last executing test programs: 16m13.333422572s ago: executing program 2 (id=82): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000080)) 16m11.132926261s ago: executing program 2 (id=96): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 16m2.741450366s ago: executing program 2 (id=118): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16m1.854999614s ago: executing program 3 (id=120): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000440)}], 0x1}, 0x2004c085) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)=r1, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x58, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x5, 0x0}, 0x8) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x12, &(0x7f0000000040)=r4, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0x0, 0xff, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1f, 0x0, &(0x7f00000001c0), 0x0, 0xffff5bfa, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x60, '\x00', r2, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0x5, 0x100, 0x80000000}, 0x10, r3, r4, 0x1, &(0x7f0000001580), &(0x7f00000015c0)=[{0x4, 0x2, 0x5, 0x1}], 0x10, 0x4c2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 16m1.677807389s ago: executing program 3 (id=121): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 16m1.496803771s ago: executing program 2 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 16m1.185939149s ago: executing program 0 (id=123): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="67b8", 0x2}], 0x1}, 0x480c0) 16m0.8949352s ago: executing program 0 (id=124): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 16m0.781377779s ago: executing program 2 (id=125): syz_usb_connect(0x0, 0x2b, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103", @ANYBLOB="50ba71021f"], 0x0) mount(0x0, &(0x7f00000000c0)='./dev\x00', 0x0, 0x0, 0x0) 16m0.570446172s ago: executing program 0 (id=126): io_uring_setup(0x4823, 0x0) pause() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000018, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x96}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 15m59.221920704s ago: executing program 0 (id=127): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15m58.857049393s ago: executing program 3 (id=128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x13) 15m57.876953787s ago: executing program 2 (id=131): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000380), &(0x7f0000000440)=r3}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x29, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 15m57.704028535s ago: executing program 0 (id=132): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15m56.470900301s ago: executing program 0 (id=135): socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='1', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000000), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x75, @local, 0x4e20, 0xfffffffc, 'lblcr\x00', 0x5, 0x0, 0x5}, 0x2c) 15m56.191029662s ago: executing program 3 (id=136): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 15m56.026506732s ago: executing program 3 (id=137): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "abacd211119ca94c50377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x20000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 15m55.678413901s ago: executing program 3 (id=138): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 15m42.335729166s ago: executing program 32 (id=131): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000380), &(0x7f0000000440)=r3}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x29, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 15m40.941336278s ago: executing program 33 (id=135): socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x8000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='1', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000000), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000100)={0x75, @local, 0x4e20, 0xfffffffc, 'lblcr\x00', 0x5, 0x0, 0x5}, 0x2c) 15m40.044832433s ago: executing program 34 (id=138): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) listen(r1, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 25.707231653s ago: executing program 6 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_emit_ethernet(0x25, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x11100, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) 20.515531948s ago: executing program 6 (id=1777): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13.438786742s ago: executing program 7 (id=1793): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x168}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1}) 11.395874592s ago: executing program 7 (id=1794): mkdir(&(0x7f0000000140)='./config\x00', 0xfb) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) read$watch_queue(r0, 0x0, 0x0) 11.174203511s ago: executing program 4 (id=1796): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) 10.983327863s ago: executing program 1 (id=1797): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10.254417658s ago: executing program 6 (id=1799): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0x7, 0x3b38, 0x7, 0x8000000, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.503842478s ago: executing program 6 (id=1802): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100000004"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) 8.120878298s ago: executing program 5 (id=1803): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8"], 0x33) 7.914636388s ago: executing program 4 (id=1804): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x15, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8881}, 0x10) 7.85936789s ago: executing program 1 (id=1805): creat(0x0, 0xc9a9c042ad77c5e5) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) lgetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=@random={'user.', '$\x00'}, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001500)={0x2020}, 0x2020) 7.849816884s ago: executing program 7 (id=1806): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="010028"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x7) 7.825067384s ago: executing program 6 (id=1807): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a000200"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.699212712s ago: executing program 5 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x800000, 0x0) 7.380906472s ago: executing program 6 (id=1809): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.447246255s ago: executing program 7 (id=1810): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 6.445883373s ago: executing program 5 (id=1811): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000b80)="d4fa0c511aad03aa5ed217677bc41c027d9c83", 0x13}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 6.302406384s ago: executing program 1 (id=1812): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0x7, 0x3b38, 0x7, 0x8000000, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.18656295s ago: executing program 5 (id=1813): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x6695f000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 5.962863164s ago: executing program 7 (id=1814): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) 5.941415111s ago: executing program 5 (id=1815): fsopen(0x0, 0x0) socket(0x2, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff8000}]}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300)="120000003200e7ef", 0x8, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20004045, &(0x7f0000000300)={0xa, 0x4e23, 0x39b, @remote, 0xbf36}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000180)=[{0x0}], 0x1) 3.776579645s ago: executing program 5 (id=1816): mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0xed) 3.439939978s ago: executing program 1 (id=1817): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x3}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) 3.19556433s ago: executing program 1 (id=1818): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) write$char_usb(r2, &(0x7f0000000000)="ef", 0x1) 1.775410581s ago: executing program 4 (id=1819): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x8, 0x1, 0xd}, 0x1c) recvmsg$unix(r1, 0x0, 0x20) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) close(0x4) 1.661818955s ago: executing program 7 (id=1820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) futex(&(0x7f0000000080)=0x1, 0x9, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[], 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x90012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.453633302s ago: executing program 4 (id=1821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000002010500000324401880d1875fe5cb3fd13ed1b7a25a"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.190947025s ago: executing program 4 (id=1822): write(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r3, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) 23.175285ms ago: executing program 4 (id=1823): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000b80)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c", 0x16}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 0s ago: executing program 1 (id=1824): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ptrace$setregs(0xd, r1, 0x0, 0x0) kernel console output (not intermixed with test programs): nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 562.371768][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.371856][ T5732] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 562.371875][ T5732] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 562.374377][ T5732] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 562.374409][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.374440][ T5732] usb 2-1: Product: syz [ 562.374456][ T5732] usb 2-1: Manufacturer: syz [ 562.374473][ T5732] usb 2-1: SerialNumber: syz [ 562.888819][ C1] usb 2-1: received EP1 urb->status = -2 [ 562.888890][ T5732] usb 2-1: unable to init card! (ret=-110) [ 562.889383][ T5732] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 563.156430][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.156794][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.585340][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 564.794350][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.794869][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.954384][ T5733] usb 2-1: USB disconnect, device number 18 [ 565.145697][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.181294][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.063723][ T90] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.063789][ T90] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.063820][ T90] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.063851][ T90] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.433695][ T9443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.510688][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 567.898179][ T13] bridge_slave_1: left allmulticast mode [ 567.898221][ T13] bridge_slave_1: left promiscuous mode [ 567.898568][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.804576][ T13] bridge_slave_0: left allmulticast mode [ 569.804615][ T13] bridge_slave_0: left promiscuous mode [ 569.804893][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.087466][ T13] bridge_slave_1: left allmulticast mode [ 570.087503][ T13] bridge_slave_1: left promiscuous mode [ 570.087743][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.258651][ T13] bridge_slave_0: left allmulticast mode [ 570.258707][ T13] bridge_slave_0: left promiscuous mode [ 570.258964][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.018154][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.124395][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.219230][ T13] bond0 (unregistering): Released all slaves [ 576.118529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.571833][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.105094][ T13] bond0 (unregistering): Released all slaves [ 577.646763][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 577.846693][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 577.890907][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.890946][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.890991][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 577.891017][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.986022][ T10] usb 2-1: config 0 descriptor?? [ 578.039120][ T10] hub 2-1:0.0: USB hub found [ 578.209793][ T10] hub 2-1:0.0: 1 port detected [ 578.379361][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 578.537374][ T13] hsr_slave_0: left promiscuous mode [ 578.576861][ T13] hsr_slave_1: left promiscuous mode [ 578.577890][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.621592][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.796810][ T13] hsr_slave_0: left promiscuous mode [ 578.812954][ T9542] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 578.833334][ T10] hub 2-1:0.0: activate --> -90 [ 578.846824][ T13] hsr_slave_1: left promiscuous mode [ 578.847944][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.888371][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.041816][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 579.042250][ T10] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 579.043815][ T5732] usb 2-1: USB disconnect, device number 19 [ 579.045438][ T90] usb 2-1: Failed to suspend device, error -19 [ 581.333789][ T13] team0 (unregistering): Port device team_slave_1 removed [ 581.347064][ T5597] ffs_data_put(): freeing [ 582.207381][ T13] team0 (unregistering): Port device team_slave_0 removed [ 583.947365][ T13] team0 (unregistering): Port device team_slave_1 removed [ 584.078394][ T13] team0 (unregistering): Port device team_slave_0 removed [ 584.635316][ T5607] Bluetooth: hci4: Malformed LE Event: 0x1d [ 588.066799][ T9619] warning: `syz.4.745' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 588.072219][ T5601] ffs_data_put(): freeing [ 592.885695][ T9131] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 593.276468][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.348705][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.352039][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.353493][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.355354][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.244161][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.281574][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.282949][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.296428][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.314427][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.204740][ T60] Bluetooth: hci0: command tx timeout [ 596.308377][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 596.364262][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 596.373403][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 596.378994][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 596.403153][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 596.416708][ T5607] Bluetooth: hci2: command tx timeout [ 596.876141][ T1143] bridge_slave_1: left allmulticast mode [ 596.876180][ T1143] bridge_slave_1: left promiscuous mode [ 596.876452][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.137487][ T1143] bridge_slave_0: left allmulticast mode [ 597.137526][ T1143] bridge_slave_0: left promiscuous mode [ 597.137817][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.136691][ T60] Bluetooth: hci0: command tx timeout [ 600.136737][ T60] Bluetooth: hci2: command tx timeout [ 600.136884][ T5607] Bluetooth: hci5: command tx timeout [ 600.221356][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.339159][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.413066][ T1143] bond0 (unregistering): Released all slaves [ 602.301146][ T5607] Bluetooth: hci2: command tx timeout [ 602.301183][ T5607] Bluetooth: hci5: command tx timeout [ 602.301208][ T5607] Bluetooth: hci0: command tx timeout [ 603.239694][ T1143] hsr_slave_0: left promiscuous mode [ 603.295059][ T1143] hsr_slave_1: left promiscuous mode [ 603.296121][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.358643][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.324235][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 604.336726][ T9169] Bluetooth: hci0: command tx timeout [ 604.336759][ T9169] Bluetooth: hci5: command tx timeout [ 604.336871][ T5607] Bluetooth: hci2: command tx timeout [ 604.419492][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 606.501660][ T5607] Bluetooth: hci5: command tx timeout [ 613.718167][ T9846] kvm_intel: kvm [9845]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf7ff [ 613.878955][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.880819][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.881070][ T9668] bridge_slave_0: entered allmulticast mode [ 613.891270][ T9668] bridge_slave_0: entered promiscuous mode [ 614.049837][ T9668] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.049984][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.050225][ T9668] bridge_slave_1: entered allmulticast mode [ 614.056272][ T9668] bridge_slave_1: entered promiscuous mode [ 615.578101][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.578304][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.578515][ T9688] bridge_slave_0: entered allmulticast mode [ 615.583035][ T9688] bridge_slave_0: entered promiscuous mode [ 615.787807][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.787932][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.788144][ T9688] bridge_slave_1: entered allmulticast mode [ 615.790268][ T9688] bridge_slave_1: entered promiscuous mode [ 615.867107][ T9668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.919887][ T9668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.006166][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.239762][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.297211][ T9668] team0: Port device team_slave_0 added [ 616.415037][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.415276][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.415497][ T9706] bridge_slave_0: entered allmulticast mode [ 616.448373][ T9706] bridge_slave_0: entered promiscuous mode [ 616.473499][ T9668] team0: Port device team_slave_1 added [ 616.530564][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.530719][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.530919][ T9706] bridge_slave_1: entered allmulticast mode [ 616.548480][ T9706] bridge_slave_1: entered promiscuous mode [ 618.472697][ T9688] team0: Port device team_slave_0 added [ 620.344233][ T9688] team0: Port device team_slave_1 added [ 620.397751][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.397769][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.397799][ T9668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.532174][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.558932][ T9668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.558950][ T9668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.558983][ T9668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.722746][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.748662][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.748680][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.748713][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.817878][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.817897][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.817929][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.986935][ T1143] bridge_slave_1: left allmulticast mode [ 620.986973][ T1143] bridge_slave_1: left promiscuous mode [ 620.987271][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.358140][ T1143] bridge_slave_0: left allmulticast mode [ 621.358197][ T1143] bridge_slave_0: left promiscuous mode [ 621.358452][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.587951][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.669259][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.721072][ T1143] bond0 (unregistering): Released all slaves [ 622.954301][ T9706] team0: Port device team_slave_0 added [ 623.192248][ T9706] team0: Port device team_slave_1 added [ 623.241823][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 623.452895][ T9668] hsr_slave_0: entered promiscuous mode [ 623.465828][ T9668] hsr_slave_1: entered promiscuous mode [ 623.471890][ T9668] debugfs: 'hsr0' already exists in 'hsr' [ 623.471918][ T9668] Cannot create hsr debugfs directory [ 623.560144][ T822] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 623.722326][ T9894] WARNING! power/level is deprecated; use power/control instead [ 623.813010][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.813030][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.813062][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.906080][ T9892] fido_id[9892]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 624.117990][ T1143] hsr_slave_0: left promiscuous mode [ 624.146807][ T1143] hsr_slave_1: left promiscuous mode [ 624.152332][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.234206][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.581055][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.581101][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.507632][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 626.567391][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 628.338211][ T9688] hsr_slave_0: entered promiscuous mode [ 628.341976][ T9688] hsr_slave_1: entered promiscuous mode [ 628.342697][ T9688] debugfs: 'hsr0' already exists in 'hsr' [ 628.342721][ T9688] Cannot create hsr debugfs directory [ 628.343479][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.343489][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.343512][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.109448][ T9706] hsr_slave_0: entered promiscuous mode [ 629.110603][ T9706] hsr_slave_1: entered promiscuous mode [ 629.111426][ T9706] debugfs: 'hsr0' already exists in 'hsr' [ 629.111446][ T9706] Cannot create hsr debugfs directory [ 629.196633][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 629.356740][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 629.359283][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.359319][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.359361][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.359389][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.425157][ T10] usb 2-1: config 0 descriptor?? [ 629.458494][ T10] hub 2-1:0.0: USB hub found [ 629.648469][ T10] hub 2-1:0.0: 1 port detected [ 630.268672][ T5791] hub 2-1:0.0: activate --> -90 [ 630.470342][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 630.475414][ T5731] usb 2-1: USB disconnect, device number 20 [ 630.510844][ T5791] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 631.648358][ T5791] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 631.970519][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 633.081813][ T9668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 633.714366][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.738096][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 634.438694][ T9668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 636.404417][ T5791] usb 5-1: device not accepting address 30, error -71 [ 636.436196][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.544232][ T9668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 636.600834][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.605401][ T9668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 636.658591][ T9668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.418687][ T9668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.524322][ T9668] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.561551][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.561767][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.616167][ T1429] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.616335][ T1429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.950098][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 642.427811][ T1143] bridge_slave_1: left allmulticast mode [ 642.427848][ T1143] bridge_slave_1: left promiscuous mode [ 642.428117][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.601278][ T1143] bridge_slave_0: left allmulticast mode [ 642.601307][ T1143] bridge_slave_0: left promiscuous mode [ 642.601523][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.647415][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.707467][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.758653][ T1143] bond0 (unregistering): Released all slaves [ 644.920429][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 646.906701][ T1143] hsr_slave_0: left promiscuous mode [ 646.968844][ T1143] hsr_slave_1: left promiscuous mode [ 646.969905][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.013609][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.823476][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 649.908945][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 650.340954][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 650.375023][ T9668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.308881][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.358968][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.385891][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.394639][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.395693][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.370515][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.420671][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.423714][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.452057][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.452926][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.894941][ T5607] Bluetooth: hci0: command tx timeout [ 658.399137][ T5607] Bluetooth: hci1: command tx timeout [ 658.663729][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 658.689720][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 658.713927][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 658.715373][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 658.716238][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 660.658510][ T60] Bluetooth: hci0: command tx timeout [ 660.658546][ T60] Bluetooth: hci1: command tx timeout [ 662.507043][ T5607] Bluetooth: hci6: command tx timeout [ 662.736760][ T60] Bluetooth: hci0: command tx timeout [ 662.742768][ T5607] Bluetooth: hci1: command tx timeout [ 665.874773][ T5607] Bluetooth: hci6: command tx timeout [ 665.874809][ T5607] Bluetooth: hci1: command tx timeout [ 665.874834][ T5607] Bluetooth: hci0: command tx timeout [ 667.936888][ T60] Bluetooth: hci6: command tx timeout [ 667.972438][T10222] Bluetooth: MGMT ver 1.23 [ 668.240494][ T822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 668.607982][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 668.631175][ T822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 668.634571][ T822] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 668.634624][ T822] usb 5-1: can't read configurations, error -71 [ 668.906670][ T5731] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 669.066673][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 669.070563][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 669.073152][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.073208][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 669.073234][ T5731] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 669.073260][ T5731] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.138633][ T5731] usb 2-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 669.138665][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.138689][ T5731] usb 2-1: Product: syz [ 669.138705][ T5731] usb 2-1: Manufacturer: syz [ 669.138722][ T5731] usb 2-1: SerialNumber: syz [ 669.430788][ T5731] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.430857][ T5731] usb 2-1: MIDIStreaming interface descriptor not found [ 671.110601][ T60] Bluetooth: hci6: command tx timeout [ 671.728257][ T5731] usb 2-1: USB disconnect, device number 21 [ 675.999158][T10294] process 'syz.1.848' launched './file0' with NULL argv: empty string added [ 678.166875][ T1143] bridge_slave_1: left allmulticast mode [ 678.166908][ T1143] bridge_slave_1: left promiscuous mode [ 678.167144][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.393718][ T1143] bridge_slave_0: left allmulticast mode [ 678.393759][ T1143] bridge_slave_0: left promiscuous mode [ 678.394026][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.018857][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.117549][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.205429][ T1143] bond0 (unregistering): Released all slaves [ 