last executing test programs: 1m54.749929595s ago: executing program 1 (id=153): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1m52.648482795s ago: executing program 1 (id=156): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/4, 0x4) 1m52.008360551s ago: executing program 3 (id=160): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m51.101190203s ago: executing program 1 (id=161): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r0, 0x0, 0x0, &(0x7f0000000400)=[0x3], 0x0, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @empty=0xe0000000}}, {{0x2, 0x4e25, @private=0xa010102}}}, 0x108) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) open(&(0x7f0000000180)='./dev\x00', 0x101000, 0x16d) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m50.964563836s ago: executing program 3 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fallocate(0xffffffffffffffff, 0x71, 0x80000001, 0xcfc9) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000140)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x40, @loopback, 0x2392}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) 1m48.73725165s ago: executing program 3 (id=164): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000002c0)={0x1000000, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8000f, 0xfffffbff) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1m48.436456008s ago: executing program 1 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18f883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) umount2(0x0, 0xa) 1m48.157787404s ago: executing program 1 (id=169): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0xd209f6d83486bb56) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) read(r0, &(0x7f00000000c0)=""/4, 0x4) 1m47.639122407s ago: executing program 2 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.533231379s ago: executing program 1 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="0100000000001c28887363ed5cf608000300", @ANYRES32=r1], 0x1c}}, 0x800) 1m45.070670979s ago: executing program 32 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="0100000000001c28887363ed5cf608000300", @ANYRES32=r1], 0x1c}}, 0x800) 1m45.02162661s ago: executing program 2 (id=176): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601893517a81dc2b9be00020000000900020073797a310000000005000100070000002c000780180001801400024020"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m44.984829051s ago: executing program 3 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18f883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) umount2(0x0, 0xa) 1m44.740632067s ago: executing program 3 (id=178): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xa, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m43.096290097s ago: executing program 2 (id=179): mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x27) 1m43.009348148s ago: executing program 3 (id=180): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m42.485975861s ago: executing program 33 (id=180): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m39.037315614s ago: executing program 2 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18f883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) umount2(0x0, 0xa) 1m38.897897708s ago: executing program 2 (id=186): mkdir(&(0x7f0000000600)='./file0\x00', 0x102) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) syz_emit_vhci(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$pid(0x1, r0, 0x2000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setpriority(0x1, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m38.447770889s ago: executing program 2 (id=187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x4004, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1m37.925886912s ago: executing program 34 (id=187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x4004, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 13.715599848s ago: executing program 5 (id=438): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = userfaultfd(0x80001) mremap(&(0x7f0000003000/0x14000)=nil, 0x14000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 12.438186599s ago: executing program 5 (id=439): syz_open_dev$usbmon(&(0x7f0000000040), 0x22a7, 0x20001) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 12.273510574s ago: executing program 4 (id=440): syz_usb_connect$uac2(0x3, 0xf4, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010000002082057d004000010203010902e2000301090009080b0101010820010904000000010120000924010300091400010b2407060200020000010009040100000102200009040101010102200009240201040f1506210b24020105030405e653781124020268080400f1bae1ff293bf324621024010406030100000080210000000609240201ae00400903090501090004e000ad082501033108060009040200000102"], 0x0) 11.677465238s ago: executing program 6 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/dlm/cluster/comms/1/addr\x00', 0x2a841, 0x110) syz_open_dev$tty1(0xc, 0x4, 0x1) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385e, 0x0, 0x2, 0x115a}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x567, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x18}}}, &(0x7f0000000500)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xf000, 0x2, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffe1, 0x200, 0x20000002, 0x3a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x1, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x8, 0x103, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) write(r0, &(0x7f0000000240)="020000007f00000100"/128, 0x80) 10.375154609s ago: executing program 0 (id=443): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x24004844) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000034c0)=[{&(0x7f00000004c0)="9745010000002024010000ac0a3324491fbb00000098894633120b55", 0x1c}, {&(0x7f0000000500)="e07ecb0f5d6d7afc", 0x8}], 0x2}, 0x24004804) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000540)=0x1) close_range(r5, r6, 0x0) 9.993216739s ago: executing program 6 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000500)={[{'addr=127.0.0.1'}, {'timeo=1'}, {'retrans=1'}, {'sec=krb5'}]}) 9.473205361s ago: executing program 6 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="5203"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 9.471000261s ago: executing program 5 (id=446): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1400, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) 9.451400362s ago: executing program 4 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x20048e4) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) 9.210829677s ago: executing program 5 (id=448): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = userfaultfd(0x80001) mremap(&(0x7f0000003000/0x14000)=nil, 0x14000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 8.339106989s ago: executing program 6 (id=449): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xa, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.141302528s ago: executing program 4 (id=450): mkdir(&(0x7f0000000600)='./file0\x00', 0x102) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) syz_emit_vhci(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$pid(0x1, r0, 0x2000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setpriority(0x1, 0x0, 0x6) 7.120632638s ago: executing program 5 (id=451): r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fallocate(0xffffffffffffffff, 0x71, 0x80000001, 0xcfc9) r5 = openat$rtc(0xffffffffffffff9c, 0x0, 0xa800, 0x0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000140)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x40, @loopback, 