last executing test programs: 19m10.814202327s ago: executing program 1 (id=238): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, 0x0) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 19m7.598526821s ago: executing program 1 (id=248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000080000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 19m4.176238785s ago: executing program 1 (id=260): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="c7ed0a79b7014892f2ef5cd15625408bd1f05d3badebf8a6891ec43c37", 0x1d}], 0x1) ftruncate(r0, 0x80079a0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendfile(r1, r0, 0x0, 0xffff) 19m3.764455442s ago: executing program 1 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19m3.25722199s ago: executing program 1 (id=268): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) r2 = socket(0xa, 0x3, 0xff) pwritev(r2, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x5, 0x1) connect$inet6(r2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x8, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x2, 0x0, 0x8}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, r5, 0x0, 0x0, 0x8}]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f00000000c0), 0x0, r1}) 19m1.564855395s ago: executing program 1 (id=279): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0xfefffffa, 0x2000, 0x3, 0x80, 0x5, 0x9, 0x0, 0x0, 0x100, 0x6}}, 0x50) sendfile(r0, r2, &(0x7f0000000040), 0x10) 19m0.483290443s ago: executing program 32 (id=279): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0xfefffffa, 0x2000, 0x3, 0x80, 0x5, 0x9, 0x0, 0x0, 0x100, 0x6}}, 0x50) sendfile(r0, r2, &(0x7f0000000040), 0x10) 17m12.576163888s ago: executing program 3 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x11f, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 17m11.031692226s ago: executing program 3 (id=706): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1300, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000009c0)=[@acquire, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 17m10.841472059s ago: executing program 3 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[]) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 17m7.776649178s ago: executing program 3 (id=717): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) 17m7.206851226s ago: executing program 3 (id=719): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{0x0}, {0x0}, {&(0x7f00000001c0)="3504712bd07ad0243e838f062ab28fe33daab497cf6aedf5306766b39a4175e9", 0x20}], 0x3}, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 17m4.702581791s ago: executing program 3 (id=724): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) pipe2$9p(&(0x7f0000000140), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc8302b063a7e25fe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x1}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m3.676446206s ago: executing program 33 (id=724): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) pipe2$9p(&(0x7f0000000140), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc8302b063a7e25fe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x1}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m34.726546381s ago: executing program 2 (id=787): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x56, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141641) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 16m31.428099834s ago: executing program 2 (id=791): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1800, 0x0, 0x0}], 0x1}) 16m28.526199899s ago: executing program 2 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[]) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) 16m26.590166926s ago: executing program 2 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 16m25.984621306s ago: executing program 2 (id=806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x100}, @fda={0x66646185, 0x2, 0x0, 0x1b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 16m24.276744888s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[]) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) 16m22.937702691s ago: executing program 34 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[]) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) 16m14.524403794s ago: executing program 0 (id=830): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/56, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 16m14.069114803s ago: executing program 0 (id=834): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000015c0)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000ffffdf7f0000000001"], 0x29) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101001, 0x0) 16m10.769299787s ago: executing program 0 (id=844): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 16m9.140650132s ago: executing program 0 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 16m8.291177151s ago: executing program 0 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x0, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x0, 0x9, 0xa, 0x4, 0x6, 0x5, 0x6, 0x3, 0x100006, 0x140000, 0x2000001, 0x1a448, 0x2, 0xc0100003, 0x5, 0x2, 0xf27, 0x20001e58, 0x6, 0xaa, 0x800, 0x8, 0x5, 0x3, 0x40000287]}) 16m7.134764468s ago: executing program 0 (id=852): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 16m6.206659965s ago: executing program 35 (id=852): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 6.100224121s ago: executing program 5 (id=2116): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902484002e2ff"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.751110175s ago: executing program 8 (id=2121): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 5.480166088s ago: executing program 8 (id=2122): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) 4.463316763s ago: executing program 8 (id=2125): ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6) 3.79320899s ago: executing program 7 (id=2127): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900162f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d83d3a12388a8", 0x1b}], 0x2) 3.710776321s ago: executing program 5 (id=2129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 3.604692321s ago: executing program 8 (id=2130): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = getpid() r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r3, 0x0, 0x0, 0x0}, 0x30) 3.449938222s ago: executing program 6 (id=2133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100000000008aba, 0x4, 0x1004, 0x804, 0x4, 0xc, 0x8000011fffd, 0xff, 0xffffffffffffffff, 0x9, 0x8001, 0x8000000000000004, 0x0, 0x6, 0x400000000000006, 0x6], 0xdddd1000, 0x14b200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x3, 0xdb, '\x00', 0xc0b5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.069175682s ago: executing program 7 (id=2135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.942653294s ago: executing program 6 (id=2136): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 2.886189872s ago: executing program 8 (id=2137): openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.813939755s ago: executing program 5 (id=2138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000240)={0xa, 0x4e21, 0x4516, @ipv4={'\x00', '\xff\xff', @remote}, 0xe000}, 0x1c) 2.753303842s ago: executing program 6 (id=2139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) 2.644459192s ago: executing program 7 (id=2140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfbfffffffffffffd, 0x0, 0x5359}, 0x80000001}}, 0xb8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 2.496471628s ago: executing program 6 (id=2141): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.171030334s ago: executing program 4 (id=2142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 1.970302818s ago: executing program 6 (id=2143): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) unshare(0x480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x80000001, 0x7fff, 0x1, 0x5, 0x94c, 0xa4, 0xff9, 0xc3cfbe86, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7fffffff, 0x3, 0xd, 0xe, 0x2312, 0x100, 0x8, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x10, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x4, 0xb, 0x2, 0xd9a, 0x80000001, 0x4, 0xfffffffd, 0x7, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc60, 0xffffdfff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.865668907s ago: executing program 7 (id=2144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r0, 0x0, r0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7f) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x4044057) 1.67580385s ago: executing program 5 (id=2145): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}], 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 1.674830545s ago: executing program 4 (id=2146): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 1.532688426s ago: executing program 7 (id=2147): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x72) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.31399746s ago: executing program 4 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x17, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.118899611s ago: executing program 5 (id=2149): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x81, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x2, 0x4) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 1.044853614s ago: executing program 4 (id=2150): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c0) getdents(r0, &(0x7f0000000140)=""/30, 0x1e) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) getdents64(r0, &(0x7f0000000280)=""/100, 0x64) 891.977784ms ago: executing program 7 (id=2151): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 679.524144ms ago: executing program 4 (id=2152): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x1, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@can={{}, 0x3, 0x2, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 674.28892ms ago: executing program 6 (id=2153): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0xb4, 0x4) 662.013321ms ago: executing program 8 (id=2154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b1a9009200000b062d0000d396de492e6af1000000000000", 0x18) r1 = accept$alg(r0, 0x0, 0x0) r2 = eventfd(0x6) r3 = fcntl$dupfd(r1, 0x0, r2) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[], 0xffa8) recvmmsg$unix(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001b40)=""/6, 0x6}, {&(0x7f0000001c80)=""/151, 0x97}], 0x2}}], 0x1, 0x20000043, 0x0) 382.167766ms ago: executing program 4 (id=2155): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 0s ago: executing program 5 (id=2156): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000200)=0xc779, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x6, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) kernel console output (not intermixed with test programs): lave_1) entered disabled state [ 763.461060][T10769] bridge_slave_1: entered allmulticast mode [ 763.530064][T10769] bridge_slave_1: entered promiscuous mode [ 763.702064][ T5835] Bluetooth: hci4: command tx timeout [ 766.007560][ T5835] Bluetooth: hci4: command tx timeout [ 768.545124][ T5835] Bluetooth: hci4: command tx timeout [ 769.661736][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.078438][ T5835] Bluetooth: hci4: command tx timeout [ 771.173014][T11041] binder: 11038:11041 ioctl c0306201 200000000080 returned -14 [ 773.522440][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.182620][T10781] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.182822][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.183061][T10781] bridge_slave_0: entered allmulticast mode [ 774.186324][T10781] bridge_slave_0: entered promiscuous mode [ 774.222389][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.360277][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.710546][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.791632][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.308047][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 776.356141][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 776.371937][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 776.377402][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 776.381121][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.466061][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 776.665868][T11061] Set syz0 is full, maxelem 0 reached [ 776.749436][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 778.401923][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 778.542449][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 778.570592][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 778.577749][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 778.593929][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 778.787793][ T5835] Bluetooth: hci2: command tx timeout [ 780.901487][ T5835] Bluetooth: hci5: command tx timeout [ 780.902261][ T5835] Bluetooth: hci2: command tx timeout [ 783.009558][T11089] Invalid source name [ 783.009607][T11089] UBIFS error (pid: 11089): cannot open "ubifs", error -22 [ 783.080539][ T5154] Bluetooth: hci2: command tx timeout [ 783.080615][ T5154] Bluetooth: hci5: command tx timeout [ 785.177038][ T5154] Bluetooth: hci2: command tx timeout [ 785.177096][ T5835] Bluetooth: hci5: command tx timeout [ 785.463640][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 787.131687][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 787.226589][ T5835] Bluetooth: hci5: command tx timeout [ 787.884854][T11112] ubi31: attaching mtd0 [ 788.027970][T11112] ubi31: scanning is finished [ 788.028026][T11112] ubi31: empty MTD device detected [ 788.631526][T11112] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 792.089288][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 792.290253][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 794.618554][T10011] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 796.109908][T10011] usb 6-1: device descriptor read/all, error -71 [ 797.571579][ T5835] Bluetooth: hci1: unexpected event for opcode 0x004e [ 800.707793][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 802.329122][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 806.950240][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.950422][T10781] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.950675][T10781] bridge_slave_1: entered allmulticast mode [ 806.953890][T10781] bridge_slave_1: entered promiscuous mode [ 808.905727][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.905810][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.445729][T10996] chnl_net:caif_netlink_parms(): no params data found [ 817.253365][T11240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.032035][T11057] chnl_net:caif_netlink_parms(): no params data found [ 822.078905][T11068] chnl_net:caif_netlink_parms(): no params data found [ 822.368740][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 822.411944][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 822.413503][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 822.417052][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 822.429630][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 823.065514][T11273] Illegal XDP