685.008654][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.009131][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.009390][T10111] bridge_slave_0: entered allmulticast mode [ 685.013974][T10111] bridge_slave_0: entered promiscuous mode [ 685.191628][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.191762][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.192006][T10111] bridge_slave_1: entered allmulticast mode [ 685.222331][T10111] bridge_slave_1: entered promiscuous mode [ 685.586742][ T1143] hsr_slave_0: left promiscuous mode [ 685.626876][ T1143] hsr_slave_1: left promiscuous mode [ 685.627960][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.373424][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.373506][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.475991][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.907963][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 689.107416][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 689.927930][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.119178][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.520637][T10143] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.520766][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.521015][T10143] bridge_slave_0: entered allmulticast mode [ 690.523871][T10143] bridge_slave_0: entered promiscuous mode [ 690.714241][T10111] team0: Port device team_slave_0 added [ 690.785359][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.785500][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.785705][T10143] bridge_slave_1: entered allmulticast mode [ 690.802360][T10143] bridge_slave_1: entered promiscuous mode [ 690.851428][T10111] team0: Port device team_slave_1 added [ 691.328514][ T5731] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 691.441278][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.441401][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.441636][T10123] bridge_slave_0: entered allmulticast mode [ 691.453245][T10123] bridge_slave_0: entered promiscuous mode [ 691.477677][ T5731] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 691.543237][T10143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.544655][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.544671][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.544701][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.545551][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.546046][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.549035][T10123] bridge_slave_1: entered allmulticast mode [ 691.602276][T10123] bridge_slave_1: entered promiscuous mode [ 691.721541][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.721559][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.721593][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.775946][T10143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.999547][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.131173][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.202412][T10143] team0: Port device team_slave_0 added [ 692.267768][T10143] team0: Port device team_slave_1 added [ 692.412163][T10111] hsr_slave_0: entered promiscuous mode [ 692.413890][T10111] hsr_slave_1: entered promiscuous mode [ 692.415046][T10111] debugfs: 'hsr0' already exists in 'hsr' [ 692.415073][T10111] Cannot create hsr debugfs directory [ 692.506135][T10123] team0: Port device team_slave_0 added [ 692.607718][T10123] team0: Port device team_slave_1 added [ 695.012691][T10143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.012710][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.012748][T10143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.115476][T10143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.115496][T10143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.115529][T10143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.253269][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.253289][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.253321][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.324105][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.324124][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.324157][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.483164][T10143] hsr_slave_0: entered promiscuous mode [ 695.484644][T10143] hsr_slave_1: entered promiscuous mode [ 695.485684][T10143] debugfs: 'hsr0' already exists in 'hsr' [ 695.485712][T10143] Cannot create hsr debugfs directory [ 695.631765][T10123] hsr_slave_0: entered promiscuous mode [ 695.635375][T10123] hsr_slave_1: entered promiscuous mode [ 695.651538][T10123] debugfs: 'hsr0' already exists in 'hsr' [ 695.651567][T10123] Cannot create hsr debugfs directory [ 695.956948][ T1143] bridge_slave_1: left allmulticast mode [ 695.956988][ T1143] bridge_slave_1: left promiscuous mode [ 695.957257][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.056686][ T5791] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 696.119966][ T1143] bridge_slave_0: left allmulticast mode [ 696.120005][ T1143] bridge_slave_0: left promiscuous mode [ 696.120282][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.226784][ T5791] usb 2-1: Using ep0 maxpacket: 32 [ 696.229464][ T5791] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 696.229494][ T5791] usb 2-1: config 0 has no interface number 0 [ 696.229545][ T5791] usb 2-1: config 0 interface 184 has no altsetting 0 [ 697.667368][ T5791] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 697.667401][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.667423][ T5791] usb 2-1: Product: syz [ 697.667438][ T5791] usb 2-1: Manufacturer: syz [ 697.667453][ T5791] usb 2-1: SerialNumber: syz [ 697.693133][ T5791] usb 2-1: config 0 descriptor?? [ 697.866840][ T1143] bridge_slave_1: left allmulticast mode [ 697.866879][ T1143] bridge_slave_1: left promiscuous mode [ 697.867152][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.011252][ T1143] bridge_slave_0: left allmulticast mode [ 698.011292][ T1143] bridge_slave_0: left promiscuous mode [ 698.011546][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.028195][ T5791] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 700.028231][ T5791] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 700.078634][ T5791] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 700.078716][ T5791] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 700.078739][ T5791] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 700.079149][ T5791] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 700.079450][ T5791] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 700.171685][ T5791] usb 2-1: USB disconnect, device number 22 [ 700.237440][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.357588][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.488096][ T1143] bond0 (unregistering): Released all slaves [ 701.187441][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.270549][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.349234][ T1143] bond0 (unregistering): Released all slaves [ 701.683531][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 705.998029][ T1143] hsr_slave_0: left promiscuous mode [ 706.026702][ T1143] hsr_slave_1: left promiscuous mode [ 706.027848][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.053203][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.236784][ T1143] hsr_slave_0: left promiscuous mode [ 706.276745][ T1143] hsr_slave_1: left promiscuous mode [ 706.277800][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.327591][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.090460][T10577] Mass Storage Function, version: 2009/09/11 [ 709.091338][T10577] LUN: removable file: (no medium) [ 709.399439][ T36] audit: type=1800 audit(1785926912.357:42): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.901" name="cdrom" dev="configfs" ino=31907 res=0 errno=0 [ 710.267441][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 710.327704][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 711.287717][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 711.327396][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 715.344832][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 715.419122][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 715.424863][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 715.445551][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 715.446342][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.415663][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 716.496774][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 716.525995][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 716.542837][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.545848][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.304627][ T60] Bluetooth: hci2: command tx timeout [ 718.670543][ T9169] Bluetooth: hci1: command tx timeout [ 718.671037][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 718.693261][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 718.717910][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 718.720660][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 718.722952][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 718.950999][ T1143] bridge_slave_1: left allmulticast mode [ 718.951038][ T1143] bridge_slave_1: left promiscuous mode [ 718.951305][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.398119][ T5607] Bluetooth: hci2: command tx timeout [ 721.398197][ T5607] Bluetooth: hci0: command tx timeout [ 721.398236][ T60] Bluetooth: hci1: command tx timeout [ 721.428282][ T1143] bridge_slave_0: left allmulticast mode [ 721.428309][ T1143] bridge_slave_0: left promiscuous mode [ 721.428541][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.676762][ T1143] bridge_slave_1: left allmulticast mode [ 721.676801][ T1143] bridge_slave_1: left promiscuous mode [ 721.677081][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.809600][ T1143] bridge_slave_0: left allmulticast mode [ 721.809639][ T1143] bridge_slave_0: left promiscuous mode [ 721.809898][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.456644][ T5607] Bluetooth: hci0: command tx timeout [ 723.456679][ T5607] Bluetooth: hci1: command tx timeout [ 723.456703][ T5607] Bluetooth: hci2: command tx timeout [ 723.640596][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.738980][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.824842][ T1143] bond0 (unregistering): Released all slaves [ 726.451996][ T60] Bluetooth: hci2: command tx timeout [ 726.452031][ T60] Bluetooth: hci1: command tx timeout [ 726.452069][ T60] Bluetooth: hci0: command tx timeout [ 726.538505][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.427537][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.496677][ T5607] Bluetooth: hci0: command tx timeout [ 728.514457][ T1143] bond0 (unregistering): Released all slaves [ 729.399166][ T1143] hsr_slave_0: left promiscuous mode [ 731.098383][ T1143] hsr_slave_1: left promiscuous mode [ 731.099590][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.145790][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.406784][ T1143] hsr_slave_0: left promiscuous mode [ 731.446806][ T1143] hsr_slave_1: left promiscuous mode [ 731.454990][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.515640][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.037333][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 735.117395][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 737.500388][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 737.617267][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 744.036776][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.038493][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.038653][T10608] bridge_slave_0: entered allmulticast mode [ 744.077339][T10608] bridge_slave_0: entered promiscuous mode [ 744.170549][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.170724][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.170922][T10608] bridge_slave_1: entered allmulticast mode [ 744.173836][T10608] bridge_slave_1: entered promiscuous mode [ 744.493558][T10608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.493833][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.493955][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.494126][T10621] bridge_slave_0: entered allmulticast mode [ 744.496301][T10621] bridge_slave_0: entered promiscuous mode [ 744.991980][T10608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.992372][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.992520][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.992719][T10621] bridge_slave_1: entered allmulticast mode [ 744.995554][T10621] bridge_slave_1: entered promiscuous mode [ 745.032306][T10637] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.034924][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.035456][T10637] bridge_slave_0: entered allmulticast mode [ 745.055434][T10637] bridge_slave_0: entered promiscuous mode [ 745.130063][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 745.134880][T10786] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 745.175159][T10637] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.175299][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.175472][T10637] bridge_slave_1: entered allmulticast mode [ 745.199171][T10637] bridge_slave_1: entered promiscuous mode [ 746.608524][T10786] bond1: entered promiscuous mode [ 746.665961][T10786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 747.052987][T10608] team0: Port device team_slave_0 added [ 747.072639][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.119000][T10608] team0: Port device team_slave_1 added [ 747.125297][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.152825][T10637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.248663][T10637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.323182][T10608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.323201][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.323234][T10608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.372501][T10621] team0: Port device team_slave_0 added [ 747.465792][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.465870][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.495952][T10608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.495971][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.496003][T10608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.544990][T10621] team0: Port device team_slave_1 added [ 