0x2392}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) 6.385910176s ago: executing program 0 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/dlm/cluster/comms/1/addr\x00', 0x2a841, 0x110) syz_open_dev$tty1(0xc, 0x4, 0x1) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x385e, 0x0, 0x2, 0x115a}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0x567, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x18}}}, &(0x7f0000000500)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0xf000, 0x2, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffe1, 0x200, 0x20000002, 0x3a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x1, 0x10005009, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x8, 0x103, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x13, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) write(r0, &(0x7f0000000240)="020000007f00000100"/128, 0x80) 6.057010564s ago: executing program 6 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1"], 0x310) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000500)=""/85, 0x500, 0x4000000, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000000), 0x0, 0x0, 0x20000000}, 0x50) socket$inet6(0xa, 0xa, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x44054) 3.597416883s ago: executing program 6 (id=454): syz_open_dev$usbmon(&(0x7f0000000040), 0x22a7, 0x20001) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 3.547542704s ago: executing program 0 (id=455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) 3.289216701s ago: executing program 4 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_clone(0x111, 0x0, 0x8, 0x0, 0x0, 0x0) 3.221964222s ago: executing program 0 (id=457): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) 2.967908269s ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x20048e4) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init() r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x408}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) 2.753123323s ago: executing program 4 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() syz_pidfd_open(r2, 0x0) capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000180)={0x22, 0x5, 0x1, 0x3, 0xae, 0x5}) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) sendfile(r3, r3, 0x0, 0xb) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000e05000100070000000900020073797a3200000000140007800500150007000000080012400000000512000300686173683a6e65742c706f727400000005180500020000000500040000000000"], 0x60}}, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x39a1, &(0x7f0000000000)={0x0, 0xb9d8, 0x20000}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() 1.828024826s ago: executing program 0 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 1.728011678s ago: executing program 4 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xfffffdd4) 0s ago: executing program 5 (id=462): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xa, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. syzkaller login: [ 84.556994][ T5762] cgroup: Unknown subsys name 'net' [ 84.697844][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.413721][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.267907][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.279991][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.288240][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.307279][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.320108][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.330273][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.337842][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.346388][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.354330][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.362442][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.370053][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.377307][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.389002][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.427126][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.435141][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.447548][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.456265][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.465330][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.474012][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.482161][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.491477][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.513280][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.521702][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.529259][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.991137][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 89.054568][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 89.121258][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 89.197787][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 89.242967][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.251037][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.258501][ T5774] bridge_slave_0: entered allmulticast mode [ 89.265979][ T5774] bridge_slave_0: entered promiscuous mode [ 89.285526][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.292864][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.300173][ T5774] bridge_slave_1: entered allmulticast mode [ 89.307584][ T5774] bridge_slave_1: entered promiscuous mode [ 89.404375][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.428498][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.485072][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.492547][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.500395][ T5775] bridge_slave_0: entered allmulticast mode [ 89.507852][ T5775] bridge_slave_0: entered promiscuous mode [ 89.526284][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.533675][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.541841][ T5775] bridge_slave_1: entered allmulticast mode [ 89.550404][ T5775] bridge_slave_1: entered promiscuous mode [ 89.559266][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.566723][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.576568][ T5783] bridge_slave_0: entered allmulticast mode [ 89.583906][ T5783] bridge_slave_0: entered promiscuous mode [ 89.592872][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.600106][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.607574][ T5783] bridge_slave_1: entered allmulticast mode [ 89.615356][ T5783] bridge_slave_1: entered promiscuous mode [ 89.635505][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.642915][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.650335][ T5777] bridge_slave_0: entered allmulticast mode [ 89.657800][ T5777] bridge_slave_0: entered promiscuous mode [ 89.692786][ T5774] team0: Port device team_slave_0 added [ 89.699926][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.707207][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.715217][ T5777] bridge_slave_1: entered allmulticast mode [ 89.722875][ T5777] bridge_slave_1: entered promiscuous mode [ 89.765071][ T5774] team0: Port device team_slave_1 added [ 89.784923][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.803167][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.818672][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.836574][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.861781][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.912473][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.976119][ T5775] team0: Port device team_slave_0 added [ 