1406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.181707][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.181726][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.281887][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 100.332331][ T87] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.380375][ T3308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.380398][ T3308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.592337][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.592360][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.722079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.722101][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.913428][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.914608][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.084312][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.084334][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.325363][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.325379][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.479868][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.479887][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.672530][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.673194][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.896880][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.085238][ T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.086590][ T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.086632][ T87] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.270506][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.292856][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.317162][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.317374][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.318350][ T1406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.365869][ T1406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.369871][ T3399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.503775][ T3399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.582146][ T5863] process 'syz.3.10' launched './file0' with NULL argv: empty string added [ 102.591330][ T1406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.027600][ T5891] Zero length message leads to an empty skb [ 105.072083][ T36] audit: type=1326 audit(1793345218.852:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.078364][ T36] audit: type=1326 audit(1793345218.862:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.153865][ T36] audit: type=1326 audit(1793345218.942:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.153915][ T36] audit: type=1326 audit(1793345218.942:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.153968][ T36] audit: type=1326 audit(1793345218.942:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.163129][ T36] audit: type=1326 audit(1793345218.942:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.163181][ T36] audit: type=1326 audit(1793345218.942:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.175411][ T36] audit: type=1326 audit(1793345218.942:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5892 comm="syz.3.19" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50f29f559 code=0x7ffc0000 [ 105.341644][ T35] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.542895][ T35] usb 3-1: Using ep0 maxpacket: 32 [ 106.549202][ T35] usb 3-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 107.729753][ T35] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 107.729798][ T35] usb 3-1: can't read configurations, error -71 [ 109.457487][ T5930] tipc: Enabling of bearer rejected, failed to enable media [ 110.679025][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 110.679074][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 110.679338][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 110.679355][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 111.036092][ T5760] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.170237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.190276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.200235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.210245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.220409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.230229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.240233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.250254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.260250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.270389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.802345][ T5760] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 112.804203][ T5760] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 112.804237][ T5760] usb 5-1: config 0 has no interface number 0 [ 112.804286][ T5760] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.926105][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.926137][ T5760] usb 5-1: Product: syz [ 112.926152][ T5760] usb 5-1: Manufacturer: syz [ 112.926168][ T5760] usb 5-1: SerialNumber: syz [ 113.447692][ T5760] usb 5-1: config 