last executing test programs: 11.296394404s ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) 10.754229636s ago: executing program 3 (id=177): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x3, 0xfffffffe, 0x2000004}, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 9.13359461s ago: executing program 0 (id=181): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, 0x0) 8.307821689s ago: executing program 1 (id=182): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r1 = fanotify_init(0x1, 0x800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x34, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe2$9p(0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='vlan1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x15e) readv(r1, &(0x7f0000000100)=[{0x0}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents64(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002480)={0x8, {"7abecb6eb57efbae95aa2a4fa0fd83f78eabb4144e08b2413900d4b129bfa4d279cc171fb6b115705dde3546d8df36aab4e0b5d225c4ac66b282001c363bc1c02a22731a31e650c0580b2f058b7c56c4ad04511a89a4284334455997bb944b679684a67416e1b4f8e2f2eefa8b068e79e9904b15a30395c0ee7a33fc312c98028ad875949711654e63073897a6786b3cefd2e1a7ef8e99156e4880805f287a6da2a063e605e8245032a9757563a8d63bf3fad4039f93cea394e8e4397ff68dce2fdc39243a2950cc064b1b5d834596d9743741f1b48ca3990bc1db38dfed75716f41c1deefb12c256f89336c2ca32efd9ab25693dc201ab7239f01d2be1d747519fc764e99dc23d6ad5ae9e984bfeda4fae909b6bc31ce54f50679f1edd7dc300c53796aeaa0f25d7a1a1667bc89d0604a6ab246071f956e4c8b1f44d4b3e0e4df18e3e1523369e9ad7c5b922a69ccc8fe1ccc02e38e687aed2b026c57bd7c87074160deb49a2463588362f972e247b5151c13e8433a055917cc65f9965c9c27bfabf83ed1bf5fded3718f57a4003e80082a9718a82027f86b1291b3992a9043016d77e173fc6c147171bec08bb1eae85b2aa816ee6d3099fafecf5bfda485252ee94edf424f5655c0f297a0ef95eb4824e1de6c90a88d7194fe724039243878ac14ab45d7d7a96c1b77b67fad089b1c12b58bb81978805a22e97539cfc7b00d2a42888fdd0e812aec5b08b8e41594abf01db6e94dbe900f997dd3431bd1250a976b3d272882efd977893bb486943b9993e603a6058cd6546e4cdad8960b13b765c69b8889fff8413351aad69bc6c8baf7059731284db41e580e36368b1f4e4686ca8b8180df3cfe24177aa36adbb50b33bb55aee667db5d632d348cb916b5c1822c3bca9959aa63384c123dd8cc065007747d1d037d261260d48ec59266c169a27c45c9fff8e07f049b171c2ff0ee3d48528701859c3fa15aca087a54d719816d029fbef8a266128ce8f85a628b1e6fb67afff1e2d81044cff3eec9cc889875209975757ef5f6f079cc9518b8a560274b8dbb9bd371ed17b49bf816a727753dbc769b91a03dc8b204975ed9e1a603a307fe452822abb11513d19488ae71e4c4872a41f0139e8b975bb4db5689b2ab9a41d85df2b4cc1cfa9b53c11aa2fb06aadb55c4f25832b145dea2b9077bc408ad6abc5a78a9a4b71ce1352468f30f3ce2b76d53300e4b23627841f7baf579c449308f8048b34f3332059e08677a470cc15eac26404fd9c455777994f1168977ff2b357343e92fc8f7ee5790e6f1b9b1e669eb56d0516d67d48ebc66b82f5e2ebf866f7e29576872cdaa07086fdaac77f57fa8303c9ca9ff9824bdc47b5d9c8d2e9d81eae2f8fefc7ddef1e28fb6feb2dd1aafb9d0b042b6e3b65e4a93c90b08a1a0b7b21d96a5ed62020a802f4249e96295c36e2f9740865f89725c83c79210d167648d89fed1d7c2b1d3f35c7d67cb328d55de887879017207aa71841d9ab908a56596d199a0101f95cdf5147ac12a57aeed1d35ca5d38377251d36e233e17185f670ede6ad98dd42f54db89ce2cd132eff34c37862acea477eaee087d88bb2dff6d57a1ee9e5bbde04b85128c1b845cb46eb7a9cba328abbb41538ffcb6e19fa861522bcc252e33a252522bfd2941ddc5c7bdfc42e171fb49982d2cadb973a9eb001c7e1d068bc0e2c4f2f2d87da5b58911f1ff08946697e524aa724b90b7aab0d55717a3770763c659497e92125d105bd94b843ba36134c9f12fba5bbd4fba5298ccbd4ed65416b84424ddf98a74ab1de581b1167624f1fe1a27b01f318731b51dc5f4ccd7e2e12a91edb15be1137ed40623862c65e464aba92e55e79bd782ac8d47c16088bdd165f6733d0cb610daa21bdb14c78f9089ec2be6aebadbe976e46a88f1a6b875edd36a687a96987bd48ffbf8af1c338b916b8e2dbd2fd2d0d831351b6ee3383fe2750b729d79614c4357415e6a3f7935b671bba20ec437b5c63411606b75e79dc4ff7d5bf68a0261bcf56d54aa5d7e6b0dd55b5aceef06d7ab991f3f67a1fafe52316d01213ce99b2b173e302bca41680402d97fe76b9dc6d545095aa44e3cc66c36ee8c25ba57521656d615a6f168cd7fdd5a4b600709118945ce1c34b3039b4f8b5ad820740da3b8a6a9681e2ab6aae3d21efd533c284afb1a9b0ed8198844cff8068a015d972606d9e65a619ecc70079eee0c4a4ee80fb1ffbee91b8429e2c3568d38e5549a79f131665ef803166b7330b0893d481557b091543971bab5f293936d5b29f7a33e7f39539a20312c17fe5f30ee300da66ae3391d85f780f3f63d655eeaab25fb045e2e10bd93e7e4aa478de6909037336af2a9ee13f70b4f99ca8366d01cd0ef8e63b352462bc9ad1f0f16d2ec7e34a21bc024034bbf83ea529a61b1e429fbc038c79ee557c6916f9e753c1f757ea9f7179b986fe01fc925fe494f87ec0c02eff97b43fcb3254777e782ad897d89db9bf7fa77a901e2cc1f9c6fd13085488a49e6d65103cb5f1624ffe4e8b98686dae8b78fb9c3288624b5768da8c511d5d1e1ddd30d0b9b176c802029f4a379d5921441d7db30fefed8a62f3661e86c9e5cacf86b8a4a4325bfe65eacb4864894a2a455cc89fe23accf582d24b8548e83c7bdc1749612054fe8dea7f0adbb1d7a5a7ed5f39cfe4766f8130e41904ce1491120243eea5ca4b25c6458a1e694b4d246fc7db0eb76d11d1ba5b6103d00249d46480d0c0d8503db879bd986f66a158af8ba6572ce3c43ede33f9af27a7e4d8217b076abbc1cb267f20f7cbe298f6f14fbcc996afcb9543afed1521381aebdefe0f63b6fddf7d91f99fedc7004f296b143b8b52e8da468280ce53ce6000980088b3c57ec67cb545f60372c72cb2bfe754e61f47ff6916a6c5914773151e9dac26f7613cecde9eef2c78db9796627ac7d7398b722dd67b0ea5333ec561880c9342ce42a97adf0d7ef67a6250c91ac4974a86d353e3aa77ef6295a35ea068da7bca2465dfb75f21c4d63793b0043b5a7caab12b8dc10a5eb1fd82daea0f738bd7a128084aed9f660e633681bad309d962f3221d123fdd47828db3f28ae2e1e79096dc0eeae17496ed5348719e6c0c73d6db39df99f6047f7bd90792f6df351930c2e36399fc5685d751afb3dfa2268ae5a298293afc84113325be84ce11d133a950fff2ac87ab94d3c1fa818dff9113