return value 2436207678 on prog (id 221) dev N/A, expect packet loss! [ 824.185368][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 824.579064][ T5835] Bluetooth: hci3: command tx timeout [ 826.736413][ T5835] Bluetooth: hci3: command tx timeout [ 826.768774][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.188217][T11057] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.197854][T11057] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.198129][T11057] bridge_slave_0: entered allmulticast mode [ 827.229915][ T5835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 827.232500][ T5835] Bluetooth: hci1: Injecting HCI hardware error event [ 827.240646][T11057] bridge_slave_0: entered promiscuous mode [ 827.240706][ T5835] Bluetooth: hci1: hardware error 0x00 [ 827.449908][T11057] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.450054][T11057] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.450311][T11057] bridge_slave_1: entered allmulticast mode [ 827.456348][T11057] bridge_slave_1: entered promiscuous mode [ 829.048350][ T5154] Bluetooth: hci3: command tx timeout [ 830.181274][ T5835] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 831.058594][ T5154] Bluetooth: hci3: command tx timeout [ 832.610525][T11057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.860165][T11057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.896818][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.905861][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.906147][T11068] bridge_slave_0: entered allmulticast mode [ 832.930237][T11068] bridge_slave_0: entered promiscuous mode [ 834.280750][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.280920][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.281196][T11068] bridge_slave_1: entered allmulticast mode [ 834.284491][T11068] bridge_slave_1: entered promiscuous mode [ 834.763160][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.814763][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.529897][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 838.564050][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 838.567403][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 838.596072][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 838.596769][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.682384][T11068] team0: Port device team_slave_0 added [ 840.751699][ T5835] Bluetooth: hci2: command tx timeout [ 841.220421][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 841.250693][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 841.252442][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 841.253836][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 841.254761][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 842.870468][ T5835] Bluetooth: hci2: command tx timeout [ 844.098704][ T5835] Bluetooth: hci4: command tx timeout [ 844.126055][T11369] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1393'. [ 845.210248][ T5835] Bluetooth: hci2: command tx timeout [ 845.838896][T11268] chnl_net:caif_netlink_parms(): no params data found [ 846.188437][ T5835] Bluetooth: hci4: command tx timeout [ 847.218561][ T5835] Bluetooth: hci2: command tx timeout [ 849.275650][ T6587] bridge_slave_1: left allmulticast mode [ 849.275688][ T6587] bridge_slave_1: left promiscuous mode [ 849.276004][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.367880][ T5835] Bluetooth: hci4: command tx timeout [ 849.460601][ T6587] bridge_slave_0: left allmulticast mode [ 849.460637][ T6587] bridge_slave_0: left promiscuous mode [ 849.465957][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.855278][ T6587] bridge_slave_1: left allmulticast mode [ 849.855322][ T6587] bridge_slave_1: left promiscuous mode [ 849.855666][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.940793][ T6587] bridge_slave_0: left allmulticast mode [ 849.940979][ T6587] bridge_slave_0: left promiscuous mode [ 849.941284][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.084051][ T6587] bridge_slave_1: left allmulticast mode [ 850.084090][ T6587] bridge_slave_1: left promiscuous mode [ 850.084432][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.163078][ T6587] bridge_slave_0: left allmulticast mode [ 850.163117][ T6587] bridge_slave_0: left promiscuous mode [ 850.163420][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.383492][ T5835] Bluetooth: hci4: command tx timeout [ 851.451787][ T6587] bridge_slave_1: left allmulticast mode [ 851.451824][ T6587] bridge_slave_1: left promiscuous mode [ 851.452280][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.522902][ T6587] bridge_slave_0: left allmulticast mode [ 851.522940][ T6587] bridge_slave_0: left promiscuous mode [ 851.523241][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.539810][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.853981][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.894899][ T6587] bond0 (unregistering): Released all slaves [ 859.178125][ T6587] bond0 (unregistering): Released all slaves [ 859.608378][ T6587] bond0 (unregistering): Released all slaves [ 859.840120][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.929657][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.027905][ T6587] bond0 (unregistering): Released all slaves [ 860.329337][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.409458][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.497684][ T6587] bond0 (unregistering): Released all slaves [ 860.587295][T11407] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 860.587330][T11407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 860.587341][T11407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 860.600284][ T37] audit: type=1800 audit(1756523253.707:1885): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1404" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 862.785860][ T37] audit: type=1326 audit(1756523255.907:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.786315][ T37] audit: type=1326 audit(1756523255.907:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.786366][ T37] audit: type=1326 audit(1756523255.907:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.786414][ T37] audit: type=1326 audit(1756523255.907:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.786466][ T37] audit: type=1326 audit(1756523255.907:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.787309][ T37] audit: type=1326 audit(1756523255.907:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.787359][ T37] audit: type=1326 audit(1756523255.907:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.787404][ T37] audit: type=1326 audit(1756523255.907:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 862.787451][ T37] audit: type=1326 audit(1756523255.907:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11427 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ef6eebe9 code=0x7fc00000 [ 865.100838][T11268] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.101025][T11268] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.101293][T11268] bridge_slave_0: entered allmulticast mode [ 865.105904][T11268] bridge_slave_0: entered promiscuous mode [ 865.165168][T11268] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.165341][T11268] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.165601][T11268] bridge_slave_1: entered allmulticast mode [ 865.189541][T11268] bridge_slave_1: entered promiscuous mode [ 865.191731][T11339] chnl_net:caif_netlink_parms(): no params data found [ 867.975168][T11268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.485302][T11268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.439185][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.439267][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.072033][T11268] team0: Port device team_slave_0 added [ 875.073036][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.119578][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.726156][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 885.752944][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 885.775708][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 885.793684][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 885.818774][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 887.938534][ T5154] Bluetooth: hci5: command tx timeout [ 888.241708][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 888.562836][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1440'. [ 889.423556][T11561] overlay: ./file0 is not a directory [ 889.735642][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 889.890846][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 890.055286][ T5154] Bluetooth: hci5: command tx timeout [ 890.461224][T11566] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1442'. [ 890.462040][T11566] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.1442'. [ 890.462088][T11566] netlink: 640 bytes leftover after parsing attributes in process `syz.5.1442'. [ 892.144779][ T5154] Bluetooth: hci5: command tx timeout [ 892.766560][T11561] Process accounting resumed [ 894.419621][ T5154] Bluetooth: hci5: command tx timeout [ 896.153561][T11268] team0: Port device team_slave_1 added [ 896.769590][T11353] chnl_net:caif_netlink_parms(): no params data found [ 899.490372][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1447'. [ 899.689977][T11353] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 900.681954][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 900.727483][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 900.744672][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 900.760439][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 900.808524][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.418042][T11602] dns_resolver: Unsupported server list version (0) [ 903.929366][ T5835] Bluetooth: hci2: command tx timeout [ 905.800327][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 907.702525][ T5835] Bluetooth: hci2: command tx timeout [ 907.702756][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 908.256921][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 908.723943][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 908.981754][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 909.488753][T11534] chnl_net:caif_netlink_parms(): no params data found [ 909.850005][ T5154] Bluetooth: hci2: command tx timeout [ 911.244386][ T5154] Bluetooth: hci3: command tx timeout [ 911.594968][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1456'. [ 911.911786][ T5154] Bluetooth: hci2: command tx timeout [ 913.681442][ T5154] Bluetooth: hci3: command tx timeout [ 914.689112][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.689286][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.689542][T11534] bridge_slave_0: entered allmulticast mode [ 914.693442][T11534] bridge_slave_0: entered promiscuous mode [ 914.727951][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.729165][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.729428][T11534] bridge_slave_1: entered allmulticast mode [ 914.746762][T11534] bridge_slave_1: entered promiscuous mode [ 916.235043][ T5154] Bluetooth: hci3: command tx timeout [ 916.503881][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.865317][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.965421][ T5835] Bluetooth: hci3: command tx timeout [ 919.965463][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 920.426416][T11534] team0: Port device team_slave_0 added [ 920.493664][T11534] team0: Port device team_slave_1 added [ 920.983285][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.983305][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.983336][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.005246][T11595] chnl_net:caif_netlink_parms(): no params data found [ 921.049606][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.049624][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.049651][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.475905][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1465'. [ 926.050709][T11621] chnl_net:caif_netlink_parms(): no params data found [ 926.721389][T11534] hsr_slave_0: entered promiscuous mode [ 926.723002][T11534] hsr_slave_1: entered promiscuous mode [ 926.724061][T11534] debugfs: 'hsr0' already exists in 'hsr' [ 926.724088][T11534] Cannot create hsr debugfs directory [ 931.003194][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.003361][T11595] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.003644][T11595] bridge_slave_0: entered allmulticast mode [ 931.006891][T11595] bridge_slave_0: entered promiscuous mode [ 931.294538][T11595] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.294744][T11595] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.295728][T11595] bridge_slave_1: entered allmulticast mode [ 931.318576][T11595] bridge_slave_1: entered promiscuous mode [ 931.818924][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.819014][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.762506][T11595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.224084][T11595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.232408][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.232504][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.232680][T11621] bridge_slave_0: entered allmulticast mode [ 935.234529][T11621] bridge_slave_0: entered promiscuous mode [ 935.983652][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.983800][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.983922][T11621] bridge_slave_1: entered allmulticast mode [ 936.161585][T11621] bridge_slave_1: entered promiscuous mode [ 936.178385][ T6587] bridge_slave_1: left allmulticast mode [ 936.178423][ T6587] bridge_slave_1: left promiscuous mode [ 936.178701][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.382667][ T6587] bridge_slave_0: left allmulticast mode [ 937.382692][ T6587] bridge_slave_0: left promiscuous mode [ 937.382944][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.735931][ T6587] bridge_slave_1: left allmulticast mode [ 938.736569][ T6587] bridge_slave_1: left promiscuous mode [ 938.736912][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.893295][ T6587] bridge_slave_0: left allmulticast mode [ 939.893321][ T6587] bridge_slave_0: left promiscuous mode [ 939.893501][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.717434][ T6587] bond0 (unregistering): Released all slaves [ 941.961991][ T6587] bond0 (unregistering): Released all slaves [ 942.249592][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.349483][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.434784][ T6587] bond0 (unregistering): Released all slaves [ 942.686265][ T37] kauditd_printk_skb: 69 callbacks suppressed [ 942.686286][ T37] audit: type=1800 audit(1756523335.807:1964): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1485" name="nullb0" dev="tmpfs" ino=1511 res=0 errno=0 [ 943.411344][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.564200][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.654506][ T6587] bond0 (unregistering): Released all slaves [ 