0 descriptor?? [ 114.022323][ T35] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.225529][ T35] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 114.242964][ T5760] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 114.262801][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.380691][ T35] usb 1-1: config 0 descriptor?? [ 114.432753][ T5760] usb 5-1: USB disconnect, device number 2 [ 114.616632][ T35] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 115.372909][ T5760] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 115.436821][ T5981] syzkaller0: entered promiscuous mode [ 115.436849][ T5981] syzkaller0: entered allmulticast mode [ 115.557441][ T35] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 115.557472][ T35] [drm] Initialized udl on minor 1 [ 115.651058][ T35] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 115.659176][ T35] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 115.799143][ T35] usb 1-1: USB disconnect, device number 2 [ 119.447174][ T6028] mmap: syz.1.60 (6028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.652301][ T6052] tipc: Enabling of bearer rejected, failed to enable media [ 121.062688][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.821737][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 121.839042][ T30] usb 2-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 121.852796][ T30] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 121.852826][ T30] usb 2-1: config 0 has no interface number 0 [ 121.852872][ T30] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 121.919452][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.919484][ T30] usb 2-1: Product: syz [ 121.919500][ T30] usb 2-1: Manufacturer: syz [ 121.919516][ T30] usb 2-1: SerialNumber: syz [ 121.972754][ T30] usb 2-1: config 0 descriptor?? [ 121.980505][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.239433][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.664967][ T30] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 122.687164][ T30] asix 2-1:0.188: probe with driver asix failed with error -61 [ 122.720373][ T2262] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.970437][ T2262] usb 3-1: Using ep0 maxpacket: 32 [ 122.975828][ T2262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.975897][ T2262] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 122.978417][ T2262] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 122.978461][ T2262] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 122.978483][ T2262] usb 3-1: config 14 has no interface number 0 [ 122.978500][ T2262] usb 3-1: config 14 has no interface number 1 [ 122.978572][ T2262] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 122.978597][ T2262] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 122.978624][ T2262] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 122.978651][ T2262] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 122.978680][ T2262] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 122.978707][ T2262] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.978735][ T2262] usb 3-1: config 14 interface 57 has no altsetting 0 [ 122.978754][ T2262] usb 3-1: config 14 interface 228 has no altsetting 0 [ 123.006900][ T2262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.006932][ T2262] usb 3-1: Product: syz [ 123.006947][ T2262] usb 3-1: Manufacturer: syz [ 123.006961][ T2262] usb 3-1: SerialNumber: syz [ 123.730015][ T2262] legousbtower 3-1:14.57: interrupt endpoints not found [ 124.106901][ T5619] usb 2-1: USB disconnect, device number 2 [ 124.205113][ T2262] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 124.269237][ T2262] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 124.478991][ T6113] tipc: Enabling of bearer rejected, failed to enable media [ 125.264127][ T5619] usb 3-1: USB disconnect, device number 4 [ 125.407956][ T6127] usb 3-1: LEGO USB Tower reset control request failed [ 125.451567][ T5619] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 125.718807][ T6136] netlink: 'syz.4.84': attribute type 5 has an invalid length. [ 127.610330][ T30] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.770555][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 127.771690][ T30] usb 3-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 127.773397][ T30] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 127.773423][ T30] usb 3-1: config 0 has no interface number 0 [ 127.773476][ T30] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 127.779567][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.779597][ T30] usb 3-1: Product: syz [ 127.779613][ T30] usb 3-1: Manufacturer: syz [ 127.779627][ T30] usb 3-1: SerialNumber: syz [ 127.945745][ T30] usb 3-1: config 0 descriptor?? [ 127.974443][ T6151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.074202][ T6162] tipc: Enabling of bearer rejected, failed to enable media [ 128.230932][ T6151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.635526][ T30] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 128.635822][ T30] asix 3-1:0.188: probe with driver asix failed with error -61 [ 