ff4224ae8e45df1eee46f33c960d7d40f67a0d11c6980d4cf31d52bf452b9ec88b4aaa6fd7cefb38ad749b3d28e23af54fa36872892654d57fbdcf78ab451c66883ba8711ac3dae09b718c6d709005333af6d6c13fb1f908cf8613bb69ae0950aa4cf24dea241afd2a30f0315f73d17f5d3bd8e4487410507951b293e1da38d1381a559d516be9d784102da06e4c5548b78ac89e5c6e7abbc579ff857a243710d4f8f53575fdfd7f4398c629f7c959d3cf3db2a8c5c6e40f9370e39ecdc3577b31badc28c78ad3af63d2d62abd13a4f4a052a74118fb26696df9c376add2811ccee8a032ad69e0dcf5589283cce4704b2c07b4ec07e0c6cf37097b3893375d1e681918cb0153e4cd769e1d5b855e01eaf853d3056f66961cc768048b9c0caec5f07210644eaa6c4c1b370701e6ed1066f9f642051ba98a21a7ce7c671fb1d93c44fc6cff2244cb98855cc2e0b0b630eb6487af5f6efa317cda2b6f436dbfb97047767229aa19f87b898dd9d22b6a3609d95e12710466d950e33db3b75e1233b8c4435b20e3a18ab7260a9935a8f077e4f83f7b828a300ac9040cfbc536d0c72d1fe1063abc32d9895108a8c4e6f230ca53a33baeb0550b7c75cdfb16f3028de11e4601168c703ed3723914424f26adc3455620bbe026ac98759b76962ee87e219f617e35022359d856e0c4ad76215e58bde6f0fb203cdfef402bea4d56c6bde34e4e14c72bd528495cfafbf62b851efdb5341803bc75fac210cf0fbbc791d1d8b622236cfb73d611e5cf0afb6ad115ef88d3e5ba60a53043adbaeae6b41d77f609821f8d01afbacd5766534a78e0f5828d34ff0986dde9af6a7fde50e051da203d89362da53e092fc3dd57f540db00afea549848c1b756fb98ec4d2f0dba22b14483cdfa300f9f86d58e6aeca99907736c2cc5e4574886fa74e583347ab566f02090a096465510964a806a6c654c140223e6b245ecb54b990f74b40262e052db1745e125c2cb5235bd65ff5a9ac471eb2cf73a498aacc0b82524ccf62c8807d5dd9ae37217c9fe30b8a34be4d2843125ac680fda938cef2f5246663ed1ad422341a32c76e91dbc23780655d206b09a7d1100e6ea8e0fe4bbba4089b9c9830050a8815cef8e80155ea4e6e9ccdf6c86823b6d634c6811dd440bb935a8cdebede4c8391683145172359c304ea7db2458940dbe7e276dc87ef1c6c29ef671d5ff5d9ba60ff06d6b9b503d87db63aee23cc274009ea5944b4ac087c868f401ff9101220ac8d6e33df36222affe341c1e112cb79688e993ba21475551e57aae72c55c7fc92be83922d10c4747d633faaba0cb87cff00f8077d1fac1a9d3c82c2ebc5b78a6106c5fe530d526e956df7ca8ea2c2939c6f58cac1c4563612d5d6cce8d462e78282dfb0553e6b2be6a75f6946cf005591d6da22293023db47872c599a14116b292bc1d6d1640280b1b5d310277a5d67d51dccbf49a21e1732d58e494a1b8c32217735accd356f4ce82d8e0674645a6c94d3d063b289afa1b8d08b54d8e25e3b992756fb1fa2424d066abda1c349bcbc92436cfe430b261868d957e891796d2128599fc9611cbecc2c8ca8b90c3b481b3a9bc66583dac2f3d33930580cae2f4976d8a196a5d308f82c3c3c517df29d517b5398c1371a12d0d96a24184142abed7239a895e8778ada89c6e6b93f552817ed2a2b612c23b8c2598b695c4cbde54bdfd954d899795c829af24932cdea6b000eee213b6d0c9b174085499af5a3ebff733f7052c22f1c3ce5dc6e67431e972e46c7f66720fd8dc45f2d53b6d948d90b5ef63c2b2b8ed929810ddbed99bd537c9088f71590615b4ec1d8e3d83dd9efbb7a314981e2a4797d0cdb81d567fcebffd6ba2102b75088bb1c4bf50e84d13d08a4b5507046be13e46005f8ce6733a9df39436024ed14c7a9b1f38591c4f764ee8300d547c07b8c8b768945619063897c90d13a9e151cc1c767c924d8be17c35ee93283c8bb6e29308fa130f9c03064067e3c5abf6ae68f9c53b91bfb30ca752fb9ad98b0e591dd16bb561d6aa1811e92cfe915308404e4b4caf1e446af190f8816f301e5172ffb3679947a8c2974fdee35381d0985a1f6e312da114343df0a188e7c2101718f379bfa81462bacc11d538d0d7b136738843b948fc49bbc0b1b29edc9592478e4710a289ed80dc291c4d80c57fdb94ad8a8766604cfc7b35047b58255864a22e2d0f0bbb8a2727b006d8b2bd3fc0b4638da8b52e2a76aa9cae46e81b56b7741237c6e627cb43bde8527cedf7ed87aa16a995a6b8c5e93e3799fd20bfa1a3188ef94795e8404ad0c215f3a0c50bf1eeadf92bf6004d28f7d1c95abf3c57e08d38469a9f4f6d0993c19845832ba9636516b10e1011af609dc1f6bfe2dd5387962ad339507105ade45ec87077225abdbbb0ba946f0133faee30ea247ec6fb2774d43d1114172abf181f8344a24dd5984c0d922cf70a9ec863a58be74c7d6cfc3dd8e9a22204e2c8f35e130866b263e591b846011051f9a876d57ae908c36a3638bf1130d027a4903f1e4220854182b85", 0x1000}}, 0x1006) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) 8.307454659s ago: executing program 3 (id=184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8.304745069s ago: executing program 0 (id=190): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x3, 0xfffffffe, 0x2000004}, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 6.51092792s ago: executing program 1 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 5.858588362s ago: executing program 0 (id=187): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.649415012s ago: executing program 3 (id=188): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000200)=""/80, 0x50}], 0x2) tkill(r0, 0x8) 5.649148672s ago: executing program 1 (id=189): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000f, 0x31, 0xffffffffffffffff, 0x5e09c000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000001880)=[{@fixed}, {@fixed}]}) 5.556934051s ago: executing program 2 (id=191): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x51d2, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x2, 0x402d7}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 5.327080533s ago: executing program 2 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41000, 0x6c}, 0x94) 5.203699135s ago: executing program 1 (id=193): quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000640)=@nullb, 0x0, 0x0) 5.141481011s ago: executing program 2 (id=194): r0 = open(&(0x7f0000000180)='./bus\x00', 0x8517e, 0x8b) unshare(0x20000400) vmsplice(r0, 0x0, 0x0, 0x8) 4.983945155s ago: executing program 2 (id=195): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x874, 0x101080) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000380)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 4.879468556s ago: executing program 1 (id=196): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x14}}], 