747.554263][T10637] team0: Port device team_slave_0 added [ 747.625499][T10637] team0: Port device team_slave_1 added [ 749.652544][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.652560][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.652584][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.723039][T10637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.723058][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.723098][T10637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.850966][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.850986][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.851020][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.921051][T10637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.921071][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.921102][T10637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.989186][T10608] hsr_slave_0: entered promiscuous mode [ 749.991009][T10608] hsr_slave_1: entered promiscuous mode [ 749.991982][T10608] debugfs: 'hsr0' already exists in 'hsr' [ 749.992006][T10608] Cannot create hsr debugfs directory [ 751.708742][T10621] hsr_slave_0: entered promiscuous mode [ 751.711820][T10621] hsr_slave_1: entered promiscuous mode [ 751.715638][T10621] debugfs: 'hsr0' already exists in 'hsr' [ 751.715668][T10621] Cannot create hsr debugfs directory [ 751.816336][T10637] hsr_slave_0: entered promiscuous mode [ 751.817576][T10637] hsr_slave_1: entered promiscuous mode [ 751.830875][T10637] debugfs: 'hsr0' already exists in 'hsr' [ 751.830965][T10637] Cannot create hsr debugfs directory [ 752.891716][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'. [ 753.237849][ T1143] bridge_slave_1: left allmulticast mode [ 753.237883][ T1143] bridge_slave_1: left promiscuous mode [ 753.238122][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.350224][ T1143] bridge_slave_0: left allmulticast mode [ 753.350262][ T1143] bridge_slave_0: left promiscuous mode [ 753.350542][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.502379][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.598421][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.667242][ T1143] bond0 (unregistering): Released all slaves [ 756.917217][ T1143] hsr_slave_0: left promiscuous mode [ 756.956730][ T1143] hsr_slave_1: left promiscuous mode [ 756.959167][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.997555][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.036642][ T5731] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 758.418646][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.418718][ T5731] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.418743][ T5731] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 758.423272][ T5731] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 758.423305][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.423328][ T5731] usb 2-1: Product: syz [ 758.423344][ T5731] usb 2-1: Manufacturer: syz [ 758.423360][ T5731] usb 2-1: SerialNumber: syz [ 758.926970][ C1] usb 2-1: received EP1 urb->status = -2 [ 758.927037][ T5731] usb 2-1: unable to init card! (ret=-110) [ 758.927530][ T5731] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 759.128486][ T5731] usb 2-1: USB disconnect, device number 23 [ 759.147452][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 759.237700][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 759.518795][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 760.349507][T10608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 760.455634][T10608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 760.501804][T10608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 760.656142][T10608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 760.686604][T10608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 760.802981][T10608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.584419][T10608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 763.625319][T10608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.711202][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 764.889616][T10608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.138905][ T5607] Bluetooth: hci0: link tx timeout [ 766.139113][ T5607] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 768.180167][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 768.191540][T10608] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.272614][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.272779][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.376374][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.387345][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.423972][T10621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 771.483843][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.485295][T10621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 771.539661][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.541787][T10621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 771.610304][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.611743][T10621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 771.699398][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.043295][T10608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.547403][T10637] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.885598][T10637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.922512][T10637] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.966025][T10637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 773.996283][T10637] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 774.457537][T10637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 774.476157][T10637] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 774.572304][T10637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.445633][T10608] veth0_vlan: entered promiscuous mode [ 777.547033][T10608] veth1_vlan: entered promiscuous mode [ 777.832372][T10608] veth0_macvtap: entered promiscuous mode [ 777.855450][T10637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.896838][T10608] veth1_macvtap: entered promiscuous mode [ 777.966188][T10637] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.024278][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.024487][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.070361][T10608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.093539][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.093697][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.129217][T10608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.720307][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.776984][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.777044][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.777085][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.784311][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 778.859701][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 778.902665][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 778.930543][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 778.937398][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 781.307975][ T5607] Bluetooth: hci5: command tx timeout [ 781.645922][T11102] netlink: 'syz.4.997': attribute type 2 has an invalid length. [ 781.645967][T11102] netlink: 'syz.4.997': attribute type 2 has an invalid length. [ 782.055570][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.130825][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.136102][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.161725][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.169325][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 782.823542][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 782.860047][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 782.882840][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 782.885397][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 782.886252][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 783.377641][ T5607] Bluetooth: hci5: command tx timeout [ 784.502899][ T5607] Bluetooth: hci1: command tx timeout [ 785.057123][ T5607] Bluetooth: hci2: command tx timeout [ 785.457429][ T5607] Bluetooth: hci5: command tx timeout [ 786.576730][ T5607] Bluetooth: hci1: command tx timeout [ 787.137426][ T5607] Bluetooth: hci2: command tx timeout [ 789.524639][ T5607] Bluetooth: hci5: command tx timeout [ 789.532268][ T5607] Bluetooth: hci1: command tx timeout [ 789.532305][ T5607] Bluetooth: hci2: command tx timeout [ 791.197139][ T36] audit: type=1800 audit(1785926994.257:43): pid=11164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1005" name="cdrom" dev="configfs" ino=33670 res=0 errno=0 [ 791.536718][ T5607] Bluetooth: hci1: command tx timeout [ 791.536771][ T60] Bluetooth: hci2: command tx timeout [ 792.223362][T11084] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.223729][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.223993][T11084] bridge_slave_0: entered allmulticast mode [ 792.254078][T11084] bridge_slave_0: entered promiscuous mode [ 792.408274][ T13] bridge_slave_1: left allmulticast mode [ 792.408314][ T13] bridge_slave_1: left promiscuous mode [ 792.408596][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.528341][ T13] bridge_slave_0: left allmulticast mode [ 792.528380][ T13] bridge_slave_0: left promiscuous mode [ 792.528642][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.837415][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.917831][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.979524][ T13] bond0 (unregistering): Released all slaves [ 794.017049][T11084] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.017136][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.017331][T11084] bridge_slave_1: entered allmulticast mode [ 794.019325][T11084] bridge_slave_1: entered promiscuous mode [ 795.579862][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.797184][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.106718][ T13] hsr_slave_0: left promiscuous mode [ 796.149916][ T13] hsr_slave_1: left promiscuous mode [ 796.155202][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.187718][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.466357][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1014'. [ 796.733632][ T13] team0 (unregistering): Port device team_slave_1 removed [ 796.798021][ T13] team0 (unregistering): Port device team_slave_0 removed [ 798.319415][T11084] team0: Port device team_slave_0 added [ 798.322754][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.322996][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.325282][T11105] bridge_slave_0: entered allmulticast mode [ 798.368723][T11105] bridge_slave_0: entered promiscuous mode [ 798.384801][T11084] team0: Port device team_slave_1 added [ 798.385896][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.386024][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.386231][T11105] bridge_slave_1: entered allmulticast mode [ 798.435374][T11105] bridge_slave_1: entered promiscuous mode [ 798.893111][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.893130][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.893162][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.899105][T11105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.017270][T11105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.018250][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.018263][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.018286][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.539564][ T36] audit: type=1800 audit(1785927003.567:44): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1016" name="cdrom" dev="configfs" ino=34914 res=0 errno=0 [ 801.325389][T11105] team0: Port device team_slave_0 added [ 801.392763][T11105] team0: Port device team_slave_1 added [ 803.221344][T11084] hsr_slave_0: entered promiscuous mode [ 803.224345][T11084] hsr_slave_1: entered promiscuous mode [ 803.227539][T11084] debugfs: 'hsr0' already exists in 'hsr' [ 803.227625][T11084] Cannot create hsr debugfs directory [ 803.237056][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.237435][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.238056][T11111] bridge_slave_0: entered allmulticast mode [ 803.255157][T11111] bridge_slave_0: entered promiscuous mode [ 803.291447][T11105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.291465][T11105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.291496][T11105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.294810][T11105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.294827][T11105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.294859][T11105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.327145][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.327496][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.391000][T11111] bridge_slave_1: entered allmulticast mode [ 803.414608][T11111] bridge_slave_1: entered promiscuous mode [ 803.618825][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 803.818597][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.915610][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.070792][T11105] hsr_slave_0: entered promiscuous mode [ 804.074570][T11105] hsr_slave_1: entered promiscuous mode [ 804.079275][T11105] debugfs: 'hsr0' already exists in 'hsr' [ 804.079352][T11105] Cannot create hsr debugfs directory [ 806.181444][T11111] team0: Port device team_slave_0 added [ 806.252300][T11111] team0: Port device team_slave_1 added [ 810.033869][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.033943][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.151232][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.151252][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.151294][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.232411][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.232429][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.232463][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.870430][T11111] hsr_slave_0: entered promiscuous mode [ 811.873347][T11111] hsr_slave_1: entered promiscuous mode [ 811.874896][T11111] debugfs: 'hsr0' already exists in 'hsr' [ 811.874922][T11111] Cannot create hsr debugfs directory [ 814.894133][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 821.022276][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.393790][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 