90.001958][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.008965][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.035046][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.060226][ T5775] team0: Port device team_slave_1 added [ 90.068943][ T5777] team0: Port device team_slave_0 added [ 90.078639][ T5783] team0: Port device team_slave_0 added [ 90.088432][ T5783] team0: Port device team_slave_1 added [ 90.097918][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.105411][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.132382][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.158766][ T5777] team0: Port device team_slave_1 added [ 90.226034][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.233566][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.260290][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.284718][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.291872][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.317843][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.331210][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.338203][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.364777][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.378893][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.386463][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.413883][ T5788] Bluetooth: hci1: command tx timeout [ 90.414836][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.432781][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.439883][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.466063][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.477798][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.487150][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.514066][ T5788] Bluetooth: hci0: command tx timeout [ 90.524509][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.569349][ T5784] Bluetooth: hci2: command tx timeout [ 90.575485][ T5788] Bluetooth: hci3: command tx timeout [ 90.636609][ T5774] hsr_slave_0: entered promiscuous mode [ 90.644621][ T5774] hsr_slave_1: entered promiscuous mode [ 90.681350][ T5777] hsr_slave_0: entered promiscuous mode [ 90.688089][ T5777] hsr_slave_1: entered promiscuous mode [ 90.695672][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.704317][ T5777] Cannot create hsr debugfs directory [ 90.717661][ T5775] hsr_slave_0: entered promiscuous mode [ 90.724637][ T5775] hsr_slave_1: entered promiscuous mode [ 90.732415][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.740285][ T5775] Cannot create hsr debugfs directory [ 90.785777][ T5783] hsr_slave_0: entered promiscuous mode [ 90.792786][ T5783] hsr_slave_1: entered promiscuous mode [ 90.799367][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.807193][ T5783] Cannot create hsr debugfs directory [ 91.271524][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.288659][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.301418][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.315046][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.426383][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.440676][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.453002][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.466436][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.541180][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.552935][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.570377][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.610730][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.677762][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.706535][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.716895][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.727568][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.741014][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.823259][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.868875][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.876449][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.892756][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.900005][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.006072][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.042830][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.060125][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.086918][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.094160][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.122213][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.129721][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.162785][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.178490][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.193231][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.208784][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.216079][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.236192][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.243428][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.283617][ T9] cfg80211: failed to load regulatory.db [ 92.348330][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.463795][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.471181][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.487911][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.491845][ T5788] Bluetooth: hci1: command tx timeout [ 92.495448][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.570068][ T5788] Bluetooth: hci0: command tx timeout [ 92.649385][ T5788] Bluetooth: hci3: command tx timeout [ 92.654876][ T5788] Bluetooth: hci2: command tx timeout [ 92.683417][ T5774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.721242][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.862203][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.991990][ T5777] veth0_vlan: entered promiscuous mode [ 93.012307][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.031311][ T5777] veth1_vlan: entered promiscuous mode [ 93.155558][ T5777] veth0_macvtap: entered promiscuous mode [ 93.183459][ T5783] veth0_vlan: entered promiscuous mode [ 93.204746][ T5777] veth1_macvtap: entered promiscuous mode [ 93.230674][ T5783] veth1_vlan: entered promiscuous mode [ 93.247281][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.266519][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.303271][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.332472][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.345170][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354937][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.365932][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.383254][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.442802][ T5783] veth0_macvtap: entered promiscuous mode [ 93.511635][ T5783] veth1_macvtap: entered promiscuous mode [ 93.552731][ T5775] veth0_vlan: entered promiscuous mode [ 93.587745][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.612920][ T5775] veth1_vlan: entered promiscuous mode [ 93.620032][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.717649][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.727045][ T5775] veth0_macvtap: entered promiscuous mode [ 93.734209][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.750897][ T5774] veth0_vlan: entered promiscuous mode [ 93.762272][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.774549][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.787813][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.798027][ T5775] veth1_macvtap: entered promiscuous mode [ 