0x1, 0x0) 4.09564447s ago: executing program 2 (id=197): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x3, 0xfffffffe, 0x2000004}, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 3.869278182s ago: executing program 1 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x3e) close(r4) r5 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7, 0x3, 0x1, '\x00', 0x4}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000040)={{0x58000, 0x200000, 0xc, 0x5, 0x6, 0x0, 0x10, 0xf0, 0x9, 0x3, 0x8, 0x6}, {0x8000000, 0xeeef0000, 0x0, 0x5, 0x8, 0x1, 0xc, 0x12, 0x4, 0x5, 0x8, 0xac}, {0x0, 0x8000000, 0xa, 0x77, 0x0, 0x3, 0x0, 0x0, 0xf3, 0x6, 0x2, 0xb}, {0x10000, 0x80a0000, 0x9, 0x2, 0xb8, 0x7, 0x4, 0xfc, 0x0, 0xed, 0x92, 0x5}, {0x0, 0xa000, 0x0, 0x2, 0x2, 0x9, 0x7, 0x4, 0xb3, 0xfb, 0x3, 0x2}, {0x1, 0x100000, 0x0, 0x6, 0xe0, 0x1, 0x5, 0x0, 0x3, 0x7d, 0x6, 0x80}, {0x4, 0xa000, 0xb, 0x9, 0xfe, 0x2, 0xc, 0x20, 0x1c, 0x9, 0x7, 0x2}, {0x1000, 0xeeef0000, 0xa, 0x6, 0x3, 0x4, 0x3, 0x7a, 0xff, 0x5, 0x80, 0xf8}, {0x58000, 0x3}, {0xe6e4f000, 0x1a}, 0x40000008, 0x0, 0xd000, 0x2202, 0x5, 0x8000, 0xeeef0000, [0x20000000000000, 0x100000000, 0x8, 0x200000000000]}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000036c0)={0x52a42, 0x180, 0xd599c769bd5c4602}, 0x18) 1.986434731s ago: executing program 2 (id=199): r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffc4a, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x40000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 1.828349056s ago: executing program 0 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@initdev, @in=@multicast1}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 989.100576ms ago: executing program 3 (id=201): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000f, 0x31, 0xffffffffffffffff, 0x5e09c000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000001880)=[{@fixed}, {@fixed}]}) 886.606616ms ago: executing program 0 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) 380.699174ms ago: executing program 0 (id=203): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x12, r0, 0x37085000) 0s ago: executing program 3 (id=204): r0 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000000180)={'fscrypt:', @auto=[0x36, 0x33, 0x35, 0x38, 0x33, 0x37, 0x32, 0x35, 0x66, 0x33, 0x38, 0x34, 0x64, 0x62, 0x63, 0x61]}, &(0x7f0000001080)={0x0, "ddbccf094c545fdf7a3f745794103016e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000008100", 0x1d}, 0x48, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 83.070464][ T5754] cgroup: Unknown subsys name 'net' [ 83.237900][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.948029][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.430496][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.438954][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.447025][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.456879][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.464816][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.472359][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.674036][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.682274][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.691446][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.704326][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.712372][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.719976][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.729407][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.746610][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.769189][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.776914][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.789417][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.809073][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.820162][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.827430][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.834743][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.842471][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.843903][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.857064][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.097314][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 88.394828][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.402186][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.411024][ T5767] bridge_slave_0: entered allmulticast mode [ 88.419526][ T5767] bridge_slave_0: entered promiscuous mode [ 88.430884][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.438074][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.446113][ T5767] bridge_slave_1: entered allmulticast mode [ 88.454275][ T5767] bridge_slave_1: entered promiscuous mode [ 88.462075][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.556578][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.595250][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.621306][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 88.702393][ T5767] team0: Port device team_slave_0 added [ 88.708604][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.734566][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.742001][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.749617][ T5774] bridge_slave_0: entered allmulticast mode [ 88.756903][ T5774] bridge_slave_0: entered promiscuous mode [ 88.766722][ T5767] team0: Port device team_slave_1 added [ 