last executing test programs: 23m9.552241449s ago: executing program 32 (id=49): syz_usb_connect(0x2, 0x37, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xf7, 0x52, 0x80, 0x8, 0x6cae, 0xaa1d, 0xd9c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25, 0x1, 0x4, 0x40, 0x40, 0x3, [{{0x9, 0x4, 0x16, 0x2, 0x1, 0x8, 0x6, 0x62, 0x10, [], [{{0x9, 0x5, 0x6, 0x2, 0x20, 0x7, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x3}, @generic={0x3, 0x24, "01"}]}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r0 = shmget(0x3, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x81, 0x100) 19m28.326481259s ago: executing program 33 (id=335): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a735", 0x14, 0x2f, 0x0, @loopback, @local, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 19m4.345104892s ago: executing program 34 (id=364): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="fdffffff03"], 0x50) 17m36.826437807s ago: executing program 35 (id=439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) flistxattr(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 9m3.415483935s ago: executing program 36 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 6m52.558665102s ago: executing program 37 (id=1600): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x5}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60011c4e00083a00fe8000000000000000000000000000bbff020000000016000000000000000001800074787f"], 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fchdir(r0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) 4m1.871882929s ago: executing program 38 (id=2193): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) io_uring_enter(r0, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) 3m26.527981858s ago: executing program 5 (id=2438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)="0100", 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000080)) 3m26.413292023s ago: executing program 5 (id=2439): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 3m26.412911515s ago: executing program 3 (id=2440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000780), 0x1004) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000380)='ns\x00') write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$addseals(r1, 0x409, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffff", 0x9) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) 3m25.90131757s ago: executing program 5 (id=2443): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m25.516871206s ago: executing program 9 (id=2446): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x2000000) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, 0x0) 3m25.292043931s ago: executing program 9 (id=2448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 3m25.123736346s ago: executing program 9 (id=2450): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x38, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3a}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd9d}, @CTA_EXPECT_TUPLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x1, 0xc, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x80, 0xfffffff8, 0x0, 0xff, 0x3, 0x3, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3m24.992603829s ago: executing program 9 (id=2451): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000240)={0x2, 0x0, 'S;r', 0x9, 0x3}) sendfile(r4, r5, 0x0, 0x20000023896) 3m24.666530179s ago: executing program 1 (id=2452): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m24.446962046s ago: executing program 1 (id=2453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a70fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m24.246452828s ago: executing program 3 (id=2454): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019", 0x3d}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 3m24.067690116s ago: executing program 3 (id=2455): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0xe, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.059606565s ago: executing program 9 (id=2456): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000340)=[0x7fff], &(0x7f0000000280)=[r2], &(0x7f0000000040), 0x0, 0x5}) 3m24.038583398s ago: executing program 5 (id=2457): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0xddd6, 0x4, 0x0, 0x0) 3m23.652464182s ago: executing program 9 (id=2459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 3m23.475565575s ago: executing program 3 (id=2461): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x38, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3a}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd9d}, @CTA_EXPECT_TUPLE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x1, 0xc, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x80, 0xfffffff8, 0x0, 0xff, 0x3, 0x3, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m23.433181505s ago: executing program 1 (id=2462): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x8, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r2], 0x7) 3m23.314712038s ago: executing program 6 (id=2463): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m23.189316914s ago: executing program 3 (id=2464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000780), 0x1004) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000380)='ns\x00') write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$addseals(r1, 0x409, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffff", 0x9) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) 3m23.188175909s ago: executing program 6 (id=2465): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e0000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019", 0x3d}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 3m22.927614165s ago: executing program 6 (id=2466): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80010000, 0x8, 0xc2, 0x9, 0x3d, 0x0, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x8}, {0xb, 0xaff2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8a, 0x1b1, 0x1, 0x3, 0xfffffffffffffffe, 0x4002004c4, 0x400000000000003, 0x6, 0x653a, 0x800000010, 0x1c, 0x0, 0x7ffffffffffdffff, 0x3, 0xfffffffffffffffe], 0x3000, 0x1011c4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m22.778369556s ago: executing program 5 (id=2467): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000240)={0x2, 0x0, 'S;r', 0x9, 0x3}) sendfile(r4, r5, 0x0, 0x20000023896) 3m22.700862942s ago: executing program 1 (id=2468): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x27) close(r1) 3m22.412936894s ago: executing program 6 (id=2469): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) open(0x0, 0x44842, 0x0) shmget$private(0x0, 0x3000, 0xfcf774859b375a8c, &(0x7f0000ffd000/0x3000)=nil) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 3m22.303661187s ago: executing program 1 (id=2470): getpid() setns(0xffffffffffffffff, 0x24020000) r0 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2000000) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, 0x0) 3m21.686043869s ago: executing program 6 (id=2471): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0xe, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 3m21.672147309s ago: executing program 5 (id=2472): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) inotify_init1(0x80800) 3m21.661338742s ago: executing program 1 (id=2473): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'dvmrp0\x00', {0x2, 0x4e23, @loopback}}) 3m21.006625963s ago: executing program 6 (id=2474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m19.849440609s ago: executing program 3 (id=2475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @loopback}}) 3m8.860762886s ago: executing program 39 (id=2459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 3m7.357263599s ago: executing program 40 (id=2472): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x64000600) inotify_init1(0x80800) 3m6.833067657s ago: executing program 41 (id=2473): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'dvmrp0\x00', {0x2, 0x4e23, @loopback}}) 3m5.794049116s ago: executing program 42 (id=2474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m5.396993869s ago: executing program 43 (id=2475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @loopback}}) 10.087217953s ago: executing program 4 (id=3230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r1 = io_uring_setup(0x1aea, &(0x7f00000001c0)={0x0, 0x340c, 0x0, 0x40002, 0xfc}) creat(0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa000032a) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 9.839856281s ago: executing program 8 (id=3232): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, 0x0, 0x40c0) 9.652514622s ago: executing program 8 (id=3234): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 8.53556189s ago: executing program 4 (id=3236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) 6.715291571s ago: executing program 4 (id=3242): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x4) socket$netlink(0x10, 0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000004800)={0x2020}, 0x2020) 5.680408493s ago: executing program 8 (id=3243): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x5000, 0x61, 0x11, 0x4c}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0x2020) preadv(r3, 0x0, 0x0, 0x4000, 0x0) 5.113126894s ago: executing program 0 (id=3244): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4.137046084s ago: executing program 0 (id=3247): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) r3 = getpid() syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xddbf, 0x1, 0x3, 0x156}, &(0x7f0000000100), &(0x7f0000000000)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r7}, 0x10) io_setup(0x66, 0x0) io_submit(0x0, 0x0, 0x0) dup3(r2, r1, 0x0) socket(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 3.979852069s ago: executing program 7 (id=3249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r0, 0x6, 0x1, 0x9, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00') fstat(r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40054) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="010028bd7000000000000800000018000180"], 0x48}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x54, 0x3) 3.738403645s ago: executing program 8 (id=3250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 3.114472909s ago: executing program 2 (id=3251): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020400090a00000000000000fcdbdf25030006000000000002004e23ac1414bb0000000000020000020001000000000008009e02010000a0030005000000000002"], 0x50}}, 0x0) 2.867323917s ago: executing program 2 (id=3252): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000001300), 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.86599459s ago: executing program 0 (id=3253): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x50, 0x205) 2.793249003s ago: executing program 7 (id=3254): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000007c0)={0x0, 0x6, 0x3f, "93dd74e9d20a80d42138bc6de04a762940c838d2d87e7211831f25383c7393137e446a7ecacec3e445f349c7db6cde7329859ad4bb2b955923331c4948b82c"}, 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0}) 2.543714652s ago: executing program 0 (id=3255): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)=0x7f, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.543260854s ago: executing program 2 (id=3256): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001240)={0x0, 0x0}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x80) mknodat$null(r5, &(0x7f0000000180)='./file0\x00', 0x10, 0x103) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "f42a97b96d02faffffff75"}}) 2.180172811s ago: executing program 8 (id=3257): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140001"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x44184) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000455000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000b06010200000000000000000009090002007379fb32000000000908020073797a3000000000240007800800f163"], 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) syz_io_uring_setup(0x10cf, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x7, 0x0, 0x0, 0x80, 0xfffffff8, 0x0, 0xff, 0xff, 0x4, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.362476359s ago: executing program 4 (id=3258): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="240000000000000001"], 0x28}, 0x40c0) 1.247615088s ago: executing program 7 (id=3259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000001020300000000000000000002000049"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008884) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104020000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 1.187971226s ago: executing program 2 (id=3260): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x5000, 0x61, 0x11, 0x4c}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read$FUSE(r5, &(0x7f0000006340)={0x2020}, 0x2020) preadv(r5, 0x0, 0x0, 0x4000, 0x0) 948.604107ms ago: executing program 0 (id=3261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0xfffd, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 891.781617ms ago: executing program 4 (id=3262): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x2008c014) 797.725576ms ago: executing program 7 (id=3263): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000280)={0x0, 0x0}) 403.918216ms ago: executing program 7 (id=3264): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 372.075981ms ago: executing program 4 (id=3265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000080)) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 189.132348ms ago: executing program 2 (id=3266): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0), 0x0, 0x50, 0x205) 153.417585ms ago: executing program 0 (id=3267): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) 122.51824ms ago: executing program 8 (id=3268): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x4) socket$netlink(0x10, 0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000004800)={0x2020}, 0x2020) 72.729313ms ago: executing program 7 (id=3269): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100039cb5160899115a68af56010203010902"], 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) 0s ago: executing program 2 (id=3270): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001240)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x80) mknodat$null(r5, &(0x7f0000000180)='./file0\x00', 0x10, 0x103) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "f42a97b96d02faffffff75"}}) kernel console output (not intermixed with test programs): syz [ 1201.883854][T11358] usb 10-1: config 0 descriptor?? [ 1201.898070][T11358] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1201.898103][T11358] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1202.046389][T14001] warning: `syz.7.1918' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1202.312739][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.339668][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.554789][T14025] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1926'. [ 1202.684529][T11358] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1203.579254][T11358] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1203.579287][T11358] em28xx 10-1:0.0: board has no eeprom [ 1203.648566][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1929'. [ 1203.748269][T13828] team0: Port device team_slave_0 added [ 1203.755532][T13828] team0: Port device team_slave_1 added [ 1203.993731][T11358] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1203.993842][T11358] em28xx 10-1:0.0: dvb set to bulk mode. [ 