128.940371][ T2262] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.101169][ T2262] usb 1-1: Using ep0 maxpacket: 32 [ 129.111591][ T2262] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.111650][ T2262] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 129.129240][ T2262] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 129.129270][ T2262] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 129.129292][ T2262] usb 1-1: config 14 has no interface number 0 [ 129.131202][ T2262] usb 1-1: config 14 has no interface number 1 [ 129.131311][ T2262] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 129.131337][ T2262] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 129.131365][ T2262] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 129.131396][ T2262] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 129.131425][ T2262] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 129.131453][ T2262] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.131483][ T2262] usb 1-1: config 14 interface 57 has no altsetting 0 [ 129.131503][ T2262] usb 1-1: config 14 interface 228 has no altsetting 0 [ 129.535577][ T2262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.535611][ T2262] usb 1-1: Product: syz [ 129.535627][ T2262] usb 1-1: Manufacturer: syz [ 129.535641][ T2262] usb 1-1: SerialNumber: syz [ 129.679058][ T6190] syz.1.102 uses obsolete (PF_INET,SOCK_PACKET) [ 130.091472][ T2262] legousbtower 1-1:14.57: interrupt endpoints not found [ 131.060422][ T2262] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 131.128348][ T2262] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 131.406357][ T5907] usb 3-1: USB disconnect, device number 5 [ 131.800570][ T5907] usb 1-1: USB disconnect, device number 3 [ 131.800661][ C0] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 131.883464][ T5907] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 133.194787][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.249357][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.369854][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 135.165221][ T5619] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.289084][ T6265] syzkaller0: entered promiscuous mode [ 135.289112][ T6265] syzkaller0: entered allmulticast mode [ 135.312909][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 135.336943][ T5619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.337015][ T5619] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 135.345116][ T5619] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 135.345149][ T5619] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 135.345170][ T5619] usb 2-1: config 14 has no interface number 0 [ 135.345188][ T5619] usb 2-1: config 14 has no interface number 1 [ 135.345262][ T5619] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 135.345290][ T5619] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 135.345318][ T5619] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 135.345361][ T5619] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 135.345392][ T5619] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 135.345421][ T5619] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.345448][ T5619] usb 2-1: config 14 interface 57 has no altsetting 0 [ 135.345466][ T5619] usb 2-1: config 14 interface 228 has no altsetting 0 [ 135.483554][ T6265] tipc: Started in network mode [ 135.483607][ T6265] tipc: Node identity f6165e29cc85, cluster identity 4711 [ 135.505279][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.505310][ T5619] usb 2-1: Product: syz [ 135.505325][ T5619] usb 2-1: Manufacturer: syz [ 135.505341][ T5619] usb 2-1: SerialNumber: syz [ 135.551253][ T6265] tipc: Enabled bearer , priority 0 [ 135.593604][ T6264] tipc: Resetting bearer [ 135.822501][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 135.822531][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 135.853100][ T6264] tipc: Disabling bearer [ 136.084009][ T5619] legousbtower 2-1:14.57: interrupt endpoints not found [ 136.156252][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.133'. [ 136.409671][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 136.409699][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.130'. [ 136.451698][ T5619] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 136.454706][ T5619] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 136.464177][ T1904] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.468038][ T3399] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.468091][ T3399] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.468126][ T3399] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.133383][ C1] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 137.134539][ T35] usb 2-1: USB disconnect, device number 3 [ 137.179978][ T35] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 137.440290][ T5619] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.559622][ T6307] FAULT_INJECTION: forcing a failure. [ 137.559622][ T6307] name fail_futex, interval 1, probability 0, space 0, times 1 [ 