88.824008][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.831682][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.839227][ T5774] bridge_slave_1: entered allmulticast mode [ 88.846720][ T5774] bridge_slave_1: entered promiscuous mode [ 88.867142][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.874333][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.901011][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.955668][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.962781][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.988958][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.014438][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.053498][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.137644][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.145040][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.152788][ T5772] bridge_slave_0: entered allmulticast mode [ 89.160474][ T5772] bridge_slave_0: entered promiscuous mode [ 89.171540][ T5774] team0: Port device team_slave_0 added [ 89.177864][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.185076][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.192378][ T5772] bridge_slave_1: entered allmulticast mode [ 89.199880][ T5772] bridge_slave_1: entered promiscuous mode [ 89.206909][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.214645][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.222019][ T5773] bridge_slave_0: entered allmulticast mode [ 89.229714][ T5773] bridge_slave_0: entered promiscuous mode [ 89.251306][ T5774] team0: Port device team_slave_1 added [ 89.263317][ T5767] hsr_slave_0: entered promiscuous mode [ 89.270270][ T5767] hsr_slave_1: entered promiscuous mode [ 89.304580][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.311940][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.319270][ T5773] bridge_slave_1: entered allmulticast mode [ 89.326333][ T5773] bridge_slave_1: entered promiscuous mode [ 89.370154][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.377155][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.403177][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.419625][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.456356][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.463599][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.490180][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.504631][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.527753][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.538033][ T51] Bluetooth: hci0: command tx timeout [ 89.582451][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.640056][ T5772] team0: Port device team_slave_0 added [ 89.651188][ T5773] team0: Port device team_slave_0 added [ 89.690427][ T5772] team0: Port device team_slave_1 added [ 89.697946][ T5773] team0: Port device team_slave_1 added [ 89.727028][ T5774] hsr_slave_0: entered promiscuous mode [ 89.734267][ T5774] hsr_slave_1: entered promiscuous mode [ 89.740714][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.748633][ T5774] Cannot create hsr debugfs directory [ 89.797412][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.804954][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.831730][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.849088][ T51] Bluetooth: hci1: command tx timeout [ 89.862302][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.869595][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.895578][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.921353][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.928347][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.955157][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.955800][ T5779] Bluetooth: hci2: command tx timeout [ 89.971746][ T51] Bluetooth: hci3: command tx timeout [ 89.991153][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.998145][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.024735][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.122241][ T5772] hsr_slave_0: entered promiscuous mode [ 90.130257][ T5772] hsr_slave_1: entered promiscuous mode [ 90.136505][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.144816][ T5772] Cannot create hsr debugfs directory [ 90.192443][ T5773] hsr_slave_0: entered promiscuous mode [ 90.203590][ T5773] hsr_slave_1: entered promiscuous mode [ 90.210356][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.217963][ T5773] Cannot create hsr debugfs directory [ 90.423458][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.472191][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.484659][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.517381][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.619397][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.640964][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.655449][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.668570][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.779003][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.792097][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.803286][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.814837][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.913902][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.940980][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.956560][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.968299][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.991657