last executing test programs: 8m55.654871956s ago: executing program 0 (id=1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8m53.653337283s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000000240)=""/159, 0x9f) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) shutdown(r6, 0x0) 8m51.607104173s ago: executing program 0 (id=11): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) llistxattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8m42.040055172s ago: executing program 3 (id=23): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a5002430102030109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8m36.167636281s ago: executing program 32 (id=11): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) llistxattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8m36.024667223s ago: executing program 3 (id=32): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "97451a24bdc556"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={r5, r4, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc18143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33365160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f189b8f6e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4f32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x7, 0x7fff0000}]}) bind$inet(r7, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r7, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 8m34.692215038s ago: executing program 3 (id=33): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000e000000000000002a00000094fff5000000000087dc559317f30c22bf019b55f8fb3be62435298cc0ffb7446fb2a04ca75225bd8b38b5a3e0ea0510f3fc258f6dcd8295e95c4c4bc6dae1f1f3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/48, 0x30) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r3, 0x2007ffb) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="63545eda7692a73150"], 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="190428bd7000fcdbdf250a000000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) write$uinput_user_dev(r3, &(0x7f0000000680)={'syz0\x00', {0xff81, 0x3, 0x23}, 0xf, [0x9, 0x6, 0x9, 0xffbffffc, 0x3, 0x869, 0x400, 0xfffffffa, 0x80, 0x401, 0x8e46, 0x6, 0x4, 0x8, 0xffffffff, 0xed, 0x3, 0xfff, 0x4, 0x8, 0xc0000, 0x2, 0x1ff, 0x3ff, 0x4, 0xc098, 0x6, 0xbba, 0x1, 0x8, 0x400, 0x3, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x400, 0x4, 0x8, 0xbd2, 0x2, 0x3ff, 0x4, 0x7, 0xd, 0x7, 0xad, 0x2, 0x3, 0xb, 0x800, 0x4, 0x3f2, 0x4, 0x2, 0xa1, 0x0, 0x7, 0x2, 0x8001, 0x40, 0x3, 0x6], [0x8, 0xffff, 0x6, 0x2, 0x8af3, 0x9, 0x4, 0x3, 0x1, 0xffff, 0x7fffffff, 0xf, 0x8000, 0xeb1f, 0xdd1, 0x2, 0x9, 0x4, 0x80000000, 0xe9, 0xfffffff9, 0x4, 0xfffffff1, 0x6, 0x0, 0x7fffffff, 0x3, 0x94d4, 0x2, 0x4, 0x80, 0xcc6, 0x1, 0x8, 0x0, 0x100, 0x2, 0xff, 0x7, 0x4, 0x5, 0x8, 0x0, 0x100, 0x9, 0x7ff, 0x7, 0x2, 0xffff8e42, 0x6, 0x9dcd, 0x1, 0xfffffffe, 0x1, 0x7a32df1c, 0xaf9, 0x5, 0xd7, 0x2, 0x6, 0xfffffff7, 0xe, 0x401, 0x9], [0x5, 0x1, 0x3, 0xb, 0x101, 0x7, 0x2, 0x5, 0x100, 0x8000, 0x81, 0xffffffff, 0x0, 0x2fe, 0x1, 0xff, 0xb8b, 0x7, 0x6d4, 0xffffffc0, 0xffffffff, 0xcf0, 0x7, 0x8, 0x5fe, 0x401, 0x6, 0xa61, 0x5, 0x4, 0x6, 0x1, 0x6, 0x0, 0x1, 0x5, 0xb86, 0x4, 0x3, 0xb242, 0x8, 0xffffffff, 0x4, 0x0, 0x81, 0x7, 0x132a, 0x4, 0x81, 0x7, 0x3, 0xc4, 0x6, 0xb2ad, 0x80000000, 0x7, 0x6, 0xee, 0x10, 0x3, 0x20010000, 0x3, 0x0, 0x9], [0x7, 0x8, 0xffff0001, 0x5, 0x3ff, 0x2, 0x9, 0xd, 0x400, 0x7fff, 0xfffffffc, 0x2000008, 0x40, 0x8, 0x1ff, 0xe, 0x2, 0x0, 0xa0000000, 0x6, 0x0, 0x5, 0x8, 0x19d2, 0x8, 0x9, 0x2, 0x80000000, 0x2f, 0xd9, 0x6, 0xd00, 0x6, 0xffffffff, 0x8, 0xd, 0x7f, 0x0, 0x2, 0x9, 0x1, 0x94f6, 0x8fac, 0x3, 0x2, 0x0, 0xda, 0x0, 0x3, 0x14, 0x2, 0x5, 0x5, 0x4942, 0x7, 0x1, 0xffff, 0x6, 0xec86, 0xfffffff7, 0xfffff000, 0xec, 0x8]}, 0x45c) 8m31.58195851s ago: executing program 3 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x3, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000040)={0x4, "ad4da8f7b0a03317a91aaa55ea8c98b0f0e0a96025e5b557ebecbcbb6ac257f8", 0x3, 0x4, 0x3, 0x8, 0x4, 0x0, 0x101, 0x9}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000003c0)=@x86={0x6b, 0x4, 0xc, 0x0, 0x10000000, 0x7f, 0x3, 0xa, 0xd, 0xa0, 0x8, 0x8, 0x0, 0x2, 0x9, 0x43, 0x3, 0x2, 0x7, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0xfffffffffffffffd, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x2, 0xfffffffffffffffc, 0x7, 0x6, 0x6, 0x100000000001, 0xfffffffffffffffe], 0x8000000, 0x4fb40}) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="8d36a2d20e6973f39ca69e82aed6de909ad87490", 0x14, 0x4000000, 0x0, 0x0) 8m30.029650612s ago: executing program 3 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r5, 0x0) 8m28.135331383s ago: executing program 3 (id=38): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3cb3a7749966c5a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x120) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x2, 0x9, 0xb6, 0x10, 0x3}, 0xcf, 0x0, 0x5, [{0x33, &(0x7f0000000540)=@string={0x33, 0x3, "41bb01df0a15c01f80791f19a916c29ffc61ebf4d1cf6c68c658dc3724fc68e6ed6dd00f32b030e63c3e54e7c5c518e312"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x420}}, {0x0, 0x0}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2ce3}}, {0x35, &(0x7f0000000640)=ANY=[@ANYBLOB]}]}) 8m12.28207182s ago: executing program 33 (id=38): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3cb3a7749966c5a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) getdents64(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x120) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x2, 0x9, 0xb6, 0x10, 0x3}, 0xcf, 0x0, 0x5, [{0x33, &(0x7f0000000540)=@string={0x33, 0x3, "41bb01df0a15c01f80791f19a916c29ffc61ebf4d1cf6c68c658dc3724fc68e6ed6dd00f32b030e63c3e54e7c5c518e312"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x420}}, {0x0, 0x0}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2ce3}}, {0x35, &(0x7f0000000640)=ANY=[@ANYBLOB]}]}) 11.875398357s ago: executing program 1 (id=635): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file7\x00', 0x2) 11.380153157s ago: executing program 1 (id=638): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='0fc', 0x3) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 11.197829376s ago: executing program 4 (id=639): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) 10.022329305s ago: executing program 4 (id=640): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r2, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)="2318") 8.951537566s ago: executing program 4 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000f705000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8.923605282s ago: executing program 1 (id=643): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_usb_disconnect(r0) 8.780315812s ago: executing program 4 (id=644): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002440)='net/dev_mcast\x00') socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b080)=""/102400, 0x19000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600014000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x4008040) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0x9}, {0x5, 0xc8, 0x401}}}}, 0xb) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 7.714384972s ago: executing program 2 (id=645): io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000e00)={0x7}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) pipe2(&(0x7f00000000c0), 0x80000) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000004000000000000000500"/117], 0x78) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffffffd}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000005c0), &(0x7f0000000580)=""/24}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) 6.412805829s ago: executing program 2 (id=646): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x1000)=nil) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_open_procfs(r0, &(0x7f0000000280)='net/rt_acct\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(0x0, 0x4) unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 5.908155459s ago: executing program 4 (id=647): pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) 5.269167041s ago: executing program 2 (id=648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) shutdown(r0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x3, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="78be47b0", 0x4}], 0x1}}], 0x1, 0x20080058) 5.076810774s ago: executing program 2 (id=649): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x9) unshare(0x6020400) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0xa438}, {r2, 0x210}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0) 4.596571563s ago: executing program 1 (id=650): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 2.626673658s ago: executing program 2 (id=651): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.388645248s ago: executing program 1 (id=652): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpgrp(0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 6.09543ms ago: executing program 1 (id=653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x14, r3, 0x1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x48040) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) r4 = socket$unix(0x1, 0x2, 0x0) unshare(0x8040480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) 5.534173ms ago: executing program 2 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x8, 0x1, 0x3c, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) 0s ago: executing program 4 (id=655): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000100), 0x40000000006) kernel console output (not intermixed with test programs): 9384][ T5720] usb usb5-port1: attempt power cycle [ 122.850483][ T5597] Bluetooth: hci5: command tx timeout [ 125.531862][ T5597] Bluetooth: hci5: command tx timeout [ 126.823541][ T5720] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.815318][ T5597] Bluetooth: hci5: command tx timeout [ 127.931139][ T5720] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 127.937858][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.938989][ T5720] usb 2-1: config 0 has no interfaces? [ 127.965615][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.965643][ T5720] usb 2-1: Product: syz [ 127.965657][ T5720] usb 2-1: Manufacturer: syz [ 127.965673][ T5720] usb 2-1: SerialNumber: syz [ 128.050820][ T5720] usb 2-1: config 0 descriptor?? [ 129.863347][ T5597] Bluetooth: hci5: command tx timeout [ 129.952160][ T5720] usb 2-1: USB disconnect, device number 2 [ 133.111878][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121552][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.610263][ T5972] futex_wake_op: syz.4.47 tries to shift op by 144; fix this program [ 136.906159][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.906285][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.928583][ T5909] bridge_slave_0: entered allmulticast mode [ 136.950911][ T5909] bridge_slave_0: entered promiscuous mode [ 136.954033][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.954158][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.954390][ T5909] bridge_slave_1: entered allmulticast mode [ 136.987117][ T5909] bridge_slave_1: entered promiscuous mode [ 138.153637][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.162435][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.640920][ T5909] team0: Port device team_slave_0 added [ 140.811494][ T5909] team0: Port device team_slave_1 added [ 141.229045][ T5593] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.400396][ T5593] usb 2-1: device descriptor read/64, error -71 [ 141.470644][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.486622][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.488520][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.535966][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.548184][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.669022][ T5593] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.804921][ T5593] usb 2-1: device descriptor read/64, error -71 [ 141.931902][ T5593] usb usb2-port1: attempt power cycle [ 142.309043][ T5593] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.334500][ T5593] usb 2-1: device descriptor read/8, error -71 [ 142.769067][ T5593] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.795047][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.795065][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.795102][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.800399][ T5593] usb 2-1: device descriptor read/8, error -71 [ 142.815802][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.815819][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.815844][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.917835][ T5593] usb usb2-port1: unable to enumerate USB device [ 143.631822][ T5609] Bluetooth: hci2: command tx timeout [ 144.143601][ T6020] futex_wake_op: syz.1.56 tries to shift op by 144; fix this program [ 145.234593][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.088820][ T5609] Bluetooth: hci2: command tx timeout [ 147.176542][ T5909] hsr_slave_0: entered promiscuous mode [ 147.185071][ T5909] hsr_slave_1: entered promiscuous mode [ 147.187586][ T5909] debugfs: 'hsr0' already exists in 'hsr' [ 147.187610][ T5909] Cannot create hsr debugfs directory [ 147.981446][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.350912][ T5750] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.524488][ T5750] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 148.527337][ T5750] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.527363][ T5750] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.527375][ T5750] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.527389][ T5750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.527408][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.517243][ T5609] Bluetooth: hci2: command tx timeout [ 149.656977][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.676716][ T5750] usb 5-1: config 0 descriptor?? [ 151.138141][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.185866][ T5750] elan 0003:04F3:074D.0001: ignoring exceeding usage max [ 151.201168][ T5750] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 151.441960][ T5750] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 151.520333][ T5609] Bluetooth: hci2: command tx timeout [ 152.048711][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.62'. [ 154.012020][ T5750] usb 5-1: USB disconnect, device number 5 [ 156.261970][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.273973][ T5909] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.314320][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.337111][ T5909] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.365454][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.389489][ T5750] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.411609][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 156.412552][ T5892] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 156.416000][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.416175][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.416227][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 156.416256][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 156.416308][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.520865][ T5909] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.530529][ T5750] usb 5-1: device descriptor read/64, error -71 [ 156.531341][ T5892] hub 3-1:1.0: bad descriptor, ignoring hub [ 156.531376][ T5892] hub 3-1:1.0: probe with driver hub failed with error -5 [ 156.532353][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 156.532368][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 