1203.998948][ T9730] em28xx 10-1:0.0: Binding DVB extension [ 1204.488355][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.488372][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.488398][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.631920][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.631940][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.631967][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.100197][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1934'. [ 1205.217132][T14008] em28xx 10-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1205.221456][ T803] usb 10-1: USB disconnect, device number 3 [ 1205.225118][ T803] em28xx 10-1:0.0: Disconnecting em28xx [ 1205.409614][ T9730] em28xx 10-1:0.0: Registering input extension [ 1205.413418][ T803] em28xx 10-1:0.0: Closing input extension [ 1205.611390][T13828] hsr_slave_0: entered promiscuous mode [ 1205.612761][T13828] hsr_slave_1: entered promiscuous mode [ 1205.687320][ T803] em28xx 10-1:0.0: Freeing device [ 1205.820259][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1939'. [ 1205.846331][T14062] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1937'. [ 1209.191132][T13828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1209.280515][T13828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1209.304491][T13828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1209.346805][T13828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1209.715193][T14103] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1949'. [ 1211.113698][T13828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.195681][T13828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.231699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.231920][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.291622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.293131][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.225579][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 1212.225596][ T37] audit: type=1326 audit(1767071534.247:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225641][ T37] audit: type=1326 audit(1767071534.247:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225687][ T37] audit: type=1326 audit(1767071534.247:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225728][ T37] audit: type=1326 audit(1767071534.247:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225769][ T37] audit: type=1326 audit(1767071534.247:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225814][ T37] audit: type=1326 audit(1767071534.247:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225855][ T37] audit: type=1326 audit(1767071534.247:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225895][ T37] audit: type=1326 audit(1767071534.247:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225935][ T37] audit: type=1326 audit(1767071534.247:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1212.225975][ T37] audit: type=1326 audit(1767071534.257:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.7.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1214.021427][T14144] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1962'. [ 1214.170203][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.424336][T13828] veth0_vlan: entered promiscuous mode [ 1214.713277][T13828] veth1_vlan: entered promiscuous mode [ 1216.688723][T13828] veth0_macvtap: entered promiscuous mode [ 1216.697191][T13828] veth1_macvtap: entered promiscuous mode [ 1217.655177][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.672330][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.835905][ T3705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.837450][ T3705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.838911][ T3705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.904397][ T3705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.853663][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1975'. [ 1219.888631][T14196] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1974'. [ 1221.366901][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 1221.366918][ T37] audit: type=1326 audit(1767071543.843:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.366966][ T37] audit: type=1326 audit(1767071543.843:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.367008][ T37] audit: type=1326 audit(1767071543.843:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.367049][ T37] audit: type=1326 audit(1767071543.843:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.367615][ T37] audit: type=1326 audit(1767071543.853:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.367936][ T37] audit: type=1326 audit(1767071543.853:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.368316][ T37] audit: type=1326 audit(1767071543.853:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.369289][ T37] audit: type=1326 audit(1767071543.853:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.369731][ T37] audit: type=1326 audit(1767071543.853:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1221.372479][ T37] audit: type=1326 audit(1767071543.853:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14218 comm="syz.7.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4da08f749 code=0x7ffc0000 [ 1223.586404][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.586425][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.745236][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.745942][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.989411][T14272] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1987'. [ 1226.542241][T14313] bridge0: port 3(syz_tun) entered blocking state [ 1226.545752][T14313] bridge0: port 3(syz_tun) entered disabled state [ 1226.549303][T14313] syz_tun: entered allmulticast mode [ 1226.591580][T14313] syz_tun: entered promiscuous mode [ 1226.607423][T14313] bridge0: port 3(syz_tun) entered blocking state [ 1226.608749][T14313] bridge0: port 3(syz_tun) entered forwarding state [ 1227.100429][T14317] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2002'. [ 1230.362867][T14388] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2018'. [ 1232.779948][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2033'. [ 1232.919857][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1233.435030][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 1234.152276][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1234.155064][ T5878] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1234.155090][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.155109][ T5878] usb 6-1: Product: syz [ 1234.155122][ T5878] usb 6-1: Manufacturer: syz [ 1234.155138][ T5878] usb 6-1: SerialNumber: syz [ 1234.235801][ T5878] usb 6-1: config 0 descriptor?? [ 1234.258761][ T5878] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1234.258795][ T5878] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1234.905058][ T5878] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1235.357715][ T5878] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1235.357745][ T5878] em28xx 6-1:0.0: board has no eeprom [ 1235.997648][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2046'. [ 1236.630283][T14435] em28xx 6-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 1236.673321][ T5878] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1236.673347][ T5878] em28xx 6-1:0.0: dvb set to bulk mode. [ 1236.674952][ T803] em28xx 6-1:0.0: Binding DVB extension [ 1236.707486][ T5878] usb 6-1: USB disconnect, device number 4 [ 1236.718271][ T5878] em28xx 6-1:0.0: Disconnecting em28xx [ 1236.942265][ T803] em28xx 6-1:0.0: Registering input extension [ 1237.576410][ T5878] em28xx 6-1:0.0: Closing input extension [ 1239.236931][ T5878] em28xx 6-1:0.0: Freeing device [ 1239.915851][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2058'. [ 1240.125616][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1240.125635][ T37] audit: type=1326 audit(1767071563.550:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.127276][ T37] audit: type=1326 audit(1767071563.550:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.127543][ T37] audit: type=1326 audit(1767071563.550:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.129042][ T37] audit: type=1326 audit(1767071563.550:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.129560][ T37] audit: type=1326 audit(1767071563.550:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.336435][ T37] audit: type=1326 audit(1767071563.665:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.336486][ T37] audit: type=1326 audit(1767071563.665:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.336526][ T37] audit: type=1326 audit(1767071563.665:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.336566][ T37] audit: type=1326 audit(1767071563.665:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1240.336607][ T37] audit: type=1326 audit(1767071563.665:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14555 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1241.161786][T14574] bridge0: port 4(vlan2) entered blocking state [ 1241.161924][T14574] bridge0: port 4(vlan2) entered disabled state [ 1241.162115][T14574] vlan2: entered allmulticast mode [ 1241.162130][T14574] bridge0: entered allmulticast mode [ 1241.688210][T14574] vlan2: left allmulticast mode [ 1241.688227][T14574] bridge0: left allmulticast mode [ 1242.267980][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2071'. [ 1244.543969][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2085'. [ 1244.711538][ T990] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1244.867099][ T990] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.867127][ T990] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1244.867147][ T990] usb 10-1: config 1 has no interface number 1 [ 1244.867193][ T990] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1244.867232][ T990] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 1244.875820][ T990] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.875847][ T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.875864][ T990] usb 10-1: Product: syz [ 1244.875877][ T990] usb 10-1: Manufacturer: syz [ 1244.875890][ T990] usb 10-1: SerialNumber: syz [ 1245.114196][ T990] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 1245.114233][ T990] usb 10-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1245.114252][ T990] usb 10-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 1245.117245][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2089'. [ 1245.688027][ T990] usb 10-1: USB disconnect, device number 4 [ 1246.393138][T14687] udevd[14687]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.591518][ T37] kauditd_printk_skb: 78 callbacks suppressed [ 1246.591537][ T37] audit: type=1326 audit(1767071570.332:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.592008][ T37] audit: type=1326 audit(1767071570.332:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.593654][ T37] audit: type=1326 audit(1767071570.332:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.594918][ T37] audit: type=1326 audit(1767071570.332:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.638545][ T37] audit: type=1326 audit(1767071570.385:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.638596][ T37] audit: type=1326 audit(1767071570.385:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.638635][ T37] audit: type=1326 audit(1767071570.385:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.638673][ T37] audit: type=1326 audit(1767071570.385:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.638713][ T37] audit: type=1326 audit(1767071570.385:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1246.638750][ T37] audit: type=1326 audit(1767071570.385:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14693 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1251.232901][T14759] bridge0: port 1(vlan2) entered blocking state [ 1251.233060][T14759] bridge0: port 1(vlan2) entered disabled state [ 1251.233280][T14759] vlan2: entered allmulticast mode [ 1251.233325][T14759] bridge0: entered allmulticast mode [ 1251.538105][T14759] vlan2: left allmulticast mode [ 1251.538129][T14759] bridge0: left allmulticast mode [ 1252.620944][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.967675][ T37] kauditd_printk_skb: 50 callbacks suppressed [ 1252.967693][ T37] audit: type=1326 audit(1767071577.031:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1252.968202][ T37] audit: type=1326 audit(1767071577.031:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.022475][ T37] audit: type=1326 audit(1767071577.083:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.060676][ T37] audit: type=1326 audit(1767071577.083:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.062746][ T37] audit: type=1326 audit(1767071577.125:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.062796][ T37] audit: type=1326 audit(1767071577.125:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.062839][ T37] audit: type=1326 audit(1767071577.125:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.643185][ T37] audit: type=1326 audit(1767071577.125:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.643627][ T37] audit: type=1326 audit(1767071577.734:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1253.870449][ T37] audit: type=1326 audit(1767071577.976:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14784 comm="syz.5.