][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.058677][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.072519][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.079936][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.095800][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.147630][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.154840][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.202683][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.224318][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.231564][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.272491][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.279747][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.324349][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.367990][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.413445][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.420740][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.441606][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.448849][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.474782][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.560579][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.621309][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.628514][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.639532][ T5779] Bluetooth: hci0: command tx timeout [ 91.678434][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.685710][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.875542][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.930247][ T5779] Bluetooth: hci1: command tx timeout [ 92.013129][ T5779] Bluetooth: hci2: command tx timeout [ 92.018984][ T5779] Bluetooth: hci3: command tx timeout [ 92.033204][ T23] cfg80211: failed to load regulatory.db [ 92.066183][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.102655][ T5767] veth0_vlan: entered promiscuous mode [ 92.125958][ T5767] veth1_vlan: entered promiscuous mode [ 92.247140][ T5767] veth0_macvtap: entered promiscuous mode [ 92.278443][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.286819][ T5767] veth1_macvtap: entered promiscuous mode [ 92.310811][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.364476][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.374895][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.385828][ T5774] veth0_vlan: entered promiscuous mode [ 92.400361][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.414468][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423993][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.433020][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467768][ T5774] veth1_vlan: entered promiscuous mode [ 92.587357][ T5772] veth0_vlan: entered promiscuous mode [ 92.636598][ T5774] veth0_macvtap: entered promiscuous mode [ 92.650321][ T5773] veth0_vlan: entered promiscuous mode [ 92.659842][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.668018][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.687328][ T5774] veth1_macvtap: entered promiscuous mode [ 92.697970][ T5772] veth1_vlan: entered promiscuous mode [ 92.745696][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.758541][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.771100][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.782464][ T5773] veth1_vlan: entered promiscuous mode [ 92.805610][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.817869][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.830334][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.840589][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.848496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.888306][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.897923][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.907002][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.922693][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985283][ T5773] veth0_macvtap: entered promiscuous mode [ 92.994603][ T5772] veth0_macvtap: entered promiscuous mode [ 93.017803][ T5773] veth1_macvtap: entered promiscuous mode [ 93.041702][ T5772] veth1_macvtap: entered promiscuous mode [ 93.152535][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.164727][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.181018][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.194936][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.222519][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.233354][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.255514][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.271551][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.283522][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.302695][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.395964][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.407306][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423971][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.434458][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.507189][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.523806][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.535684][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.595252][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.654781][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.703315][ T51] Bluetooth: hci0: command tx timeout [ 