156.634144][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.708776][ T5892] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 156.708815][ T5892] cdc_wdm 3-1:1.0: Unknown control protocol [ 156.722693][ T5909] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.779527][ T5750] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.833377][ T5909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.970427][ T5750] usb 5-1: device descriptor read/64, error -71 [ 157.080761][ T5750] usb usb5-port1: attempt power cycle [ 157.467052][ T49] usb 3-1: USB disconnect, device number 4 [ 157.508989][ T5750] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.529782][ T5750] usb 5-1: device descriptor read/8, error -71 [ 157.565151][ T12] bridge_slave_1: left allmulticast mode [ 157.565320][ T12] bridge_slave_1: left promiscuous mode [ 157.573698][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.209174][ T5750] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.303502][ T12] bridge_slave_0: left allmulticast mode [ 159.303566][ T12] bridge_slave_0: left promiscuous mode [ 159.303783][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.421530][ T5750] usb 5-1: device not accepting address 9, error -71 [ 159.422752][ T5750] usb usb5-port1: unable to enumerate USB device [ 168.439059][ T5706] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 169.007772][ T5706] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 169.012874][ T5706] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.012910][ T5706] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.012939][ T5706] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.012967][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.013001][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.126286][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 169.928750][ T5706] usb 2-1: config 0 descriptor?? [ 170.181113][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.280028][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.322087][ T12] bond0 (unregistering): Released all slaves [ 170.462482][ T5593] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 170.540200][ T5706] elan 0003:04F3:074D.0002: ignoring exceeding usage max [ 170.543119][ T5706] elan 0003:04F3:074D.0002: failed to start in urb: -90 [ 170.579083][ T49] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.582957][ T5706] elan 0003:04F3:074D.0002: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input0 [ 170.629533][ T5593] usb 3-1: not running at top speed; connect to a high speed hub [ 170.629571][ T5593] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 170.634602][ T5593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.710279][ T49] usb 5-1: device descriptor read/64, error -71 [ 170.747077][ T5593] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 170.945052][ T5706] usb 2-1: USB disconnect, device number 7 [ 170.990523][ T49] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.239037][ T49] usb 5-1: device descriptor read/64, error -71 [ 171.361358][ T49] usb usb5-port1: attempt power cycle [ 171.560206][ T5593] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 171.770975][ T49] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.815096][ T49] usb 5-1: device descriptor read/8, error -71 [ 171.984430][ T5909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.211179][ T49] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.229904][ T49] usb 5-1: device descriptor read/8, error -71 [ 173.300553][ T49] usb usb5-port1: unable to enumerate USB device [ 174.220207][ T5750] usb 3-1: USB disconnect, device number 5 [ 174.482261][ T5750] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 174.486793][ T5750] cyberjack 3-1:1.0: device disconnected [ 174.909344][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 177.127179][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.104118][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.107876][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.112018][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.120129][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.206224][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 180.553626][ T6184] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 180.855249][ T5597] Bluetooth: hci3: command tx timeout [ 182.879144][ T5597] Bluetooth: hci3: command tx timeout [ 183.000194][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.000265][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.000415][ T6004] bridge_slave_0: entered allmulticast mode [ 183.008278][ T6004] bridge_slave_0: entered promiscuous mode [ 183.060997][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.061068][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.061191][ T6004] bridge_slave_1: entered allmulticast mode [ 183.065561][ T6004] bridge_slave_1: entered promiscuous mode [ 183.195349][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.224470][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.303400][ T6004] team0: Port device team_slave_0 added [ 183.307764][ T6004] team0: Port device team_slave_1 added [ 183.369036][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.370260][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.370276][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.370354][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.378161][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.378179][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.378204][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.041377][ T5892] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 184.041443][ T5892] usb 5-1: no configurations [ 184.041457][ T5892] usb 5-1: can't read configurations, error -22 [ 184.199793][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 184.463494][ T5892] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 184.463558][ T5892] usb 5-1: no configurations [ 184.463573][ T5892] usb 5-1: can't read configurations, error -22 [ 185.424394][ T5597] Bluetooth: hci3: command tx timeout [ 185.442793][ T5892] usb usb5-port1: attempt power cycle [ 185.859067][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 185.899279][ T5598] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.932339][ T5892] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 185.932400][ T5892] usb 5-1: no configurations [ 185.932414][ T5892] usb 5-1: can't read configurations, error -22 [ 186.069058][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.100304][ T5892] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 186.100357][ T5892] usb 5-1: no configurations [ 186.100369][ T5892] usb 5-1: can't read configurations, error -22 [ 186.101064][ T5892] usb usb5-port1: unable to enumerate USB device [ 186.193440][ T5598] usb 2-1: Using ep0 maxpacket: 8 [ 186.194355][ T5598] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.195956][ T5598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.195982][ T5598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.196038][ T5598] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.196076][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.250919][ T6004] hsr_slave_0: entered promiscuous mode [ 186.274216][ T6004] hsr_slave_1: entered promiscuous mode [ 186.279454][ T6004] debugfs: 'hsr0' already exists in 'hsr' [ 186.279480][ T6004] Cannot create hsr debugfs directory [ 186.556631][ T5598] hub 2-1:1.0: bad descriptor, ignoring hub [ 186.556675][ T5598] hub 2-1:1.0: probe with driver hub failed with error -5 [ 186.561907][ T5598] cdc_wdm 2-1:1.0: skipping garbage [ 186.561927][ T5598] cdc_wdm 2-1:1.0: skipping garbage [ 186.562039][ T5598] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 186.899393][ T5598] usb 2-1: USB disconnect, device number 8 [ 187.365052][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 187.445336][ T5597] Bluetooth: hci3: command tx timeout [ 191.459186][ T12] hsr_slave_0: left promiscuous mode [ 191.499674][ T12] hsr_slave_1: left promiscuous mode [ 191.533476][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.533604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.596685][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.596715][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.952999][ T12] veth1_macvtap: left promiscuous mode [ 191.989023][ T12] veth0_macvtap: left promiscuous mode [ 191.989390][ T12] veth1_vlan: left promiscuous mode [ 191.991455][ T12] veth0_vlan: left promiscuous mode [ 194.776346][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.776391][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.191667][ T12] team0 (unregistering): Port device team_slave_1 removed [ 198.287132][ T12] team0 (unregistering): Port device team_slave_0 removed [ 198.722264][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 198.838422][ T6262] syzkaller0: entered promiscuous mode [ 198.838452][ T6262] syzkaller0: entered allmulticast mode [ 202.156506][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.191778][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.195530][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.285652][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.296191][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.607916][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 203.802481][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 204.002472][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 204.002514][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 204.004049][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.086938][ T10] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 204.239208][ T5597] Bluetooth: hci4: command 0x0406 tx timeout [ 204.239254][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 204.344210][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 205.519012][ T5592] Bluetooth: hci5: command tx timeout [ 206.655266][ T5593] usb 5-1: USB disconnect, device number 18 [ 206.781215][ T5593] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 206.796187][ T5593] cyberjack 5-1:1.0: device disconnected [ 208.538505][ T5592] Bluetooth: hci5: command tx timeout [ 210.562485][ T5592] Bluetooth: hci5: command tx timeout [ 210.887624][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 210.937348][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.937569][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.937747][ T6169] bridge_slave_0: entered allmulticast mode [ 210.969617][ T6169] bridge_slave_0: entered promiscuous mode [ 211.190346][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.190482][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.190684][ T6169] bridge_slave_1: entered allmulticast mode [ 211.196548][ T6169] bridge_slave_1: entered promiscuous mode [ 214.054432][ T5592] Bluetooth: hci5: command tx timeout [ 214.948430][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.964691][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.780620][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.954825][ T6169] team0: Port device team_slave_0 added [ 216.961744][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 216.973667][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 216.974817][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.974842][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.974891][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 216.974919][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 216.974961][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.174310][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 217.174355][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 217.224322][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 217.224345][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 217.251336][ T6169] team0: Port device team_slave_1 added [ 217.325417][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 217.325441][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 217.523207][ T10] usb 3-1: USB disconnect, device number 6 [ 217.914715][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.914733][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.914758][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.943692][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.943710][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.943736][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.121411][ T1243] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 219.280184][ T1243] usb 2-1: Using ep0 maxpacket: 8 [ 219.280784][ T1243] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 219.281922][ T1243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.281936][ T1243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 219.281963][ T1243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 219.281978][ T1243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 219.282000][ T1243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.383189][ T1243] hub 2-1:1.0: bad descriptor, ignoring hub [ 219.383228][ T1243] hub 2-1:1.0: probe with driver hub failed with error -5 [ 219.384353][ T1243] cdc_wdm 2-1:1.0: skipping garbage [ 219.384371][ T1243] cdc_wdm 2-1:1.0: skipping garbage [ 219.433694][ T1243] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 219.433718][ T1243] cdc_wdm 2-1:1.0: Unknown control protocol [ 219.595100][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 219.721963][ T6421] device-mapper: ioctl: populate_table: no targets specified [ 219.873268][ T6169] hsr_slave_0: entered promiscuous mode [ 219.874488][ T6169] hsr_slave_1: entered promiscuous mode [ 219.911262][ T6169] debugfs: 'hsr0' already exists in 'hsr' [ 219.911292][ T6169] Cannot create hsr debugfs directory [ 220.597506][ T5576] usb 2-1: USB disconnect, device number 9 [ 224.880694][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.880873][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.881078][ T6299] bridge_slave_0: entered allmulticast mode [ 224.889348][ T6299] bridge_slave_0: entered promiscuous mode [ 225.147846][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.147961][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.148137][ T6299] bridge_slave_1: entered allmulticast mode [ 225.177117][ T6299] bridge_slave_1: entered promiscuous mode [ 226.969758][ T5750] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 227.242655][ T5750] usb 2-1: not running at top speed; connect to a high speed hub [ 227.242699][ T5750] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 227.244426][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.318155][ T5750] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 227.322173][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.399966][ T5750] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 227.784748][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.820072][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.710896][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.812719][ T6299] team0: Port device team_slave_0 added [ 228.912378][ T6299] team0: Port device team_slave_1 added [ 229.642763][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.775785][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.775803][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.775827][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.791273][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.791291][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.791326][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.921122][ T1243] usb 2-1: USB disconnect, device number 10 [ 230.081798][ T1243] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 230.085254][ T1243] cyberjack 2-1:1.0: device disconnected [ 