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa49071f749 code=0x7ffc0000 [ 1255.347805][T14824] netlink: 'syz.6.2131': attribute type 1 has an invalid length. [ 1255.628825][T14824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1255.663356][T14829] bond3: (slave dummy0): making interface the new active one [ 1255.672824][T14829] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1258.907353][T14880] netlink: 'syz.7.2146': attribute type 1 has an invalid length. [ 1258.974210][T14880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1260.125057][T14880] bond1: (slave dummy0): Releasing backup interface [ 1260.264473][ T990] IPVS: starting estimator thread 0... [ 1260.375396][T14897] IPVS: using max 7 ests per chain, 16800 per kthread [ 1260.436157][T14880] bond2: (slave dummy0): making interface the new active one [ 1260.441094][T14880] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1264.477268][T14950] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 1264.618561][ T5941] IPVS: starting estimator thread 0... [ 1264.706415][T14957] IPVS: using max 9 ests per chain, 21600 per kthread [ 1264.811615][T14950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1264.878403][T14953] bond1: (slave dummy0): making interface the new active one [ 1264.882583][T14953] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1272.609256][ T803] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1273.056883][ T803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.056915][ T803] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.056994][ T803] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1273.057046][ T803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.083369][ T803] usb 8-1: config 0 descriptor?? [ 1273.609216][ T803] usbhid 8-1:0.0: can't add hid device: -71 [ 1273.609337][ T803] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1273.636796][ T803] usb 8-1: USB disconnect, device number 6 [ 1279.890156][ T803] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1280.055354][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.055384][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.055421][ T803] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1280.055440][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.067815][ T803] usb 2-1: config 0 descriptor?? [ 1280.499248][ T803] usbhid 2-1:0.0: can't add hid device: -71 [ 1280.499368][ T803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1280.540399][ T803] usb 2-1: USB disconnect, device number 3 [ 1285.025409][ T5941] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1286.021352][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.021395][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.021433][ T5941] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1286.021456][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.105072][ T5941] usb 7-1: config 0 descriptor?? [ 1286.600636][ T5941] usbhid 7-1:0.0: can't add hid device: -71 [ 1286.600755][ T5941] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1286.671863][ T5941] usb 7-1: USB disconnect, device number 6 [ 1287.033027][T15243] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1288.960018][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2245'. [ 1289.439653][T15295] input: syz0 as /devices/virtual/input/input15 [ 1289.486365][T11655] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1289.647196][T11655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.647231][T11655] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.647269][T11655] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1289.647288][T11655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.803825][T11655] usb 7-1: config 0 descriptor?? [ 1290.230353][T11655] usbhid 7-1:0.0: can't add hid device: -71 [ 1290.230480][T11655] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1290.255301][T11655] usb 7-1: USB disconnect, device number 7 [ 1291.408347][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1291.421670][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1291.423127][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1291.424763][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1291.425979][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1292.397131][ T9730] kernel read not supported for file /dsp (pid: 9730 comm: kworker/0:2) [ 1293.159104][ T990] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1293.315035][ T990] usb 10-1: Using ep0 maxpacket: 16 [ 1293.333566][ T990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1293.336357][ T990] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1293.336383][ T990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.336401][ T990] usb 10-1: Product: syz [ 1293.336414][ T990] usb 10-1: Manufacturer: syz [ 1293.336428][ T990] usb 10-1: SerialNumber: syz [ 1293.387779][ T990] usb 10-1: config 0 descriptor?? [ 1293.417758][ T990] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1293.417791][ T990] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1293.429827][ T5813] Bluetooth: hci5: command tx timeout [ 1293.862340][T15388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1293.966609][ T3464] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.992752][ T990] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1294.068400][T15323] chnl_net:caif_netlink_parms(): no params data found [ 1294.660174][ T990] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1294.660205][ T990] em28xx 10-1:0.0: board has no eeprom [ 1295.010867][ T990] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1295.010898][ T990] em28xx 10-1:0.0: dvb set to bulk mode. [ 1295.011248][ T5941] em28xx 10-1:0.0: Binding DVB extension [ 1295.142239][ T803] usb 10-1: USB disconnect, device number 5 [ 1295.152301][ T803] em28xx 10-1:0.0: Disconnecting em28xx [ 1295.188980][ T5941] em28xx 10-1:0.0: Registering input extension [ 1295.191183][ T803] em28xx 10-1:0.0: Closing input extension [ 1295.229525][ T3464] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.376657][ T803] em28xx 10-1:0.0: Freeing device [ 1295.410816][ T5813] Bluetooth: hci5: command tx timeout [ 1295.416467][T15419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2280'. [ 1295.880267][ T3464] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.985421][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2291'. [ 1297.026440][T15455] netlink: 'syz.9.2293': attribute type 1 has an invalid length. [ 1297.106925][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2293'. [ 1297.106950][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2293'. [ 1297.206671][ T3464] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.391625][ T5813] Bluetooth: hci5: command tx timeout [ 1297.452267][T15455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1297.530462][T15460] bond1: (slave dummy0): making interface the new active one [ 1297.532591][T15460] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1297.803320][T15323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.803652][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.803902][T15323] bridge_slave_0: entered allmulticast mode [ 1297.844093][T15323] bridge_slave_0: entered promiscuous mode [ 1297.849995][T15465] bridge: RTM_NEWNEIGH with invalid ether address [ 1297.996760][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.996909][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.997162][T15323] bridge_slave_1: entered allmulticast mode [ 1298.026662][T15323] bridge_slave_1: entered promiscuous mode [ 1298.779291][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 1299.350108][T15489] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2303'. [ 1299.382126][T11833] Bluetooth: hci5: command tx timeout [ 1299.443680][T15323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.457348][T15323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.625500][T15497] netlink: 'syz.5.2307': attribute type 1 has an invalid length. [ 1299.675232][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2307'. [ 1299.675246][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 1299.755145][T15495] bridge: RTM_NEWNEIGH with invalid ether address [ 1300.038556][T15497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1300.119847][T15502] bond2: (slave dummy0): Releasing backup interface [ 1300.140242][T15502] bond4: (slave dummy0): making interface the new active one [ 1300.201982][T15502] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1300.578180][T15323] team0: Port device team_slave_0 added [ 1300.643031][T15323] team0: Port device team_slave_1 added [ 1301.189511][T15323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.189528][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.189552][T15323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.215801][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2317'. [ 1301.361432][T15323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.361446][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.361466][T15323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.715926][ T9682] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1302.878450][ T9682] usb 6-1: Using ep0 maxpacket: 16 [ 1302.885996][ T9682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1302.898599][ T9682] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1302.898625][ T9682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.898644][ T9682] usb 6-1: Product: syz [ 1302.898658][ T9682] usb 6-1: Manufacturer: syz [ 1302.898678][ T9682] usb 6-1: SerialNumber: syz [ 1302.908239][ T9682] usb 6-1: config 0 descriptor?? [ 1302.952401][ T9682] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1302.952423][ T9682] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1303.536462][ T9682] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1303.959946][ T9682] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1303.959977][ T9682] em28xx 6-1:0.0: board has no eeprom [ 1304.321350][ T3464] bond0 (unregistering): Released all slaves [ 1304.344474][ T9682] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1304.344502][ T9682] em28xx 6-1:0.0: dvb set to bulk mode. [ 1304.344804][ T49] em28xx 6-1:0.0: Binding DVB extension [ 1304.379355][ T9682] usb 6-1: USB disconnect, device number 5 [ 1304.408892][ T9682] em28xx 6-1:0.0: Disconnecting em28xx [ 1304.443828][ T49] em28xx 6-1:0.0: Registering input extension [ 1304.443972][ T9682] em28xx 6-1:0.0: Closing input extension [ 1304.457408][ T9682] em28xx 6-1:0.0: Freeing device [ 1304.752615][T15566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2327'. [ 1305.431915][ T3464] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1305.489749][ T3464] bond1 (unregistering): Released all slaves [ 1306.488984][ T3464] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1306.530875][ T3464] bond2 (unregistering): Released all slaves [ 1306.589663][T15543] bridge: RTM_NEWNEIGH with invalid ether address [ 1307.789175][T15589] siw: device registration error -23 [ 1308.029934][T15597] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2337'. [ 1308.307534][T11833] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 1308.425656][T15603] bridge: RTM_NEWNEIGH with invalid ether address [ 1308.687598][T15323] hsr_slave_0: entered promiscuous mode [ 1308.689042][T15323] hsr_slave_1: entered promiscuous mode [ 1308.689771][T15323] debugfs: 'hsr0' already exists in 'hsr' [ 1308.689790][T15323] Cannot create hsr debugfs directory [ 1308.812305][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1308.812323][ T37] audit: type=1326 audit(1767071635.658:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.812447][ T37] audit: type=1326 audit(1767071635.669:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.814310][ T37] audit: type=1326 audit(1767071635.669:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.814358][ T37] audit: type=1326 audit(1767071635.669:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.818839][ T37] audit: type=1326 audit(1767071635.669:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.818884][ T37] audit: type=1326 audit(1767071635.669:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.819032][ T37] audit: type=1326 audit(1767071635.669:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.819157][ T37] audit: type=1326 audit(1767071635.669:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.819312][ T37] audit: type=1326 audit(1767071635.669:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1308.819450][ T37] audit: type=1326 audit(1767071635.669:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15609 comm="syz.6.2343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07aa6df749 code=0x7fc00000 [ 1309.384662][ T5941] IPVS: starting estimator thread 0... [ 1309.469488][T15633] IPVS: using max 10 ests per chain, 24000 per kthread [ 1309.573666][ T3464] hsr_slave_0: left promiscuous mode [ 1309.602143][ T3464] hsr_slave_1: left promiscuous mode [ 1309.620389][T15647] TCP: TCP_TX_DELAY enabled [ 1309.671964][ T3464] veth1_macvtap: left promiscuous mode [ 1309.672032][ T3464] veth0_macvtap: left promiscuous mode [ 1309.672229][ T3464] veth1_vlan: left promiscuous mode [ 1309.672331][ T3464] veth0_vlan: left promiscuous mode [ 1311.114426][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.699358][T15639] bridge: RTM_NEWNEIGH with invalid ether address [ 1315.699489][ T9730] infiniband syz1: ib_query_port failed (-19) [ 1316.212453][ T49] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1316.356438][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 1316.361075][ T49] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1316.361103][ T49] usb 6-1: config 0 has no interface number 0 [ 1316.361144][ T49] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1316.363295][ T49] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1316.363322][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.363336][ T49] usb 6-1: Product: syz [ 1316.363344][ T49] usb 6-1: Manufacturer: syz [ 1316.363351][ T49] usb 6-1: SerialNumber: syz [ 1316.368307][ T49] usb 6-1: config 0 descriptor?? [ 1316.404025][T15670] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1316.602266][T15670] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1316.803064][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2373'. [ 1316.930624][T15689] bridge: RTM_NEWNEIGH with invalid ether address [ 1317.602807][ T9730] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1317.641780][T15703] bridge0: port 1(syz_tun) entered blocking state [ 1317.641889][T15703] bridge0: port 1(syz_tun) entered disabled state [ 1317.642116][T15703] syz_tun: entered allmulticast mode [ 1317.644617][T15703] syz_tun: entered promiscuous mode [ 1317.645295][T15703] bridge0: port 1(syz_tun) entered blocking state [ 1317.645409][T15703] bridge0: port 1(syz_tun) entered forwarding state [ 1317.747548][ T9730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.747578][ T9730] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.747606][ T9730] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1317.747624][ T9730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.752554][ T9730] usb 7-1: config 0 descriptor?? [ 1317.905933][ T49] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1317.905963][ T49] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1317.917705][ T49] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1318.043176][ T49] usb 6-1: USB disconnect, device number 6 [ 1318.150080][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1318.150498][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1318.150893][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1318.151718][ T9730] usbhid 7-1:0.0: can't add hid device: -32 [ 1318.151840][ T9730] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1318.197687][ T9730] usb 7-1: USB disconnect, device number 8 [ 1318.682125][T15736] bridge: RTM_NEWNEIGH with invalid ether address [ 1319.418913][T15767] bridge0: port 1(syz_tun) entered blocking state [ 1319.419020][T15767] bridge0: port 1(syz_tun) entered disabled state [ 1319.419211][T15767] syz_tun: entered allmulticast mode [ 1319.421666][T15767] syz_tun: entered promiscuous mode [ 1319.423428][T15766] bridge: RTM_NEWNEIGH with invalid ether address [ 1319.626976][T15323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1319.630173][T15772] 9p: Bad value for 'rfdno' [ 1319.677690][T15323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1319.716886][T15323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1319.943474][T15323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1321.148850][T15323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.207884][T15323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.216227][T15802] random: crng reseeded on system resumption [ 1321.245291][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.246010][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.304863][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.305011][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.663588][T15816] bridge: RTM_NEWNEIGH with invalid ether address [ 1321.798556][T15823] binder: 15822:15823 ioctl c0306201 200000000080 returned -14 [ 1321.885795][T15826] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2405'. [ 1322.224373][T15828] bridge0: port 2(vlan3) entered blocking state [ 1322.226016][T15828] bridge0: port 2(vlan3) entered disabled state [ 1322.231451][T15828] vlan3: entered allmulticast mode [ 1322.231527][T15828] bridge0: entered allmulticast mode [ 1322.687811][T15828] vlan3: left allmulticast mode [ 1322.687833][T15828] bridge0: left allmulticast mode [ 1323.725271][T15323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.935515][T15862] bridge: RTM_NEWNEIGH with invalid ether