93.813037][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.927636][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.333194][ T5779] Bluetooth: hci3: command tx timeout [ 94.336081][ T5769] Bluetooth: hci2: command tx timeout [ 94.341266][ T51] Bluetooth: hci1: command tx timeout [ 94.362663][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.376647][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.394590][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.418810][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.434328][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.448432][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.465767][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.477391][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.508539][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.546742][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.565107][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.575711][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591955][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.688306][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.715477][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.786367][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.794702][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.857512][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.878589][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.901492][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.921780][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.988320][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.020033][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.995405][ T5869] syz.0.1[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.034661][ T5869] loop0: detected capacity change from 0 to 1024 [ 96.754548][ T5769] Bluetooth: hci2: command tx timeout [ 96.760364][ T5769] Bluetooth: hci1: command tx timeout [ 96.765953][ T51] Bluetooth: hci0: command tx timeout [ 96.771531][ T5769] Bluetooth: hci3: command tx timeout [ 96.894393][ T5866] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 97.051138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.061027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.224244][ T5864] syz.0.1 (5864) used greatest stack depth: 20304 bytes left [ 97.259911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 97.770761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.123756][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 99.139044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.168777][ C0] sched: RT throttling activated [ 99.296194][ T5872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 99.323056][ T11] hfsplus: b-tree write err: -5, ino 4 [ 99.953304][ T5886] comedi comedi0: Minor 3 could not be opened [ 103.150738][ T5892] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 103.633209][ T5905] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12'. [ 105.711717][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 105.865343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.964479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.964782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.190492][ T5921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 107.499399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 107.509430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.042887][ T5926] exFAT-fs (nullb0): invalid boot record signature [ 108.049912][ T5926] exFAT-fs (nullb0): failed to read boot sector [ 108.056302][ T5926] exFAT-fs (nullb0): failed to recognize exfat type [ 111.904540][ T5940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.24'. [ 111.917408][ T5944] comedi comedi0: Minor 3 could not be opened [ 115.765785][ T5959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 116.186243][ T5970] ======================================================= [ 116.186243][ T5970] WARNING: The mand mount option has been deprecated and [ 116.186243][ T5970] and is ignored by this kernel. Remove the mand [ 116.186243][ T5970] option from the mount to silence this warning. [ 116.186243][ T5970] ======================================================= [ 117.665915][ T5976] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 118.933757][ T5989] overlayfs: conflicting lowerdir path [ 119.113437][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.380875][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.36'. [ 120.145297][ T6008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 120.390703][ T6015] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 121.232175][ T6039] netlink: 56 bytes leftover after parsing attributes in process `syz.1.51'. [ 126.311304][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 127.160410][ T3381] kernel write not supported for file bpf-prog (pid: 3381 comm: kworker/0:2) [ 127.239424][ T6097] RDS: rds_bind could not find a transport for fe80::f, load rds_tcp or rds_rdma? [ 127.960181][ T6112] exFAT-fs (nullb0): invalid boot record signature [ 127.966767][ T6112] exFAT-fs (nullb0): failed to read boot sector [ 128.028925][ T6112] exFAT-fs (nullb0): failed to recognize exfat type [ 128.590844][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 130.336022][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 130.348963][ T28] audit: type=1800 audit(1766266129.284:2): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.84" name="bus" dev="overlay" ino=142 res=0 errno=0 [ 131.827758][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 132.976176][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989183][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.529706][ T6162] exFAT-fs (nullb0): invalid boot record signature [ 133.536247][ T6162] exFAT-fs (nullb0): failed to read boot sector [ 133.542565][ T6162] exFAT-fs (nullb0): failed to recognize exfat type [ 134.434183][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 138.402250][ T6191] tmpfs: Bad value for 'mpol' [ 138.691384][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 139.839247][ T965] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.379670][ T6217] exFAT-fs (nullb0): invalid boot record signature [ 140.386273][ T6217] exFAT-fs (nullb0): failed to read boot sector [ 140.392660][ T6217] exFAT-fs (nullb0): failed to recognize exfat type [ 141.168887][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 141.184513][ T965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.218824][ T965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.268857][ T965] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.284443][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.298826][ T965] usb 4-1: Product: syz [ 141.303065][ T965] usb 4-1: Manufacturer: syz [ 141.318444][ T965] usb 4-1: SerialNumber: syz [ 142.566039][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 143.679134][ T965] usb 4-1: 0:2 : does not exist [ 143.758060][ T965] usb 4-1: USB disconnect, device number 2 [ 143.801341][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.339545][ T6242] exFAT-fs (nullb0): invalid boot record signature [ 146.346105][ T6242] exFAT-fs (nullb0): failed to read boot sector [ 146.352476][ T6242] exFAT-fs (nullb0): failed to recognize exfat type [ 147.632968][ T28] audit: type=1326 audit(1766266146.594:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 147.707240][ T28] audit: type=1326 audit(1766266146.594:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 147.770004][ T28] audit: type=1326 audit(1766266146.624:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 147.859746][ T28] audit: type=1326 audit(1766266146.624:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 147.918796][ T28] audit: type=1326 audit(1766266146.624:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 147.968792][ T28] audit: type=1326 audit(1766266146.634:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 148.039609][ T28] audit: type=1326 audit(1766266146.634:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 148.098875][ T28] audit: type=1326 audit(1766266146.634:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 148.223295][ T28] audit: type=1326 audit(1766266146.634:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 148.285531][ T28] audit: type=1326 audit(1766266146.634:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fbb8f749 code=0x7ffc0000 [ 150.038025][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 155.636904][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 156.060537][ T6292] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 157.330051][ T6305] exFAT-fs (nullb0): invalid boot record signature [ 157.336593][ T6305] exFAT-fs (nullb0): failed to read boot sector [ 157.342916][ T6305] exFAT-fs (nullb0): failed to recognize exfat type [ 161.115263][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 165.318803][ T6330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 166.101727][ T6355] Unsupported ieee802154 address type: 0 [ 166.108640][ T6355] capability: warning: `syz.3.151' uses deprecated v2 capabilities in a way that may be insecure [ 168.253841][ T5152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 168.283318][ T6355] tty tty27: ldisc open failed (-12), clearing slot 26 [ 168.719070][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 168.999772][ T5152] usb 3-1: device descriptor read/all, error -71 [ 169.268831][ T965] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.971243][ T6379] exFAT-fs (nullb0): invalid boot record signature [ 169.977968][ T6379] exFAT-fs (nullb0): failed to read boot sector [ 169.984546][ T6379] exFAT-fs (nullb0): failed to recognize exfat type [ 170.919107][ T965] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 170.927181][ T965] usb 1-1: config 1 has no interface number 0 [ 170.987171][ T965] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 171.038462][ T965] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.086066][ T965] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 171.106195][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.133186][ T965] usb 1-1: Product: syz [ 171.144587][ T965] usb 1-1: Manufacturer: syz [ 171.158958][ T965] usb 1-1: SerialNumber: syz [ 171.174515][ T6362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.197722][ T965] usb 1-1: Expected 3 endpoints, found: 2 [ 171.818975][ T5152] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.015275][ T5152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.025743][ T5152] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 172.040191][ T5152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 172.051288][ T5152] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 172.067479][ T5152] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 172.076710][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.084791][ T5152] usb 2-1: Product: syz [ 172.089058][ T5152] usb 2-1: Manufacturer: syz [ 172.093698][ T5152] usb 2-1: SerialNumber: syz [ 172.101056][ T5152] usb 2-1: config 0 descriptor?? [ 172.111076][ T5152] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 172.124596][ T5152] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 172.136169][ T5152] garmin_gps: probe of ttyUSB0 failed with error -8 [ 172.317147][ T5853] usb 2-1: USB disconnect, device number 2 [ 172.331426][ T5853] garmin_gps 2-1:0.0: device disconnected [ 173.335857][ T965] usb 1-1: USB disconnect, device number 2 [ 173.777599][ T6408] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 175.667050][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 178.267455][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 178.872549][ T6449] qnx6: unable to read the first superblock [ 179.198988][ T6457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 179.348861][ T5853] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.621802][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 179.663218][ T5853] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 179.728773][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.737209][ T5853] usb 1-1: Product: syz [ 179.791848][ T5853] usb 1-1: Manufacturer: syz [ 179.828768][ T5853] usb 1-1: SerialNumber: syz [ 180.037239][ T6468] exFAT-fs (nullb0): invalid boot record signature [ 180.044092][ T6468] exFAT-fs (nullb0): failed to read boot sector [ 180.050703][ T6468] exFAT-fs (nullb0): failed to recognize exfat type [ 180.489939][ T5853] usb 1-1: config 0 descriptor?? [ 180.500750][ T5853] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 181.370985][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 182.614291][ T5853] ssu100: probe of 1-1:0.0 failed with error -110 [ 182.777142][ T5853] usb 1-1: USB disconnect, device number 3 [ 184.676664][ T6497] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 184.688455][ T6497] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 184.696916][ T6497] CPU: 1 PID: 6497 Comm: syz.0.203 Not tainted syzkaller #0 [ 184.704284][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.714402][ T6497] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 184.720103][ T6497] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 184.739760][ T6497] RSP: 0018:ffffc900189d7a80 EFLAGS: 00010206 [ 184.745963][ T6497] RAX: 0000000000000005 RBX: ffff88802d950d00 RCX: 0000000000080000 [ 184.753989][ T6497] RDX: ffffc9000fc31000 RSI: 00000000000019ba RDI: 00000000000019bb [ 184.761995][ T6497] RBP: 0000000000000001 R08: ffff88814c17992f R09: 1ffff1102982f325 [ 184.769999][ T6497] R10: dffffc0000000000 R11: ffffed102982f326 R12: 0000000000000028 [ 184.778001][ T6497] R13: dffffc0000000000 R14: ffff88814c179800 R15: dffffc0000000000 [ 184.786003][ T6497] FS: 00007f997e5bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 184.794964][ T6497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.801578][ T6497] CR2: 00007f997e5bbf98 CR3: 000000002337d000 CR4: 00000000003506e0 [ 184.809627][ T6497] Call Trace: [ 184.812940][ T6497] [ 184.815904][ T6497] pcl818_detach+0x66/0xd0 [ 184.820367][ T6497] comedi_device_detach_locked+0x172/0x710 [ 184.826212][ T6497] comedi_unlocked_ioctl+0xccc/0xfe0 [ 184.831544][ T6497] ? comedi_poll+0x8c0/0x8c0 [ 184.836203][ T6497] ? __fget_files+0x28/0x4d0 [ 184.840838][ T6497] ? bpf_lsm_file_ioctl+0x9/0x10 [ 184.845806][ T6497] ? security_file_ioctl+0x80/0xa0 [ 184.850958][ T6497] ? comedi_poll+0x8c0/0x8c0 [ 184.855586][ T6497] __se_sys_ioctl+0xfd/0x170 [ 184.860213][ T6497] do_syscall_64+0x55/0xb0 [ 184.864660][ T6497] ? clear_bhb_loop+0x40/0x90 [ 184.869370][ T6497] ? clear_bhb_loop+0x40/0x90 [ 184.874083][ T6497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.880012][ T6497] RIP: 0033:0x7f997d78f749 [ 184.884469][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.904106][ T6497] RSP: 002b:00007f997e5bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.912552][ T6497] RAX: ffffffffffffffda RBX: 00007f997d9e6180 RCX: 00007f997d78f749 [ 184.920576][ T6497] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 184.928578][ T6497] RBP: 00007f997d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.936577][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.944576][ T6497] R13: 00007f997d9e6218 R14: 00007f997d9e6180 R15: 00007ffdc0da3b58 [ 184.952588][ T6497] [ 184.955646][ T6497] Modules linked in: [ 184.966341][ T6497] ---[ end trace 0000000000000000 ]--- [ 184.972136][ T6497] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 184.977825][ T6497] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 184.997618][ T6497] RSP: 0018:ffffc900189d7a80 EFLAGS: 00010206 [ 185.003865][ T6497] RAX: 0000000000000005 RBX: ffff88802d950d00 RCX: 0000000000080000 [ 185.012001][ T6497] RDX: ffffc9000fc31000 RSI: 00000000000019ba RDI: 00000000000019bb [ 185.020503][ T6497] RBP: 0000000000000001 R08: ffff88814c17992f R09: 1ffff1102982f325 [ 185.028629][ T6497] R10: dffffc0000000000 R11: ffffed102982f326 R12: 0000000000000028 [ 185.036756][ T6497] R13: dffffc0000000000 R14: ffff88814c179800 R15: dffffc0000000000 [ 185.044901][ T6497] FS: 00007f997e5bc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 185.053990][ T6497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.060700][ T6497] CR2: 000000110c2ef343 CR3: 000000002337d000 CR4: 00000000003506e0 [ 185.068834][ T6497] Kernel panic - not syncing: Fatal exception [ 185.075486][ T6497] Kernel Offset: disabled [ 185.079815][ T6497] Rebooting in 86400 seconds..