234.495084][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.935305][ T6299] hsr_slave_0: entered promiscuous mode [ 235.938317][ T6299] hsr_slave_1: entered promiscuous mode [ 235.954054][ T6299] debugfs: 'hsr0' already exists in 'hsr' [ 235.954084][ T6299] Cannot create hsr debugfs directory [ 237.590937][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 237.667423][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.694016][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.701623][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.720824][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.723011][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.536697][ T6525] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 238.536722][ T6525] device-mapper: ioctl: error adding target to table [ 238.928674][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 240.919072][ T61] Bluetooth: hci2: command tx timeout [ 242.438046][ T12] bridge_slave_1: left allmulticast mode [ 242.438084][ T12] bridge_slave_1: left promiscuous mode [ 242.766146][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.960533][ T61] Bluetooth: hci2: command tx timeout [ 245.040708][ T61] Bluetooth: hci2: command tx timeout [ 246.051504][ T12] bridge_slave_0: left allmulticast mode [ 246.051542][ T12] bridge_slave_0: left promiscuous mode [ 246.051813][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.689050][ T12] bridge_slave_1: left allmulticast mode [ 246.689088][ T12] bridge_slave_1: left promiscuous mode [ 246.689307][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.860815][ T12] bridge_slave_0: left allmulticast mode [ 246.860856][ T12] bridge_slave_0: left promiscuous mode [ 246.861138][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.120039][ T61] Bluetooth: hci2: command tx timeout [ 249.529402][ T12] bridge_slave_1: left allmulticast mode [ 249.529437][ T12] bridge_slave_1: left promiscuous mode [ 249.529667][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.700926][ T12] bridge_slave_0: left allmulticast mode [ 249.700963][ T12] bridge_slave_0: left promiscuous mode [ 249.701256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.069026][ T5892] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 251.268174][ T5892] usb 5-1: not running at top speed; connect to a high speed hub [ 251.268218][ T5892] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 251.269955][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.347056][ T5892] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 251.435739][ T5892] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 252.789144][ T5576] usb 5-1: USB disconnect, device number 19 [ 252.849135][ T5576] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 252.890210][ T5576] cyberjack 5-1:1.0: device disconnected [ 253.071786][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.857150][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857220][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.373984][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.535679][ T12] bond0 (unregistering): Released all slaves [ 261.673686][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.739053][ T5593] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.801808][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.884442][ T12] bond0 (unregistering): Released all slaves [ 261.939942][ T5593] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 261.942093][ T5593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.942123][ T5593] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.955845][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.955874][ T5593] usb 5-1: Product: syz [ 261.955888][ T5593] usb 5-1: Manufacturer: syz [ 261.955902][ T5593] usb 5-1: SerialNumber: syz [ 262.007284][ T5593] usb 5-1: config 0 descriptor?? [ 262.945130][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.950608][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.959566][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.968581][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.986752][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.414959][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.516239][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.575127][ T5750] usb 5-1: USB disconnect, device number 20 [ 264.762708][ T6642] fuse: blksize only supported for fuseblk [ 264.765944][ T6642] ======================================================= [ 264.765944][ T6642] WARNING: The mand mount option has been deprecated and [ 264.765944][ T6642] and is ignored by this kernel. Remove the mand [ 264.765944][ T6642] option from the mount to silence this warning. [ 264.765944][ T6642] ======================================================= [ 264.767747][ T6642] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 264.767833][ T6642] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 264.854909][ T12] bond0 (unregistering): Released all slaves [ 265.041305][ T61] Bluetooth: hci3: command tx timeout [ 267.119077][ T61] Bluetooth: hci3: command tx timeout [ 268.614088][ T6645] Set syz1 is full, maxelem 6117 reached [ 269.455389][ T61] Bluetooth: hci3: command tx timeout [ 269.774749][ T5598] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 270.095332][ T6711] fuse: blksize only supported for fuseblk [ 270.097570][ T6711] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 270.097602][ T6711] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 270.148264][ T5598] usb 3-1: not running at top speed; connect to a high speed hub [ 270.148400][ T5598] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 270.152470][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.302951][ T5598] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 270.604038][ T5598] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 270.656299][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6 [ 270.852565][ T5598] usb 3-1: USB disconnect, device number 7 [ 271.050717][ T5598] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 271.051702][ T5598] cyberjack 3-1:1.0: device disconnected [ 271.530071][ T61] Bluetooth: hci3: command tx timeout [ 272.449696][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.576345][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.618306][ T6511] bridge_slave_0: entered allmulticast mode [ 272.849157][ T6511] bridge_slave_0: entered promiscuous mode [ 273.287044][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.287461][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.288518][ T6511] bridge_slave_1: entered allmulticast mode [ 273.367054][ T6511] bridge_slave_1: entered promiscuous mode [ 274.209387][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.416962][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.636257][ T5750] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 275.872707][ T5750] usb 5-1: not running at top speed; connect to a high speed hub [ 275.872737][ T5750] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 275.874669][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.097565][ T5750] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 276.125918][ T5750] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 276.364989][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 277.299187][ T6511] team0: Port device team_slave_0 added [ 277.406493][ T6511] team0: Port device team_slave_1 added [ 277.467736][ T5593] usb 5-1: USB disconnect, device number 21 [ 277.725953][ T6779] futex_wake_op: syz.4.205 tries to shift op by 144; fix this program [ 277.849358][ T5593] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 277.886742][ T5593] cyberjack 5-1:1.0: device disconnected [ 278.152518][ T5892] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 278.199691][ T12] hsr_slave_0: left promiscuous mode [ 278.247678][ T12] hsr_slave_1: left promiscuous mode [ 278.252377][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.292815][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.309907][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 278.309936][ T5892] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 278.314683][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.319390][ T5593] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 278.386667][ T5892] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 278.471566][ T5892] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 278.526607][ T5593] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 278.526666][ T5593] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 278.676365][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.753308][ T12] hsr_slave_0: left promiscuous mode [ 278.775681][ T5593] usb 5-1: config 0 descriptor?? [ 278.871882][ T5593] pwc: Creative Labs Webcam Pro Ex detected. [ 278.871904][ T5593] pwc: Warning: more than 1 configuration available. [ 278.878919][ T12] hsr_slave_1: left promiscuous mode [ 278.880553][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.014894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.344081][ T5593] pwc: Failed to set LED on/off time (-71) [ 279.345904][ T5593] pwc: send_video_command error -71 [ 279.345918][ T5593] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 279.346020][ T5593] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 279.462460][ T5593] usb 5-1: USB disconnect, device number 22 [ 279.539073][ T12] hsr_slave_0: left promiscuous mode [ 279.639896][ T12] hsr_slave_1: left promiscuous mode [ 279.647713][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.647743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.706718][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.706747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.059774][ T5593] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 280.164104][ T12] veth1_macvtap: left promiscuous mode [ 280.167155][ T12] veth0_macvtap: left promiscuous mode [ 280.167373][ T12] veth1_vlan: left promiscuous mode [ 280.189749][ T12] veth0_vlan: left promiscuous mode [ 280.260057][ T5593] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 280.260096][ T5593] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 280.295633][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.353952][ T5593] usb 5-1: config 0 descriptor?? [ 280.393614][ T5593] pwc: Creative Labs Webcam Pro Ex detected. [ 280.393631][ T5593] pwc: Warning: more than 1 configuration available. [ 280.904846][ T5598] usb 2-1: USB disconnect, device number 11 [ 281.123060][ T5593] pwc: recv_control_msg error -32 req 02 val 2b00 [ 281.146271][ T5598] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 281.168204][ T5593] pwc: recv_control_msg error -71 req 02 val 2700 [ 281.168576][ T5593] pwc: recv_control_msg error -71 req 04 val 1600 [ 281.171174][ T5593] pwc: recv_control_msg error -71 req 02 val 2c00 [ 281.171696][ T5593] pwc: recv_control_msg error -71 req 04 val 1000 [ 281.178195][ T5593] pwc: recv_control_msg error -71 req 04 val 1300 [ 281.179137][ T5593] pwc: recv_control_msg error -71 req 04 val 1400 [ 281.179941][ T5593] pwc: recv_control_msg error -71 req 02 val 2000 [ 281.181027][ T5593] pwc: recv_control_msg error -71 req 02 val 2100 [ 281.184479][ T5593] pwc: recv_control_msg error -71 req 06 val 0600 [ 281.190418][ T5593] pwc: recv_control_msg error -71 req 04 val 1500 [ 281.192317][ T5593] pwc: recv_control_msg error -71 req 02 val 2500 [ 281.192770][ T5593] pwc: recv_control_msg error -71 req 02 val 2400 [ 281.193306][ T5593] pwc: recv_control_msg error -71 req 02 val 2600 [ 281.194368][ T5593] pwc: recv_control_msg error -71 req 02 val 2900 [ 281.203207][ T5593] pwc: recv_control_msg error -71 req 02 val 2800 [ 281.207778][ T5593] pwc: recv_control_msg error -71 req 04 val 1100 [ 281.210009][ T5593] pwc: recv_control_msg error -71 req 04 val 1200 [ 281.342989][ T5598] cyberjack 2-1:1.0: device disconnected [ 282.569553][ T5593] pwc: Registered as video103. [ 282.578578][ T5593] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 283.296925][ T5593] usb 5-1: USB disconnect, device number 23 [ 284.182432][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.955089][ T12] team0 (unregistering): Port device team_slave_0 removed [ 288.370261][ T5598] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 289.159146][ T5598] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 289.159209][ T5598] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 289.233530][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.283574][ T5598] usb 5-1: config 0 descriptor?? [ 289.309176][ T5598] pwc: Creative Labs Webcam Pro Ex detected. [ 289.309194][ T5598] pwc: Warning: more than 1 configuration available. [ 289.562992][ T5598] pwc: Failed to set LED on/off time (-71) [ 289.563340][ T5598] pwc: send_video_command error -71 [ 289.563353][ T5598] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 289.563457][ T5598] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 289.625844][ T5598] usb 5-1: USB disconnect, device number 24 [ 290.873485][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.947957][ T12] team0 (unregistering): Port device team_slave_0 removed [ 292.659071][ T5598] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 292.812130][ T5598] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 292.813327][ T5598] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.813360][ T5598] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.813383][ T5598] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.813420][ T5598] usb 3-1: config 0 interface 0 has no altsetting 0 [ 292.813453][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.887123][ T5598] usb 3-1: config 0 descriptor?? [ 293.179660][ T12] team0 (unregistering): Port device team_slave_1 removed [ 294.046814][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.120621][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.120640][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.120663][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.134286][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7 [ 295.444032][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.444052][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.444079][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.469503][ T5598] usbhid 3-1:0.0: can't add hid device: -71 [ 295.469625][ T5598] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 295.496747][ T5598] usb 3-1: USB disconnect, device number 8 [ 295.788163][ T5593] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 295.837101][ T6511] hsr_slave_0: entered promiscuous mode [ 295.837862][ T6511] hsr_slave_1: entered promiscuous mode [ 295.838488][ T6511] debugfs: 'hsr0' already exists in 'hsr' [ 295.838506][ T6511] Cannot create hsr debugfs directory [ 296.764009][ T5593] usb 5-1: not running at top speed; connect to a high speed hub [ 296.764050][ T5593] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 296.774382][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.906571][ T5593] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 296.987769][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.987954][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.988245][ T6629] bridge_slave_0: entered allmulticast mode [ 296.991771][ T6629] bridge_slave_0: entered promiscuous mode [ 297.009416][ T5593] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 297.177496][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.177604][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.177756][ T6629] bridge_slave_1: entered allmulticast mode [ 297.223206][ T6629] bridge_slave_1: entered promiscuous mode [ 297.898489][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.072499][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.596937][ T6629] team0: Port device team_slave_0 added [ 300.174148][ T5720] usb 5-1: USB disconnect, device number 25 [ 301.021472][ T6629] team0: Port device team_slave_1 added [ 301.208618][ T5720] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 301.213872][ T5720] cyberjack 5-1:1.0: device disconnected [ 301.392435][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.392453][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.392469][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.403475][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.403492][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.403516][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.595233][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.624439][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.647649][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.653418][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.654970][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.837940][ T6629] hsr_slave_0: entered promiscuous mode [ 301.840908][ T6629] hsr_slave_1: entered promiscuous mode [ 301.845357][ T6629] debugfs: 'hsr0' already exists in 'hsr' [ 301.845383][ T6629] Cannot create hsr debugfs directory [ 302.115383][ T6928] device-mapper: table: 248:0: zero-length target [ 302.115395][ T6928] device-mapper: ioctl: error adding target to table [ 303.988571][ T5592] Bluetooth: hci5: command tx timeout [ 306.000434][ T5592] Bluetooth: hci5: command tx timeout [ 306.016689][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8 [ 306.296612][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 308.136975][ T5592] Bluetooth: hci5: command tx timeout [ 310.271853][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.251'. [ 311.769717][ T5592] Bluetooth: hci5: command tx timeout [ 312.891696][ T6998] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 316.505814][ T7019] futex_wake_op: syz.1.258 tries to shift op by 144; fix this program [ 317.601115][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.601187][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.133399][ T7029] fuse: blksize only supported for fuseblk [ 318.176927][ T7029] evm: overlay not supported [ 318.727542][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.748688][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.748839][ T6910] bridge_slave_0: entered allmulticast mode [ 318.770292][ T6910] bridge_slave_0: entered promiscuous mode [ 318.773582][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.773720][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.773889][ T6910] bridge_slave_1: entered allmulticast mode [ 318.830588][ T6910] bridge_slave_1: entered promiscuous mode [ 320.100145][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.614730][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.332338][ T12] bridge_slave_1: left allmulticast mode [ 323.332374][ T12] bridge_slave_1: left promiscuous mode [ 323.332615][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.502324][ T12] bridge_slave_0: left allmulticast mode [ 323.502361][ T12] bridge_slave_0: left promiscuous mode [ 323.502626][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.527566][ T5750] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 323.690162][ T5750] usb 3-1: Using ep0 maxpacket: 8 [ 323.690962][ T5750] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 323.692229][ T5750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.692253][ T5750] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.692296][ T5750] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 323.692320][ T5750] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 323.692347][ T5750] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 323.692388][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.747516][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.809514][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.814584][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.815803][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.816604][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.855824][ T5750] hub 3-1:1.0: bad descriptor, ignoring hub [ 323.855859][ T5750] hub 3-1:1.0: probe with driver hub failed with error -5 [ 323.874896][ T5750] cdc_wdm 3-1:1.0: skipping garbage [ 323.874917][ T5750] cdc_wdm 3-1:1.0: skipping garbage [ 323.875105][ T5750] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 323.981085][ T12] bridge_slave_1: left allmulticast mode [ 323.981121][ T12] bridge_slave_1: left promiscuous mode [ 323.981367][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.150841][ T5750] usb 3-1: USB disconnect, device number 9 [ 324.195934][ T12] bridge_slave_0: left allmulticast mode [ 324.195973][ T12] bridge_slave_0: left promiscuous mode [ 324.196223][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.424760][ T12] bridge_slave_1: left allmulticast mode [ 325.424795][ T12] bridge_slave_1: left promiscuous mode [ 325.425035][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.707724][ T12] bridge_slave_0: left allmulticast mode [ 325.707763][ T12] bridge_slave_0: left promiscuous mode [ 325.708004][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.711936][ T1243] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 325.713960][ T7088] fuse: blksize only supported for fuseblk [ 325.972318][ T61] Bluetooth: hci2: command tx timeout [ 326.060742][ T1243] usb 5-1: not running at top speed; connect to a high speed hub [ 326.060785][ T1243] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 326.061959][ T1243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.104579][ T1243] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 326.124830][ T1243] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 326.810470][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.961564][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.171967][ T12] bond0 (unregistering): Released all slaves [ 327.678519][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.761104][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.816269][ T12] bond0 (unregistering): Released all slaves [ 327.999022][ T61] Bluetooth: hci2: command tx timeout [ 328.596281][ T5598] usb 5-1: USB disconnect, device number 26 [ 328.622748][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.634128][ T5598] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 328.635054][ T5598] cyberjack 5-1:1.0: device disconnected [ 328.751457][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.832500][ T12] bond0 (unregistering): Released all slaves [ 328.944336][ T6910] team0: Port device team_slave_0 added [ 328.979866][ T6910] team0: Port device team_slave_1 added [ 329.162542][ T5598] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 329.330677][ T5598] usb 5-1: not running at top speed; connect to a high speed hub [ 329.330719][ T5598] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 329.332066][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.570093][ T5598] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 329.784635][ T5598] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 330.029951][ T5598] usb 5-1: USB disconnect, device number 27 [ 330.093120][ T61] Bluetooth: hci2: command tx timeout [ 330.213619][ T5598] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 330.241407][ T5598] cyberjack 5-1:1.0: device disconnected [ 330.440175][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.440196][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.440221][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.536190][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.536209][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.536234][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.868210][ T12] hsr_slave_0: left promiscuous mode [ 331.921512][ T12] hsr_slave_1: left promiscuous mode [ 331.922748][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.983172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.113576][ T12] hsr_slave_0: left promiscuous mode [ 332.129241][ T12] hsr_slave_1: left promiscuous mode [ 332.129989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.157152][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.169043][ T61] Bluetooth: hci2: command tx timeout [ 332.250561][ T12] hsr_slave_0: left promiscuous mode [ 332.268998][ T12] hsr_slave_1: left promiscuous mode [ 332.269789][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.299980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.683331][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 333.959539][ T5593] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 334.110656][ T5593] usb 5-1: not running at top speed; connect to a high speed hub [ 334.110705][ T5593] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 334.112799][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.157968][ T5593] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 334.180897][ T12] team0 (unregistering): Port device team_slave_1 removed [ 334.233595][ T12] team0 (unregistering): Port device team_slave_0 removed [ 334.272868][ T5593] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 334.551970][ T5593] usb 5-1: USB disconnect, device number 28 [ 334.655299][ T5593] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 334.704838][ T5593] cyberjack 5-1:1.0: device disconnected [ 334.933396][ T12] team0 (unregistering): Port device team_slave_1 removed [ 334.979832][ T12] team0 (unregistering): Port device team_slave_0 removed [ 335.599680][ T12] team0 (unregistering): Port device team_slave_1 removed [ 335.661083][ T12] team0 (unregistering): Port device team_slave_0 removed [ 336.779129][ T6910] hsr_slave_0: entered promiscuous mode [ 336.785691][ T6910] hsr_slave_1: entered promiscuous mode [ 336.786630][ T6910] debugfs: 'hsr0' already exists in 'hsr' [ 336.786653][ T6910] Cannot create hsr debugfs directory [ 339.988167][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 340.942241][ T6910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.416120][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.454744][ T6910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.512657][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.588560][ T6910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.627734][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.647630][ T6910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.871727][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.416491][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 345.832410][ T7264] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 345.832516][ T7264] device-mapper: ioctl: error adding target to table [ 348.562782][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.562862][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.562994][ T7065] bridge_slave_0: entered allmulticast mode [ 348.567744][ T7065] bridge_slave_0: entered promiscuous mode [ 348.603906][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.604114][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.604322][ T7065] bridge_slave_1: entered allmulticast mode [ 348.614407][ T7065] bridge_slave_1: entered promiscuous mode [ 349.894548][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.008937][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.060118][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.443943][ T7065] team0: Port device team_slave_0 added [ 351.465749][ T7065] team0: Port device team_slave_1 added [ 351.720630][ T7304] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 351.720653][ T7304] device-mapper: ioctl: error adding target to table [ 351.817122][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.827766][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.827784][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.827810][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.948370][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.948524][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.966544][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.966563][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.966589][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.287110][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.287335][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.433855][ T7065] hsr_slave_0: entered promiscuous mode [ 353.435132][ T7065] hsr_slave_1: entered promiscuous mode [ 353.435884][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 353.435906][ T7065] Cannot create hsr debugfs directory [ 354.382491][ T7330] device-mapper: table: 248:0: integrity: Invalid argument count (-EINVAL) [ 354.382516][ T7330] device-mapper: ioctl: error adding target to table [ 357.907701][ T7306] Set syz1 is full, maxelem 6117 reached [ 358.219652][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 358.240149][ T7364] Zero length message leads to an empty skb [ 359.739815][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 361.357077][ T7377] fuse: Bad value for 'fd' [ 362.104502][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 362.224605][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.267360][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.277833][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.308457][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.326961][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.931956][ T5598] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 363.080967][ T5598] usb 2-1: not running at top speed; connect to a high speed hub [ 363.081124][ T5598] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 363.113347][ T5598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.113375][ T5598] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 363.113445][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.595311][ T7397] device-mapper: table: 248:0: in: unknown target type [ 363.595332][ T7397] device-mapper: ioctl: error adding target to table [ 364.664125][ T61] Bluetooth: hci3: command tx timeout [ 365.615273][ T5598] usb 2-1: USB disconnect, device number 12 [ 366.978629][ T61] Bluetooth: hci3: command tx timeout [ 367.005275][ T7420] fuse: blksize only supported for fuseblk [ 369.039113][ T61] Bluetooth: hci3: command tx timeout [ 369.244059][ T12] bridge_slave_1: left allmulticast mode [ 369.244096][ T12] bridge_slave_1: left promiscuous mode [ 369.244361][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.421123][ T12] bridge_slave_0: left allmulticast mode [ 369.421162][ T12] bridge_slave_0: left promiscuous mode [ 369.421403][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.141625][ T61] Bluetooth: hci3: command tx timeout [ 372.850720][ T7474] device-mapper: ioctl: populate_table: no targets specified [ 373.242543][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.687804][ T7486] fuse: blksize only supported for fuseblk [ 374.790522][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.890676][ T12] bond0 (unregistering): Released all slaves [ 374.960978][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 377.337500][ T12] hsr_slave_0: left promiscuous mode [ 377.763823][ T12] hsr_slave_1: left promiscuous mode [ 377.765229][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.811730][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.100640][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 378.253882][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 378.253925][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 378.255565][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.298255][ T10] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 378.398196][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 