address [ 1323.950483][T15323] veth0_vlan: entered promiscuous mode [ 1323.990900][T15864] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1324.031960][T15323] veth1_vlan: entered promiscuous mode [ 1324.066315][T15323] veth0_macvtap: entered promiscuous mode [ 1324.145556][T15323] veth1_macvtap: entered promiscuous mode [ 1324.368320][T15323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.386853][T15323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.449205][ T3464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.461727][ T3464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.464464][ T3464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.464845][ T3464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.633255][ T9730] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1324.810359][ T9730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.810398][ T9730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.810437][ T9730] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1324.810459][ T9730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.906900][ T9730] usb 6-1: config 0 descriptor?? [ 1325.274828][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.274850][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.334571][ T9730] usbhid 6-1:0.0: can't add hid device: -71 [ 1325.334695][ T9730] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1325.405419][ T9730] usb 6-1: USB disconnect, device number 7 [ 1325.574272][T15898] bridge: RTM_NEWNEIGH with invalid ether address [ 1325.602362][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.602383][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.034070][T15917] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 1326.108013][T15924] binder: 15922:15924 ioctl c0306201 200000000080 returned -14 [ 1326.136236][T15924] binder: BINDER_SET_CONTEXT_MGR already set [ 1326.136246][T15924] binder: 15922:15924 ioctl 4018620d 200000000040 returned -16 [ 1326.239964][T15917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1326.525172][T15925] bond1: (slave dummy0): Releasing active interface [ 1326.569529][T15925] bond2: (slave dummy0): making interface the new active one [ 1326.571631][T15925] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1326.638743][T15933] bridge: RTM_NEWNEIGH with invalid ether address [ 1327.495112][ T49] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1327.654251][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.654284][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.654322][ T49] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1327.654344][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.730675][ T49] usb 6-1: config 0 descriptor?? [ 1328.152664][ T49] usbhid 6-1:0.0: can't add hid device: -71 [ 1328.152848][ T49] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1328.219616][ T49] usb 6-1: USB disconnect, device number 8 [ 1329.353731][ T49] kernel write not supported for file /dsp (pid: 49 comm: kworker/1:1) [ 1330.195011][T16028] overlayfs: overlapping lowerdir path [ 1331.916023][ T49] kernel write not supported for file /dsp (pid: 49 comm: kworker/1:1) [ 1344.009809][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1344.022835][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1344.071968][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1344.083660][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1344.084404][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1345.522151][T11833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1345.526595][T11833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1345.592151][T11833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1345.603881][T11833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1345.605164][T11833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1346.052197][ T5813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1346.094579][ T5813] Bluetooth: hci2: command tx timeout [ 1346.106450][ T5813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1346.109826][ T5813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1346.115579][ T5813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1346.116350][ T5813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1347.114581][T11833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1347.121796][T11833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1347.123233][T11833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1347.137917][T11833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1347.141182][T11833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1347.529563][ T5813] Bluetooth: hci6: command tx timeout [ 1348.066963][T11833] Bluetooth: hci7: command tx timeout [ 1348.067624][T11833] Bluetooth: hci2: command tx timeout [ 1348.070298][T11833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1348.120281][T11833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1348.126544][T11833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1348.127644][T11833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1348.128907][T11833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1348.502274][T16048] bridge0: port 3(syz_tun) entered disabled state [ 1348.683114][T16048] syz_tun (unregistering): left allmulticast mode [ 1348.683142][T16048] syz_tun (unregistering): left promiscuous mode [ 1348.683254][T16048] bridge0: port 3(syz_tun) entered disabled state [ 1349.125008][T16057] syz_tun (unregistering): left allmulticast mode [ 1349.125035][T16057] syz_tun (unregistering): left promiscuous mode [ 1349.125606][T16057] bridge0: port 1(syz_tun) entered disabled state [ 1349.137361][ T5813] Bluetooth: hci8: command tx timeout [ 1349.347344][T15997] bridge0: port 1(syz_tun) entered disabled state [ 1349.438262][T15997] syz_tun (unregistering): left allmulticast mode [ 1349.438290][T15997] syz_tun (unregistering): left promiscuous mode [ 1349.438378][T15997] bridge0: port 1(syz_tun) entered disabled state [ 1349.511089][ T5813] Bluetooth: hci6: command tx timeout [ 1350.053464][ T5813] Bluetooth: hci2: command tx timeout [ 1350.053497][ T5813] Bluetooth: hci7: command tx timeout [ 1350.123674][T11833] Bluetooth: hci9: command tx timeout [ 1350.424294][T10052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.925213][T10052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.131348][T11833] Bluetooth: hci8: command tx timeout [ 1351.178758][T16052] $Hÿ: (slave syz_tun): Releasing backup interface [ 1351.472203][T10052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.491647][T11833] Bluetooth: hci6: command tx timeout [ 1351.890210][T10052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.025537][T11833] Bluetooth: hci7: command tx timeout [ 1352.025543][ T5813] Bluetooth: hci2: command tx timeout [ 1352.103710][T11833] Bluetooth: hci9: command tx timeout [ 1352.281469][T16082] chnl_net:caif_netlink_parms(): no params data found [ 1352.433445][T16090] chnl_net:caif_netlink_parms(): no params data found [ 1352.599731][T16087] chnl_net:caif_netlink_parms(): no params data found [ 1352.604167][T16094] chnl_net:caif_netlink_parms(): no params data found [ 1353.091859][T11833] Bluetooth: hci8: command tx timeout [ 1353.150652][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.150782][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.150914][T16082] bridge_slave_0: entered allmulticast mode [ 1353.152308][T16082] bridge_slave_0: entered promiscuous mode [ 1353.223692][T16101] chnl_net:caif_netlink_parms(): no params data found [ 1353.241764][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.241872][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.242191][T16082] bridge_slave_1: entered allmulticast mode [ 1353.243651][T16082] bridge_slave_1: entered promiscuous mode [ 1353.271498][T10052] bridge_slave_1: left allmulticast mode [ 1353.271523][T10052] bridge_slave_1: left promiscuous mode [ 1353.271683][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.322330][T10052] bridge_slave_0: left allmulticast mode [ 1353.322350][T10052] bridge_slave_0: left promiscuous mode [ 1353.322500][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.472498][T11833] Bluetooth: hci6: command tx timeout [ 1354.006242][T11833] Bluetooth: hci7: command tx timeout [ 1354.105472][T11833] Bluetooth: hci9: command tx timeout [ 1355.072994][T11833] Bluetooth: hci8: command tx timeout [ 1355.448819][T10052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.503679][T10052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.523611][T10052] bond0 (unregistering): Released all slaves [ 1356.082713][T11833] Bluetooth: hci9: command tx timeout [ 1356.428708][T10052] bond1 (unregistering): Released all slaves [ 1357.368935][T10052] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1357.409811][T10052] bond2 (unregistering): Released all slaves [ 1357.781048][T16090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.781145][T16090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.781309][T16090] bridge_slave_0: entered allmulticast mode [ 1357.782718][T16090] bridge_slave_0: entered promiscuous mode [ 1358.247026][T16090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.247150][T16090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.247349][T16090] bridge_slave_1: entered allmulticast mode [ 1358.249050][T16090] bridge_slave_1: entered promiscuous mode [ 1358.529964][T16082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.598018][T16087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.598117][T16087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.598258][T16087] bridge_slave_0: entered allmulticast mode [ 1358.599703][T16087] bridge_slave_0: entered promiscuous mode [ 1358.607858][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.607976][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.608164][T16094] bridge_slave_0: entered allmulticast mode [ 1358.610866][T16094] bridge_slave_0: entered promiscuous mode [ 1358.618492][T16082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.950492][T16087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.950611][T16087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.950819][T16087] bridge_slave_1: entered allmulticast mode [ 1358.952888][T16087] bridge_slave_1: entered promiscuous mode [ 1358.978296][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.978426][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.978682][T16094] bridge_slave_1: entered allmulticast mode [ 1358.981179][T16094] bridge_slave_1: entered promiscuous mode [ 1359.139705][T16090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.324738][T16090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.514121][T16082] team0: Port device team_slave_0 added [ 1359.582018][T16087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.639379][T16094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.642465][T16082] team0: Port device team_slave_1 added [ 1359.816177][T10052] hsr_slave_0: left promiscuous mode [ 1359.854438][T10052] hsr_slave_1: left promiscuous mode [ 1359.855125][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.855141][T10052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.896609][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.896634][T10052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.965201][T10052] veth1_macvtap: left promiscuous mode [ 1359.965268][T10052] veth0_macvtap: left promiscuous mode [ 1359.965415][T10052] veth1_vlan: left promiscuous mode [ 1359.967028][T10052] veth0_vlan: left promiscuous mode [ 1362.571127][T10052] team0 (unregistering): Port device team_slave_1 removed [ 1362.846262][T10052] team0 (unregistering): Port device team_slave_0 removed [ 1365.686103][T16087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.686506][T16101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.686647][T16101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.686779][T16101] bridge_slave_0: entered allmulticast mode [ 1365.688149][T16101] bridge_slave_0: entered promiscuous mode [ 1365.791176][T16094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.792927][T16090] team0: Port device team_slave_0 added [ 1366.008300][T16101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.008442][T16101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.008577][T16101] bridge_slave_1: entered allmulticast mode [ 1366.010023][T16101] bridge_slave_1: entered promiscuous mode [ 1366.134168][T16090] team0: Port device team_slave_1 added [ 1366.285023][T16082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.285039][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.285064][T16082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.433037][T16087] team0: Port device team_slave_0 added [ 1366.523590][T16082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.523615][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.523642][T16082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.525926][T16094] team0: Port device team_slave_0 added [ 1366.667739][T16087] team0: Port device team_slave_1 added [ 1366.670653][T16101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.682094][T16094] team0: Port device team_slave_1 added [ 1366.683024][T16090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.683037][T16090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.683063][T16090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.800772][T16101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.903994][T16090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.904005][T16090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.904020][T16090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.349283][T16087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.349300][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.349326][T16087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.532492][T16094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.532510][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.532525][T16094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.535037][T16087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.535047][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.535060][T16087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.537827][T16101] team0: Port device team_slave_0 added [ 1367.666812][T16094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.666828][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.666850][T16094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.680365][T16101] team0: Port device team_slave_1 added [ 1367.690244][T16082] hsr_slave_0: entered promiscuous mode [ 1367.691635][T16082] hsr_slave_1: entered promiscuous mode [ 1367.784171][T10052] IPVS: stop unused estimator thread 0... [ 1368.027167][T16090] hsr_slave_0: entered promiscuous mode [ 1368.028283][T16090] hsr_slave_1: entered promiscuous mode [ 1368.028870][T16090] debugfs: 'hsr0' already exists in 'hsr' [ 1368.028886][T16090] Cannot create hsr debugfs directory [ 1368.151634][T16101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.151645][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.151659][T16101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.390328][T16101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.390353][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.390376][T16101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.757223][T16094] hsr_slave_0: entered promiscuous mode [ 1368.758022][T16094] hsr_slave_1: entered promiscuous mode [ 1368.758567][T16094] debugfs: 'hsr0' already exists in 'hsr' [ 1368.758583][T16094] Cannot