945.638239][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.723075][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.726738][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.892370][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 946.655965][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 946.656881][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 948.262995][T11595] team0: Port device team_slave_0 added [ 948.397559][T11851] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 948.624689][T11595] team0: Port device team_slave_1 added [ 948.655726][T11621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.253248][ T5154] Bluetooth: hci4: command tx timeout [ 949.357397][T11621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.363746][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1493'. [ 951.752696][ T5154] Bluetooth: hci4: command tx timeout [ 952.759871][T11595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.759889][T11595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.759919][T11595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.158513][ T5835] Bluetooth: hci4: command tx timeout [ 954.898103][T11595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.899672][T11595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.899706][T11595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.369004][ T5835] Bluetooth: hci4: command tx timeout [ 957.622529][T11621] team0: Port device team_slave_0 added [ 957.689379][T11621] team0: Port device team_slave_1 added [ 958.481579][T11906] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1500'. [ 961.051309][T11918] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1503'. [ 962.079969][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 962.110541][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 962.130354][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 962.189682][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 962.193839][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 962.194931][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 962.431089][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 964.283572][ T5154] Bluetooth: hci2: command tx timeout [ 966.641350][ T5154] Bluetooth: hci2: command tx timeout [ 966.781427][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 968.257647][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 968.299995][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 968.305013][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 968.419651][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 968.420672][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 968.658710][ T5835] Bluetooth: hci2: command tx timeout [ 970.785189][T11968] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1512'. [ 970.821087][ T5154] Bluetooth: hci2: command tx timeout [ 971.610926][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 972.626618][ T5835] Bluetooth: hci5: command tx timeout [ 973.928940][T11979] overlayfs: failed to clone upperpath [ 974.668413][ T5835] Bluetooth: hci5: command tx timeout [ 980.878096][ T7676] sched: DL replenish lagged too much [ 980.991220][ T5835] Bluetooth: hci5: command tx timeout [ 982.698369][T11621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.698389][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.698418][T11621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.058598][ T5835] Bluetooth: hci5: command tx timeout [ 983.456945][T12010] overlayfs: failed to resolve './file0': -2 [ 993.336422][T12075] mmap: syz.4.1533 (12075) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 994.109458][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.109550][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.606160][T12081] qnx6: unable to read the first superblock [ 994.615082][T12081] futex_wake_op: syz.5.1534 tries to shift op by 144; fix this program [ 997.928972][T11839] chnl_net:caif_netlink_parms(): no params data found [ 998.180661][T12109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 999.786715][T11951] chnl_net:caif_netlink_parms(): no params data found [ 999.872265][T11919] chnl_net:caif_netlink_parms(): no params data found [ 1004.637533][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1543'. [ 1004.637559][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1543'. [ 1004.637578][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1543'. [ 1004.637785][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1543'. [ 1006.817652][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.857253][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1006.867478][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1006.887193][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1006.897652][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1009.193898][ T5835] Bluetooth: hci3: command tx timeout [ 1010.608928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.086109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.112313][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.112404][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.112595][T11951] bridge_slave_0: entered allmulticast mode [ 1011.143371][T11951] bridge_slave_0: entered promiscuous mode [ 1011.361047][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.399062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.423056][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.974348][ T5835] Bluetooth: hci3: command tx timeout [ 1012.062110][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.062289][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.062440][T11919] bridge_slave_0: entered allmulticast mode [ 1012.079718][T11919] bridge_slave_0: entered promiscuous mode [ 1012.097603][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.097728][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.097917][T11951] bridge_slave_1: entered allmulticast mode [ 1012.315151][T11951] bridge_slave_1: entered promiscuous mode [ 1012.318169][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.318526][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.318883][T11919] bridge_slave_1: entered allmulticast mode [ 1012.328588][T11919] bridge_slave_1: entered promiscuous mode [ 1012.341758][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.648920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.896598][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.437333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.601529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.028437][ T5835] Bluetooth: hci3: command tx timeout [ 1014.402838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.649898][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.694037][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.796642][ T5900] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1015.918404][ T5900] usb 6-1: device descriptor read/64, error -71 [ 1015.957431][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.968134][T11919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.059233][T11919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.077237][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.098431][ T5835] Bluetooth: hci3: command tx timeout [ 1016.188703][ T5900] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1016.318693][ T5900] usb 6-1: device descriptor read/64, error -71 [ 1016.429876][ T5900] usb usb6-port1: attempt power cycle [ 1016.530466][T12252] 9pnet_fd: Insufficient options for proto=fd [ 1016.788613][ T5900] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1016.811845][ T5900] usb 6-1: device descriptor read/8, error -71 [ 1016.857866][T11919] team0: Port device team_slave_0 added [ 1016.868219][T11951] team0: Port device team_slave_0 added [ 1016.937939][T11919] team0: Port device team_slave_1 added [ 1016.946294][T11951] team0: Port device team_slave_1 added [ 1017.067733][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1017.283133][ T5900] usb 6-1: device not accepting address 20, error -71 [ 1017.301358][ T5900] usb usb6-port1: unable to enumerate USB device [ 1017.549135][ T5900] IPVS: starting estimator thread 0... [ 1017.650267][T12270] IPVS: using max 5 ests per chain, 12000 per kthread [ 1018.337593][T12275] fuse: Bad value for 'fd' [ 1019.342096][T11919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.359910][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.359948][T11919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.771939][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.771959][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.771988][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.920836][T11919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.920859][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.920889][T11919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.931337][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.931354][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.931379][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.414891][ T6587] bridge_slave_1: left allmulticast mode [ 1022.414933][ T6587] bridge_slave_1: left promiscuous mode [ 1022.415189][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.527369][ T6587] bridge_slave_0: left allmulticast mode [ 1022.527460][ T6587] bridge_slave_0: left promiscuous mode [ 1022.527785][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.631331][ T6587] bridge_slave_1: left allmulticast mode [ 1022.631372][ T6587] bridge_slave_1: left promiscuous mode [ 1022.631671][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.856255][ T6587] bridge_slave_0: left allmulticast mode [ 1022.856291][ T6587] bridge_slave_0: left promiscuous mode [ 1022.856618][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.281940][ T6587] bridge_slave_1: left allmulticast mode [ 1023.281979][ T6587] bridge_slave_1: left promiscuous mode [ 1023.283410][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.350147][ T6587] bridge_slave_0: left allmulticast mode [ 1025.350188][ T6587] bridge_slave_0: left promiscuous mode [ 1025.350515][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.481157][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1025.485555][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1025.511981][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1025.516946][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1025.521778][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1026.953391][T12316] ALSA: mixer_oss: invalid OSS volume '' [ 1027.626533][ T5835] Bluetooth: hci2: command tx timeout [ 1027.708618][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1028.153181][T12336] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 1028.238893][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1028.247347][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1028.276845][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1028.277870][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1029.111434][T12346] 9pnet_fd: Insufficient options for proto=fd [ 1029.943572][ T5835] Bluetooth: hci2: command tx timeout [ 1029.994053][ T6587] bond0 (unregistering): Released all slaves [ 1030.341722][ T5154] Bluetooth: hci4: command tx timeout [ 1031.681357][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.018621][ T5835] Bluetooth: hci2: command tx timeout [ 1033.189789][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.303210][ T5835] Bluetooth: hci4: command tx timeout [ 1034.113077][ T5154] Bluetooth: hci2: command tx timeout [ 1034.975337][T12371] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1034.975371][T12371] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1034.975809][T12371] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1034.975829][T12371] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1035.400154][ T5154] Bluetooth: hci4: command tx timeout [ 1035.522600][ T6587] bond0 (unregistering): Released all slaves [ 1037.094736][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.667635][ T5154] Bluetooth: hci4: command tx timeout [ 1038.510570][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.620941][ T6587] bond0 (unregistering): Released all slaves [ 1039.072036][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.209846][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.282458][ T6587] bond0 (unregistering): Released all slaves [ 1039.728161][T11951] hsr_slave_0: entered promiscuous mode [ 1039.733293][T11951] hsr_slave_1: entered promiscuous mode [ 1039.734536][T11951] debugfs: 'hsr0' already exists in 'hsr' [ 1039.734563][T11951] Cannot create hsr debugfs directory [ 1040.976200][T12411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1581'. [ 1041.782352][T12402] ALSA: mixer_oss: invalid OSS volume '' [ 1043.973316][T12175] chnl_net:caif_netlink_parms(): no params data found [ 1045.430171][ T37] audit: type=1800 audit(1756523438.537:1965): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1587" name="nullb0" dev="tmpfs" ino=1511 res=0 errno=0 [ 1045.528141][T12434] 9pnet_fd: Insufficient options for proto=fd [ 1045.986177][T12448] Invalid logical block size (16384) [ 1046.887637][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.023235][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.607596][T12453] overlayfs: failed to clone upperpath [ 1048.001428][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.885962][T12461] /dev/nullb0: Can't lookup blockdev [ 1049.928556][ T6587] hsr_slave_0: left promiscuous mode [ 1049.978382][ T6587] hsr_slave_1: left promiscuous mode [ 1049.979471][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.029391][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.496206][T12477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.501436][T12477] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1054.956941][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.957030][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.714042][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 1056.716208][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1056.717624][T12493] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1058.452836][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1059.750517][ T37] audit: type=1800 audit(1756523452.797:1966): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1600" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1059.779083][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 1062.280955][T12518] overlayfs: failed to clone upperpath [ 1072.478523][T12540] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1075.080211][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1075.583396][T12552] ufs: You didn't specify the type of your ufs filesystem [ 1075.583396][T12552] [ 1075.583396][T12552] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1075.583396][T12552] [ 1075.583396][T12552] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1075.584812][T12552] ufs: ufstype=old is supported read-only [ 1075.629957][T12552] I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1076.416490][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1076.421664][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1076.437096][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1078.399519][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1078.400387][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1078.872215][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1081.446037][ T5835] Bluetooth: hci5: command tx timeout [ 1082.511959][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1082.779300][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1083.459231][ T5835] Bluetooth: hci5: command tx timeout [ 1083.498177][T12175] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1084.211011][T11625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1084.218547][T11625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1084.888777][T11625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1084.907161][T11625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1084.917809][T11625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1085.016004][ C0] vkms_vblank_simulate: vblank timer overrun [ 1085.548457][T11625] Bluetooth: hci5: command tx timeout [ 1086.937762][ C0] vkms_vblank_simulate: vblank timer overrun [ 1086.999670][T12603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.028950][T12603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.032710][T12603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.481761][T12599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1087.481792][T12599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1087.503338][T12608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.524102][T12603] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.540168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.563246][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.573722][T11625] Bluetooth: hci6: command tx timeout [ 1087.618542][ T5835] Bluetooth: hci5: command tx timeout [ 1087.705425][T12599] vhci_hcd vhci_hcd.0: Device attached [ 1087.738707][T12603] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(20) [ 1087.738739][T12603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1087.738811][T12603] vhci_hcd vhci_hcd.0: Device attached [ 1087.803870][T12599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.905299][T12599] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1088.012021][T12609] vhci_hcd: connection closed [ 1088.042958][ T1920] vhci_hcd: stop threads [ 1088.054707][T12604] vhci_hcd: connection closed [ 1088.065184][ T1920] vhci_hcd: release socket [ 1088.123396][T10011] vhci_hcd: vhci_device speed not set [ 1088.477326][T10011] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1088.510172][ T1920] vhci_hcd: disconnect device [ 1088.522001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1088.527325][T12605] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1088.527467][ T1920] vhci_hcd: stop threads [ 1088.527484][ T1920] vhci_hcd: release socket [ 1088.527557][ T1920] vhci_hcd: disconnect device [ 1088.539708][T11625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1089.397981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.438574][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.618415][ T5154] Bluetooth: hci6: command tx timeout [ 1089.668539][T11625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1089.698665][T11625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1089.715379][T11625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1089.716344][T11625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1094.145359][T11625] Bluetooth: hci6: command tx timeout [ 1094.145438][T11625] Bluetooth: hci3: command tx timeout [ 1094.869699][T10011] vhci_hcd: vhci_device speed not set [ 1096.517014][ T5835] Bluetooth: hci3: command tx timeout [ 1096.517029][T11625] Bluetooth: hci6: command tx timeout [ 1097.231410][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1624'. [ 1097.520296][T12645] ISOFS: Unable to identify CD-ROM format. [ 1098.744465][T11625] Bluetooth: hci3: command tx timeout [ 1100.818684][T11625] Bluetooth: hci3: command tx timeout [ 1103.644462][T12584] chnl_net:caif_netlink_parms(): no params data found [ 1103.671612][T12550] chnl_net:caif_netlink_parms(): no params data found [ 1103.926402][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1631'. [ 1106.384841][T12703] 9pnet_fd: Insufficient options for proto=fd [ 1108.784178][T12717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1109.772943][T10011] libceph: connect (1)[c::]:6789 error -101 [ 1109.773201][T10011] libceph: mon0 (1)[c::]:6789 connect error [ 1109.777568][T10011] libceph: connect (1)[c::]:6789 error -101 [ 1109.777807][T10011] libceph: mon0 (1)[c::]:6789 connect error [ 1109.856186][T12725] ceph: No mds server is up or the cluster is laggy [ 1110.097353][T10011] libceph: connect (1)[c::]:6789 error -101 [ 1110.504506][T10011] libceph: mon0 (1)[c::]:6789 connect error [ 1110.738573][T12550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.738744][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.739021][T12550] bridge_slave_0: entered allmulticast mode [ 1110.759446][T12550] bridge_slave_0: entered promiscuous mode [ 1110.769607][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.769752][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.769986][T12584] bridge_slave_0: entered allmulticast mode [ 1110.788730][T12584] bridge_slave_0: entered promiscuous mode [ 1110.807373][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1637'. [ 1110.854065][T12550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.856210][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.856503][T12550] bridge_slave_1: entered allmulticast mode [ 1110.866619][T12550] bridge_slave_1: entered promiscuous mode [ 1110.958525][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.989842][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.990131][T12584] bridge_slave_1: entered allmulticast mode [ 1111.002194][T12584] bridge_slave_1: entered promiscuous mode [ 1115.381555][T12765] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1115.446965][T12550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.484092][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.531931][T12550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.563266][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.589095][T12615] chnl_net:caif_netlink_parms(): no params data found [ 1116.368789][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1645'. [ 1116.858882][T12781] No source specified [ 1117.264456][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.264546][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.471304][T12792] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1122.970383][T12550] team0: Port device team_slave_0 added [ 1123.486367][T12584] team0: Port device team_slave_0 added [ 1123.622677][T12814] netlink: 'syz.5.1651': attribute type 7 has an invalid length. [ 1123.622702][T12814] netlink: 'syz.5.1651': attribute type 8 has an invalid length. [ 1123.980676][T12550] team0: Port device team_slave_1 added [ 1124.080238][T12817] openvswitch: netlink: Flow key attr not present in new flow. [ 1124.111463][T12817] Invalid source name [ 1124.111515][T12817] UBIFS error (pid: 12817): cannot open "./file0", error -22 [ 1125.151609][T12584] team0: Port device team_slave_1 added [ 1127.073620][T12822] : entered promiscuous mode [ 1128.215316][T12550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.215337][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.215367][T12550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.406407][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.406421][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.406438][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.457064][T12550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.457085][T12550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.457116][T12550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.034384][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.034406][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.034436][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.998524][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.998634][T12615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.998826][T12615] bridge_slave_0: entered allmulticast mode [ 1132.006712][T12615] bridge_slave_0: entered promiscuous mode [ 1132.148552][T12858] netlink: 79 bytes leftover after parsing attributes in process `syz.5.1658'. [ 1132.579390][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.579561][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.579799][T12615] bridge_slave_1: entered allmulticast mode [ 1132.689915][T12615] bridge_slave_1: entered promiscuous mode [ 1132.802234][T11625] Bluetooth: hci0: unexpected event for opcode 0x080f [ 1133.232214][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1133.237355][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1133.255261][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1133.295557][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1133.296657][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1133.582536][T12584] hsr_slave_0: entered promiscuous mode [ 1133.596795][T12584] hsr_slave_1: entered promiscuous mode [ 1133.658561][T12584] debugfs: 'hsr0' already exists in 'hsr' [ 1133.658597][T12584] Cannot create hsr debugfs directory [ 1135.765913][ T5835] Bluetooth: hci2: command tx timeout [ 1136.265495][T12615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.485847][ T6587] bridge_slave_1: left allmulticast mode [ 1136.485885][ T6587] bridge_slave_1: left promiscuous mode [ 1136.486169][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.044273][ T5835] Bluetooth: hci2: command tx timeout [ 1139.287861][ T6587] bridge_slave_0: left allmulticast mode [ 1139.287903][ T6587] bridge_slave_0: left promiscuous mode [ 1139.288339][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.588599][ T6587] bridge_slave_1: left allmulticast mode [ 1139.588637][ T6587] bridge_slave_1: left promiscuous mode [ 1139.588934][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.747220][T12904] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1142.950060][ T5835] Bluetooth: hci2: command tx timeout [ 1143.243205][ T6587] bridge_slave_0: left allmulticast mode [ 1143.243244][ T6587] bridge_slave_0: left promiscuous mode [ 1143.243557][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.871300][ T6587] bond0 (unregistering): Released all slaves [ 1144.179890][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.309524][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.374177][ T6587] bond0 (unregistering): Released all slaves [ 1145.084871][ T5835] Bluetooth: hci2: command tx timeout [ 1146.426415][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.582723][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.850120][ T6587] bond0 (unregistering): Released all slaves [ 1147.601971][T12939] tipc: Started in network mode [ 1147.601997][T12939] tipc: Node identity 4, cluster identity 4711 [ 1147.602011][T12939] tipc: Node number set to 4 [ 1147.869713][T12615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.112773][T11625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1148.211599][T11625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1148.235680][T11625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1148.260241][T11625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1148.268550][T11625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1150.086553][ T6587] hsr_slave_0: left promiscuous mode [ 1150.118871][ T6587] hsr_slave_1: left promiscuous mode [ 1150.119973][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.161977][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.219516][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.248289][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.450473][T11625] Bluetooth: hci4: command tx timeout [ 1152.510961][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1152.688452][ T5835] Bluetooth: hci4: command tx timeout [ 1152.727695][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1152.752354][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1152.757504][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1152.779889][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1152.780942][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1153.247101][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1154.738499][T11625] Bluetooth: hci4: command tx timeout [ 1155.165630][T11625] Bluetooth: hci3: command tx timeout [ 1156.599442][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1156.759580][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1156.818402][T11625] Bluetooth: hci4: command tx timeout [ 1156.828110][ T37] audit: type=1804 audit(1756523549.947:1967): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1675" name="file0" dev="tmpfs" ino=3433 res=1 errno=0 [ 1157.228473][T11625] Bluetooth: hci3: command tx timeout [ 1159.101671][T12987] netlink: 384 bytes leftover after parsing attributes in process `syz.4.1677'. [ 1159.102577][T12987] netlink: 'syz.4.1677': attribute type 2 has an invalid length. [ 1159.554954][T11625] Bluetooth: hci3: command tx timeout [ 1161.075612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1161.483324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.140604][T11625] Bluetooth: hci3: command tx timeout [ 1162.556147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.611100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.938566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.059973][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.200581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.229322][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.274763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.322965][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.480273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.522460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1163.916902][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.375515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.081845][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.255406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.303998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.476147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1167.049651][T12863] chnl_net:caif_netlink_parms(): no params data found [ 1167.626104][T13028] overlayfs: failed to clone lowerpath [ 1168.520672][T12942] chnl_net:caif_netlink_parms(): no params data found [ 1168.678419][T12868] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1168.832173][T12868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.832239][T12868] usb 6-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1168.832267][T12868] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1168.841256][T12868] usb 6-1: string descriptor 0 read error: -22 [ 1168.841471][T12868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.841497][T12868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.868586][T12868] usb 6-1: bad CDC descriptors [ 1169.962294][T12868] usb 6-1: USB disconnect, device number 21 [ 1172.261431][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.261687][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.261937][T12863] bridge_slave_0: entered allmulticast mode [ 