137.559671][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.559695][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.559718][ T6307] Call Trace: [ 137.559729][ T6307] [ 137.559739][ T6307] dump_stack_lvl+0xe8/0x150 [ 137.559794][ T6307] should_fail_ex+0x447/0x5e0 [ 137.559826][ T6307] get_futex_key+0x1ab/0x1410 [ 137.559860][ T6307] ? __pfx_get_futex_key+0x10/0x10 [ 137.559879][ T6307] ? __rtnl_unlock+0xc3/0xe0 [ 137.559902][ T6307] ? netdev_run_todo+0x1001/0x1090 [ 137.559931][ T6307] futex_wake+0x119/0x600 [ 137.559958][ T6307] ? __local_bh_enable+0x1e3/0x2f0 [ 137.559990][ T6307] ? __pfx_futex_wake+0x10/0x10 [ 137.560025][ T6307] ? do_ip_setsockopt+0x2305/0x2e30 [ 137.560051][ T6307] do_futex+0x458/0x4e0 [ 137.560078][ T6307] ? __pfx_do_futex+0x10/0x10 [ 137.560116][ T6307] __se_sys_futex+0x3a8/0x450 [ 137.560146][ T6307] ? __pfx___se_sys_futex+0x10/0x10 [ 137.560178][ T6307] ? __x64_sys_futex+0x21/0xf0 [ 137.560203][ T6307] do_syscall_64+0x166/0x520 [ 137.560224][ T6307] ? trace_irq_disable+0x3b/0x140 [ 137.560243][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.560263][ T6307] ? clear_bhb_loop+0x70/0xc0 [ 137.560288][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.560306][ T6307] RIP: 0033:0x7f453b17f559 [ 137.560359][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.560377][ T6307] RSP: 002b:00007f45393d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.560404][ T6307] RAX: ffffffffffffffda RBX: 00007f453b405fa8 RCX: 00007f453b17f559 [ 137.560420][ T6307] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f453b405fac [ 137.560434][ T6307] RBP: 00007f453b405fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 137.560447][ T6307] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 137.560460][ T6307] R13: 00007f453b406038 R14: 00007fff03e68b40 R15: 00007fff03e68c28 [ 137.560490][ T6307] [ 137.593734][ T5619] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 137.609556][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.664438][ T5619] usb 4-1: config 0 descriptor?? [ 138.012183][ T5619] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 138.391325][ T5619] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 138.391351][ T5619] [drm] Initialized udl on minor 1 [ 141.576025][ T5612] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.794550][ T5612] usb 2-1: Using ep0 maxpacket: 32 [ 141.861730][ T5612] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.861874][ T5612] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 141.864518][ T5612] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 141.864560][ T5612] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 141.864642][ T5612] usb 2-1: config 14 has no interface number 0 [ 141.864660][ T5612] usb 2-1: config 14 has no interface number 1 [ 141.864735][ T5612] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 141.864819][ T5612] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 141.864849][ T5612] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 141.864877][ T5612] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 141.864906][ T5612] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 141.864997][ T5612] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.865027][ T5612] usb 2-1: config 14 interface 57 has no altsetting 0 [ 141.865046][ T5612] usb 2-1: config 14 interface 228 has no altsetting 0 [ 142.041752][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.041786][ T5612] usb 2-1: Product: syz [ 142.041867][ T5612] usb 2-1: Manufacturer: syz [ 142.041883][ T5612] usb 2-1: SerialNumber: syz [ 142.999083][ T5612] legousbtower 2-1:14.57: interrupt endpoints not found [ 143.374513][ T5612] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 143.603451][ T5612] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 143.612062][ T5619] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 143.676008][ T5619] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 144.724117][ T5619] usb 4-1: USB disconnect, device number 2 [ 145.464764][ T2262] usb 2-1: USB disconnect, device number 4 [ 145.642315][ T6371] syz.3.166 (6371) used greatest stack depth: 19072 bytes left [ 145.965482][ T2262] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 146.439945][ T6392] ALSA: mixer_oss: invalid OSS volume '' [ 146.482283][ T6392] can0: slcan on ttyS3. [ 146.724469][ T6392] can0 (unregistered): slcan off ttyS3. [ 147.904627][ T6399] vivid-000: disconnect [ 148.350328][ T5612] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.398940][ T6383] vivid-000: reconnect [ 148.500705][ T5612] usb 2-1: Using ep0 maxpacket: 32 [ 148.506207][ T5612] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.506246][ T5612] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 148.507318][ T5612] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 148.507336][ T5612] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 148.507347][ T5612] usb 2-1: config 14 has no interface number 0 [ 148.507356][ T5612] usb 2-1: config 14 has no interface number 1 [ 148.507396][ T5612] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 148.507408][ T5612] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 148.507421][ T5612] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 148.507435][ T5612] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 148.507450][ T5612] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 148.507463][ T5612] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.507477][ T5612] usb 2-1: config 14 interface 57 has no altsetting 0 [ 148.507487][ T5612] usb 2-1: config 14 interface 228 has no altsetting 0 [ 148.509648][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.509664][ T5612] usb 2-1: Product: syz [ 148.509709][ T5612] usb 2-1: Manufacturer: syz [ 148.509723][ T5612] usb 2-1: SerialNumber: syz [ 149.323040][ T5612] legousbtower 2-1:14.57: interrupt endpoints not found [ 149.718935][ T5612] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 149.767833][ T5612] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 149.998448][ T6430] ALSA: mixer_oss: invalid OSS volume '' [ 150.005907][ T6430] can0: slcan on ttyS3. [ 150.143083][ T6430] can0 (unregistered): slcan off ttyS3. [ 150.427057][ T2262] usb 2-1: USB disconnect, device number 5 [ 150.427190][ C1] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 150.470808][ T6433] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 150.846348][ T2262] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 152.120666][ T887] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.287078][ T6465] ALSA: mixer_oss: invalid OSS volume '' [ 152.680945][ T887] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 152.684474][ T887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.684533][ T887] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 152.684579][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.751450][ T887] usb 1-1: config 0 descriptor?? [ 152.839700][ T887] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 153.200285][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.370320][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 153.375235][ T5914] usb 3-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 153.400669][ T5914] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 153.400719][ T5914] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 153.400742][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 153.400797][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.400827][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.400855][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 153.400901][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.556014][ T5914] usb 3-1: config 0 descriptor?? [ 153.935363][ T5914] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.405326][ T6489] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.354919][ T2262] usb 1-1: USB disconnect, device number 4 [ 158.289853][ T6510] ALSA: mixer_oss: invalid OSS volume '' [ 159.100062][ T887] usb 3-1: USB disconnect, device number 6 [ 159.183078][ T887] usblp0: removed [ 162.640886][ T6556] ALSA: mixer_oss: invalid OSS volume '' [ 164.964885][ T6559] syz.3.227 (6559) used greatest stack depth: 17792 bytes left [ 166.978925][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 167.234928][ T6619] Bluetooth: MGMT ver 1.23 [ 167.469337][ T6623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.170707][ T35] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.350940][ T35] usb 1-1: Using ep0 maxpacket: 32 [ 168.353696][ T35] usb 1-1: New USB device found: idVendor=2040, idProduct=c603, bcdDevice=1.8e [ 168.355355][ T35] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.355398][ T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.403768][ T35] usb 1-1: config 0 descriptor?? [ 168.424784][ T35] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 168.493132][ T35] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.493960][ T35] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 168.494071][ T35] usb 1-1: media controller created [ 168.571389][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.615102][ T6625] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 168.628926][ T6625] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 168.638607][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.648717][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.660541][ T6625] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 168.667718][ T6625] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 c0 51 3c 09 cc 66 66 66 66 66 66 2e [ 168.689408][ T6625] RSP: 0018:ffffc90006c7f2c0 EFLAGS: 00010206 [ 168.695655][ T6625] RAX: dffffc0000000000 RBX: ffffffff8b752595 RCX: 8000000000000001 [ 168.704179][ T6625] RDX: 0000000000000000 RSI: ffffffff8b752595 RDI: 0000000000000018 [ 168.712173][ T6625] RBP: ffffffff87b90a26 R08: 0000000000000001 R09: 0000000000000000 [ 168.721144][ T6625] R10: dffffc0000000000 R11: ffffed1007d26e2a R12: 00000000000000c0 [ 168.730023][ T6625] R13: 0000000000000000 R14: 00000000000000c0 R15: 0000000000000001 [ 168.739406][ T6625] FS: 00007f1ce2dfe6c0(0000) GS:ffff888124824000(0000) knlGS:0000000000000000 [ 168.748412][ T6625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.755224][ T6625] CR2: 000000110c396c75 CR3: 0000000035dde000 