create hsr debugfs directory [ 1368.842692][T16087] hsr_slave_0: entered promiscuous mode [ 1368.843530][T16087] hsr_slave_1: entered promiscuous mode [ 1368.844073][T16087] debugfs: 'hsr0' already exists in 'hsr' [ 1368.844088][T16087] Cannot create hsr debugfs directory [ 1369.631271][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.967258][T16101] hsr_slave_0: entered promiscuous mode [ 1369.968116][T16101] hsr_slave_1: entered promiscuous mode [ 1369.968677][T16101] debugfs: 'hsr0' already exists in 'hsr' [ 1369.968692][T16101] Cannot create hsr debugfs directory [ 1371.375549][T10052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.895906][T10052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.267277][T10052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.620422][T10052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.635012][T10052] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.992211][T10052] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.257541][T10052] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.609789][T10052] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.783823][T10052] bridge_slave_1: left allmulticast mode [ 1376.783853][T10052] bridge_slave_1: left promiscuous mode [ 1376.784125][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.884931][T10052] bridge_slave_0: left allmulticast mode [ 1376.884950][T10052] bridge_slave_0: left promiscuous mode [ 1376.885104][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.705770][T10052] $Hÿ (unregistering): Released all slaves [ 1380.638833][T10052] bond1 (unregistering): Released all slaves [ 1381.628119][T10052] bond0 (unregistering): (slave veth3): Releasing backup interface [ 1381.686902][T10052] bond0 (unregistering): Released all slaves [ 1382.695101][T10052] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1382.762792][T10052] bond2 (unregistering): Released all slaves [ 1383.771237][T10052] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1383.829761][T10052] bond3 (unregistering): Released all slaves [ 1384.752470][T10052] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1384.772967][T10052] bond4 (unregistering): Released all slaves [ 1386.647723][T10052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.723688][T10052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.745219][T10052] bond0 (unregistering): Released all slaves [ 1388.581253][T10052] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 1388.639473][T10052] bond0 (unregistering): Released all slaves [ 1389.561686][T10052] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1389.583224][T10052] bond1 (unregistering): Released all slaves [ 1391.325691][T10052] bond0 (unregistering): Released all slaves [ 1392.239570][T10052] bond1 (unregistering): Released all slaves [ 1393.098747][T10052] bond2 (unregistering): Released all slaves [ 1394.020206][T10052] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1394.059363][T10052] bond3 (unregistering): Released all slaves [ 1395.003047][T10052] rxrpc: Call ffff888084623d40 still in use (1,Complete,1489,0)! [ 1396.089327][T16082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1396.142459][T16082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1396.177396][T16082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1396.253307][T16082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1396.472148][T16090] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1396.515332][T16090] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1396.540432][T16090] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1396.628277][T16090] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1396.860328][T16094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1396.911612][T16094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1396.958959][T16094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1397.030563][T16094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1397.186414][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.208541][T16087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1397.246890][T16087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1397.275564][T16087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1397.338930][T16087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1397.415982][T16082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.513775][T11232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.514005][T11232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.578032][T16101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1397.626288][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.626830][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.643153][T16101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1397.685717][T16101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1397.720017][T16101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1397.771022][T16090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.939907][T16090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.997680][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.998561][ T8150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.042887][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.043058][ T8150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.079778][T16094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.249059][T16094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.301695][T16087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.364853][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.365064][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.426746][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.438384][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.526648][T16087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.592134][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.592364][ T8150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.624394][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.683083][T11232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.686943][T11232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.708104][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.826652][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.956921][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.957075][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.016708][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.017588][ T8150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.165498][T16082] veth0_vlan: entered promiscuous mode [ 1399.212050][T16090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.251751][T16082] veth1_vlan: entered promiscuous mode [ 1399.526564][T16082] veth0_macvtap: entered promiscuous mode [ 1399.562849][T16082] veth1_macvtap: entered promiscuous mode [ 1399.591875][T16094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.669374][T16082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.710581][T16082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.793446][T16087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.793831][ T3464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.797357][ T3464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.802857][ T3464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.820947][ T3464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.138129][T16094] veth0_vlan: entered promiscuous mode [ 1400.256433][T16094] veth1_vlan: entered promiscuous mode [ 1400.366747][ T7755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.366769][ T7755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.443570][T16101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.514049][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.514069][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.554196][T16094] veth0_macvtap: entered promiscuous mode [ 1400.612409][T16094] veth1_macvtap: entered promiscuous mode [ 1400.667468][T16090] veth0_vlan: entered promiscuous mode [ 1400.712449][T16094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.756903][T16090] veth1_vlan: entered promiscuous mode [ 1400.772903][T16094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.850674][ T2222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.852238][ T2222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.852281][ T2222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.852316][ T2222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.156237][T16087] veth0_vlan: entered promiscuous mode [ 1401.302184][T16090] veth0_macvtap: entered promiscuous mode [ 1401.392386][T16087] veth1_vlan: entered promiscuous mode [ 1401.403744][T16090] veth1_macvtap: entered promiscuous mode [ 1401.444689][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.444709][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.556870][ T7755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.556890][ T7755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.570126][T16090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.617042][T16090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.694331][ T6342] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.710675][T16087] veth0_macvtap: entered promiscuous mode [ 1401.718573][ T6342] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.741145][ T6342] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.759929][ T6342] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.760152][T16101] veth0_vlan: entered promiscuous mode [ 1401.787975][T16087] veth1_macvtap: entered promiscuous mode [ 1401.881800][T16101] veth1_vlan: entered promiscuous mode [ 1402.050677][T16087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.252633][T16087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.529204][ T7755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.531254][T16101] veth0_macvtap: entered promiscuous mode [ 1402.577550][ T7755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.606986][ T7755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.639633][ T7755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.696297][T16101] veth1_macvtap: entered promiscuous mode [ 1402.813487][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.813508][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.937298][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1402.958715][T16101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.985139][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.985160][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.035861][T16101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.192105][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1403.227165][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1403.247150][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1403.249387][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1403.250218][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1403.295640][ T3516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.295689][ T3516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.295729][ T3516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.295760][ T3516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.655426][T11833] Bluetooth: hci0: command tx timeout [ 1406.031426][T11833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1406.036938][T11833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1406.061876][T11833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1406.084798][T11833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1406.085575][T11833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1406.769161][T11833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1406.774645][T11833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1406.863675][T11833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1406.873398][T11833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1406.874179][T11833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1407.572052][ T5813] Bluetooth: hci0: command tx timeout [ 1407.645677][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 1408.195421][ T5813] Bluetooth: hci1: command tx timeout [ 1408.583280][T16520] chnl_net:caif_netlink_parms(): no params data found [ 1409.069209][ T5813] Bluetooth: hci3: command tx timeout [ 1409.902454][ T5813] Bluetooth: hci0: command tx timeout [ 1410.138796][T16619] sctp: Trying to GSO but underlying device doesn't support it. [ 1410.174343][ T5813] Bluetooth: hci1: command tx timeout [ 1410.283313][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 1410.594479][T16520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.594697][T16520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.594941][T16520] bridge_slave_0: entered allmulticast mode [ 1410.599742][T16520] bridge_slave_0: entered promiscuous mode [ 1410.648125][T16541] chnl_net:caif_netlink_parms(): no params data found [ 1410.665471][T16520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.665587][T16520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.665847][T16520] bridge_slave_1: entered allmulticast mode [ 1410.691300][T16520] bridge_slave_1: entered promiscuous mode [ 1411.012433][ T5813] Bluetooth: hci3: command tx timeout [ 1411.560624][T16520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.244314][T16520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.411215][ T5813] Bluetooth: hci0: command tx timeout [ 1412.411249][ T5813] Bluetooth: hci1: command tx timeout [ 1412.508070][T16551] chnl_net:caif_netlink_parms(): no params data found [ 1412.955251][T16520] team0: Port device team_slave_0 added [ 1412.991761][T11833] Bluetooth: hci3: command tx timeout [ 1413.851616][T16697] 9p: Bad value for 'wfdno' [ 1413.867396][T16520] team0: Port device team_slave_1 added [ 1414.353773][T11833] Bluetooth: hci1: command tx timeout [ 1414.397828][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.397965][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.398157][T16541] bridge_slave_0: entered allmulticast mode [ 1414.399757][T16541] bridge_slave_0: entered promiscuous mode [ 1414.638760][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.682265][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.682923][T16541] bridge_slave_1: entered allmulticast mode [ 1414.718366][T16541] bridge_slave_1: entered promiscuous mode [ 1414.726301][T16520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.726318][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.726340][T16520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.922936][T16520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.922954][T16520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.922981][T16520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.969031][T11833] Bluetooth: hci3: command tx timeout [ 1415.346371][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.350339][T16551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.350457][T16551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.350644][T16551] bridge_slave_0: entered allmulticast mode [ 1415.353224][T16551] bridge_slave_0: entered promiscuous mode [ 1415.374810][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.376559][T16551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.376695][T16551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.376881][T16551] bridge_slave_1: entered allmulticast mode [ 1415.379794][T16551] bridge_slave_1: entered promiscuous mode [ 1415.611897][T16732] random: crng reseeded on system resumption [ 1416.198103][T16520] hsr_slave_0: entered promiscuous mode [ 