821.838761][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.021454][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.698006][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.944433][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 827.006937][ T13] bridge_slave_1: left allmulticast mode [ 827.006975][ T13] bridge_slave_1: left promiscuous mode [ 827.007249][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.358323][ T13] bridge_slave_0: left allmulticast mode [ 827.358382][ T13] bridge_slave_0: left promiscuous mode [ 827.358664][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.687843][ T13] bridge_slave_1: left allmulticast mode [ 827.687882][ T13] bridge_slave_1: left promiscuous mode [ 827.688262][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.858394][ T13] bridge_slave_0: left allmulticast mode [ 827.858429][ T13] bridge_slave_0: left promiscuous mode [ 827.858675][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.677631][ T36] audit: type=1800 audit(1785927032.617:45): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1046" name="cdrom" dev="configfs" ino=35270 res=0 errno=0 [ 830.047453][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.127426][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.149226][ T13] bond0 (unregistering): Released all slaves [ 830.777384][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.838644][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.878864][ T13] bond0 (unregistering): Released all slaves [ 834.566239][ T13] hsr_slave_0: left promiscuous mode [ 834.602255][ T13] hsr_slave_1: left promiscuous mode [ 834.603112][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.645570][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.849627][ T13] hsr_slave_0: left promiscuous mode [ 834.887165][ T13] hsr_slave_1: left promiscuous mode [ 834.888281][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.888308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.949244][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.949274][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.373434][ T13] veth1_macvtap: left promiscuous mode [ 835.373551][ T13] veth0_macvtap: left promiscuous mode [ 835.373831][ T13] veth1_vlan: left promiscuous mode [ 835.374022][ T13] veth0_vlan: left promiscuous mode [ 836.398914][ T13] team0 (unregistering): Port device team_slave_1 removed [ 836.448117][ T13] team0 (unregistering): Port device team_slave_0 removed [ 837.127286][ T13] team0 (unregistering): Port device team_slave_1 removed [ 837.188119][ T13] team0 (unregistering): Port device team_slave_0 removed [ 837.392498][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 837.433964][T11460] team0: Device gtp0 is of different type [ 840.286349][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.326015][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.331802][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 840.336019][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.340219][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.471066][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 841.525233][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 841.563026][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 841.601557][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 841.605052][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 842.576527][ T60] Bluetooth: hci0: command tx timeout [ 844.206528][ T60] Bluetooth: hci6: command tx timeout [ 844.598599][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 844.632899][ T5607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 844.653661][ T5607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 844.656201][ T5607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 844.658841][ T5607] Bluetooth: hci0: command tx timeout [ 844.730320][ T5607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 846.916439][ T60] Bluetooth: hci0: command tx timeout [ 846.916467][T11570] Bluetooth: hci6: command tx timeout [ 846.916513][ T60] Bluetooth: hci7: command tx timeout [ 849.011701][ T60] Bluetooth: hci6: command tx timeout [ 849.011737][ T60] Bluetooth: hci0: command tx timeout [ 849.011761][ T60] Bluetooth: hci7: command tx timeout [ 851.056900][ T60] Bluetooth: hci6: command tx timeout [ 851.056951][ T9169] Bluetooth: hci7: command tx timeout [ 853.399363][ T9169] Bluetooth: hci7: command tx timeout [ 855.064097][T11511] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.066658][T11511] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.066917][T11511] bridge_slave_0: entered allmulticast mode [ 855.073666][T11511] bridge_slave_0: entered promiscuous mode [ 855.539731][T11511] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.539865][T11511] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.540110][T11511] bridge_slave_1: entered allmulticast mode [ 855.543179][T11511] bridge_slave_1: entered promiscuous mode [ 855.817813][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.877247][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.048221][T11535] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.049384][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.049553][T11535] bridge_slave_0: entered allmulticast mode [ 856.059588][T11535] bridge_slave_0: entered promiscuous mode [ 856.200480][T11535] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.200611][T11535] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.200868][T11535] bridge_slave_1: entered allmulticast mode [ 856.203655][T11535] bridge_slave_1: entered promiscuous mode [ 856.258398][T11511] team0: Port device team_slave_0 added [ 856.332962][T11511] team0: Port device team_slave_1 added [ 856.720048][T11535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.997999][T11535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.001472][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.001485][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.001510][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.425510][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.425529][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.425561][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.700522][T11535] team0: Port device team_slave_0 added [ 859.380441][T11535] team0: Port device team_slave_1 added [ 859.689519][T11511] hsr_slave_0: entered promiscuous mode [ 859.691018][T11511] hsr_slave_1: entered promiscuous mode [ 859.692401][T11511] debugfs: 'hsr0' already exists in 'hsr' [ 859.692428][T11511] Cannot create hsr debugfs directory [ 859.694699][T11535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.694722][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.694744][T11535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.775367][T11535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.775386][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.775417][T11535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.346734][ T6185] bridge_slave_1: left allmulticast mode [ 861.346774][ T6185] bridge_slave_1: left promiscuous mode [ 861.347053][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.491121][ T6185] bridge_slave_0: left allmulticast mode [ 861.491158][ T6185] bridge_slave_0: left promiscuous mode [ 861.491445][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.117361][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.564117][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.653011][ T6185] bond0 (unregistering): Released all slaves [ 863.951677][T11564] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.951810][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.952072][T11564] bridge_slave_0: entered allmulticast mode [ 863.954908][T11564] bridge_slave_0: entered promiscuous mode [ 864.013621][T11564] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.013752][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.013952][T11564] bridge_slave_1: entered allmulticast mode [ 864.017854][T11564] bridge_slave_1: entered promiscuous mode [ 864.265649][T11564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.296255][T11535] hsr_slave_0: entered promiscuous mode [ 864.305066][T11535] hsr_slave_1: entered promiscuous mode [ 864.315729][T11535] debugfs: 'hsr0' already exists in 'hsr' [ 864.315759][T11535] Cannot create hsr debugfs directory [ 864.486815][ T6185] hsr_slave_0: left promiscuous mode [ 864.532450][ T6185] hsr_slave_1: left promiscuous mode [ 864.533504][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.557495][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.648774][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 866.727548][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 867.109408][T11564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.405015][T11564] team0: Port device team_slave_0 added [ 867.494313][T11564] team0: Port device team_slave_1 added [ 869.295275][T11564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.295294][T11564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.295325][T11564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.394180][T11564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.394199][T11564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.394231][T11564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.356908][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.356984][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.444437][T11564] hsr_slave_0: entered promiscuous mode [ 870.466982][T11564] hsr_slave_1: entered promiscuous mode [ 870.469688][T11564] debugfs: 'hsr0' already exists in 'hsr' [ 870.469713][T11564] Cannot create hsr debugfs directory [ 870.517145][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 878.538340][ T6185] bridge_slave_1: left allmulticast mode [ 878.538382][ T6185] bridge_slave_1: left promiscuous mode [ 878.538679][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.755349][ T6185] bridge_slave_0: left allmulticast mode [ 878.755389][ T6185] bridge_slave_0: left promiscuous mode [ 878.755720][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.062202][ T6185] bridge_slave_1: left allmulticast mode [ 879.062240][ T6185] bridge_slave_1: left promiscuous mode [ 879.062495][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.340845][ T6185] bridge_slave_0: left allmulticast mode [ 880.340872][ T6185] bridge_slave_0: left promiscuous mode [ 880.341082][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.200537][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.333188][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.409906][ T6185] bond0 (unregistering): Released all slaves [ 883.264835][ T6185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.410952][ T6185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.495989][ T6185] bond0 (unregistering): Released all slaves [ 884.628317][ T6185] hsr_slave_0: left promiscuous mode [ 884.666678][ T6185] hsr_slave_1: left promiscuous mode [ 884.668035][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.709168][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.906703][ T6185] hsr_slave_0: left promiscuous mode [ 884.946756][ T6185] hsr_slave_1: left promiscuous mode [ 884.947488][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.972827][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.217267][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 885.668118][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 885.727325][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 887.779371][ T6185] team0 (unregistering): Port device team_slave_1 removed [ 887.827440][ T6185] team0 (unregistering): Port device team_slave_0 removed [ 888.127112][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 888.137012][ T153] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.137147][ T153] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.137270][ T153] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.137368][ T153] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.258418][T11906] syz.1.1122 uses obsolete (PF_INET,SOCK_PACKET) [ 892.948512][T11511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 893.030035][T11511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.049202][T11511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 893.216085][T11511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.223664][T11511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 893.344961][T11511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 893.350426][T11511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 893.444658][T11511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 894.511361][T11535] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 894.514171][T11968] netlink: 'syz.4.1129': attribute type 29 has an invalid length. [ 894.581145][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.606009][T11535] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 894.642828][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.645574][T11535] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 894.697658][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.796449][T11535] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 894.831629][T11535] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.184072][T11564] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 895.222673][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 895.249103][T11564] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 895.305099][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 895.318515][T11564] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 895.356034][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.371542][T11511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.375862][T11564] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 895.414143][T11564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.545336][T11511] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.615354][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.615565][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.689960][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.690175][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.809553][T11535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.892479][T11535] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.252887][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.277937][ T6185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.513273][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.513410][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.988821][T11564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.239941][T11564] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.304772][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.305013][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.437699][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.437857][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.635807][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 901.683510][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 901.702738][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 901.724037][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 901.724997][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 902.108875][T11564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.760277][ T9169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.801582][ T9169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.805650][ T9169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.815738][ T9169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.817121][ T9169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.867488][ T60] Bluetooth: hci0: command tx timeout [ 905.921533][T11570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 906.074524][ T9169] Bluetooth: hci1: command tx timeout [ 906.093483][ T9169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 906.095820][T11570] Bluetooth: hci0: command tx timeout [ 906.119864][ T9169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 906.121093][ T9169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 906.177059][ T9169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.529851][T11570] Bluetooth: hci1: command tx timeout [ 908.529851][ T60] Bluetooth: hci0: command tx timeout [ 908.686911][T11570] Bluetooth: hci2: command tx timeout [ 909.277437][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.279126][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.279353][T12037] bridge_slave_0: entered allmulticast mode [ 909.285570][T12037] bridge_slave_0: entered promiscuous mode [ 909.399070][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.399189][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.399390][T12037] bridge_slave_1: entered allmulticast mode [ 909.402280][T12037] bridge_slave_1: entered promiscuous mode [ 909.626756][ T13] bridge_slave_1: left allmulticast mode [ 909.626793][ T13] bridge_slave_1: left promiscuous mode [ 909.627053][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.784179][ T13] bridge_slave_0: left allmulticast mode [ 909.784219][ T13] bridge_slave_0: left promiscuous mode [ 909.784570][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.577492][T11570] Bluetooth: hci0: command tx timeout [ 910.586583][T11570] Bluetooth: hci1: command tx timeout [ 910.736808][T11570] Bluetooth: hci2: command tx timeout [ 910.837660][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.898692][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.939135][ T13] bond0 (unregistering): Released all slaves [ 911.057757][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.144181][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.593373][T12037] team0: Port device team_slave_0 added [ 912.646194][T12037] team0: Port device team_slave_1 added [ 912.660655][T11570] Bluetooth: hci1: command tx timeout [ 912.816569][T11570] Bluetooth: hci2: command tx timeout [ 913.026723][ T13] hsr_slave_0: left promiscuous mode [ 913.046654][ T13] hsr_slave_1: left promiscuous mode [ 913.047732][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.070483][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.828285][ T13] team0 (unregistering): Port device team_slave_1 removed [ 913.878356][ T13] team0 (unregistering): Port device team_slave_0 removed [ 914.155179][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.155416][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.155625][T12053] bridge_slave_0: entered allmulticast mode [ 914.194283][T12053] bridge_slave_0: entered promiscuous mode [ 914.205126][T12037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.205140][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.205161][T12037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.254878][T12053] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.255020][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.255262][T12053] bridge_slave_1: entered allmulticast mode [ 914.287194][T12053] bridge_slave_1: entered promiscuous mode [ 914.289357][T12037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.289401][T12037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.289432][T12037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.634781][T11570] Bluetooth: hci2: command tx timeout [ 915.663260][T12053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.911101][T12053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.254643][T12037] hsr_slave_0: entered promiscuous mode [ 916.255656][T12037] hsr_slave_1: entered promiscuous mode [ 916.282558][T12037] debugfs: 'hsr0' already exists in 'hsr' [ 916.282586][T12037] Cannot create hsr debugfs directory [ 916.303491][T12053] team0: Port device team_slave_0 added [ 916.421908][T12053] team0: Port device team_slave_1 added [ 916.765034][T12053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.765051][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.765075][T12053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.839853][T12053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.839871][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.839920][T12053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.401555][T12053] hsr_slave_0: entered promiscuous mode [ 917.405557][T12053] hsr_slave_1: entered promiscuous mode [ 917.406287][T12053] debugfs: 'hsr0' already exists in 'hsr' [ 917.406306][T12053] Cannot create hsr debugfs directory [ 917.469700][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 919.180852][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 919.185673][T12083] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.189318][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.189937][T12083] bridge_slave_0: entered allmulticast mode [ 919.213385][T12083] bridge_slave_0: entered promiscuous mode [ 919.706850][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.707008][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.707198][T12083] bridge_slave_1: entered allmulticast mode [ 919.710399][T12083] bridge_slave_1: entered promiscuous mode [ 920.107527][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.143564][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.984484][T12083] team0: Port device team_slave_0 added [ 922.105845][T12083] team0: Port device team_slave_1 added [ 922.620106][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.620125][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.620157][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.626181][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.626196][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.626222][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.928156][T12083] hsr_slave_0: entered promiscuous mode [ 924.929743][T12083] hsr_slave_1: entered promiscuous mode [ 924.930855][T12083] debugfs: 'hsr0' already exists in 'hsr' [ 924.930880][T12083] Cannot create hsr debugfs directory [ 931.045804][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 932.000701][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.001610][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.647000][ T13] bridge_slave_1: left allmulticast mode [ 932.647037][ T13] bridge_slave_1: left promiscuous mode [ 932.647305][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.859698][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'. [ 933.859818][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 934.008855][ T13] bridge_slave_0: left allmulticast mode [ 934.008893][ T13] bridge_slave_0: left promiscuous mode [ 934.009166][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.416705][ T13] bridge_slave_1: left allmulticast mode [ 934.416743][ T13] bridge_slave_1: left promiscuous mode [ 934.416997][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.558360][ T13] bridge_slave_0: left allmulticast mode [ 934.558397][ T13] bridge_slave_0: left promiscuous mode [ 934.558658][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.120230][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 936.477473][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.537290][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.558864][ T13] bond0 (unregistering): Released all slaves [ 937.037262][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.077717][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.100436][ T13] bond0 (unregistering): Released all slaves [ 937.185604][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 937.931716][T12037] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 938.050536][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 938.075590][T12037] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 938.130327][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 938.339611][ T13] hsr_slave_0: left promiscuous mode [ 938.378259][ T13] hsr_slave_1: left promiscuous mode [ 938.379300][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.427533][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.967196][ T13] hsr_slave_0: left promiscuous mode [ 939.008367][ T13] hsr_slave_1: left promiscuous mode [ 939.009855][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.059141][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.037369][ T13] team0 (unregistering): Port device team_slave_1 removed [ 940.098401][ T13] team0 (unregistering): Port device team_slave_0 removed [ 940.588262][ T13] team0 (unregistering): Port device team_slave_1 removed [ 940.647134][ T13] team0 (unregistering): Port device team_slave_0 removed [ 940.857386][T12037] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 940.902751][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 941.012305][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 941.014899][T12037] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 941.065914][T12037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.651126][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1244'. [ 942.411223][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.483320][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.556838][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.557054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.581966][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.582186][ T4030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.049222][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'. [ 945.392174][T12575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1260'. [ 946.061176][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.305614][T12053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 946.378484][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.401154][T12053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 946.443709][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.536000][T12053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 946.601958][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.612150][T12053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 946.732209][T12053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.352640][T12083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 947.391269][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 947.400329][T12083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 947.459934][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 947.532589][T12083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 947.638325][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 947.655375][T12083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 947.712004][T12083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.950246][T12037] veth0_vlan: entered promiscuous mode [ 947.995915][ T36] audit: type=1800 audit(1785927151.067:46): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1268" name="idVendor" dev="configfs" ino=41540 res=0 errno=0 [ 948.093671][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1269'. [ 948.140822][T12037] veth1_vlan: entered promiscuous mode [ 948.317441][T12053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.514462][T12053] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.599773][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.601622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.636662][T12037] veth0_macvtap: entered promiscuous mode [ 948.679423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.679542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.729643][T12037] veth1_macvtap: entered promiscuous mode [ 948.923610][T12037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.041303][T12037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.079628][T12083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.432054][T12083] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.613238][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.613391][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.783267][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.783396][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.160565][ T4030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.160587][ T4030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.721927][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.721950][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.825414][ T153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.825737][ T153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.845421][ T3336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.171930][ T6185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.630881][T12053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.569776][T12729] jffs2: notice: (12729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 954.624651][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.925733][T12053] veth0_vlan: entered promiscuous mode [ 954.998623][T12053] veth1_vlan: entered promiscuous mode [ 955.150385][T12053] veth0_macvtap: entered promiscuous mode [ 955.175107][T12053] veth1_macvtap: entered promiscuous mode [ 955.218633][T12053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.237792][T12744] jffs2: notice: (12744) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 