1173.221483][T12863] bridge_slave_0: entered promiscuous mode [ 1173.254276][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.254432][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.254669][T12863] bridge_slave_1: entered allmulticast mode [ 1173.271353][T12863] bridge_slave_1: entered promiscuous mode [ 1173.520120][T12052] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1173.702596][T12052] usb 6-1: Using ep0 maxpacket: 8 [ 1173.704895][T12052] usb 6-1: config 162 has an invalid interface number: 245 but max is 0 [ 1173.704914][T12052] usb 6-1: config 162 has no interface number 0 [ 1173.704943][T12052] usb 6-1: config 162 interface 245 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1173.704957][T12052] usb 6-1: config 162 interface 245 has no altsetting 0 [ 1173.706963][T12052] usb 6-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1173.706981][T12052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.706992][T12052] usb 6-1: Product: syz [ 1173.707000][T12052] usb 6-1: Manufacturer: syz [ 1173.707008][T12052] usb 6-1: SerialNumber: syz [ 1174.014309][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 1174.100788][T12052] usb 6-1: USB disconnect, device number 22 [ 1174.567536][T12942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.567709][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.567952][T12942] bridge_slave_0: entered allmulticast mode [ 1174.572250][T12942] bridge_slave_0: entered promiscuous mode [ 1174.592504][T12863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.614238][T12942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.614632][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.614904][T12942] bridge_slave_1: entered allmulticast mode [ 1174.624000][T12942] bridge_slave_1: entered promiscuous mode [ 1174.729377][T12863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.654654][T13069] openvswitch: : Dropping previously announced user features [ 1177.064900][T13075] trusted_key: encrypted_key: insufficient parameters specified [ 1178.026368][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.026462][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.472187][T12942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.490416][T12863] team0: Port device team_slave_0 added [ 1178.491710][T12964] chnl_net:caif_netlink_parms(): no params data found [ 1179.497880][T12942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.512860][T12863] team0: Port device team_slave_1 added [ 1182.902214][T13105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1702'. [ 1183.124890][T12942] team0: Port device team_slave_0 added [ 1183.165562][T12863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.165582][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.165611][T12863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.388503][T12942] team0: Port device team_slave_1 added [ 1183.453916][T12863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.453936][T12863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.453966][T12863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.778634][T10011] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1183.944118][T12942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.944139][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.944168][T12942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.959759][T10011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1183.959789][T10011] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1183.959811][T10011] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1183.962040][T10011] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1183.962069][T10011] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1183.962090][T10011] usb 6-1: Manufacturer: syz [ 1183.980073][T10011] usb 6-1: config 0 descriptor?? [ 1184.002509][T10011] smsusb:smsusb_probe: board id=9, interface number 0 [ 1184.008528][T10011] smsusb:smsusb_probe: Device initialized with return code -19 [ 1184.165852][T12942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.165882][T12942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.165911][T12942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.264915][T10011] usb 6-1: USB disconnect, device number 23 [ 1184.339053][T12964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.339226][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.339496][T12964] bridge_slave_0: entered allmulticast mode [ 1184.343709][T12964] bridge_slave_0: entered promiscuous mode [ 1184.545952][T12964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.546127][T12964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.546374][T12964] bridge_slave_1: entered allmulticast mode [ 1184.553364][T12964] bridge_slave_1: entered promiscuous mode [ 1184.602343][T12863] hsr_slave_0: entered promiscuous mode [ 1184.613662][T12863] hsr_slave_1: entered promiscuous mode [ 1184.614767][T12863] debugfs: 'hsr0' already exists in 'hsr' [ 1184.614792][T12863] Cannot create hsr debugfs directory [ 1185.432878][T12964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.154657][T12942] hsr_slave_0: entered promiscuous mode [ 1187.156328][T12942] hsr_slave_1: entered promiscuous mode [ 1187.157409][T12942] debugfs: 'hsr0' already exists in 'hsr' [ 1187.157436][T12942] Cannot create hsr debugfs directory [ 1187.171954][T12964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.835803][T13151] netlink: set zone limit has 4 unknown bytes [ 1189.554686][T12964] team0: Port device team_slave_0 added [ 1189.741988][T12964] team0: Port device team_slave_1 added [ 1189.788005][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 1189.788026][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 1190.000787][ T6587] bridge_slave_1: left allmulticast mode [ 1190.000826][ T6587] bridge_slave_1: left promiscuous mode [ 1190.001129][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.070361][ T6587] bridge_slave_0: left allmulticast mode [ 1190.070401][ T6587] bridge_slave_0: left promiscuous mode [ 1190.070735][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.147473][ T6587] bridge_slave_1: left allmulticast mode [ 1190.147499][ T6587] bridge_slave_1: left promiscuous mode [ 1190.151364][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.190952][ T6587] bridge_slave_0: left allmulticast mode [ 1190.191000][ T6587] bridge_slave_0: left promiscuous mode [ 1190.191499][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.262208][ T6587] bridge_slave_1: left allmulticast mode [ 1190.262235][ T6587] bridge_slave_1: left promiscuous mode [ 1190.262443][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.311662][ T6587] bridge_slave_0: left allmulticast mode [ 1190.311737][ T6587] bridge_slave_0: left promiscuous mode [ 1190.311944][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.060290][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.179509][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.247081][ T6587] bond0 (unregistering): Released all slaves [ 1192.512511][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.589235][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.653347][ T6587] bond0 (unregistering): Released all slaves [ 1193.040995][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.129420][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.208925][ T6587] bond0 (unregistering): Released all slaves [ 1193.797466][T12964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.797487][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.797514][T12964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.800634][T12964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.800648][T12964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.800671][T12964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.228930][T11625] Bluetooth: hci0: unexpected event for opcode 0x204e [ 1196.010502][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1196.021877][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1196.024332][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1196.026242][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1196.050642][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1197.415401][T12964] hsr_slave_0: entered promiscuous mode [ 1197.424485][T12964] hsr_slave_1: entered promiscuous mode [ 1197.435736][T12964] debugfs: 'hsr0' already exists in 'hsr' [ 1197.435768][T12964] Cannot create hsr debugfs directory [ 1197.800227][ T6587] hsr_slave_0: left promiscuous mode [ 1197.841916][ T6587] hsr_slave_1: left promiscuous mode [ 1197.842978][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.889229][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.929896][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.951661][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.289981][ T5835] Bluetooth: hci5: command tx timeout [ 1198.769523][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1198.963014][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1200.338381][ T5835] Bluetooth: hci5: command tx timeout [ 1200.649716][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1200.821333][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1201.749477][T13216] random: crng reseeded on system resumption [ 1202.335119][T13225] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 1202.418449][ T5835] Bluetooth: hci5: command tx timeout [ 1203.143414][T13235] random: crng reseeded on system resumption [ 1204.498340][ T5835] Bluetooth: hci5: command tx timeout [ 1206.423564][T13188] chnl_net:caif_netlink_parms(): no params data found [ 1206.972745][ T5900] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1207.158311][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1207.160803][ T5900] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1207.160831][ T5900] usb 6-1: config 0 has no interface number 0 [ 1207.160867][ T5900] usb 6-1: config 0 interface 18 has no altsetting 0 [ 1207.164361][ T5900] usb 6-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7a.1a [ 1207.164389][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.164409][ T5900] usb 6-1: Product: syz [ 1207.164424][ T5900] usb 6-1: Manufacturer: syz [ 1207.164440][ T5900] usb 6-1: SerialNumber: syz [ 1207.233537][T12964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1207.237301][ T5900] usb 6-1: config 0 descriptor?? [ 1207.254394][ T5900] ums-sddr55 6-1:0.18: USB Mass Storage device detected [ 1207.338409][T12964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1207.671244][T12868] usb 6-1: USB disconnect, device number 24 [ 1207.929872][T11625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1207.938590][T11625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1207.940328][T11625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1208.846428][T11625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1208.847402][T11625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1208.907306][T12964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1209.541429][T13188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.541584][T13188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.541828][T13188] bridge_slave_0: entered allmulticast mode [ 1209.553294][T13188] bridge_slave_0: entered promiscuous mode [ 1209.563304][T13188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.570851][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.571097][T13188] bridge_slave_1: entered allmulticast mode [ 1209.580709][T13188] bridge_slave_1: entered promiscuous mode [ 1210.155992][T13188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.172051][T13188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.596360][T13188] team0: Port device team_slave_0 added [ 1210.711288][T13273] trusted_key: syz.4.1759 sent an empty control message without MSG_MORE. [ 1211.058608][T11625] Bluetooth: hci2: command tx timeout [ 1211.131906][T13188] team0: Port device team_slave_1 added [ 1211.971809][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1212.011159][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1212.019191][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1212.033983][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1212.034977][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1212.214449][T13284] capability: warning: `syz.5.1762' uses 32-bit capabilities (legacy support in use) [ 1212.829541][T13188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.829561][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.829591][T13188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.873574][T13188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.873591][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.873616][T13188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.138486][T11625] Bluetooth: hci2: command tx timeout [ 1214.178685][T11625] Bluetooth: hci3: command tx timeout [ 1215.229095][T11625] Bluetooth: hci2: command tx timeout [ 1215.717297][T13188] hsr_slave_0: entered promiscuous mode [ 1215.719918][T13188] hsr_slave_1: entered promiscuous mode [ 1215.722558][T13188] debugfs: 'hsr0' already exists in 'hsr' [ 1215.722583][T13188] Cannot create hsr debugfs directory [ 1216.260795][T11625] Bluetooth: hci3: command tx timeout [ 1217.600380][T11625] Bluetooth: hci2: command tx timeout [ 1217.652345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.169984][T13260] chnl_net:caif_netlink_parms(): no params data found [ 1218.338492][T11625] Bluetooth: hci3: command tx timeout [ 1219.154664][T13357] tipc: Enabled bearer , priority 10 [ 1219.274707][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 1219.274740][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 1219.526260][T13361] macvlan2: entered promiscuous mode [ 1219.759405][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.759701][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.759979][T13260] bridge_slave_0: entered allmulticast mode [ 1219.772214][T13260] bridge_slave_0: entered promiscuous mode [ 1220.173643][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.173822][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.174092][T13260] bridge_slave_1: entered allmulticast mode [ 1220.197353][T13260] bridge_slave_1: entered promiscuous mode [ 1220.418801][T11625] Bluetooth: hci3: command tx timeout [ 1221.074957][T13375] tipc: Started in network mode [ 1221.074987][T13375] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1221.088464][T13375] tipc: Enabled bearer , priority 2 [ 1221.492342][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.992184][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.025305][T13277] chnl_net:caif_netlink_parms(): no params data found [ 1222.084346][ T5978] tipc: Node number set to 10070698 [ 1222.615839][T13382] kexec: Could not allocate control_code_buffer [ 1223.010391][T13260] team0: Port device team_slave_0 added [ 1223.313782][T13260] team0: Port device team_slave_1 added [ 1224.931555][T13418] loop7: detected capacity change from 0 to 7 [ 1225.047584][T13218] Dev loop7: unable to read RDB block 7 [ 1225.047621][T13218] loop7: AHDI p1 p2 [ 1225.047659][T13218] loop7: partition table partially beyond EOD, truncated [ 1225.048008][T13218] loop7: p1 start 1702000233 is beyond EOD, truncated [ 1225.119125][T13418] Dev loop7: unable to read RDB block 7 [ 1225.119163][T13418] loop7: AHDI p1 p2 [ 1225.119195][T13418] loop7: partition table partially beyond EOD, truncated [ 1225.119534][T13418] loop7: p1 start 1702000233 is beyond EOD, truncated [ 1225.122368][T13414] lo: entered allmulticast mode [ 1225.219813][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.219832][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.219860][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.435861][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.435881][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.435912][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.774353][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.774521][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.774786][T13277] bridge_slave_0: entered allmulticast mode [ 1225.778410][T13277] bridge_slave_0: entered promiscuous mode [ 1226.040036][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.041403][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.041688][T13277] bridge_slave_1: entered allmulticast mode [ 1226.054799][T13277] bridge_slave_1: entered promiscuous mode [ 1226.690747][T13260] hsr_slave_0: entered promiscuous mode [ 1226.692159][T13260] hsr_slave_1: entered promiscuous mode [ 1226.694588][T13260] debugfs: 'hsr0' already exists in 'hsr' [ 1226.694618][T13260] Cannot create hsr debugfs directory [ 1226.705887][T13277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.776954][T13277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.291318][T13277] team0: Port device team_slave_0 added [ 1227.380759][ T6587] bridge_slave_1: left allmulticast mode [ 1227.388400][ T6587] bridge_slave_1: left promiscuous mode [ 1227.388731][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.445766][ T6587] bridge_slave_0: left allmulticast mode [ 1227.445805][ T6587] bridge_slave_0: left promiscuous mode [ 1227.446110][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.502763][ T6587] bridge_slave_1: left allmulticast mode [ 1227.502788][ T6587] bridge_slave_1: left promiscuous mode [ 1227.502955][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.560351][ T6587] bridge_slave_0: left allmulticast mode [ 1227.560390][ T6587] bridge_slave_0: left promiscuous mode [ 1227.560695][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.624439][ T6587] bridge_slave_1: left allmulticast mode [ 1227.624478][ T6587] bridge_slave_1: left promiscuous mode [ 1227.624766][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.680474][ T6587] bridge_slave_0: left allmulticast mode [ 1227.680510][ T6587] bridge_slave_0: left promiscuous mode [ 1227.680685][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.140657][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.225113][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.283058][ T6587] bond0 (unregistering): Released all slaves [ 1228.599431][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.699102][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.764376][ T6587] bond0 (unregistering): Released all slaves [ 1229.062766][ T6587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.142418][ T6587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.203839][ T6587] bond0 (unregistering): Released all slaves [ 1229.278743][T13277] team0: Port device team_slave_1 added [ 1229.781789][T13188] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1229.867361][T13277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.867379][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.867408][T13277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.963211][T13188] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1230.067202][T13277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.067221][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.067250][T13277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.071310][T13188] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1230.231868][T13188] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1230.808361][ T6587] hsr_slave_0: left promiscuous mode [ 1230.838684][ T6587] hsr_slave_1: left promiscuous mode [ 1230.839892][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.889775][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.028878][ T6587] hsr_slave_0: left promiscuous mode [ 1231.068699][ T6587] hsr_slave_1: left promiscuous mode [ 1231.070786][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.109611][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.198401][ T6587] hsr_slave_0: left promiscuous mode [ 1231.240656][ T6587] hsr_slave_1: left promiscuous mode [ 1231.244495][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.262137][ T6587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.221446][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1232.400182][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1234.139999][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1234.316229][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1235.811228][ T6587] team0 (unregistering): Port device team_slave_1 removed [ 1235.999610][ T6587] team0 (unregistering): Port device team_slave_0 removed [ 1236.804888][T13277] hsr_slave_0: entered promiscuous mode [ 1236.806588][T13277] hsr_slave_1: entered promiscuous mode [ 1236.807666][T13277] debugfs: 'hsr0' already exists in 'hsr' [ 1236.807692][T13277] Cannot create hsr debugfs directory [ 1238.717254][T13188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.985615][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.985703][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.050971][T13188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.183454][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.183737][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.212899][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.213098][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.923948][T13188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.082537][T13260] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1241.186563][T13260] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1241.293552][T13260] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1241.385758][T13260] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1242.070337][T13277] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1242.152393][T13277] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1242.206879][T13277] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1242.267691][T13277] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1242.638229][T13188] veth0_vlan: entered promiscuous mode [ 1242.703308][T13188] veth1_vlan: entered promiscuous mode [ 1242.812365][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.924225][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.956539][T13188] veth0_macvtap: entered promiscuous mode [ 1242.986334][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.986617][ T7677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.035371][T13188] veth1_macvtap: entered promiscuous mode [ 1243.049921][T13277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.061807][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.061964][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.187601][T13188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.207833][T13277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.257721][T13188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.277739][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.278029][ T6587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.347533][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.347650][ T6587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.353955][T12201] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.376135][ T6587] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.386755][ T6587] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.396649][ T6587] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.133744][ T7677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.133771][ T7677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.317154][ T6587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.317178][ T6587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.517962][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.497138][T13277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.602356][T13260] veth0_vlan: entered promiscuous mode [ 1247.719958][T13260] veth1_vlan: entered promiscuous mode [ 1248.028968][T13260] veth0_macvtap: entered promiscuous mode [ 1248.072116][T13260] veth1_macvtap: entered promiscuous mode [ 1248.109032][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.211536][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.278643][T12205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.306370][ T2239] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.315175][ T83] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.318098][ T83] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.127182][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.127281][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.298620][T13277] veth0_vlan: entered promiscuous mode [ 1249.514974][T12205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.514998][T12205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.555513][T13541] syzkaller1: entered promiscuous mode [ 1249.555548][T13541] syzkaller1: entered allmulticast mode [ 1249.589081][T13277] veth1_vlan: entered promiscuous mode [ 1250.315389][T13277] veth0_macvtap: entered promiscuous mode [ 1250.333698][T13277] veth1_macvtap: entered promiscuous mode [ 1250.512224][T13277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.649890][T13277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.142143][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.142934][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.143386][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.144861][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.659165][T13573] netlink: 'syz.8.1842': attribute type 1 has an invalid length. [ 1251.659226][T13573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1251.659457][T13573] IPv6: NLM_F_CREATE should be set when creating new route [ 1251.659496][T13573] IPv6: NLM_F_CREATE should be set when creating new route [ 1251.708057][T13573] netlink: 'syz.8.1842': attribute type 1 has an invalid length. [ 1251.716614][T13573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1252.133365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.133387][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.532168][T10011] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1252.578436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.578458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.612100][T12052] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1252.695681][T10011] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1252.696500][T10011] usb 9-1: not running at top speed; connect to a high speed hub [ 1252.714055][T10011] usb 9-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1252.714103][T10011] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1252.748675][T10011] usb 9-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1252.748708][T10011] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.748728][T10011] usb 9-1: Product: syz [ 1252.748742][T10011] usb 9-1: Manufacturer: syz [ 1252.748757][T10011] usb 9-1: SerialNumber: syz [ 1252.768441][T12052] usb 8-1: Using ep0 maxpacket: 8 [ 1252.800238][T12052] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1252.800271][T12052] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1252.800296][T12052] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1252.800326][T12052] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.800372][T12052] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1252.800396][T12052] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.168445][T12052] usb 8-1: GET_CAPABILITIES returned 0 [ 1253.168513][T12052] usbtmc 8-1:16.0: can't read capabilities [ 1253.276460][T10011] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input24 [ 1253.305287][ T5190] bcm5974 9-1:1.0: could not read from device [ 1253.396040][T10011] usb 9-1: USB disconnect, device number 2 [ 1253.402743][ T5190] bcm5974 9-1:1.0: could not read from device [ 1253.423037][T12052] usb 8-1: USB disconnect, device number 2 [ 1254.858310][T10011] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1255.021901][T10011] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1255.023014][T10011] usb 6-1: not running at top speed; connect to a high speed hub [ 1255.024799][T10011] usb 6-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 1255.024832][T10011] usb 6-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 1255.024861][T10011] usb 6-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1255.024888][T10011] usb 6-1: config 187 interface 0 has no altsetting 0 [ 1255.101797][T10011] usb 6-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 1255.101833][T10011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.101854][T10011] usb 6-1: Product: syz [ 1255.101868][T10011] usb 6-1: Manufacturer: syz [ 1255.101883][T10011] usb 6-1: SerialNumber: syz [ 1255.153740][T13618] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1255.154381][T13618] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1255.503834][T10011] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1255.912397][T10011] usb 6-1: USB disconnect, device number 25 [ 1256.581169][T13587] udevd[13587]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:187.