1416.199061][T16520] hsr_slave_1: entered promiscuous mode [ 1416.199708][T16520] debugfs: 'hsr0' already exists in 'hsr' [ 1416.199724][T16520] Cannot create hsr debugfs directory [ 1416.204345][T16541] team0: Port device team_slave_0 added [ 1416.290599][T16551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.303353][T16541] team0: Port device team_slave_1 added [ 1416.317846][T16551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.884880][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.884899][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.884925][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.000423][T16551] team0: Port device team_slave_0 added [ 1417.003117][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.003133][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.003159][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.032648][T16551] team0: Port device team_slave_1 added [ 1417.439961][T16551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.439976][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.439991][T16551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.704793][T16551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.704805][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.704819][T16551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.720697][T16541] hsr_slave_0: entered promiscuous mode [ 1417.722187][T16541] hsr_slave_1: entered promiscuous mode [ 1417.723216][T16541] debugfs: 'hsr0' already exists in 'hsr' [ 1417.723240][T16541] Cannot create hsr debugfs directory [ 1418.615056][T16551] hsr_slave_0: entered promiscuous mode [ 1418.616501][T16551] hsr_slave_1: entered promiscuous mode [ 1418.617498][T16551] debugfs: 'hsr0' already exists in 'hsr' [ 1418.617521][T16551] Cannot create hsr debugfs directory [ 1419.025297][T16520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.484276][T16520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.959443][T16520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.341692][T16520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.981753][T16541] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.207732][T16806] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1421.207750][T16806] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1421.219355][T16806] vhci_hcd vhci_hcd.0: Device attached [ 1421.223474][T16807] vhci_hcd: connection closed [ 1421.271302][T14465] vhci_hcd vhci_hcd.0: stop threads [ 1421.271327][T14465] vhci_hcd vhci_hcd.0: release socket [ 1421.271364][T14465] vhci_hcd vhci_hcd.0: disconnect device [ 1421.324377][T16541] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.623067][T16541] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.931555][T16541] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.548617][T16551] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.018843][T16551] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.672439][T16551] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.047634][T16551] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.373827][ T9] Dead loop on virtual device wlan0, fix it urgently! [ 1424.724795][T16520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1425.008223][T16520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1425.925927][T16520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1425.990884][T16520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1426.198283][T16541] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1426.248236][T16541] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1426.313664][T16541] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1426.453055][T16541] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1426.754460][T16551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1426.811406][T16551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1426.855423][T16551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1426.940843][T16551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1427.151668][T16520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.217646][T16520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.239371][T16541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.255636][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.255776][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.285754][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.285937][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.320642][T16541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.356519][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.356649][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.396217][T16551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.409871][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.409971][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.576532][T16551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.609571][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.622160][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.687008][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.698378][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.622700][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.456950][T16520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.524159][T16541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.752532][T16551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.484515][T16541] veth0_vlan: entered promiscuous mode [ 1430.558186][T16541] veth1_vlan: entered promiscuous mode [ 1430.685929][T16520] veth0_vlan: entered promiscuous mode [ 1430.775261][T16520] veth1_vlan: entered promiscuous mode [ 1430.810119][T16541] veth0_macvtap: entered promiscuous mode [ 1430.855996][T16541] veth1_macvtap: entered promiscuous mode [ 1431.003638][T16541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.029819][T16541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.041052][T16551] veth0_vlan: entered promiscuous mode [ 1431.048062][T16520] veth0_macvtap: entered promiscuous mode [ 1431.080851][ T7730] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.084133][ T7730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.091100][ T7730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.094298][T16520] veth1_macvtap: entered promiscuous mode [ 1431.096841][ T7730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.113775][T16551] veth1_vlan: entered promiscuous mode [ 1431.346729][T16520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.570053][T16520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.630245][ T2222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.630524][ T2222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.630538][ T2222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.671007][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.691094][ T5996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.746102][ T5996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.779187][T16551] veth0_macvtap: entered promiscuous mode [ 1431.909539][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.909558][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.911754][T16551] veth1_macvtap: entered promiscuous mode [ 1432.310435][T16551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.473899][T16551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.529896][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.529926][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.530919][ T1043] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.556946][ T1043] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.562542][ T1043] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.562584][ T1043] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.960640][T17012] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1433.005223][T17011] Bluetooth: MGMT ver 1.23 [ 1433.046567][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.046588][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.408655][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.408676][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.641575][ T2222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.641596][ T2222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.443011][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 1434.525433][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.557323][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.233002][T13133] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1435.384173][T13133] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1435.384202][T13133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.384218][T13133] usb 5-1: Product: syz [ 1435.384231][T13133] usb 5-1: Manufacturer: syz [ 1435.384243][T13133] usb 5-1: SerialNumber: syz [ 1435.407037][T13133] usb 5-1: config 0 descriptor?? [ 1435.646892][T13133] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1436.658157][T13133] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1436.695283][T13133] usb 5-1: USB disconnect, device number 2 [ 1436.880898][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2605'. [ 1436.883996][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.884899][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.370922][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2619'. [ 1440.176564][T16986] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1441.006359][T16986] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1441.368778][T17200] fido_id[17200]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1441.470239][T16986] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1441.594157][T16986] usb 5-1: device descriptor read/64, error -71 [ 1441.833536][T16986] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1441.955971][T16986] usb 5-1: device descriptor read/64, error -71 [ 1442.070443][T16986] usb usb5-port1: attempt power cycle [ 1442.397674][T17240] vlan2: entered allmulticast mode [ 1442.397698][T17240] hsr0: entered allmulticast mode [ 1442.397711][T17240] hsr_slave_0: entered allmulticast mode [ 1442.397729][T17240] hsr_slave_1: entered allmulticast mode [ 1442.441944][T16986] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1442.461493][T16986] usb 5-1: device descriptor read/8, error -71 [ 1442.708413][T16986] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1442.728064][T16986] usb 5-1: device descriptor read/8, error -71 [ 1442.832709][T16986] usb usb5-port1: unable to enumerate USB device [ 1443.312609][T17286] netlink: 'syz.2.2653': attribute type 1 has an invalid length. [ 1444.437759][T17336] fuse: Bad value for 'fd' [ 1444.700354][ T990] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1444.901069][ T990] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1444.901101][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.901119][ T990] usb 1-1: Product: syz [ 1444.901132][ T990] usb 1-1: Manufacturer: syz [ 1444.901145][ T990] usb 1-1: SerialNumber: syz [ 1444.980059][ T990] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1445.185183][ T9730] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1445.396939][T13133] usb 1-1: USB disconnect, device number 4 [ 1445.540562][T17369] fuse: Bad value for 'fd' [ 1446.210546][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1446.364939][ T9730] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1446.375828][ T9730] ath9k_htc: Failed to initialize the device [ 1446.389851][T13133] usb 1-1: ath9k_htc: USB layer deinitialized [ 1446.551077][T17134] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1446.588804][T17134] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1446.915830][T17413] fido_id[17413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1448.835608][ T9730] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1448.877604][ T9730] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1449.212954][T17499] fido_id[17499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1449.615393][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2742'. [ 1450.523525][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2753'. [ 1450.695485][T17565] evm: overlay not supported [ 1450.989154][T17577] netlink: 'syz.7.2760': attribute type 1 has an invalid length. [ 1451.699278][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2767'. [ 1451.704619][T17606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.705265][T17606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.037360][T17618] netlink: 'syz.7.2771': attribute type 1 has an invalid length. [ 1452.202046][T17618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1453.680721][ T9682] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1453.836666][ T9682] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.836692][ T9682] usb 1-1: config 0 has no interfaces? [ 1453.839875][ T9682] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1453.839904][ T9682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.839922][ T9682] usb 1-1: Product: syz [ 1453.839936][ T9682] usb 1-1: Manufacturer: syz [ 1453.839949][ T9682] usb 1-1: SerialNumber: syz [ 1453.855129][ T9682] usb 1-1: config 0 descriptor?? [ 1456.323238][T17669] usb 1-1: USB disconnect, device number 5 [ 1456.833491][ T9682] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1456.985988][ T9682] usb 5-1: Using ep0 maxpacket: 8 [ 1456.991335][ T9682] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1456.991364][ T9682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.991384][ T9682] usb 5-1: Product: syz [ 1456.991397][ T9682] usb 5-1: Manufacturer: syz [ 1456.991410][ T9682] usb 5-1: SerialNumber: syz [ 1457.036232][ T9682] usb 5-1: config 0 descriptor?? [ 1457.041408][ T9682] gspca_main: se401-2.14.0 probing 047d:5003 [ 1457.326022][ T9685] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1457.422710][ T9682] gspca_se401: Bayer format not supported! [ 1457.468036][ T9685] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1457.468068][ T9685] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.468087][ T9685] usb 8-1: Product: syz [ 1457.468100][ T9685] usb 8-1: Manufacturer: syz [ 1457.468115][ T9685] usb 8-1: SerialNumber: syz [ 1457.483600][ T9685] usb 8-1: config 0 descriptor?? [ 1457.617377][ T9682] usb 5-1: USB disconnect, device number 7 [ 1457.781723][ T9685] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1458.178533][T16536] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1458.391785][ T9685] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1458.425969][T16536] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.425994][T16536] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1458.442571][ T9685] usb 8-1: USB disconnect, device number 7 [ 1458.463001][T16536] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1458.463030][T16536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.463047][T16536] usb 3-1: Product: syz [ 1458.463061][T16536] usb 3-1: Manufacturer: syz [ 1458.463074][T16536] usb 3-1: SerialNumber: syz [ 1458.521627][T16536] usb 3-1: config 0 descriptor?? [ 1458.992477][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 1459.856030][T17806] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1460.007837][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2840'. [ 1460.037380][T17806] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1460.037408][T17806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.037425][T17806] usb 8-1: Product: syz [ 1460.037438][T17806] usb 8-1: Manufacturer: syz [ 1460.037459][T17806] usb 8-1: SerialNumber: syz [ 