378.728661][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.728737][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.084042][ T12] team0 (unregistering): Port device team_slave_1 removed [ 379.253420][ T12] team0 (unregistering): Port device team_slave_0 removed [ 380.629335][ T5598] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 380.779776][ T5598] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 380.817461][ T5598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.817490][ T5598] usb 3-1: Product: syz [ 380.817505][ T5598] usb 3-1: Manufacturer: syz [ 380.817519][ T5598] usb 3-1: SerialNumber: syz [ 380.887807][ T5593] usb 5-1: USB disconnect, device number 29 [ 380.907973][ T5598] usb 3-1: config 0 descriptor?? [ 381.013431][ T5598] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 381.024226][ T5593] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 381.049818][ T5593] cyberjack 5-1:1.0: device disconnected [ 382.647046][ T5720] usb 3-1: USB disconnect, device number 10 [ 382.688836][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.689078][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.689338][ T7378] bridge_slave_0: entered allmulticast mode [ 382.743629][ T7378] bridge_slave_0: entered promiscuous mode [ 382.776675][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.776797][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.776989][ T7378] bridge_slave_1: entered allmulticast mode [ 382.802641][ T7378] bridge_slave_1: entered promiscuous mode [ 383.041595][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.083289][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.534571][ T7378] team0: Port device team_slave_0 added [ 383.560774][ T7378] team0: Port device team_slave_1 added [ 385.247688][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.247706][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.247731][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.372962][ T7584] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 385.372987][ T7584] device-mapper: ioctl: error adding target to table [ 385.476297][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.606161][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.754527][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.771822][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.790706][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.316423][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.316443][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.316470][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.610370][ T7628] FAULT_INJECTION: forcing a failure. [ 387.610370][ T7628] name failslab, interval 1, probability 0, space 0, times 1 [ 387.610428][ T7628] CPU: 0 UID: 0 PID: 7628 Comm: syz.4.360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.610457][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.610478][ T7628] Call Trace: [ 387.610554][ T7628] [ 387.610629][ T7628] dump_stack_lvl+0xe8/0x150 [ 387.610827][ T7628] should_fail_ex+0x46b/0x600 [ 387.610895][ T7628] should_failslab+0xa8/0x100 [ 387.610939][ T7628] __kmalloc_cache_noprof+0xa1/0x680 [ 387.610986][ T7628] ? __alloc_workqueue+0x169/0x1fe0 [ 387.611056][ T7628] ? __alloc_workqueue+0x169/0x1fe0 [ 387.611083][ T7628] __alloc_workqueue+0x169/0x1fe0 [ 387.611105][ T7628] ? vsnprintf+0xe42/0xef0 [ 387.611215][ T7628] alloc_workqueue_noprof+0xe3/0x210 [ 387.611240][ T7628] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 387.611264][ T7628] ? rt_spin_unlock+0x165/0x200 [ 387.611322][ T7628] dm_create+0xb9d/0xf80 [ 387.611415][ T7628] dev_create+0x1f7/0x400 [ 387.611466][ T7628] ? __pfx_dev_create+0x10/0x10 [ 387.611495][ T7628] dm_ctl_ioctl+0x9ec/0xe10 [ 387.611521][ T7628] ? __pfx_dev_create+0x10/0x10 [ 387.611541][ T7628] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 387.611586][ T7628] ? __fget_files+0x2a/0x420 [ 387.611617][ T7628] ? __fget_files+0x3a8/0x420 [ 387.611648][ T7628] ? __fget_files+0x2a/0x420 [ 387.611675][ T7628] ? bpf_lsm_file_ioctl+0x9/0x20 [ 387.611719][ T7628] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 387.611740][ T7628] __se_sys_ioctl+0xff/0x170 [ 387.611771][ T7628] do_syscall_64+0x166/0x520 [ 387.611821][ T7628] ? trace_irq_disable+0x3b/0x140 [ 387.611864][ T7628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.611899][ T7628] ? clear_bhb_loop+0x70/0xc0 [ 387.611924][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.611945][ T7628] RIP: 0033:0x7fcf8602e159 [ 387.611980][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.611999][ T7628] RSP: 002b:00007fcf84286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.612031][ T7628] RAX: ffffffffffffffda RBX: 00007fcf862b5fa0 RCX: 00007fcf8602e159 [ 387.612047][ T7628] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 387.612062][ T7628] RBP: 00007fcf860c506b R08: 0000000000000000 R09: 0000000000000000 [ 387.612076][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.612089][ T7628] R13: 00007fcf862b6038 R14: 00007fcf862b5fa0 R15: 00007ffeb4df8df8 [ 387.612121][ T7628] [ 389.300592][ T5592] Bluetooth: hci5: command tx timeout [ 391.370789][ T5592] Bluetooth: hci5: command tx timeout [ 393.189077][ T5593] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 393.442885][ T5592] Bluetooth: hci5: command tx timeout [ 393.452388][ T5593] usb 2-1: not running at top speed; connect to a high speed hub [ 393.452431][ T5593] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 393.852115][ T5593] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 393.852161][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.897065][ T5593] cyberjack 2-1:1.0: required endpoints missing [ 395.053436][ T7378] hsr_slave_0: entered promiscuous mode [ 395.054962][ T7378] hsr_slave_1: entered promiscuous mode [ 395.055912][ T7378] debugfs: 'hsr0' already exists in 'hsr' [ 395.055937][ T7378] Cannot create hsr debugfs directory [ 395.210826][ T5593] usb 2-1: USB disconnect, device number 13 [ 395.519507][ T5592] Bluetooth: hci5: command tx timeout [ 398.037314][ T7684] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 398.037348][ T7684] device-mapper: ioctl: error adding target to table [ 402.389058][ T5593] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 403.350657][ T5593] usb 5-1: not running at top speed; connect to a high speed hub [ 403.350697][ T5593] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 403.401587][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.446145][ T5593] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 403.752565][ T5593] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 404.987350][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 405.404424][ T5576] usb 5-1: USB disconnect, device number 30 [ 406.751413][ T5576] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 406.801015][ T5576] cyberjack 5-1:1.0: device disconnected [ 414.101350][ T12] bridge_slave_1: left allmulticast mode [ 414.101387][ T12] bridge_slave_1: left promiscuous mode [ 414.101649][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.291593][ T12] bridge_slave_0: left allmulticast mode [ 414.291636][ T12] bridge_slave_0: left promiscuous mode [ 414.305684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.529100][ T5593] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 414.569084][ T5598] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 414.704745][ T5593] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 414.706849][ T5593] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.706881][ T5593] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.706909][ T5593] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.706944][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.719784][ T5598] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 414.721065][ T5598] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.721116][ T5598] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.721142][ T5598] usb 3-1: config 0 interface 0 has no altsetting 0 [ 414.721172][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.728745][ T5593] usb 2-1: config 0 descriptor?? [ 414.747600][ T5598] usb 3-1: config 0 descriptor?? [ 414.812103][ T5598] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 414.814388][ T5593] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 418.450220][ T5576] usb 3-1: USB disconnect, device number 11 [ 418.533122][ T5598] usb 2-1: USB disconnect, device number 14 [ 418.584635][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.698475][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.782232][ T12] bond0 (unregistering): Released all slaves [ 422.091872][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.241507][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.243730][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.245328][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.247325][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.908457][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.911983][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.912188][ T7598] bridge_slave_0: entered allmulticast mode [ 423.914989][ T7598] bridge_slave_0: entered promiscuous mode [ 425.609658][ T61] Bluetooth: hci2: command tx timeout [ 425.657079][ T12] hsr_slave_0: left promiscuous mode [ 425.682405][ T12] hsr_slave_1: left promiscuous mode [ 425.685069][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.722926][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.809023][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 426.921281][ T12] team0 (unregistering): Port device team_slave_1 removed [ 427.134731][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 427.669821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 427.679696][ T61] Bluetooth: hci2: command tx timeout [ 427.703581][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 427.703633][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 427.705248][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.705292][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.802886][ T10] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 428.049872][ T10] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 428.153512][ T10] usb 2-1: USB disconnect, device number 15 [ 428.207692][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 428.229269][ T10] cyberjack 2-1:1.0: device disconnected [ 429.562526][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.562695][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.562901][ T7598] bridge_slave_1: entered allmulticast mode [ 429.573408][ T7598] bridge_slave_1: entered promiscuous mode [ 429.759026][ T61] Bluetooth: hci2: command tx timeout [ 430.105496][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.137164][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.194108][ T7598] team0: Port device team_slave_0 added [ 430.198573][ T7598] team0: Port device team_slave_1 added [ 430.209124][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 430.408826][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 430.456001][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 430.458066][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.668205][ T10] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 430.738126][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 431.434445][ T10] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 431.754298][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.754315][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.832732][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.839200][ T61] Bluetooth: hci2: command tx timeout [ 431.854741][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.854759][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.854782][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.202775][ T10] usb 2-1: USB disconnect, device number 16 [ 438.371427][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 438.372410][ T10] cyberjack 2-1:1.0: device disconnected [ 438.668969][ T7598] hsr_slave_0: entered promiscuous mode [ 438.670277][ T7598] hsr_slave_1: entered promiscuous mode [ 438.671198][ T7598] debugfs: 'hsr0' already exists in 'hsr' [ 438.671222][ T7598] Cannot create hsr debugfs directory [ 439.359208][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 440.206287][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.206360][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.219172][ T1243] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 444.210466][ T1243] usb 2-1: not running at top speed; connect to a high speed hub [ 444.210495][ T1243] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 444.211866][ T1243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.283317][ T1243] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 444.304506][ T1243] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 444.678707][ T5750] usb 2-1: USB disconnect, device number 17 [ 444.773311][ T5750] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 444.792761][ T5750] cyberjack 2-1:1.0: device disconnected [ 445.708204][ T7941] Set syz1 is full, maxelem 6117 reached [ 447.558084][ T5592] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.588971][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.592911][ T5592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.595199][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.596082][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.432856][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.433079][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.433252][ T7834] bridge_slave_0: entered allmulticast mode [ 449.436946][ T7834] bridge_slave_0: entered promiscuous mode [ 449.497820][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.498087][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.502889][ T7834] bridge_slave_1: entered allmulticast mode [ 449.516540][ T7834] bridge_slave_1: entered promiscuous mode [ 449.716397][ T61] Bluetooth: hci3: command tx timeout [ 451.192128][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.209522][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.508833][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 451.667321][ T5892] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 451.678134][ T5892] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.678167][ T5892] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.678191][ T5892] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.678217][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.678252][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.760694][ T61] Bluetooth: hci3: command tx timeout [ 451.778575][ T5892] usb 3-1: config 0 descriptor?? [ 452.079171][ T7834] team0: Port device team_slave_0 added [ 452.123391][ T7834] team0: Port device team_slave_1 added [ 452.319246][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 452.319383][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 452.379528][ T5892] usb 3-1: USB disconnect, device number 12 [ 453.962143][ T61] Bluetooth: hci3: command tx timeout [ 454.297373][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.297390][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.297413][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.351656][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.351676][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.351702][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.999576][ T61] Bluetooth: hci3: command tx timeout [ 456.371612][ T12] bridge_slave_1: left allmulticast mode [ 456.371638][ T12] bridge_slave_1: left promiscuous mode [ 456.371801][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.522140][ T12] bridge_slave_0: left allmulticast mode [ 456.522176][ T12] bridge_slave_0: left