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.798343][T12052] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1257.971607][T12052] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.971644][T12052] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.971667][T12052] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1257.971715][T12052] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1257.971740][T12052] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.978117][T12052] usb 8-1: config 0 descriptor?? [ 1258.502788][T12052] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1258.533626][T12052] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1258.808817][T12052] usb 8-1: USB disconnect, device number 3 [ 1260.482790][ T37] audit: type=1400 audit(1756524106.605:1968): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=13729 comm="syz.5.1897" saddr=172.20.20.187 src=20004 daddr=172.20.20.15 dest=20000 netif=wpan0 [ 1260.739170][T10939] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1260.907830][T10939] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1260.907863][T10939] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1260.907883][T10939] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1260.907937][T10939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1260.907965][T10939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1260.918551][T10939] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1260.918581][T10939] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1260.918599][T10939] usb 7-1: Product: syz [ 1260.918612][T10939] usb 7-1: Manufacturer: syz [ 1260.989329][T10939] cdc_wdm 7-1:1.0: skipping garbage [ 1260.989349][T10939] cdc_wdm 7-1:1.0: skipping garbage [ 1261.009429][T10939] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1261.009453][T10939] cdc_wdm 7-1:1.0: Unknown control protocol [ 1261.394900][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 1261.508798][ T5900] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1261.662223][ T5900] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1261.662257][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.692285][ T5900] usb 9-1: config 0 descriptor?? [ 1261.707162][ T5900] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1262.131423][ T5900] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 1262.555147][ T5900] gspca_cpia1: usb_control_msg 02, error -71 [ 1262.555705][ T5900] gspca_cpia1: usb_control_msg 05, error -71 [ 1262.555722][ T5900] cpia1 9-1:0.0: unexpected systemstate: 00 [ 1262.585103][ T5900] usb 9-1: USB disconnect, device number 3 [ 1262.746020][T13781] netlink: 'syz.7.1915': attribute type 4 has an invalid length. [ 1262.746046][T13781] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1915'. [ 1263.399950][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 1264.172067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.228387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.313200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.641863][T10939] usb 7-1: USB disconnect, device number 2 [ 1264.889268][T13800] loop2: detected capacity change from 0 to 7 [ 1264.922060][T13800] Dev loop2: unable to read RDB block 7 [ 1264.922118][T13800] loop2: unable to read partition table [ 1264.922377][T13800] loop2: partition table beyond EOD, truncated [ 1264.922398][T13800] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1265.145842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.255230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.311943][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 1266.443675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.984033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.017624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.012183][T13834] sctp: [Deprecated]: syz.8.1933 (pid 13834) Use of int in max_burst socket option deprecated. [ 1268.012183][T13834] Use struct sctp_assoc_value instead [ 1268.197038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1268.299356][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1268.448270][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1268.451402][ T31] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 1268.451431][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.451451][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1268.451472][ T31] usb 7-1: config 1 has no interface number 0 [ 1268.451523][ T31] usb 7-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1268.455019][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.455048][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.455068][ T31] usb 7-1: Product: syz [ 1268.455083][ T31] usb 7-1: Manufacturer: syz [ 1268.455097][ T31] usb 7-1: SerialNumber: syz [ 1268.634298][ T31] cdc_wdm 7-1:1.128: skipping garbage [ 1268.634322][ T31] cdc_wdm 7-1:1.128: skipping garbage [ 1268.634336][ T31] cdc_wdm 7-1:1.128: invalid descriptor buffer length [ 1268.634378][ T31] cdc_wdm 7-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1268.717700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1269.800426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1269.886140][ T5900] usb 7-1: USB disconnect, device number 3 [ 1270.062946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1270.369617][ T37] audit: type=1326 audit(1756524569.502:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13856 comm="syz.8.1943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f783862ebe9 code=0x0 [ 1270.828080][T12052] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1270.998451][T12052] usb 8-1: Using ep0 maxpacket: 32 [ 1271.001498][T12052] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1271.001528][T12052] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.042930][T12052] usb 8-1: config 0 descriptor?? [ 1271.319366][T12052] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1271.346642][T12052] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1271.359947][T12052] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1271.360010][T12052] usb 8-1: media controller created [ 1271.431321][T12052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1271.529203][T12052] az6027: usb out operation failed. (-71) [ 1271.532323][T12052] az6027: usb out operation failed. (-71) [ 1271.532342][T12052] stb0899_attach: Driver disabled by Kconfig [ 1271.532353][T12052] az6027: no front-end attached [ 1271.532353][T12052] [ 1271.532906][T12052] az6027: usb out operation failed. (-71) [ 1271.532922][T12052] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1271.536396][T12052] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input25 [ 1271.593037][T12052] dvb-usb: schedule remote query interval to 400 msecs. [ 1271.593061][T12052] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1271.596426][T12052] usb 8-1: USB disconnect, device number 4 [ 1271.793923][T12052] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1272.498301][T12052] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1272.656106][T12052] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1272.656139][T12052] usb 9-1: config 0 has no interface number 0 [ 1272.677302][T12052] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1272.677335][T12052] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.677356][T12052] usb 9-1: Product: syz [ 1272.677371][T12052] usb 9-1: Manufacturer: syz [ 1272.677499][T12052] usb 9-1: SerialNumber: syz [ 1272.732574][T12052] usb 9-1: config 0 descriptor?? [ 1273.074763][T12052] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1273.105325][T12052] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1273.105438][T12052] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1273.105552][T12052] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1273.159414][T12052] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1273.186388][T12052] usb 9-1: USB disconnect, device number 4 [ 1273.230212][T12052] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1273.231072][T12052] keyspan 9-1:0.133: device disconnected [ 1273.415730][T13906] netlink: 'syz.5.1962': attribute type 9 has an invalid length. [ 1273.415759][T13906] netlink: 212160 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1273.724494][T13916] overlayfs: failed to clone upperpath [ 1274.158323][ T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1274.311853][ T31] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1274.311893][ T31] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1274.311936][ T31] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1274.311961][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.370320][T13921] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1274.396793][ T31] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1274.418328][T12868] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1274.576835][T12868] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1274.576923][T12868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1274.576951][T12868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1274.576978][T12868] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1274.580799][T12868] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1274.580825][T12868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.607616][T12868] usb 8-1: config 0 descriptor?? [ 1274.644247][T13929] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1274.702423][T10939] usb 9-1: USB disconnect, device number 5 [ 1275.155648][T12868] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1275.155688][T12868] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1275.155722][T12868] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1275.155748][T12868] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1275.155774][T12868] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1275.155800][T12868] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1275.199945][T12868] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1275.288264][ T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1275.456828][T12052] usb 8-1: USB disconnect, device number 5 [ 1275.470306][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1275.477598][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.477635][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.477678][ T31] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1275.477703][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.573525][ T31] usb 6-1: config 0 descriptor?? [ 1276.062730][ T31] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1276.302317][T12052] usb 6-1: USB disconnect, device number 26 [ 1279.439126][T12868] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1279.609318][T12868] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.609450][T12868] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1279.609478][T12868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1279.609502][T12868] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1279.620164][T12868] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1279.620329][T12868] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1279.620356][T12868] usb 9-1: Product: syz [ 1279.620369][T12868] usb 9-1: Manufacturer: syz [ 1279.620389][T12868] usb 9-1: SerialNumber: syz [ 1279.645242][T12868] usb 9-1: config 0 descriptor?? [ 1279.756219][T12868] radio-si470x 9-1:0.0: could not find interrupt in endpoint [ 1279.756329][T12868] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1279.756943][T12868] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1281.324066][T12201] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1281.457579][T14043] loop2: detected capacity change from 0 to 7 [ 1281.470548][T14043] Dev loop2: unable to read RDB block 7 [ 1281.470598][T14043] loop2: unable to read partition table [ 1281.470875][T14043] loop2: partition table beyond EOD, truncated [ 1281.470896][T14043] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1283.328570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.544555][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.560550][ T5978] usb 9-1: USB disconnect, device number 6 [ 1283.628259][ T5921] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1284.379352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.405152][ T5921] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1284.405186][ T5921] usb 6-1: config 0 has no interface number 0 [ 1284.405351][ T5921] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1284.405381][ T5921] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1284.447764][ T5921] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1284.447800][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.447821][ T5921] usb 6-1: Product: syz [ 1284.447836][ T5921] usb 6-1: Manufacturer: syz [ 1284.447851][ T5921] usb 6-1: SerialNumber: syz [ 1284.491423][ T5921] usb 6-1: config 0 descriptor?? [ 1284.492334][T14054] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1284.496188][ T5921] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1284.531191][T14067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.563330][ T5921] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1284.946950][ T31] usb 6-1: USB disconnect, device number 27 [ 1284.995464][ T31] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1284.996209][ T31] cyberjack 6-1:0.69: device disconnected [ 1285.429026][ T37] audit: type=1326 audit(1756525037.567:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14081 comm="syz.6.2024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f3555ebe9 code=0x0 [ 1285.914835][ C1] vkms_vblank_simulate: vblank timer overrun [ 1286.546073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.040146][ T5921] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1287.202957][ T5921] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1287.203097][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.203119][ T5921] usb 6-1: Product: syz [ 1287.203134][ T5921] usb 6-1: Manufacturer: syz [ 1287.203148][ T5921] usb 6-1: SerialNumber: syz [ 1287.261790][ T5921] usb 6-1: config 0 descriptor?? [ 1287.298675][ T5921] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1287.378905][T12868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1287.537500][T12868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1287.537614][T12868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1287.537643][T12868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1287.537666][T12868] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1287.537780][T12868] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1287.537805][T12868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.671901][T12868] usb 7-1: config 0 descriptor?? [ 1287.948362][ T31] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1288.183871][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.183901][ T31] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1288.183960][ T31] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1288.183984][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.222366][ T31] usb 9-1: config 0 descriptor?? [ 1288.234404][T12868] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 1288.237317][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1288.237551][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 1288.253278][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1288.255307][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1288.255365][ T31] usb 9-1: media controller created [ 1288.260756][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.393444][T10011] usb 6-1: USB disconnect, device number 28 [ 1288.493565][T12868] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1288.511231][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 1288.511458][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1288.596222][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26 [ 1288.637878][T12868] usb 7-1: USB disconnect, device number 4 [ 1288.695620][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 1288.695646][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1288.852391][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 1288.853911][ T31] dvb-usb: error while querying for an remote control event. [ 1289.008359][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1289.008402][ T5900] dvb-usb: error while querying for an remote control event. [ 1289.168316][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 1289.168355][ T31] dvb-usb: error while querying for an remote control event. [ 1289.352313][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1289.352347][ T5900] dvb-usb: error while querying for an remote control event. [ 1289.398255][T12868] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1289.508362][T10011] dvb-usb: bulk message failed: -22 (1/0) [ 1289.508401][T10011] dvb-usb: error while querying for an remote