1460.040647][T17757] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1460.062840][T16536] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1460.096616][T17806] usb 8-1: config 0 descriptor?? [ 1460.133305][T17757] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1460.220238][T16536] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 1460.220287][T16536] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.220309][T16536] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1460.220332][T16536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1460.220364][T16536] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1460.220385][T16536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.229669][T16536] usb 5-1: config 0 descriptor?? [ 1460.328358][T17806] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1460.369368][T17856] fido_id[17856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1460.748150][T16536] usbhid 5-1:0.0: can't add hid device: -71 [ 1460.748272][T16536] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1460.785816][T16536] usb 5-1: USB disconnect, device number 8 [ 1460.867565][ T9685] usb 3-1: USB disconnect, device number 5 [ 1460.910706][T17806] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1460.915396][T17806] usb 8-1: USB disconnect, device number 8 [ 1461.579444][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 1461.949791][T17905] geneve2: entered promiscuous mode [ 1461.949817][T17905] geneve2: entered allmulticast mode [ 1463.145732][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2864'. [ 1464.135642][T17806] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1464.317876][T17806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1464.317907][T17806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.317926][T17806] usb 1-1: Product: syz [ 1464.317939][T17806] usb 1-1: Manufacturer: syz [ 1464.317953][T17806] usb 1-1: SerialNumber: syz [ 1464.323413][T17806] usb 1-1: config 0 descriptor?? [ 1464.654214][ T8569] Bluetooth: hci2: command 0x0406 tx timeout [ 1464.671888][ T8569] Bluetooth: hci8: command 0x0406 tx timeout [ 1464.677803][T17806] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1465.672048][T17967] binder: 17966:17967 ioctl c0306201 200000000080 returned -14 [ 1465.790324][T17806] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1465.815480][T17806] usb 1-1: USB disconnect, device number 6 [ 1466.325921][T17985] netlink: 'syz.8.2879': attribute type 1 has an invalid length. [ 1466.443790][T17985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1466.446842][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1466.540561][T17995] bridge0: port 3(syz_tun) entered blocking state [ 1466.540693][T17995] bridge0: port 3(syz_tun) entered disabled state [ 1466.540933][T17995] syz_tun: entered allmulticast mode [ 1466.543514][T17995] syz_tun: entered promiscuous mode [ 1467.147858][T16986] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1467.316275][T16986] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 1467.316323][T16986] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.316343][T16986] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1467.316367][T16986] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1467.316399][T16986] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1467.316420][T16986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.355770][T18013] binder: 18012:18013 ioctl c0306201 200000000080 returned -14 [ 1467.399179][T16986] usb 1-1: config 0 descriptor?? [ 1467.926407][T16986] usbhid 1-1:0.0: can't add hid device: -71 [ 1467.926533][T16986] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1467.965038][T16986] usb 1-1: USB disconnect, device number 7 [ 1468.067427][T18033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 1468.164467][T18036] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 1468.324815][T18036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1468.469813][T18053] binder: 18052:18053 ioctl c0306201 200000000080 returned -14 [ 1468.687881][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2901'. [ 1469.020812][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1469.335746][T18091] binder: 18089:18091 ioctl c0306201 200000000080 returned -14 [ 1469.364454][T18091] binder: BINDER_SET_CONTEXT_MGR already set [ 1469.364469][T18091] binder: 18089:18091 ioctl 4018620d 200000000040 returned -16 [ 1469.397307][T18093] netlink: 'syz.4.2914': attribute type 1 has an invalid length. [ 1469.501034][T18093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1469.512912][T16986] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1469.658232][T16986] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 1469.658292][T16986] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.658316][T16986] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1469.658342][T16986] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1469.658435][T16986] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1469.658456][T16986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.664334][T16986] usb 3-1: config 0 descriptor?? [ 1469.900427][T16986] usbhid 3-1:0.0: can't add hid device: -71 [ 1469.900552][T16986] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1469.974997][T16986] usb 3-1: USB disconnect, device number 6 [ 1471.747215][T18171] Bluetooth: MGMT ver 1.23 [ 1471.903150][T11655] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1472.136492][T11655] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 1472.136553][T11655] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.136574][T11655] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1472.136598][T11655] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1472.136630][T11655] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1472.136651][T11655] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.218197][T11655] usb 1-1: config 0 descriptor?? [ 1472.450554][T11655] usbhid 1-1:0.0: can't add hid device: -71 [ 1472.450650][T11655] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1472.477869][T11655] usb 1-1: USB disconnect, device number 8 [ 1472.824012][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2947'. [ 1473.396722][ T9682] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1473.712213][T11833] Bluetooth: hci2: command 0x0406 tx timeout [ 1473.714518][ T5813] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1473.834316][ T9682] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1473.846664][ T9682] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1473.846693][ T9682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.846712][ T9682] usb 3-1: Product: syz [ 1473.846725][ T9682] usb 3-1: Manufacturer: syz [ 1473.846739][ T9682] usb 3-1: SerialNumber: syz [ 1473.897384][ T9682] usb 3-1: config 0 descriptor?? [ 1474.189304][T18247] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1474.486829][T18260] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2961'. [ 1474.792308][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1474.792334][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1475.284411][T18288] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1476.433208][ T9682] usb 3-1: USB disconnect, device number 7 [ 1476.624812][T18302] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2973'. [ 1476.672511][T18305] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 1476.742061][T18311] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2974'. [ 1476.754472][T18305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1476.822463][ T37] kauditd_printk_skb: 686 callbacks suppressed [ 1476.822482][ T37] audit: type=1326 audit(1767071812.033:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.822534][ T37] audit: type=1326 audit(1767071812.054:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.831925][ T37] audit: type=1326 audit(1767071812.064:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.831974][ T37] audit: type=1326 audit(1767071812.064:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.832017][ T37] audit: type=1326 audit(1767071812.064:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.832057][ T37] audit: type=1326 audit(1767071812.064:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.832097][ T37] audit: type=1326 audit(1767071812.064:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.832135][ T37] audit: type=1326 audit(1767071812.064:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.832174][ T37] audit: type=1326 audit(1767071812.064:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.832213][ T37] audit: type=1326 audit(1767071812.064:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18309 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f65bdaaf749 code=0x7ffc0000 [ 1476.913450][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1476.913474][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 1477.177841][T18323] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1477.587758][ T9730] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1477.636172][T18344] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1477.733368][ T9730] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1477.737260][ T9730] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1477.737289][ T9730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.737308][ T9730] usb 3-1: Product: syz [ 1477.737322][ T9730] usb 3-1: Manufacturer: syz [ 1477.737336][ T9730] usb 3-1: SerialNumber: syz [ 1477.792770][ T9730] usb 3-1: config 0 descriptor?? [ 1479.669420][T18374] overlayfs: failed to resolve './bus': -2 [ 1480.278700][ T9730] usb 3-1: USB disconnect, device number 8 [ 1481.597863][T11655] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1481.708809][T18424] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3010'. [ 1481.762901][T11655] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 65, using maximum allowed: 30 [ 1481.762949][T11655] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.762968][T11655] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1481.762991][T11655] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1481.763020][T11655] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1481.763042][T11655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.767941][T11655] usb 5-1: config 0 descriptor?? [ 1482.074192][T11655] usbhid 5-1:0.0: can't add hid device: -71 [ 1482.074317][T11655] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1482.085007][T11655] usb 5-1: USB disconnect, device number 9 [ 1484.483799][ T990] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1484.619596][T18471] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1484.641772][ T990] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1484.641802][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.641819][ T990] usb 1-1: Product: syz [ 1484.641831][ T990] usb 1-1: Manufacturer: syz [ 1484.641843][ T990] usb 1-1: SerialNumber: syz [ 1484.700547][ T990] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1484.731881][ T9730] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1485.121235][T18450] random: crng reseeded on system resumption [ 1485.912467][ T9730] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1485.947326][ T9730] ath9k_htc: Failed to initialize the device [ 1486.154854][ T9730] usb 1-1: ath9k_htc: USB layer deinitialized [ 1486.231736][ T49] usb 1-1: USB disconnect, device number 9 [ 1486.237778][T17757] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1486.554654][T17757] usb 8-1: Using ep0 maxpacket: 32 [ 1487.303830][T17757] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1487.303859][T17757] usb 8-1: config 0 has no interface number 0 [ 1487.307918][T17757] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1487.307945][T17757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.307965][T17757] usb 8-1: Product: syz [ 1487.307978][T17757] usb 8-1: Manufacturer: syz [ 1487.307991][T17757] usb 8-1: SerialNumber: syz [ 1487.371305][T17757] usb 8-1: config 0 descriptor?? [ 1487.415398][T17757] smsc95xx v2.0.0 [ 1487.437375][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.404190][ T5878] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1489.122116][T17757] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1489.122145][T17757] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1489.122833][T17757] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1489.123141][T17757] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1489.179024][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 1489.246229][T17757] usb 8-1: USB disconnect, device number 9 [ 1489.285867][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.285925][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1489.327975][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1489.328005][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.328023][ T5878] usb 1-1: Product: syz [ 1489.328037][ T5878] usb 1-1: Manufacturer: syz [ 1489.328050][ T5878] usb 1-1: SerialNumber: syz [ 1489.387692][ T5878] usb 1-1: config 0 descriptor?? [ 1489.658474][T18556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3053'. [ 1491.278445][T17757] usb 1-1: USB disconnect, device number 10 [ 1492.345146][T18635] overlayfs: failed to resolve './bus': -2 [ 1492.706028][ T5878] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1492.855677][ T5878] usb 8-1: Using ep0 maxpacket: 16 [ 1492.857574][ T5878] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1492.862000][ T5878] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1492.862029][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.862048][ T5878] usb 8-1: Product: syz [ 1492.862061][ T5878] usb 8-1: Manufacturer: syz [ 1492.862075][ T5878] usb 8-1: SerialNumber: syz [ 1492.883531][ T5878] usb 8-1: config 0 descriptor?? [ 1493.772837][T18687] overlayfs: failed to resolve './bus': -2 [ 1494.072683][T18698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1495.405059][ T803] usb 8-1: USB disconnect, device number 10 [ 1495.988544][T18771] IPVS: set_ctl: invalid protocol: 65535 255.255.1.128:49664 [ 1497.178016][T18800] 9p: Bad value for 'rfdno' [ 1498.932292][T11358] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1499.075111][T11358] usb 1-1: Using ep0 maxpacket: 16 [ 1499.080822][T11358] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1499.084363][T11358] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1499.084392][T11358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.084410][T11358] usb 1-1: Product: syz [ 1499.084422][T11358] usb 1-1: Manufacturer: syz [ 1499.131597][T11358] usb 1-1: SerialNumber: syz [ 1499.143239][T11358] usb 1-1: config 0 descriptor?? [ 1501.594225][T18813] usb 1-1: USB disconnect, device number 11 [ 1504.152622][T17757] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1504.295281][T17757] usb 8-1: Using ep0 maxpacket: 16 [ 1504.319993][T17757] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1504.324620][T17757] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1504.324649][T17757] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.324667][T17757] usb 8-1: Product: syz [ 1504.324681][T17757] usb 8-1: Manufacturer: syz [ 1504.324695][T17757] usb 8-1: SerialNumber: syz [ 1504.392197][T17757] usb 8-1: config 0 descriptor?? [ 1505.708442][T18966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1505.754838][T18969] tipc: Started in network mode [ 1505.754861][T18969] tipc: Node identity -, cluster identity 4711 [ 1505.821149][T18971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1506.924325][T17855] usb 8-1: USB disconnect, device number 11 [ 1511.003606][T19032] 9p: Bad value for 'rfdno' [ 