promiscuous mode [ 456.522453][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.850833][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.982374][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.062467][ T12] bond0 (unregistering): Released all slaves [ 460.104496][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 462.532451][ T5598] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 462.693227][ T5598] usb 2-1: not running at top speed; connect to a high speed hub [ 462.693255][ T5598] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 462.694838][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.881604][ T5598] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 462.924901][ T5598] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 463.992589][ T7834] hsr_slave_0: entered promiscuous mode [ 464.011530][ T7834] hsr_slave_1: entered promiscuous mode [ 464.014038][ T7834] debugfs: 'hsr0' already exists in 'hsr' [ 464.014063][ T7834] Cannot create hsr debugfs directory [ 464.206409][ T5576] usb 2-1: USB disconnect, device number 18 [ 464.300139][ T5576] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 464.324764][ T5576] cyberjack 2-1:1.0: device disconnected [ 464.648378][ T12] hsr_slave_0: left promiscuous mode [ 464.660438][ T12] hsr_slave_1: left promiscuous mode [ 464.661307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.484200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.215300][ T12] team0 (unregistering): Port device team_slave_1 removed [ 472.344051][ T12] team0 (unregistering): Port device team_slave_0 removed [ 474.312549][ T8132] fuse: blksize only supported for fuseblk [ 483.802789][ T5592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.865174][ T5592] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.881763][ T5592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.885474][ T5592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.887540][ T5592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 486.206204][ T5592] Bluetooth: hci6: command tx timeout [ 488.239218][ T5592] Bluetooth: hci6: command tx timeout [ 490.515057][ T5592] Bluetooth: hci6: command tx timeout [ 490.766758][ T12] bridge_slave_1: left allmulticast mode [ 490.766794][ T12] bridge_slave_1: left promiscuous mode [ 490.767063][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.960687][ T12] bridge_slave_0: left allmulticast mode [ 490.960726][ T12] bridge_slave_0: left promiscuous mode [ 490.961012][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.823447][ T8241] fuse: blksize only supported for fuseblk [ 492.491149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.559853][ T5592] Bluetooth: hci6: command tx timeout [ 492.609858][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.692480][ T12] bond0 (unregistering): Released all slaves [ 495.072962][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.073086][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.073277][ T7968] bridge_slave_0: entered allmulticast mode [ 495.119890][ T7968] bridge_slave_0: entered promiscuous mode [ 495.133508][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.133635][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.133810][ T7968] bridge_slave_1: entered allmulticast mode [ 495.136229][ T7968] bridge_slave_1: entered promiscuous mode [ 496.322495][ T12] hsr_slave_0: left promiscuous mode [ 496.571892][ T12] hsr_slave_1: left promiscuous mode [ 496.573104][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.313856][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.725327][ T8278] fuse: blksize only supported for fuseblk [ 498.284894][ T12] team0 (unregistering): Port device team_slave_1 removed [ 498.602119][ T12] team0 (unregistering): Port device team_slave_0 removed [ 502.322229][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.322302][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.537130][ T7968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.561778][ T7968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.787810][ T7968] team0: Port device team_slave_0 added [ 503.837546][ T7968] team0: Port device team_slave_1 added [ 503.912351][ T8314] fuse: blksize only supported for fuseblk [ 508.412708][ T12] bridge_slave_1: left allmulticast mode [ 508.412748][ T12] bridge_slave_1: left promiscuous mode [ 508.412994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.780472][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.040362][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.171017][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.413441][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.574631][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.840417][ T12] bridge_slave_0: left allmulticast mode [ 509.842014][ T12] bridge_slave_0: left promiscuous mode [ 509.861649][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.359285][ T12] bridge_slave_1: left allmulticast mode [ 513.359313][ T12] bridge_slave_1: left promiscuous mode [ 513.359467][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.489023][ T5592] Bluetooth: hci2: command tx timeout [ 515.050715][ T12] bridge_slave_0: left allmulticast mode [ 515.050751][ T12] bridge_slave_0: left promiscuous mode [ 515.051007][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.534282][ T5592] Bluetooth: hci2: command tx timeout [ 517.600487][ T61] Bluetooth: hci2: command tx timeout [ 519.158763][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.500921][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.684430][ T5592] Bluetooth: hci2: command tx timeout [ 519.781852][ T12] bond0 (unregistering): Released all slaves [ 526.161302][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.432676][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.543766][ T12] bond0 (unregistering): Released all slaves [ 529.509311][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 529.692252][ T12] hsr_slave_0: left promiscuous mode [ 531.178058][ T12] hsr_slave_1: left promiscuous mode [ 531.189898][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.276651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.332738][ T12] hsr_slave_0: left promiscuous mode [ 532.422220][ T12] hsr_slave_1: left promiscuous mode [ 532.423562][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.462321][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.075665][ T8456] FAULT_INJECTION: forcing a failure. [ 534.075665][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 534.075718][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.1.510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.075743][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.075760][ T8456] Call Trace: [ 534.075769][ T8456] [ 534.075778][ T8456] dump_stack_lvl+0xe8/0x150 [ 534.075820][ T8456] should_fail_ex+0x46b/0x600 [ 534.075856][ T8456] _copy_from_user+0x2d/0xb0 [ 534.075915][ T8456] memdup_user+0x5e/0xd0 [ 534.075950][ T8456] strndup_user+0x68/0xd0 [ 534.075973][ T8456] __se_sys_mount+0x9d/0x420 [ 534.076002][ T8456] ? __pfx___se_sys_mount+0x10/0x10 [ 534.076032][ T8456] ? __x64_sys_mount+0x20/0xc0 [ 534.076057][ T8456] do_syscall_64+0x166/0x520 [ 534.076082][ T8456] ? trace_irq_disable+0x3b/0x140 [ 534.076117][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.076139][ T8456] ? clear_bhb_loop+0x70/0xc0 [ 534.076166][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.076192][ T8456] RIP: 0033:0x7fd68965e159 [ 534.076214][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.076232][ T8456] RSP: 002b:00007fd6878b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.076255][ T8456] RAX: ffffffffffffffda RBX: 00007fd6898e5fa0 RCX: 00007fd68965e159 [ 534.076272][ T8456] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.076286][ T8456] RBP: 00007fd6896f506b R08: 0000000000000000 R09: 0000000000000000 [ 534.076302][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.076315][ T8456] R13: 00007fd6898e6038 R14: 00007fd6898e5fa0 R15: 00007ffcb437fc08 [ 534.076348][ T8456] [ 536.235817][ T12] team0 (unregistering): Port device team_slave_1 removed [ 536.253879][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 537.143815][ T12] team0 (unregistering): Port device team_slave_0 removed [ 538.879523][ T12] team0 (unregistering): Port device team_slave_1 removed [ 538.941623][ T12] team0 (unregistering): Port device team_slave_0 removed [ 539.210763][ T8176] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.210882][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.211078][ T8176] bridge_slave_0: entered allmulticast mode [ 539.221984][ T8176] bridge_slave_0: entered promiscuous mode [ 539.320282][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.320418][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.320605][ T8176] bridge_slave_1: entered allmulticast mode [ 539.323569][ T8176] bridge_slave_1: entered promiscuous mode [ 540.660275][ T8176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.723092][ T8176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.528402][ T8489] block device autoloading is deprecated and will be removed. [ 545.218644][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 545.248259][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 545.266362][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 545.284091][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 545.288738][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 547.465067][ T5592] Bluetooth: hci3: command tx timeout [ 549.571117][ T5592] Bluetooth: hci3: command tx timeout [ 551.201099][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'. [ 551.554965][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.555053][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.555181][ T8347] bridge_slave_0: entered allmulticast mode [ 551.559340][ T8347] bridge_slave_0: entered promiscuous mode [ 551.574461][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.574580][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.574756][ T8347] bridge_slave_1: entered allmulticast mode [ 551.581527][ T8347] bridge_slave_1: entered promiscuous mode [ 551.841133][ T5592] Bluetooth: hci3: command tx timeout [ 551.860870][ T8347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.022071][ T8347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.258918][ T8347] team0: Port device team_slave_0 added [ 552.342366][ T8347] team0: Port device team_slave_1 added [ 552.621182][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.621202][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.621445][ T8347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.696504][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.696524][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.697718][ T8347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.169991][ T12] bridge_slave_1: left allmulticast mode [ 553.170016][ T12] bridge_slave_1: left promiscuous mode [ 553.170192][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.509265][ T49] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 553.721424][ T49] usb 3-1: not running at top speed; connect to a high speed hub [ 553.721638][ T49] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 553.811010][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.919084][ T5592] Bluetooth: hci3: command tx timeout [ 554.563670][ T49] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 555.274994][ T12] bridge_slave_0: left allmulticast mode [ 555.275033][ T12] bridge_slave_0: left promiscuous mode [ 555.524689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.563115][ T49] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 555.966628][ T12] bridge_slave_1: left allmulticast mode [ 555.966653][ T12] bridge_slave_1: left promiscuous mode [ 555.966928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.175265][ T12] bridge_slave_0: left allmulticast mode [ 556.175908][ T12] bridge_slave_0: left promiscuous mode [ 556.177102][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.435380][ T5576] usb 3-1: USB disconnect, device number 13 [ 556.523246][ T5576] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 556.528605][ T5576] cyberjack 3-1:1.0: device disconnected [ 558.865178][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.981952][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.020491][ T12] bond0 (unregistering): Released all slaves [ 559.210007][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.310748][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.360474][ T12] bond0 (unregistering): Released all slaves [ 559.379183][ T8596] warning: `syz.4.536' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 560.390699][ T8347] hsr_slave_0: entered promiscuous mode [ 560.391423][ T8347] hsr_slave_1: entered promiscuous mode [ 560.401261][ T8347] debugfs: 'hsr0' already exists in 'hsr' [ 560.401281][ T8347] Cannot create hsr debugfs directory [ 563.046895][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.046964][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.750567][ T12] team0 (unregistering): Port device team_slave_1 removed [ 566.970733][ T49] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 567.042009][ T12] team0 (unregistering): Port device team_slave_0 removed [ 567.121667][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.124932][ T49] usb 5-1: not running at top speed; connect to a high speed hub [ 567.124959][ T49] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 567.126256][ T49] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.126272][ T49] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 567.126307][ T49] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 567.129982][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.130007][ T49] usb 5-1: Product: syz [ 567.130022][ T49] usb 5-1: Manufacturer: syz [ 567.130037][ T49] usb 5-1: SerialNumber: syz [ 569.078507][ T49] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 569.078589][ T49] usb 5-1: 1:1 : format type 5 is not supported yet [ 569.088030][ T49] usb 5-1: 0:2 : does not exist [ 570.001433][ T49] usb 5-1: USB disconnect, device number 31 [ 571.905288][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 571.962031][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 572.182775][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 572.199071][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 572.511358][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.201692][ T8636] udevd[8636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.859180][ T49] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 574.896722][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.896885][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.897083][ T8512] bridge_slave_0: entered allmulticast mode [ 574.902677][ T8512] bridge_slave_0: entered promiscuous mode [ 574.925878][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.926102][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.926286][ T8512] bridge_slave_1: entered allmulticast mode [ 574.941951][ T8512] bridge_slave_1: entered promiscuous mode [ 575.054590][ T61] Bluetooth: hci5: command tx timeout [ 575.073994][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 575.074763][ T49] usb 2-1: not running at top speed; connect to a high speed hub [ 575.074801][ T49] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 575.077868][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.077893][ T49] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 575.077956][ T49] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 575.081203][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.081228][ T49] usb 2-1: Product: syz [ 575.081242][ T49] usb 2-1: Manufacturer: syz [ 575.081257][ T49] usb 2-1: SerialNumber: syz [ 575.402244][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.433553][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.639284][ T36] audit: type=1800 audit(1790816274.225:2): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.554" name=08 dev="sda1" ino=2063 res=0 errno=0 [ 577.120493][ T61] Bluetooth: hci5: command tx timeout [ 577.971185][ T8512] team0: Port device team_slave_0 added [ 577.979169][ T8512] team0: Port device team_slave_1 added [ 578.041539][ T36] audit: type=1326 audit(1790816276.535:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.2.555" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe30b92e159 code=0x0 [ 578.139663][ T49] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 578.139691][ T49] usb 2-1: 1:1 : format type 5 is not supported yet [ 578.147957][ T49] usb 2-1: 0:2 : does not exist [ 578.155939][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.155958][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.155983][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.158084][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.158099][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.158123][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.412122][ T49] usb 2-1: USB disconnect, device number 19 [ 578.556255][ T8636] udevd[8636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.885486][ T8714] syz.1.559 uses obsolete (PF_INET,SOCK_PACKET) [ 578.963127][ T8512] hsr_slave_0: entered promiscuous mode [ 579.005106][ T8512] hsr_slave_1: entered promiscuous mode [ 579.007793][ T8512] debugfs: 'hsr0' already exists in 'hsr' [ 579.007812][ T8512] Cannot create hsr debugfs directory [ 579.103756][ T8719] overlayfs: failed to clone upperpath [ 579.191871][ T12] bridge_slave_1: left allmulticast mode [ 579.191910][ T12] bridge_slave_1: left promiscuous mode [ 579.192228][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.209021][ T61] Bluetooth: hci5: command tx timeout [ 579.340353][ T12] bridge_slave_0: left allmulticast mode [ 579.340379][ T12] bridge_slave_0: left promiscuous mode [ 579.340580][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.095828][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.302467][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.421343][ T12] bond0 (unregistering): Released all slaves [ 580.964481][ T241] wlan1: Trigger new scan to find an IBSS to join [ 581.297017][ T61] Bluetooth: hci5: command tx timeout [ 581.905820][ T12] hsr_slave_0: left promiscuous mode [ 582.149581][ T12] hsr_slave_1: left promiscuous mode [ 582.356010][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.622220][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.015178][ T358] wlan1: Trigger new scan to find an IBSS to join [ 585.977627][ T12] team0 (unregistering): Port device team_slave_1 removed [ 586.104357][ T1127] wlan1: Creating new IBSS network, BSSID 4e:c5:03:11:f3:bf [ 586.496187][ T8763] fuse: Bad value for 'fd' [ 587.643156][ T12] team0 (unregistering): Port device team_slave_0 removed [ 587.895125][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 590.595018][ T8784] overlay: Unknown parameter 'euid<00000000000000000000' [ 593.554206][ T8512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 593.585626][ T8512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.633741][ T8512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 593.909810][ T8512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.508391][ T8512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 595.539725][ T8512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.594738][ T8512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.663456][ T8512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.809095][ T8810] Illegal XDP return value 4294967262 on prog (id 47) dev syz_tun, expect packet loss! [ 595.857681][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.857857][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.858044][ T8666] bridge_slave_0: entered allmulticast mode [ 595.877541][ T8666] bridge_slave_0: entered promiscuous mode [ 595.966016][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.966138][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.966338][ T8666] bridge_slave_1: entered allmulticast mode [ 596.040567][ T8666] bridge_slave_1: entered promiscuous mode [ 597.768087][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.835944][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.110260][ T8666] team0: Port device team_slave_0 added [ 598.140276][ T8666] team0: Port device team_slave_1 added [ 598.830671][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.830690][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.830717][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.110554][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.110581][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.110607][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.179380][ T8831] netlink: 'syz.4.591': attribute type 10 has an invalid length. [ 599.235877][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.238288][ T8833] netlink: 'syz.4.591': attribute type 10 has an invalid length. [ 599.243697][ T36] audit: type=1800 audit(1790816297.775:4): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.592" name=08 dev="sda1" ino=2063 res=0 errno=0 [ 599.305438][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.436843][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.436947][ T8831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.525876][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.594220][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.478794][ T8831] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 600.654418][ T8841] Bluetooth: MGMT ver 1.23 [ 600.689606][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.706213][ T8833] team0: Port device bond0 added [ 600.730663][ T8666] hsr_slave_0: entered promiscuous mode [ 600.735672][ T8666] hsr_slave_1: entered promiscuous mode [ 600.740197][ T8666] debugfs: 'hsr0' already exists in 'hsr' [ 600.740225][ T8666] Cannot create hsr debugfs directory [ 600.910884][ T8845] FAULT_INJECTION: forcing a failure. [ 600.910884][ T8845] name failslab, interval 1, probability 0, space 0, times 0 [ 600.910923][ T8845] CPU: 1 UID: 0 PID: 8845 Comm: syz.1.595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.910948][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.910963][ T8845] Call Trace: [ 600.910971][ T8845] [ 600.910981][ T8845] dump_stack_lvl+0xe8/0x150 [ 600.911022][ T8845] should_fail_ex+0x46b/0x600 [ 600.911069][ T8845] should_failslab+0xa8/0x100 [ 600.911094][ T8845] __kmalloc_node_noprof+0xfd/0x7b0 [ 600.911126][ T8845] ? load_msg+0x41/0x3b0 [ 600.911170][ T8845] ? load_msg+0x41/0x3b0 [ 600.911197][ T8845] load_msg+0x41/0x3b0 [ 600.911225][ T8845] do_msgsnd+0x1a9/0x14f0 [ 600.911251][ T8845] ? __pfx_do_futex+0x10/0x10 [ 600.911289][ T8845] ? lock_acquire+0x115/0x350 [ 600.911335][ T8845] ? __pfx_do_msgsnd+0x10/0x10 [ 600.911363][ T8845] ? __might_fault+0xaf/0x130 [ 600.911393][ T8845] ? __x64_sys_msgsnd+0xee/0x120 [ 600.911420][ T8845] do_syscall_64+0x166/0x520 [ 600.911445][ T8845] ? trace_irq_disable+0x3b/0x140 [ 600.911474][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.911498][ T8845] ? clear_bhb_loop+0x70/0xc0 [ 600.911524][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.911545][ T8845] RIP: 0033:0x7fd68965e159 [ 600.911565][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.911584][ T8845] RSP: 002b:00007fd6878b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 600.911609][ T8845] RAX: ffffffffffffffda RBX: 00007fd6898e5fa0 RCX: 00007fd68965e159 [ 600.911625][ T8845] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 0000000000000000 [ 600.911641][ T8845] RBP: 00007fd6896f506b R08: 0000000000000000 R09: 0000000000000000 [ 600.911656][ T8845] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 600.911669][ T8845] R13: 00007fd6898e6038 R14: 00007fd6898e5fa0 R15: 00007ffcb437fc08 [ 600.911706][ T8845] [ 601.414253][ T36] audit: type=1326 audit(1790816299.945:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8847 comm="syz.1.597" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68965e159 code=0x0 [ 601.551987][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.683993][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.709755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.709906][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.737898][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.738132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.323499][ T8854] fuse: Bad value for 'fd' [ 605.021645][ T8666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.206003][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.209809][ T8666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 605.318571][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.335682][ T5592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 605.368464][ T5592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 605.383678][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 605.407512][ T5592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 605.414184][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 605.456541][ T8666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 605.682524][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.686654][ T8666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 606.520219][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 607.519272][ T5592] Bluetooth: hci2: command tx timeout [ 607.886426][ T8903] bond1: entered allmulticast mode [ 607.925324][ T8903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.968371][ T8905] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 608.974275][ T8905] macvlan2: entered allmulticast mode [ 608.974297][ T8905] bond0: entered allmulticast mode [ 608.974310][ T8905] bond_slave_0: entered allmulticast mode [ 608.974336][ T8905] bond_slave_1: entered allmulticast mode [ 608.974743][ T8905] bond_slave_0: entered promiscuous mode [ 608.974824][ T8905] bond_slave_1: entered promiscuous mode [ 608.976769][ T8905] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 609.600058][ T5592] Bluetooth: hci2: command tx timeout [ 612.583919][ T5592] Bluetooth: hci2: command tx timeout [ 612.976928][ T8957] fuse: fd is not a fuse device [ 614.704707][ T49] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 614.720601][ T5592] Bluetooth: hci2: command tx timeout [ 614.879852][ T49] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 614.882672][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.882722][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.936538][ T49] usb 3-1: config 0 descriptor?? [ 615.925004][ T49] usbhid 3-1:0.0: can't add hid device: -71 [ 615.925138][ T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 615.948524][ T49] usb 3-1: USB disconnect, device number 14 [ 616.095887][ T8987] FAULT_INJECTION: forcing a failure. [ 616.095887][ T8987] name failslab, interval 1, probability 0, space 0, times 0 [ 616.095925][ T8987] CPU: 1 UID: 0 PID: 8987 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.095951][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.095964][ T8987] Call Trace: [ 616.095973][ T8987] [ 616.095982][ T8987] dump_stack_lvl+0xe8/0x150 [ 616.096020][ T8987] should_fail_ex+0x46b/0x600 [ 616.096056][ T8987] should_failslab+0xa8/0x100 [ 616.096078][ T8987] ? __anon_vma_prepare+0xc3/0x4d0 [ 616.096110][ T8987] kmem_cache_alloc_noprof+0x9e/0x690 [ 616.096140][ T8987] ? __anon_vma_prepare+0xc3/0x4d0 [ 616.096175][ T8987] __anon_vma_prepare+0xc3/0x4d0 [ 616.096209][ T8987] do_pte_missing+0x1d2a/0x28f0 [ 616.096257][ T8987] handle_mm_fault+0xf64/0x28c0 [ 616.096291][ T8987] ? handle_mm_fault+0xeb/0x28c0 [ 616.096329][ T8987] ? __pfx_handle_mm_fault+0x10/0x10 [ 616.096353][ T8987] ? lock_vma_under_rcu+0x45a/0x500 [ 616.096412][ T8987] do_user_addr_fault+0xa4f/0x1340 [ 616.096486][ T8987] ? trace_page_fault_user+0x84/0x1e0 [ 616.096519][ T8987] exc_page_fault+0x6a/0xc0 [ 616.096608][ T8987] asm_exc_page_fault+0x26/0x30 [ 616.096629][ T8987] RIP: 0033:0x7fd689620082 [ 616.096650][ T8987] Code: 8d 15 13 1a 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 616.096669][ T8987] RSP: 002b:00007fd6878b4d20 EFLAGS: 00010286 [ 616.096689][ T8987] RAX: ffffffffffffffff RBX: 00007fd680000000 RCX: 00007fd68965df57 [ 616.096706][ T8987] RDX: 00007fd689711a71 RSI: 0000000000021000 RDI: 00007fd680000000 [ 616.096722][ T8987] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 616.096736][ T8987] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 616.096750][ T8987] R13: 0000000000001000 R14: 00007fd684000000 R15: 000000000076a000 [ 616.096784][ T8987] [ 616.097072][ T8987] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 616.430007][ T49] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 616.709843][ T49] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 616.711387][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.711437][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.748430][ T49] usb 3-1: config 0 descriptor?? [ 616.792768][ T49] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 616.797430][ T49] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 617.981283][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.044313][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.089308][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.089463][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.127382][ T49] usb 3-1: USB disconnect, device number 15 [ 619.153412][ T244] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.153610][ T244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.175819][ T49] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 619.440755][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.440942][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.441162][ T8872] bridge_slave_0: entered allmulticast mode [ 619.446153][ T8872] bridge_slave_0: entered promiscuous mode [ 619.479739][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.479890][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.480101][ T8872] bridge_slave_1: entered allmulticast mode [ 619.482746][ T8872] bridge_slave_1: entered promiscuous mode [ 619.689630][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.733061][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.510297][ T8872] team0: Port device team_slave_0 added [ 621.602253][ T8872] team0: Port device team_slave_1 added [ 621.785270][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.785289][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.785315][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.841958][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.841976][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.842004][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.224424][ T12] bridge_slave_1: left allmulticast mode [ 622.224463][ T12] bridge_slave_1: left promiscuous mode [ 622.224735][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.393287][ T12] bridge_slave_0: left allmulticast mode [ 622.393326][ T12] bridge_slave_0: left promiscuous mode [ 622.393602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.369978][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 623.372367][ T5592] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 623.469823][ T5595] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 623.742206][ T5595] usb 2-1: Using ep0 maxpacket: 32 [ 624.585201][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.586377][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.593441][ T5595] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 