955.275430][T12053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.547375][ T162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.997866][T12083] veth0_vlan: entered promiscuous mode [ 956.030044][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.115751][ T3336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.116287][ T3336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.199192][T12083] veth1_vlan: entered promiscuous mode [ 956.336137][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.336162][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.756540][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.756563][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.821748][T12083] veth0_macvtap: entered promiscuous mode [ 956.911520][T12083] veth1_macvtap: entered promiscuous mode [ 956.956176][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.006993][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.567040][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.567596][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.568766][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.569125][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.875038][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.875060][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.640672][T12755] syz.6.1295 (12755) used greatest stack depth: 18336 bytes left [ 961.763376][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.763400][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.454030][T12810] jffs2: notice: (12810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 963.763457][T12813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 965.852603][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 965.891048][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 965.916103][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 965.927658][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 965.928439][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 966.968249][ T8022] bond0: (slave syz_tun): Releasing backup interface [ 967.113325][T12851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 967.618463][T12862] jffs2: notice: (12862) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 968.099702][T11570] Bluetooth: hci5: command tx timeout [ 968.126819][ T3336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.404536][ T36] audit: type=1800 audit(1785927171.477:47): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1344" name="ipv4_port" dev="configfs" ino=43419 res=0 errno=0 [ 968.652787][ T36] audit: type=1800 audit(1785927171.727:48): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1345" name="active" dev="configfs" ino=42465 res=0 errno=0 [ 969.131174][ T3336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.844381][ T3336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.178381][T11570] Bluetooth: hci5: command tx timeout [ 971.982553][ T3336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.256546][ T60] Bluetooth: hci5: command tx timeout [ 974.350892][ T60] Bluetooth: hci5: command tx timeout [ 975.187284][T12939] jffs2: notice: (12939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 976.640764][T12826] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.640851][T12826] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.641090][T12826] bridge_slave_0: entered allmulticast mode [ 976.655920][T12826] bridge_slave_0: entered promiscuous mode [ 976.933995][ T3336] bridge_slave_1: left allmulticast mode [ 976.934023][ T3336] bridge_slave_1: left promiscuous mode [ 976.934270][ T3336] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.176969][ T3336] bridge_slave_0: left allmulticast mode [ 977.177008][ T3336] bridge_slave_0: left promiscuous mode [ 977.254004][ T3336] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.665449][ T36] audit: type=1800 audit(1785927181.737:49): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1387" name="idVendor" dev="configfs" ino=42636 res=0 errno=0 [ 979.073936][T13013] jffs2: notice: (13013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 979.324493][ T3336] team0: Port device bond0 removed [ 979.358933][ T3336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.417233][ T3336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.457703][ T3336] bond0 (unregistering): Released all slaves [ 979.473909][ T3336] bond1 (unregistering): Released all slaves [ 979.527777][T12826] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.527872][T12826] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.528068][T12826] bridge_slave_1: entered allmulticast mode [ 979.530227][T12826] bridge_slave_1: entered promiscuous mode [ 979.595993][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 979.904527][T12826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.940293][T12826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.755822][ T36] audit: type=1800 audit(1785927183.817:50): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1400" name="idVendor" dev="configfs" ino=42709 res=0 errno=0 [ 981.071206][T13037] jffs2: notice: (13037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 981.116407][T12826] team0: Port device team_slave_0 added [ 981.345531][T12826] team0: Port device team_slave_1 added [ 981.411439][T13049] jffs2: notice: (13049) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 984.012564][T12826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.012584][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.012617][T12826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.041717][T12826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.041816][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.041900][T12826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.211713][T12826] hsr_slave_0: entered promiscuous mode [ 984.213166][T12826] hsr_slave_1: entered promiscuous mode [ 984.214120][T12826] debugfs: 'hsr0' already exists in 'hsr' [ 984.214145][T12826] Cannot create hsr debugfs directory [ 984.393901][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 984.393930][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 984.564967][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 984.952772][T13085] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1415'. [ 986.594377][T13112] jffs2: notice: (13112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 987.454439][T13136] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1430'. [ 987.616114][ T36] audit: type=1800 audit(1785927190.687:51): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1432" name="cdrom" dev="configfs" ino=42847 res=0 errno=0 [ 987.818733][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1434'. [ 987.818761][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1434'. [ 990.123673][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 990.316876][ T3336] hsr_slave_0: left promiscuous mode [ 990.350463][ T3336] hsr_slave_1: left promiscuous mode [ 990.351494][ T3336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.387459][ T3336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.536568][ T36] audit: type=1800 audit(1785927193.607:52): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1445" name="cdrom" dev="configfs" ino=42889 res=0 errno=0 [ 990.702620][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1446'. [ 990.702648][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1446'. [ 991.239469][ T3336] team0 (unregistering): Port device team_slave_1 removed [ 991.376204][ T3336] team0 (unregistering): Port device team_slave_0 removed [ 991.647485][T13182] trusted_key: encrypted_key: insufficient parameters specified [ 992.679515][ T36] audit: type=1804 audit(1785927195.737:53): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1449" name="bus" dev="ramfs" ino=42902 res=1 errno=0 [ 992.681228][ T36] audit: type=1804 audit(1785927195.757:54): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.1449" name="bus" dev="ramfs" ino=42902 res=1 errno=0 [ 992.752134][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1443'. [ 993.053335][T13192] jffs2: notice: (13192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 993.191960][ T36] audit: type=1800 audit(1785927196.267:55): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1455" name="cdrom" dev="configfs" ino=44260 res=0 errno=0 [ 993.222403][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.222478][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.372788][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 993.372807][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 993.957575][T13216] jffs2: notice: (13216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 994.102044][ T36] audit: type=1800 audit(1785927197.167:56): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1465" name="cdrom" dev="configfs" ino=42971 res=0 errno=0 [ 994.276502][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1467'. [ 994.276526][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1467'. [ 995.974408][T13261] jffs2: notice: (13261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 999.466245][T13304] jffs2: notice: (13304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 999.944713][T13317] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1000.952827][T13338] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1001.633514][T12826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1001.680775][T12826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1001.685078][T12826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1001.742185][T12826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1001.743786][T12826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1001.879149][T12826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1001.886134][T12826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1002.145671][T12826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.988833][T12826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.036086][T12826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.156044][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1522'. [ 1003.216093][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.226995][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.250384][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.250541][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.399797][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1535'. [ 1005.399820][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1535'. [ 1006.471676][T12826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.862528][T12826] veth0_vlan: entered promiscuous mode [ 1008.127505][T13473] jffs2: notice: (13473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1008.748042][T12826] veth1_vlan: entered promiscuous mode [ 1008.987323][T13481] jffs2: notice: (13481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1009.155482][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1545'. [ 1009.155500][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 1009.192232][T12826] veth0_macvtap: entered promiscuous mode [ 1009.254004][T12826] veth1_macvtap: entered promiscuous mode [ 1009.399111][T12826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.445441][T12826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.566542][T12809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.569447][T12809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.662402][T13496] jffs2: notice: (13496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1010.033610][ T3336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.033661][ T3336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.718809][ T6185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.718831][ T6185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.185509][T12809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.185533][T12809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.314991][T13512] jffs2: notice: (13512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1012.278985][T13531] jffs2: notice: (13531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1012.542031][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1566'. [ 1013.484856][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 1013.778543][T11570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1013.813879][T11570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1013.842289][T11570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1013.854824][T11570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1013.872390][T11570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1014.815541][ T36] audit: type=1800 audit(1785927217.887:57): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1591" name="idVendor" dev="configfs" ino=45051 res=0 errno=0 [ 1015.172001][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1592'. [ 1016.100524][ T60] Bluetooth: hci4: command tx timeout [ 1016.349598][ T36] audit: type=1800 audit(1785927219.427:58): pid=13626 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1603" name="idVendor" dev="configfs" ino=46062 res=0 errno=0 [ 1016.467220][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1605'. [ 1017.482638][T13650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1616'. [ 1018.043242][T13658] jffs2: notice: (13658) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1018.181757][ T60] Bluetooth: hci4: command tx timeout [ 1019.004990][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1626'. [ 1021.237769][ T60] Bluetooth: hci4: command tx timeout [ 1023.316417][ T60] Bluetooth: hci4: command tx timeout [ 1025.316204][T13710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 1025.675900][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.676081][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.696042][T13570] bridge_slave_0: entered allmulticast mode [ 1025.719372][T13570] bridge_slave_0: entered promiscuous mode [ 1027.088113][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1027.591894][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.595378][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.595613][T13570] bridge_slave_1: entered allmulticast mode [ 1027.626178][T13570] bridge_slave_1: entered promiscuous mode [ 1028.058577][T13734] jffs2: notice: (13734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1028.561235][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.600095][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.954323][T13748] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1650'. [ 