1512.619631][T19043] bridge0: port 3(syz_tun) entered blocking state [ 1512.619744][T19043] bridge0: port 3(syz_tun) entered disabled state [ 1512.620036][T19043] syz_tun: entered allmulticast mode [ 1512.622614][T19043] syz_tun: entered promiscuous mode [ 1512.623394][T19043] bridge0: port 3(syz_tun) entered blocking state [ 1512.623502][T19043] bridge0: port 3(syz_tun) entered forwarding state [ 1513.032496][T19051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1514.190329][T19068] 9p: Bad value for 'rfdno' [ 1515.390951][ T990] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1516.286284][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 1516.296829][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1516.299689][ T990] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1516.299716][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.299735][ T990] usb 5-1: Product: syz [ 1516.299747][ T990] usb 5-1: Manufacturer: syz [ 1516.299760][ T990] usb 5-1: SerialNumber: syz [ 1516.313851][ T990] usb 5-1: config 0 descriptor?? [ 1516.319353][ T990] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1516.319385][ T990] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1516.395631][T19083] bridge0: port 3(syz_tun) entered blocking state [ 1516.395749][T19083] bridge0: port 3(syz_tun) entered disabled state [ 1516.395999][T19083] syz_tun: entered allmulticast mode [ 1516.398534][T19083] syz_tun: entered promiscuous mode [ 1516.399222][T19083] bridge0: port 3(syz_tun) entered blocking state [ 1516.399344][T19083] bridge0: port 3(syz_tun) entered forwarding state [ 1516.966448][ T990] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1518.026002][ T990] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1518.026033][ T990] em28xx 5-1:0.0: board has no eeprom [ 1518.115233][ T990] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1518.115263][ T990] em28xx 5-1:0.0: dvb set to bulk mode. [ 1518.115611][ T9730] em28xx 5-1:0.0: Binding DVB extension [ 1518.158134][ T990] usb 5-1: USB disconnect, device number 10 [ 1518.160960][ T990] em28xx 5-1:0.0: Disconnecting em28xx [ 1519.216060][ T9730] em28xx 5-1:0.0: Registering input extension [ 1519.222798][ T990] em28xx 5-1:0.0: Closing input extension [ 1520.203027][ T990] em28xx 5-1:0.0: Freeing device [ 1521.548227][ T37] audit: type=1326 audit(1767071859.006:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1521.548601][ T37] audit: type=1326 audit(1767071859.016:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1521.549136][ T37] audit: type=1326 audit(1767071859.016:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1521.552272][ T37] audit: type=1326 audit(1767071859.016:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1521.552696][ T37] audit: type=1326 audit(1767071859.016:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1522.523968][ T37] audit: type=1326 audit(1767071859.016:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1522.524289][ T37] audit: type=1326 audit(1767071860.035:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1522.553986][ T37] audit: type=1326 audit(1767071860.045:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1522.563684][ T37] audit: type=1326 audit(1767071860.077:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19124 comm="syz.2.3228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7686bef749 code=0x7ffc0000 [ 1523.340736][T17963] Bluetooth: hci1: command 0x0406 tx timeout [ 1523.341046][T17963] Bluetooth: hci0: command 0x0406 tx timeout [ 1531.515234][T19230] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3259'. [ 1531.638322][T19235] trusted_key: syz.8.3257 sent an empty control message without MSG_MORE. [ 1532.085453][ T37] audit: type=1326 audit(1767071870.072:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.110143][ T37] audit: type=1326 audit(1767071870.072:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.111091][ T37] audit: type=1326 audit(1767071870.103:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.169846][ T37] audit: type=1326 audit(1767071870.124:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.172096][ T37] audit: type=1326 audit(1767071870.166:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.218735][ T37] audit: type=1326 audit(1767071870.166:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.220371][ T37] audit: type=1326 audit(1767071870.219:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19247 comm="syz.7.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388889f749 code=0x7ffc0000 [ 1532.992652][ T38] INFO: task kworker/u8:7:10052 blocked for more than 143 seconds. [ 1532.992677][ T38] Not tainted syzkaller #0 [ 1532.992686][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1532.992695][ T38] task:kworker/u8:7 state:D stack:21920 pid:10052 tgid:10052 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1532.992745][ T38] Workqueue: netns cleanup_net [ 1532.992771][ T38] Call Trace: [ 1532.992779][ T38] [ 1532.992792][ T38] __schedule+0x145f/0x5070 [ 1532.992821][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1532.992858][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1532.992889][ T38] ? __pfx___schedule+0x10/0x10 [ 1532.992925][ T38] ? schedule+0x91/0x360 [ 1532.992954][ T38] schedule+0x165/0x360 [ 1532.992981][ T38] rxrpc_destroy_all_calls+0x564/0x660 [ 1532.993017][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1532.993041][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1532.993062][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1532.993085][ T38] ? __try_to_del_timer_sync+0x34d/0x3a0 [ 1532.993120][ T38] rxrpc_exit_net+0x6f/0xc0 [ 1532.993147][ T38] ops_undo_list+0x49a/0x990 [ 1532.993184][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1532.993203][ T38] ? rt_spin_unlock+0x150/0x200 [ 1532.993231][ T38] ? rt_spin_unlock+0x161/0x200 [ 1532.993257][ T38] cleanup_net+0x4de/0x7b0 [ 1532.993281][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1532.993307][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 1532.993328][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 1532.993351][ T38] process_scheduled_works+0xad1/0x1770 [ 1532.993401][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1532.993420][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1532.993459][ T38] worker_thread+0x8a0/0xda0 [ 1532.993494][ T38] ? __kthread_parkme+0x7b/0x200 [ 1532.993527][ T38] kthread+0x711/0x8a0 [ 1532.993555][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1532.993576][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.993598][ T38] ? rt_spin_unlock+0x150/0x200 [ 1532.993626][ T38] ? rt_spin_unlock+0x161/0x200 [ 1532.993648][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.993673][ T38] ret_from_fork+0x510/0xa50 [ 1532.993698][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1532.993716][ T38] ? __switch_to+0xc9e/0x1480 [ 1532.993747][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.993772][ T38] ret_from_fork_asm+0x1a/0x30 [ 1532.993816][ T38] [ 1532.993914][ T38] [ 1532.993914][ T38] Showing all locks held in the system: [ 1532.993925][ T38] 1 lock held by khungtaskd/38: [ 1532.993937][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1532.994017][ T38] 6 locks held by kworker/u8:17/3705: [ 1532.994029][ T38] 2 locks held by getty/5558: [ 1532.994040][ T38] #0: ffff888034f250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1532.994087][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1532.994129][ T38] 6 locks held by kworker/0:16/7438: [ 1532.994140][ T38] #0: ffff88814049ad38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1532.994189][ T38] #1: ffffc90005707bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1532.994231][ T38] #2: ffff888027c52188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4f30 [ 1532.994274][ T38] #3: ffff888027c555b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2190/0x4f30 [ 1532.994319][ T38] #4: ffff888027aae458 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21c0/0x4f30 [ 1532.994365][ T38] #5: ffffffff8e15dac0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1830 [ 1532.994415][ T38] 3 locks held by kworker/u8:7/10052: [ 1532.994426][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1532.994471][ T38] #1: ffffc90004ec7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1532.994517][ T38] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 1532.994565][ T38] 4 locks held by kworker/u8:26/15065: [ 1532.994584][ T38] 4 locks held by kworker/u8:27/18008: [ 1532.994595][ T38] 1 lock held by syz.4.3265/19252: [ 1532.994606][ T38] #0: ffff888082f25cf0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 1532.994652][ T38] 1 lock held by syz.4.3265/19253: [ 1532.994664][ T38] 2 locks held by syz.0.3267/19260: [ 1532.994674][ T38] #0: ffff8880594c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1532.994721][ T38] #1: ffff8880594c8120 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x217/0xa30 [ 1532.994768][ T38] 4 locks held by syz.2.3270/19266: [ 1532.994779][ T38] [ 1532.994784][ T38] ============================================= [ 1532.994784][ T38] [ 1532.994792][ T38] NMI backtrace for cpu 1 [ 1532.994805][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1532.994825][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1532.994836][ T38] Call Trace: [ 1532.994844][ T38] [ 1532.994852][ T38] dump_stack_lvl+0xe8/0x150 [ 1532.994875][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1532.994899][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1532.994921][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1532.994945][ T38] sys_info+0x135/0x170 [ 1532.994964][ T38] watchdog+0xf95/0xfe0 [ 1532.994989][ T38] ? watchdog+0x20a/0xfe0 [ 1532.995015][ T38] kthread+0x711/0x8a0 [ 1532.995041][ T38] ? __pfx_watchdog+0x10/0x10 [ 1532.995060][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.995080][ T38] ? rt_spin_unlock+0x150/0x200 [ 1532.995107][ T38] ? rt_spin_unlock+0x161/0x200 [ 1532.995158][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.995183][ T38] ret_from_fork+0x510/0xa50 [ 1532.995205][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1532.995223][ T38] ? __switch_to+0xc9e/0x1480 [ 1532.995251][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.995275][ T38] ret_from_fork_asm+0x1a/0x30 [ 1532.995314][ T38] [ 1532.995320][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1532.995354][ C0] NMI backtrace for cpu 0 [ 1532.995368][ C0] CPU: 0 UID: 0 PID: 894 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1532.995388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1532.995400][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1532.995426][ C0] RIP: 0010:unwind_next_frame+0x484/0x23d0 [ 1532.995449][ C0] Code: d2 84 c0 48 0f 45 d1 48 89 15 e8 60 45 10 48 85 d2 0f 84 40 02 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 6d 18 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 1532.995464][ C0] RSP: 0018:ffffc900045af1b8 EFLAGS: 00000a03 [ 1532.995479][ C0] RAX: 0000000000000000 RBX: ffffffff8efa4850 RCX: ffffffff8efa4854 [ 1532.995493][ C0] RDX: ffffffff8f74728a RSI: ffffffff8f74728a RDI: ffffffff8b3f5780 [ 1532.995507][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8d5ae940 [ 1532.995519][ C0] R10: ffffc900045af2d8 R11: ffffffff81ab9860 R12: ffffffff8f74728e [ 1532.995532][ C0] R13: ffffffff8f74728f R14: ffffc900045af288 R15: ffffffff8efa4850 [ 1532.995547][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1532.995562][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1532.995574][ C0] CR2: 0000000005ffffe8 CR3: 000000003c318000 CR4: 00000000003526f0 [ 1532.995590][ C0] Call Trace: [ 1532.995596][ C0] [ 1532.995607][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 1532.995628][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1532.995652][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1532.995676][ C0] ? skb_release_data+0x62d/0x7c0 [ 1532.995695][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1532.995717][ C0] arch_stack_walk+0x11c/0x150 [ 1532.995741][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1532.995767][ C0] stack_trace_save+0x9c/0xe0 [ 1532.995787][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1532.995811][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1532.995834][ C0] kasan_save_track+0x3e/0x80 [ 1532.995856][ C0] ? kasan_save_track+0x3e/0x80 [ 1532.995876][ C0] ? kasan_save_free_info+0x46/0x50 [ 1532.995895][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1532.995917][ C0] ? kmem_cache_free+0x18f/0x8d0 [ 1532.995965][ C0] kasan_save_free_info+0x46/0x50 [ 1532.995984][ C0] __kasan_slab_free+0x5c/0x80 [ 1532.996008][ C0] kmem_cache_free+0x18f/0x8d0 [ 1532.996030][ C0] ? skb_release_data+0x62d/0x7c0 [ 1532.996052][ C0] skb_release_data+0x62d/0x7c0 [ 1532.996075][ C0] ? send6+0x220/0x8d0 [ 1532.996092][ C0] sk_skb_reason_drop+0x127/0x170 [ 1532.996113][ C0] send6+0x4fc/0x8d0 [ 1532.996130][ C0] ? rt_read_lock+0x203/0x490 [ 1532.996151][ C0] ? send6+0x220/0x8d0 [ 1532.996171][ C0] ? __pfx_send6+0x10/0x10 [ 1532.996187][ C0] ? rcu_is_watching+0x15/0xb0 [ 1532.996207][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1532.996227][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1532.996246][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1532.996265][ C0] wg_socket_send_skb_to_peer+0x128/0x200 [ 1532.996286][ C0] wg_packet_handshake_send_worker+0x1db/0x320 [ 1532.996310][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1532.996339][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1532.996357][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1532.996375][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1532.996395][ C0] process_scheduled_works+0xad1/0x1770 [ 1532.996433][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1532.996465][ C0] ? do_raw_spin_lock+0x21f/0x290 [ 1532.996493][ C0] worker_thread+0x8a0/0xda0 [ 1532.996525][ C0] kthread+0x711/0x8a0 [ 1532.996548][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1532.996567][ C0] ? __pfx_kthread+0x10/0x10 [ 1532.996588][ C0] ? rt_spin_unlock+0x150/0x200 [ 1532.996611][ C0] ? rt_spin_unlock+0x161/0x200 [ 1532.996631][ C0] ? __pfx_kthread+0x10/0x10 [ 1532.996654][ C0] ret_from_fork+0x510/0xa50 [ 1532.996673][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1532.996691][ C0] ? __switch_to+0xc9e/0x1480 [ 1532.996717][ C0] ? __pfx_kthread+0x10/0x10 [ 1532.996739][ C0] ret_from_fork_asm+0x1a/0x30 [ 1532.996771][ C0] [ 1532.997358][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1532.997375][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1532.997391][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1532.997399][ T38] Call Trace: [ 1532.997406][ T38] [ 1532.997412][ T38] vpanic+0x1e0/0x670 [ 1532.997435][ T38] panic+0xb9/0xc0 [ 1532.997452][ T38] ? __pfx_panic+0x10/0x10 [ 1532.997477][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1532.997497][ T38] watchdog+0xfdf/0xfe0 [ 1532.997516][ T38] ? watchdog+0x20a/0xfe0 [ 1532.997536][ T38] kthread+0x711/0x8a0 [ 1532.997557][ T38] ? __pfx_watchdog+0x10/0x10 [ 1532.997571][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.997587][ T38] ? rt_spin_unlock+0x150/0x200 [ 1532.997607][ T38] ? rt_spin_unlock+0x161/0x200 [ 1532.997623][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.997641][ T38] ret_from_fork+0x510/0xa50 [ 1532.997658][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1532.997671][ T38] ? __switch_to+0xc9e/0x1480 [ 1532.997694][ T38] ? __pfx_kthread+0x10/0x10 [ 1532.997713][ T38] ret_from_fork_asm+0x1a/0x30 [ 1532.997743][ T38] [ 1532.999537][ T38] Kernel Offset: disabled