CR4: 00000000003526f0 [ 168.764096][ T6625] Call Trace: [ 168.767397][ T6625] [ 168.770342][ T6625] __kasan_check_byte+0x12/0x40 [ 168.775226][ T6625] lock_acquire+0x7d/0x350 [ 168.779782][ T6625] ? dvb_usbv2_generic_write+0x26/0x60 [ 168.785302][ T6625] ? dvb_usbv2_generic_write+0x26/0x60 [ 168.790811][ T6625] mutex_lock_nested+0x55/0x1d0 [ 168.795785][ T6625] ? dvb_usbv2_generic_write+0x26/0x60 [ 168.801286][ T6625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 168.807138][ T6625] dvb_usbv2_generic_write+0x26/0x60 [ 168.812515][ T6625] mxl111sf_ctrl_msg+0x160/0x2f0 [ 168.817576][ T6625] mxl111sf_write_reg+0xa9/0x1b0 [ 168.822576][ T6625] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 168.828186][ T6625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 168.834464][ T6625] ? mutex_lock_interruptible_nested+0x14d/0x1c0 [ 168.841087][ T6625] ? mxl111sf_i2c_xfer+0x175/0x5060 [ 168.846414][ T6625] mxl111sf_i2c_xfer+0x463/0x5060 [ 168.851619][ T6625] ? __kasan_check_byte+0x12/0x40 [ 168.856683][ T6625] ? rcu_is_watching+0x16/0xb0 [ 168.861559][ T6625] ? __kasan_check_byte+0x12/0x40 [ 168.867221][ T6625] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 168.873180][ T6625] ? is_bpf_text_address+0x292/0x2b0 [ 168.878930][ T6625] ? is_bpf_text_address+0x26/0x2b0 [ 168.885048][ T6625] ? kernel_text_address+0xa5/0xe0 [ 168.890287][ T6625] ? __kernel_text_address+0xd/0x30 [ 168.895574][ T6625] ? unwind_get_return_address+0x4d/0x90 [ 168.901247][ T6625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 168.907455][ T6625] ? arch_stack_walk+0xfb/0x150 [ 168.912330][ T6625] ? stack_trace_save+0xa9/0x100 [ 168.917363][ T6625] ? __pfx_stack_trace_save+0x10/0x10 [ 168.922743][ T6625] ? check_path+0x21/0x40 [ 168.927073][ T6625] ? check_noncircular+0xdb/0x150 [ 168.932452][ T6625] ? add_lock_to_list+0xc7/0x100 [ 168.937560][ T6625] ? lockdep_unlock+0x5c/0xd0 [ 168.942239][ T6625] ? __lock_acquire+0x1511/0x2de0 [ 168.947281][ T6625] ? do_raw_spin_lock+0x12b/0x2f0 [ 168.952334][ T6625] __i2c_transfer+0x7bf/0x1fe0 [ 168.957133][ T6625] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 168.962945][ T6625] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 168.968755][ T6625] ? rt_mutex_lock_nested+0x149/0x1c0 [ 168.974129][ T6625] ? i2c_transfer+0xc7/0x2d0 [ 168.978739][ T6625] i2c_transfer+0x1cb/0x2d0 [ 168.983260][ T6625] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 168.988940][ T6625] ? __asan_memset+0x22/0x50 [ 168.993629][ T6625] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 168.999805][ T6625] ? i2cdev_read+0xeb/0x250 [ 169.004577][ T6625] i2cdev_read+0x110/0x250 [ 169.009041][ T6625] vfs_readv+0x588/0x850 [ 169.014851][ T6625] ? __pfx_i2cdev_read+0x10/0x10 [ 169.020251][ T6625] ? __pfx_vfs_readv+0x10/0x10 [ 169.025029][ T6625] ? __fget_files+0x2a/0x420 [ 169.029715][ T6625] ? __fget_files+0x3a8/0x420 [ 169.034571][ T6625] ? fdget+0x1b2/0x250 [ 169.038658][ T6625] do_readv+0x15a/0x2e0 [ 169.042822][ T6625] ? __pfx_do_readv+0x10/0x10 [ 169.047604][ T6625] do_syscall_64+0x166/0x520 [ 169.052287][ T6625] ? trace_irq_disable+0x3b/0x140 [ 169.057308][ T6625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.063374][ T6625] ? clear_bhb_loop+0x70/0xc0 [ 169.068138][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.074088][ T6625] RIP: 0033:0x7f1ce4baf559 [ 169.078510][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.098650][ T6625] RSP: 002b:00007f1ce2dfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 169.110553][ T6625] RAX: ffffffffffffffda RBX: 00007f1ce4e35fa0 RCX: 00007f1ce4baf559 [ 169.118822][ T6625] RDX: 0000000000000002 RSI: 0000200000006880 RDI: 0000000000000006 [ 169.126974][ T6625] RBP: 00007f1ce4c46b20 R08: 0000000000000000 R09: 0000000000000000 [ 169.134968][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.143103][ T6625] R13: 00007f1ce4e36038 R14: 00007f1ce4e35fa0 R15: 00007fffef7accc8 [ 169.153169][ T6625] [ 169.156253][ T6625] Modules linked in: [ 169.161328][ T6625] ---[ end trace 0000000000000000 ]--- [ 169.189338][ T6625] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 169.189513][ T6625] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 c0 51 3c 09 cc 66 66 66 66 66 66 2e [ 169.189533][ T6625] RSP: 0018:ffffc90006c7f2c0 EFLAGS: 00010206 [ 169.189553][ T6625] RAX: dffffc0000000000 RBX: ffffffff8b752595 RCX: 8000000000000001 [ 169.189585][ T6625] RDX: 0000000000000000 RSI: ffffffff8b752595 RDI: 0000000000000018 [ 169.189600][ T6625] RBP: ffffffff87b90a26 R08: 0000000000000001 R09: 0000000000000000 [ 169.189613][ T6625] R10: dffffc0000000000 R11: ffffed1007d26e2a R12: 00000000000000c0 [ 169.189628][ T6625] R13: 0000000000000000 R14: 00000000000000c0 R15: 0000000000000001 [ 169.189650][ T6625] FS: 00007f1ce2dfe6c0(0000) GS:ffff888124824000(0000) knlGS:0000000000000000 [ 169.189668][ T6625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.189682][ T6625] CR2: 000000110c396c75 CR3: 0000000035dde000 CR4: 00000000003526f0 [ 169.189704][ T6625] Kernel panic - not syncing: Fatal exception [ 169.295526][ T6625] Kernel Offset: disabled [ 169.299930][ T6625] Rebooting in 86400 seconds..