1029.207107][T13570] team0: Port device team_slave_0 added [ 1029.319934][T13570] team0: Port device team_slave_1 added [ 1029.518813][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.518827][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.518849][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.576749][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.576767][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.576799][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.707531][ T13] bridge_slave_1: left allmulticast mode [ 1029.707566][ T13] bridge_slave_1: left promiscuous mode [ 1029.707855][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.892154][ T13] bridge_slave_0: left allmulticast mode [ 1029.892191][ T13] bridge_slave_0: left promiscuous mode [ 1029.892460][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.978293][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1033.085211][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1033.117428][ T13] bond0 (unregistering): Released all slaves [ 1033.419050][T13773] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1660'. [ 1033.472367][T13570] hsr_slave_0: entered promiscuous mode [ 1033.473670][T13570] hsr_slave_1: entered promiscuous mode [ 1033.474586][T13570] debugfs: 'hsr0' already exists in 'hsr' [ 1033.474608][T13570] Cannot create hsr debugfs directory [ 1034.246602][T13780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1662'. [ 1036.851411][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1037.280582][T13822] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1673'. [ 1037.305531][T13823] jffs2: notice: (13823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1038.946510][ T13] hsr_slave_0: left promiscuous mode [ 1038.989359][ T13] hsr_slave_1: left promiscuous mode [ 1038.990311][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.070552][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.841234][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1042.945756][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1043.088011][T13856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1684'. [ 1046.105953][T13894] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1694'. [ 1047.196547][T13906] jffs2: notice: (13906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1048.041746][T11570] Bluetooth: hci2: Malformed LE Event: 0x1d [ 1049.331506][T13939] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1704'. [ 1053.386467][T13570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1053.485031][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.508958][T13570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1053.604631][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.642178][T13570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1053.784399][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.799112][T13570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1054.019700][ T5732] hid-generic 0005:16C0:5505.0007: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1054.068665][T13570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1054.643918][T13570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.660154][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.660229][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.784378][T13570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.840578][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.840715][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.974901][T13993] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1718'. [ 1055.019896][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.020041][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.002218][T14049] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1728'. [ 1063.409859][ T5610] hid-generic 0005:16C0:5505.0008: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1064.480416][T13570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.669914][T14072] fido_id[14072]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1065.471022][T13570] veth0_vlan: entered promiscuous mode [ 1065.534244][T13570] veth1_vlan: entered promiscuous mode [ 1065.691443][T13570] veth0_macvtap: entered promiscuous mode [ 1065.720363][T13570] veth1_macvtap: entered promiscuous mode [ 1065.801307][T13570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.823616][T13570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.116528][ T5733] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1066.269470][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.269503][ T5733] usb 7-1: config 0 has no interfaces? [ 1066.269537][ T5733] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1066.269563][ T5733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.322044][ T5733] usb 7-1: config 0 descriptor?? [ 1066.560235][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.560930][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.587958][ T5733] usb 7-1: USB disconnect, device number 2 [ 1069.229638][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.258780][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.260216][ T90] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.495159][ T1429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.665161][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.665178][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.985390][T13802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.991650][T13802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.431324][ T5733] hid-generic 0005:16C0:5505.0009: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 1071.782513][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.721073][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 1073.722998][T12677] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1073.966395][T12677] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1073.966428][T12677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.966451][T12677] usb 2-1: Product: syz [ 1073.966467][T12677] usb 2-1: Manufacturer: syz [ 1073.966483][T12677] usb 2-1: SerialNumber: syz [ 1074.029834][T12677] usb 2-1: config 0 descriptor?? [ 1074.054411][T12677] ch341 2-1:0.0: ch341-uart converter detected [ 1074.502291][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1754'. [ 1076.322597][T12677] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 1076.523196][ T9425] usb 2-1: USB disconnect, device number 24 [ 1076.667111][ T9425] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1076.670358][ T9425] ch341 2-1:0.0: device disconnected [ 1080.114366][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1766'. [ 1085.409242][T14214] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1088.098793][T14246] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1091.899037][T11570] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1091.899597][T11570] Bluetooth: hci5: Injecting HCI hardware error event [ 1091.908647][ T60] Bluetooth: hci5: hardware error 0x00 [ 1094.499417][ T60] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1094.750455][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 1094.750516][T14275] veth0_to_bridge: entered promiscuous mode [ 1096.375933][ T36] audit: type=1800 audit(1785927299.437:59): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1794" name="file" dev="configfs" ino=49147 res=0 errno=0 [ 1098.088132][ T60] Bluetooth: hci1: ACL packet for unknown connection handle 4040 [ 1098.193506][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1807'. [ 1098.193560][T14307] veth0_to_bridge: entered promiscuous mode [ 1098.500523][T14312] No source specified [ 1102.801989][T14343] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1804'. [ 1104.561771][T14350] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1821'. [ 1106.091895][T11996] ------------[ cut here ]------------ [ 1106.091911][T11996] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1106.091938][T11996] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:1/11996 [ 1106.092089][T11996] Modules linked in: [ 1106.092118][T11996] CPU: 1 UID: 0 PID: 11996 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1106.092149][T11996] Tainted: [L]=SOFTLOCKUP [ 1106.092158][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.092173][T11996] Workqueue: events drm_fb_helper_damage_work [ 1106.092272][T11996] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1106.092302][T11996] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 d5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1106.092323][T11996] RSP: 0018:ffffc90002f377e0 EFLAGS: 00010246 [ 1106.092342][T11996] RAX: 1ffff11004ca3e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1106.092358][T11996] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1106.092375][T11996] RBP: ffffc90002f378c8 R08: 0000000000000000 R09: 0000000000000000 [ 1106.092390][T11996] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1106.092407][T11996] R13: ffff88802651f000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1106.092424][T11996] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1106.092443][T11996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1106.092468][T11996] CR2: 00007fb829682a24 CR3: 00000000657ae000 CR4: 00000000003526f0 [ 1106.092488][T11996] Call Trace: [ 1106.092497][T11996] [ 1106.092512][T11996] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1106.092541][T11996] ? rt_spin_unlock+0x157/0x200 [ 1106.092567][T11996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1106.092663][T11996] ? rt_spin_unlock+0x163/0x200 [ 1106.092692][T11996] ? drm_vblank_get+0x147/0x280 [ 1106.092722][T11996] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1106.092772][T11996] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1106.092818][T11996] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1106.092869][T11996] ? process_scheduled_works+0xa20/0x14e0 [ 1106.092980][T11996] ? rcu_is_watching+0x15/0xb0 [ 1106.093054][T11996] ? process_scheduled_works+0xa20/0x14e0 [ 1106.093083][T11996] process_scheduled_works+0xa8e/0x14e0 [ 1106.093145][T11996] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.093182][T11996] ? assign_work+0x3cf/0x5d0 [ 1106.093216][T11996] worker_thread+0xa47/0xfb0 [ 1106.093289][T11996] ? __kthread_parkme+0x71/0x1f0 [ 1106.093358][T11996] kthread+0x388/0x470 [ 1106.093392][T11996] ? __pfx_worker_thread+0x10/0x10 [ 1106.093458][T11996] ? __pfx_kthread+0x10/0x10 [ 1106.093496][T11996] ret_from_fork+0x514/0xb70 [ 1106.093562][T11996] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.093599][T11996] ? __switch_to+0xc89/0x1420 [ 1106.093658][T11996] ? __pfx_kthread+0x10/0x10 [ 1106.093694][T11996] ret_from_fork_asm+0x1a/0x30 [ 1106.093762][T11996] [ 1106.093781][T11996] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1106.093801][T11996] CPU: 1 UID: 0 PID: 11996 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1106.093832][T11996] Tainted: [L]=SOFTLOCKUP [ 1106.093841][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.093855][T11996] Workqueue: events drm_fb_helper_damage_work [ 1106.093885][T11996] Call Trace: [ 1106.093894][T11996] [ 1106.093904][T11996] vpanic+0x56c/0xa60 [ 1106.093928][T11996] ? __pfx__printk+0x10/0x10 [ 1106.093956][T11996] ? __pfx_vpanic+0x10/0x10 [ 1106.093977][T11996] ? is_bpf_text_address+0x292/0x2b0 [ 1106.094053][T11996] ? is_bpf_text_address+0x26/0x2b0 [ 1106.094092][T11996] panic+0xc5/0xd0 [ 1106.094113][T11996] ? __pfx_panic+0x10/0x10 [ 1106.094148][T11996] ? ret_from_fork_asm+0x1a/0x30 [ 1106.094177][T11996] __warn+0x315/0x4c0 [ 1106.094198][T11996] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1106.094233][T11996] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1106.094263][T11996] __report_bug+0x276/0x570 [ 1106.094301][T11996] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1106.094334][T11996] ? __pfx___report_bug+0x10/0x10 [ 1106.094377][T11996] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1106.094411][T11996] ? lockdep_hardirqs_on+0x7a/0x110 [ 1106.094442][T11996] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1106.094486][T11996] report_bug_entry+0x19a/0x290 [ 1106.094519][T11996] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 1106.094548][T11996] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 1106.094577][T11996] handle_bug+0xce/0x200 [ 1106.094613][T11996] exc_invalid_op+0x1a/0x50 [ 1106.094650][T11996] asm_exc_invalid_op+0x1a/0x20 [ 1106.094673][T11996] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1106.094703][T11996] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 d5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1106.094723][T11996] RSP: 0018:ffffc90002f377e0 EFLAGS: 00010246 [ 1106.094742][T11996] RAX: 1ffff11004ca3e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1106.094758][T11996] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1106.094776][T11996] RBP: ffffc90002f378c8 R08: 0000000000000000 R09: 0000000000000000 [ 1106.094791][T11996] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1106.094808][T11996] R13: ffff88802651f000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1106.094850][T11996] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1106.094882][T11996] ? rt_spin_unlock+0x157/0x200 [ 1106.094907][T11996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1106.094946][T11996] ? rt_spin_unlock+0x163/0x200 [ 1106.094976][T11996] ? drm_vblank_get+0x147/0x280 [ 1106.095006][T11996] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1106.095035][T11996] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1106.095075][T11996] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1106.095130][T11996] ? process_scheduled_works+0xa20/0x14e0 [ 1106.095166][T11996] ? rcu_is_watching+0x15/0xb0 [ 1106.095198][T11996] ? process_scheduled_works+0xa20/0x14e0 [ 1106.095226][T11996] process_scheduled_works+0xa8e/0x14e0 [ 1106.095287][T11996] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.095324][T11996] ? assign_work+0x3cf/0x5d0 [ 1106.095359][T11996] worker_thread+0xa47/0xfb0 [ 1106.095405][T11996] ? __kthread_parkme+0x71/0x1f0 [ 1106.095445][T11996] kthread+0x388/0x470 [ 1106.095488][T11996] ? __pfx_worker_thread+0x10/0x10 [ 1106.095516][T11996] ? __pfx_kthread+0x10/0x10 [ 1106.095554][T11996] ret_from_fork+0x514/0xb70 [ 1106.095594][T11996] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.095630][T11996] ? __switch_to+0xc89/0x1420 [ 1106.095665][T11996] ? __pfx_kthread+0x10/0x10 [ 1106.095703][T11996] ret_from_fork_asm+0x1a/0x30 [ 1106.095746][T11996] [ 1106.096358][T11996] Kernel Offset: disabled