control event. [ 1289.553645][T12868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.553682][T12868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.553706][T12868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.553749][T12868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1289.553774][T12868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.588641][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1289.589147][ T5921] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1289.612690][T10011] usb 9-1: USB disconnect, device number 7 [ 1289.665808][T12868] usb 6-1: config 0 descriptor?? [ 1289.758370][ T5921] usb 8-1: Using ep0 maxpacket: 16 [ 1289.765438][ T5921] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.765496][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1289.765522][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1289.771438][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.771495][ T31] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1289.771516][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.786153][ T31] usb 7-1: config 0 descriptor?? [ 1289.803807][T10011] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1289.860825][ T5921] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1289.860860][ T5921] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.865652][ T5921] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1289.865839][ T5921] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1289.865927][ T5921] usb 8-1: Manufacturer: syz [ 1289.933484][ T5921] usb 8-1: config 0 descriptor?? [ 1290.065378][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 1290.065522][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1290.084874][ T31] usb 7-1: USB disconnect, device number 5 [ 1290.276502][T12868] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1290.338252][ T5921] rc_core: IR keymap rc-hauppauge not found [ 1290.338277][ T5921] Registered IR keymap rc-empty [ 1290.338451][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.369334][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.391259][ T5921] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1290.395505][ T5921] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input27 [ 1290.423745][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.438613][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.454291][T12052] usb 6-1: USB disconnect, device number 29 [ 1290.462693][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.478454][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.498507][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.518644][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.538703][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.558812][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.578508][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1290.578616][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.598476][ T5921] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1290.640588][ T5921] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1290.640688][ T5921] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1290.731505][T10011] usb 8-1: USB disconnect, device number 6 [ 1290.758416][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1290.790791][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.790827][ T31] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1290.790841][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.796099][ T31] usb 7-1: config 0 descriptor?? [ 1290.833582][ T31] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1290.858810][ T31] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1291.170309][T12868] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1291.325432][T12868] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1291.325463][T12868] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.325519][T12868] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1291.325543][T12868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.472962][ T31] usb 7-1: USB disconnect, device number 6 [ 1291.506564][ T31] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1291.685183][T12868] usb 9-1: usb_control_msg returned -32 [ 1291.685239][T12868] usbtmc 9-1:16.0: can't read capabilities [ 1292.030385][T12868] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1292.200149][T12868] usb 6-1: Using ep0 maxpacket: 8 [ 1292.215366][T12868] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1292.215440][T12868] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1292.215464][T12868] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1292.215486][T12868] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1292.215525][T12868] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.215569][T12868] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1292.215603][T12868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.576209][T12868] usb 6-1: usb_control_msg returned -32 [ 1292.576267][T12868] usbtmc 6-1:16.0: can't read capabilities [ 1292.740781][ T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1292.952147][ T31] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1292.952194][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1292.952224][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1292.952252][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1292.952298][ T31] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1292.952321][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.989614][ T31] usb 8-1: config 0 descriptor?? [ 1292.992885][T14181] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1293.473398][ T31] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 1293.583858][ T31] plantronics 0003:047F:FFFF.001F: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1293.693784][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.712557][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.750185][ T5921] usb 8-1: USB disconnect, device number 7 [ 1294.073671][T12052] usb 9-1: USB disconnect, device number 8 [ 1294.945307][ T5921] usb 6-1: USB disconnect, device number 30 [ 1295.137973][T14218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.150819][T14218] batadv_slave_0: entered promiscuous mode [ 1295.349035][T12052] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1296.022994][T12052] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1296.023066][T12052] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.023103][T12052] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1296.023131][T12052] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1296.023155][T12052] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1296.023204][T12052] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1296.023228][T12052] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.120929][T12052] usb 9-1: config 0 descriptor?? [ 1296.592449][T12052] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 1296.625653][T12052] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1296.862252][T12868] usb 9-1: USB disconnect, device number 9 [ 1300.261471][T14260] netlink: 'syz.8.2084': attribute type 1 has an invalid length. [ 1300.261489][T14260] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2084'. [ 1300.261500][T14260] netlink: 'syz.8.2084': attribute type 2 has an invalid length. [ 1300.261507][T14260] netlink: 'syz.8.2084': attribute type 1 has an invalid length. [ 1300.435287][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.435376][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.853557][T14334] netlink: 'syz.7.2110': attribute type 21 has an invalid length. [ 1304.853583][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2110'. [ 1304.954143][ T2239] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.962926][T14334] netlink: 'syz.7.2110': attribute type 21 has an invalid length. [ 1304.962948][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2110'. [ 1304.970133][ T2239] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.975089][ T2239] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1304.975136][ T2239] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.408271][T10011] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1306.558377][T10011] usb 6-1: Using ep0 maxpacket: 16 [ 1306.561202][T10011] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1306.561239][T10011] usb 6-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.561258][T10011] usb 6-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 1306.565040][T10011] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1306.565070][T10011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.565091][T10011] usb 6-1: Product: syz [ 1306.565106][T10011] usb 6-1: Manufacturer: syz [ 1306.565120][T10011] usb 6-1: SerialNumber: syz [ 1307.121132][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1307.121559][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1307.159736][T10011] usb 6-1: USB disconnect, device number 31 [ 1307.262505][T14363] block device autoloading is deprecated and will be removed. [ 1308.791372][T14398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1312.019008][ C0] ------------[ cut here ]------------ [ 1312.019026][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 1312.019069][ C0] Modules linked in: [ 1312.019090][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1312.019126][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1312.019139][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 1312.019163][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 1312.019182][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 1312.019200][ C0] RAX: ffffffff88dc677b RBX: 0000000000000001 RCX: ffff88801ae85940 [ 1312.019217][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1312.019231][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 1312.019246][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000008 [ 1312.019261][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029ad8068 [ 1312.019275][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 1312.019293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1312.019308][ C0] CR2: 00007f6b30824c64 CR3: 00000000295bc000 CR4: 00000000003526f0 [ 1312.019331][ C0] Call Trace: [ 1312.019339][ C0] [ 1312.019368][ C0] ? __pfx_est_timer+0x10/0x10 [ 1312.019409][ C0] call_timer_fn+0x17b/0x5f0 [ 1312.019438][ C0] ? __pfx_est_timer+0x10/0x10 [ 1312.019461][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1312.019489][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1312.019530][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1312.019556][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1312.019577][ C0] ? __pfx_est_timer+0x10/0x10 [ 1312.019602][ C0] __run_timer_base+0x648/0x970 [ 1312.019646][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1312.019696][ C0] run_timer_softirq+0xb7/0x180 [ 1312.019725][ C0] handle_softirqs+0x22c/0x710 [ 1312.019766][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1312.019806][ C0] run_ktimerd+0xcf/0x190 [ 1312.019835][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1312.019859][ C0] ? schedule+0x91/0x360 [ 1312.019897][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1312.019922][ C0] smpboot_thread_fn+0x542/0xa60 [ 1312.019950][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1312.019987][ C0] kthread+0x711/0x8a0 [ 1312.020024][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1312.020050][ C0] ? __pfx_kthread+0x10/0x10 [ 1312.020089][ C0] ? __pfx_kthread+0x10/0x10 [ 1312.020134][ C0] ret_from_fork+0x3fc/0x770 [ 1312.020166][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1312.020203][ C0] ? __switch_to_asm+0x39/0x70 [ 1312.020223][ C0] ? __switch_to_asm+0x33/0x70 [ 1312.020242][ C0] ? __pfx_kthread+0x10/0x10 [ 1312.020275][ C0] ret_from_fork_asm+0x1a/0x30 [ 1312.020318][ C0] [ 1312.020329][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1312.020346][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1312.020376][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1312.020388][ C0] Call Trace: [ 1312.020397][ C0] [ 1312.020406][ C0] dump_stack_lvl+0x99/0x250 [ 1312.020438][ C0] ? __asan_memcpy+0x40/0x70 [ 1312.020461][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1312.020493][ C0] ? __pfx__printk+0x10/0x10 [ 1312.020535][ C0] vpanic+0x281/0x750 [ 1312.020566][ C0] ? __pfx__printk+0x10/0x10 [ 1312.020586][ C0] ? __pfx_vpanic+0x10/0x10 [ 1312.020614][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1312.020658][ C0] panic+0xb9/0xc0 [ 1312.020687][ C0] ? __pfx_panic+0x10/0x10 [ 1312.020735][ C0] __warn+0x31b/0x4b0 [ 1312.020763][ C0] ? est_timer+0x6dc/0x9f0 [ 1312.020790][ C0] ? est_timer+0x6dc/0x9f0 [ 1312.020812][ C0] report_bug+0x2be/0x4f0 [ 1312.020835][ C0] ? est_timer+0x6dc/0x9f0 [ 1312.020858][ C0] ? est_timer+0x6dc/0x9f0 [ 1312.020880][ C0] ? est_timer+0x6de/0x9f0 [ 1312.020902][ C0] handle_bug+0x84/0x160 [ 1312.020935][ C0] exc_invalid_op+0x1a/0x50 [ 1312.020965][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1312.020986][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 1312.021009][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 1312.021028][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 1312.021046][ C0] RAX: ffffffff88dc677b RBX: 0000000000000001 RCX: ffff88801ae85940 [ 1312.021061][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1312.021075][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 1312.021089][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000008 [ 1312.021112][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029ad8068 [ 1312.021139][ C0] ? est_timer+0x6db/0x9f0 [ 1312.021188][ C0] ? __pfx_est_timer+0x10/0x10 [ 1312.021224][ C0] call_timer_fn+0x17b/0x5f0 [ 1312.021249][ C0] ? __pfx_est_timer+0x10/0x10 [ 1312.021270][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1312.021296][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1312.021336][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1312.021359][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1312.021381][ C0] ? __pfx_est_timer+0x10/0x10 [ 1312.021407][ C0] __run_timer_base+0x648/0x970 [ 1312.021450][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1312.021498][ C0] run_timer_softirq+0xb7/0x180 [ 1312.021526][ C0] handle_softirqs+0x22c/0x710 [ 1312.021565][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1312.021606][ C0] run_ktimerd+0xcf/0x190 [ 1312.021636][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1312.021663][ C0] ? schedule+0x91/0x360 [ 1312.021699][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1312.021724][ C0] smpboot_thread_fn+0x542/0xa60 [ 1312.021753][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1312.021791][ C0] kthread+0x711/0x8a0 [ 1312.021828][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1312.021853][ C0] ? __pfx_kthread+0x10/0x10 [ 1312.021891][ C0] ? __pfx_kthread+0x10/0x10 [ 1312.021924][ C0] ret_from_fork+0x3fc/0x770 [ 1312.021956][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1312.021993][ C0] ? __switch_to_asm+0x39/0x70 [ 1312.022013][ C0] ? __switch_to_asm+0x33/0x70 [ 1312.022032][ C0] ? __pfx_kthread+0x10/0x10 [ 1312.022066][ C0] ret_from_fork_asm+0x1a/0x30 [ 1312.022117][ C0] [ 1312.022476][ C0] Kernel Offset: disabled