624.628653][ T5595] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 624.736312][ T5595] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 624.736342][ T5595] usb 2-1: Product: syz [ 624.736356][ T5595] usb 2-1: Manufacturer: syz [ 624.736370][ T5595] usb 2-1: SerialNumber: syz [ 624.785857][ T5595] usb 2-1: config 0 descriptor?? [ 624.786740][ T9055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.811301][ T5595] hub 2-1:0.0: bad descriptor, ignoring hub [ 624.811343][ T5595] hub 2-1:0.0: probe with driver hub failed with error -5 [ 625.909990][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 625.933151][ T5595] usb 2-1: USB disconnect, device number 20 [ 628.176191][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.377983][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.672145][ T12] bond0 (unregistering): Released all slaves [ 629.762600][ T9092] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 630.043723][ T8872] hsr_slave_0: entered promiscuous mode [ 630.048893][ T8872] hsr_slave_1: entered promiscuous mode [ 630.053269][ T8872] debugfs: 'hsr0' already exists in 'hsr' [ 630.053297][ T8872] Cannot create hsr debugfs directory [ 630.627459][ T12] hsr_slave_0: left promiscuous mode [ 630.660428][ T12] hsr_slave_1: left promiscuous mode [ 630.661709][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.704087][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.520950][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 632.580092][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.589807][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.607323][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.608139][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.935434][ T9122] ================================================================== [ 632.935500][ T9122] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 632.935603][ T9122] Read of size 1 at addr ffff888025411418 by task syz.1.653/9122 [ 632.935656][ T9122] [ 632.935701][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.1.653 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.935809][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.935824][ T9122] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 632.935834][ T9122] [ 632.935845][ T9122] dump_stack_lvl+0xe8/0x150 [ 632.935877][ T9122] print_address_description+0x55/0x1e0 [ 632.935916][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 632.935935][ T9122] print_report+0x58/0x70 [ 632.935960][ T9122] kasan_report+0x117/0x150 [ 632.935980][ T9122] ? __pfx___schedule+0x10/0x10 [ 632.936011][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 632.936035][ T9122] __kasan_check_byte+0x2a/0x40 [ 632.936055][ T9122] lock_acquire+0x7d/0x350 [ 632.936083][ T9122] ? rcu_is_watching+0x16/0xb0 [ 632.936116][ T9122] _raw_spin_lock_irqsave+0x40/0x60 [ 632.936136][ T9122] ? rt_mutex_slowunlock+0xbf/0xa30 [ 632.936164][ T9122] rt_mutex_slowunlock+0xbf/0xa30 [ 632.936193][ T9122] ? reacquire_held_locks+0x117/0x1a0 [ 632.936224][ T9122] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 632.936254][ T9122] ? kbd_event+0x2e8d/0x41f0 [ 632.936344][ T9122] rt_spin_unlock+0x10f/0x200 [ 632.936373][ T9122] kbd_event+0x2e8d/0x41f0 [ 632.936400][ T9122] ? __lock_acquire+0x747/0x2de0 [ 632.936428][ T9122] ? __pfx_kbd_event+0x10/0x10 [ 632.936455][ T9122] ? try_to_take_rt_mutex+0x842/0xb00 [ 632.936497][ T9122] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 632.936531][ T9122] ? __lock_acquire+0x747/0x2de0 [ 632.936570][ T9122] ? lock_acquire+0x115/0x350 [ 632.936599][ T9122] input_handle_events_default+0xd4/0x1a0 [ 632.936712][ T9122] ? input_pass_values+0x8d/0x890 [ 632.936737][ T9122] input_pass_values+0x288/0x890 [ 632.936765][ T9122] ? input_handle_event+0x6fd/0xf10 [ 632.936790][ T9122] input_event_dispose+0x35f/0x700 [ 632.936815][ T9122] input_inject_event+0x1fa/0x310 [ 632.936838][ T9122] ? input_inject_event+0xb7/0x310 [ 632.936863][ T9122] evdev_write+0x328/0x4c0 [ 632.936919][ T9122] ? __lock_acquire+0x747/0x2de0 [ 632.936948][ T9122] ? __pfx_evdev_write+0x10/0x10 [ 632.936979][ T9122] ? bpf_lsm_file_permission+0x9/0x20 [ 632.937003][ T9122] ? security_file_permission+0x75/0x260 [ 632.937032][ T9122] ? rw_verify_area+0x209/0x4d0 [ 632.937064][ T9122] ? __pfx_evdev_write+0x10/0x10 [ 632.937093][ T9122] vfs_write+0x29f/0xbb0 [ 632.937122][ T9122] ? __pfx_vfs_write+0x10/0x10 [ 632.937148][ T9122] ? __fget_files+0x2a/0x420 [ 632.937173][ T9122] ? __fget_files+0x2a/0x420 [ 632.937194][ T9122] ? __fget_files+0x3a8/0x420 [ 632.937216][ T9122] ? __fget_files+0x2a/0x420 [ 632.937241][ T9122] ksys_write+0x156/0x270 [ 632.937266][ T9122] ? __pfx_ksys_write+0x10/0x10 [ 632.937293][ T9122] do_syscall_64+0x166/0x520 [ 632.937314][ T9122] ? trace_irq_disable+0x3b/0x140 [ 632.937341][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.937363][ T9122] ? clear_bhb_loop+0x70/0xc0 [ 632.937387][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.937408][ T9122] RIP: 0033:0x7fd68965e159 [ 632.937428][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.937448][ T9122] RSP: 002b:00007fd687895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.937471][ T9122] RAX: ffffffffffffffda RBX: 00007fd6898e6090 RCX: 00007fd68965e159 [ 632.937496][ T9122] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 632.937511][ T9122] RBP: 00007fd6896f506b R08: 0000000000000000 R09: 0000000000000000 [ 632.937525][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.937539][ T9122] R13: 00007fd6898e6128 R14: 00007fd6898e6090 R15: 00007ffcb437fc08 [ 632.937564][ T9122] [ 632.937572][ T9122] [ 632.937583][ T9122] Allocated by task 9122: [ 632.937628][ T9122] kasan_save_track+0x3e/0x80 [ 632.937657][ T9122] __kasan_kmalloc+0x93/0xb0 [ 632.937685][ T9122] __kmalloc_cache_noprof+0x3d5/0x680 [ 632.937712][ T9122] alloc_tty_struct+0xa6/0x7a0 [ 632.937765][ T9122] tty_init_dev+0x59/0x4d0 [ 632.937784][ T9122] tty_open+0x7e5/0xcd0 [ 632.937844][ T9122] chrdev_open+0x4dc/0x600 [ 632.937872][ T9122] do_dentry_open+0x849/0x1420 [ 632.937900][ T9122] vfs_open+0x3b/0x350 [ 632.937915][ T9122] path_openat+0x1448/0x1d60 [ 632.937940][ T9122] do_file_open+0x23e/0x4a0 [ 632.937963][ T9122] do_sys_openat2+0x115/0x200 [ 632.937980][ T9122] __x64_sys_openat+0x138/0x170 [ 632.937997][ T9122] do_syscall_64+0x166/0x520 [ 632.938016][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.938035][ T9122] [ 632.938040][ T9122] Freed by task 5598: [ 632.938050][ T9122] kasan_save_track+0x3e/0x80 [ 632.938076][ T9122] kasan_save_free_info+0x40/0x50 [ 632.938099][ T9122] __kasan_slab_free+0x5c/0x80 [ 632.938126][ T9122] kfree+0x1c5/0x6d0 [ 632.938148][ T9122] process_scheduled_works+0xc3d/0x1630 [ 632.938174][ T9122] worker_thread+0xa47/0xfb0 [ 632.938199][ T9122] kthread+0x38b/0x470 [ 632.938230][ T9122] ret_from_fork+0x514/0xb70 [ 632.938252][ T9122] ret_from_fork_asm+0x1a/0x30 [ 632.938269][ T9122] [ 632.938275][ T9122] Last potentially related work creation: [ 632.938282][ T9122] kasan_save_stack+0x3e/0x60 [ 632.938307][ T9122] kasan_record_aux_stack+0xbd/0xd0 [ 632.938329][ T9122] insert_work+0x3d/0x330 [ 632.938351][ T9122] __queue_work+0xd4b/0x1120 [ 632.938378][ T9122] queue_work_on+0x106/0x1d0 [ 632.938404][ T9122] tty_release_struct+0xb8/0xd0 [ 632.938425][ T9122] tty_release+0xc6b/0x1680 [ 632.938446][ T9122] __fput+0x42a/0xa80 [ 632.938463][ T9122] task_work_run+0x1d9/0x270 [ 632.938491][ T9122] do_exit+0x73a/0x2360 [ 632.938517][ T9122] do_group_exit+0x22d/0x2f0 [ 632.938536][ T9122] get_signal+0x121b/0x12c0 [ 632.938561][ T9122] arch_do_signal_or_restart+0xbb/0x860 [ 632.938601][ T9122] exit_to_user_mode_loop+0x10e/0x770 [ 632.938627][ T9122] do_syscall_64+0x328/0x520 [ 632.938646][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.938666][ T9122] [ 632.938670][ T9122] The buggy address belongs to the object at ffff888025411000 [ 632.938670][ T9122] which belongs to the cache kmalloc-cg-2k of size 2048 [ 632.938689][ T9122] The buggy address is located 1048 bytes inside of [ 632.938689][ T9122] freed 2048-byte region [ffff888025411000, ffff888025411800) [ 632.938711][ T9122] [ 632.938718][ T9122] The buggy address belongs to the physical page: [ 632.938733][ T9122] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025412000 pfn:0x25410 [ 632.938755][ T9122] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 632.938771][ T9122] memcg:ffff888025410811 [ 632.938780][ T9122] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 632.938803][ T9122] page_type: f5(slab) [ 632.938821][ T9122] raw: 0080000000000240 ffff88813ff073c0 ffffea0000f72810 ffffea0000e6a610 [ 632.938841][ T9122] raw: ffff888025412000 0000000300080007 00000000f5000000 ffff888025410811 [ 632.938861][ T9122] head: 0080000000000240 ffff88813ff073c0 ffffea0000f72810 ffffea0000e6a610 [ 632.938880][ T9122] head: ffff888025412000 0000000300080007 00000000f5000000 ffff888025410811 [ 632.938899][ T9122] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 632.938916][ T9122] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 632.938927][ T9122] page dumped because: kasan: bad access detected [ 632.938944][ T9122] page_owner tracks the page as allocated [ 632.938952][ T9122] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6772, tgid 6771 (syz.1.203), ts 277452728686 [ 632.938988][ T9122] post_alloc_hook+0x1f9/0x250 [ 632.939014][ T9122] get_page_from_freelist+0x2591/0x2600 [ 632.939042][ T9122] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 632.939071][ T9122] allocate_slab+0x7d/0x620 [ 632.939092][ T9122] refill_objects+0x2d8/0x350 [ 632.939113][ T9122] __pcs_replace_empty_main+0x339/0x690 [ 632.939132][ T9122] __kmalloc_cache_noprof+0x46f/0x680 [ 632.939159][ T9122] bpf_prog_alloc_no_stats+0xd8/0x560 [ 632.939196][ T9122] bpf_prog_alloc+0x3c/0x1a0 [ 632.939223][ T9122] bpf_prog_load+0x7f8/0x1c20 [ 632.939251][ T9122] __sys_bpf+0xd0d/0xd90 [ 632.939276][ T9122] __x64_sys_bpf+0xba/0xd0 [ 632.939298][ T9122] do_syscall_64+0x166/0x520 [ 632.939316][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.939334][ T9122] page last free pid 6772 tgid 6771 ts 277452452119 stack trace: [ 632.939348][ T9122] __free_frozen_pages+0xf8e/0x1070 [ 632.939373][ T9122] __slab_free+0x250/0x2a0 [ 632.939399][ T9122] qlist_free_all+0x99/0x100 [ 632.939424][ T9122] kasan_quarantine_reduce+0x148/0x160 [ 632.939449][ T9122] __kasan_slab_alloc+0x22/0x80 [ 632.939477][ T9122] __kmalloc_cache_node_noprof+0x3df/0x670 [ 632.939512][ T9122] __get_vm_area_node+0x155/0x2f0 [ 632.939535][ T9122] __vmalloc_node_range_noprof+0x343/0x1540 [ 632.939561][ T9122] __vmalloc_noprof+0xd2/0x120 [ 632.939584][ T9122] bpf_prog_alloc_no_stats+0x47/0x560 [ 632.939612][ T9122] bpf_prog_alloc+0x3c/0x1a0 [ 632.939639][ T9122] bpf_prog_load+0x7f8/0x1c20 [ 632.939667][ T9122] __sys_bpf+0xd0d/0xd90 [ 632.939693][ T9122] __x64_sys_bpf+0xba/0xd0 [ 632.939718][ T9122] do_syscall_64+0x166/0x520 [ 632.939737][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.939756][ T9122] [ 632.939762][ T9122] Memory state around the buggy address: [ 632.939773][ T9122] ffff888025411300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 632.939787][ T9122] ffff888025411380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 632.939800][ T9122] >ffff888025411400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 632.939810][ T9122] ^ [ 632.939821][ T9122] ffff888025411480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 632.939834][ T9122] ffff888025411500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 632.939845][ T9122] ================================================================== [ 632.939867][ T9122] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 633.911621][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.1.653 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 633.921336][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.931396][ T9122] Call Trace: [ 633.934681][ T9122] [ 633.937606][ T9122] vpanic+0x56d/0xa60 [ 633.941588][ T9122] ? __pfx_vpanic+0x10/0x10 [ 633.946111][ T9122] panic+0xc5/0xd0 [ 633.949823][ T9122] ? __pfx_panic+0x10/0x10 [ 633.954230][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 633.959596][ T9122] ? rcu_is_watching+0x16/0xb0 [ 633.964362][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 633.969732][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 633.975094][ T9122] check_panic_on_warn+0x89/0xb0 [ 633.980025][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 633.985384][ T9122] end_report+0x73/0x170 [ 633.989623][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 633.994983][ T9122] kasan_report+0x128/0x150 [ 633.999476][ T9122] ? __pfx___schedule+0x10/0x10 [ 634.004330][ T9122] ? _raw_spin_lock_irqsave+0x40/0x60 [ 634.009723][ T9122] __kasan_check_byte+0x2a/0x40 [ 634.014777][ T9122] lock_acquire+0x7d/0x350 [ 634.019343][ T9122] ? rcu_is_watching+0x16/0xb0 [ 634.024171][ T9122] _raw_spin_lock_irqsave+0x40/0x60 [ 634.029394][ T9122] ? rt_mutex_slowunlock+0xbf/0xa30 [ 634.034617][ T9122] rt_mutex_slowunlock+0xbf/0xa30 [ 634.039648][ T9122] ? reacquire_held_locks+0x117/0x1a0 [ 634.045025][ T9122] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 634.050668][ T9122] ? kbd_event+0x2e8d/0x41f0 [ 634.055254][ T9122] rt_spin_unlock+0x10f/0x200 [ 634.059934][ T9122] kbd_event+0x2e8d/0x41f0 [ 634.064351][ T9122] ? __lock_acquire+0x747/0x2de0 [ 634.069290][ T9122] ? __pfx_kbd_event+0x10/0x10 [ 634.074051][ T9122] ? try_to_take_rt_mutex+0x842/0xb00 [ 634.079433][ T9122] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 634.084977][ T9122] ? __lock_acquire+0x747/0x2de0 [ 634.089918][ T9122] ? lock_acquire+0x115/0x350 [ 634.094607][ T9122] input_handle_events_default+0xd4/0x1a0 [ 634.100327][ T9122] ? input_pass_values+0x8d/0x890 [ 634.105429][ T9122] input_pass_values+0x288/0x890 [ 634.110366][ T9122] ? input_handle_event+0x6fd/0xf10 [ 634.115556][ T9122] input_event_dispose+0x35f/0x700 [ 634.120666][ T9122] input_inject_event+0x1fa/0x310 [ 634.125683][ T9122] ? input_inject_event+0xb7/0x310 [ 634.130792][ T9122] evdev_write+0x328/0x4c0 [ 634.135213][ T9122] ? __lock_acquire+0x747/0x2de0 [ 634.140146][ T9122] ? __pfx_evdev_write+0x10/0x10 [ 634.145083][ T9122] ? bpf_lsm_file_permission+0x9/0x20 [ 634.150447][ T9122] ? security_file_permission+0x75/0x260 [ 634.156078][ T9122] ? rw_verify_area+0x209/0x4d0 [ 634.160923][ T9122] ? __pfx_evdev_write+0x10/0x10 [ 634.165857][ T9122] vfs_write+0x29f/0xbb0 [ 634.170099][ T9122] ? __pfx_vfs_write+0x10/0x10 [ 634.174859][ T9122] ? __fget_files+0x2a/0x420 [ 634.179441][ T9122] ? __fget_files+0x2a/0x420 [ 634.184020][ T9122] ? __fget_files+0x3a8/0x420 [ 634.188696][ T9122] ? __fget_files+0x2a/0x420 [ 634.193624][ T9122] ksys_write+0x156/0x270 [ 634.197951][ T9122] ? __pfx_ksys_write+0x10/0x10 [ 634.202800][ T9122] do_syscall_64+0x166/0x520 [ 634.207381][ T9122] ? trace_irq_disable+0x3b/0x140 [ 634.212402][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.218461][ T9122] ? clear_bhb_loop+0x70/0xc0 [ 634.223132][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.229625][ T9122] RIP: 0033:0x7fd68965e159 [ 634.234035][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.253642][ T9122] RSP: 002b:00007fd687895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 634.262056][ T9122] RAX: ffffffffffffffda RBX: 00007fd6898e6090 RCX: 00007fd68965e159 [ 634.270025][ T9122] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 634.277999][ T9122] RBP: 00007fd6896f506b R08: 0000000000000000 R09: 0000000000000000 [ 634.285989][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.293952][ T9122] R13: 00007fd6898e6128 R14: 00007fd6898e6090 R15: 00007ffcb437fc08 [ 634.301921][ T9122] [ 634.305206][ T9122] Kernel Offset: disabled [ 634.309546][ T9122] Rebooting in 86400 seconds..