93.813906][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.825134][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.840082][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.861078][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.871131][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.880386][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.889440][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.920336][ T5774] veth1_vlan: entered promiscuous mode [ 93.941365][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.952932][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.963824][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.974728][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.988780][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.068372][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.119104][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.128997][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.142439][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.158103][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.221258][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.230821][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.240587][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.250333][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.274711][ T5774] veth0_macvtap: entered promiscuous mode [ 94.294873][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.339446][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354186][ T5774] veth1_macvtap: entered promiscuous mode [ 94.447340][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.465231][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.476270][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.487199][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.498729][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.514176][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.526636][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.542077][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.569957][ T5788] Bluetooth: hci1: command tx timeout [ 94.575540][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.616357][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.648353][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.651963][ T5788] Bluetooth: hci0: command tx timeout [ 94.673680][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.686015][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.698952][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.713858][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.726574][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.735072][ T5788] Bluetooth: hci2: command tx timeout [ 94.740987][ T5788] Bluetooth: hci3: command tx timeout [ 94.776656][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.785777][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.796217][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.806581][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841266][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.853040][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.869848][ T5842] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.941229][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.964034][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.062275][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 95.077673][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.106613][ T5842] usb 2-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.116587][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.155965][ T5842] usb 2-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.185835][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.231062][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.236026][ T5842] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 95.254658][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.260320][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.304564][ T5842] usb 2-1: config 0 descriptor?? [ 95.439309][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.869110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.999090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.439084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.469097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.719565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.099096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.129140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.149084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.299420][ T5788] Bluetooth: hci0: command tx timeout [ 98.299442][ T5784] Bluetooth: hci3: command tx timeout [ 98.304994][ T5788] Bluetooth: hci2: command tx timeout [ 98.335183][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.452840][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 98.489641][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 98.492196][ T9] usb 4-1: can't read configurations, error -71 [ 98.496326][ T5842] usbhid: probe of 2-1:0.0 failed with error -71 [ 98.541130][ T5842] usb 2-1: USB disconnect, device number 2 [ 101.724557][ T5885] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5886] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5885] [ 103.353601][ T5888] Mass Storage Function, version: 2009/09/11 [ 103.380486][ T5888] LUN: removable file: (no medium) [ 103.422816][ T28] audit: type=1800 audit(1787260650.356:2): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17" name="cdrom" dev="configfs" ino=8221 res=0 errno=0 [ 103.500207][ T28] audit: type=1800 audit(1787260650.386:3): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17" name="file" dev="configfs" ino=8222 res=0 errno=0 [ 103.559410][ T28] audit: type=1800 audit(1787260650.466:4): pid=5888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17" name="UDC" dev="configfs" ino=8224 res=0 errno=0 [ 105.652243][ T5897] gadgetfs: bound to dummy_udc driver [ 107.959527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.638152][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 113.186007][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 113.991893][ T5958] syzkaller0: entered promiscuous mode [ 113.997774][ T5958] syzkaller0: entered allmulticast mode [ 114.048429][ T5958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.999496][ T5972] netlink: 'syz.2.47': attribute type 72 has an invalid length. [ 117.969584][ T5985] syzkaller0: entered promiscuous mode [ 118.063766][ T5985] syzkaller0: entered allmulticast mode [ 118.096007][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.541796][ T6001] netlink: 'syz.0.56': attribute type 72 has an invalid length. [ 121.168313][ T6018] syzkaller0: entered promiscuous mode [ 121.195672][ T6018] syzkaller0: entered allmulticast mode [ 121.254186][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.320272][ T6028] netlink: 'syz.3.65': attribute type 72 has an invalid length. [ 124.656165][ T6053] syzkaller0: entered promiscuous mode [ 124.691350][ T6053] syzkaller0: entered allmulticast mode [ 127.145893][ T6082] syzkaller0: entered promiscuous mode [ 127.190267][ T6082] syzkaller0: entered allmulticast mode [ 127.211210][ T5784] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 127.219399][ T5784] Bluetooth: hci1: command 0x206a tx timeout [ 130.208028][ T28] audit: type=1800 audit(1787260677.136:5): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.89" name="cdrom" dev="configfs" ino=8636 res=0 errno=0 [ 130.259234][ T28] audit: type=1800 audit(1787260677.136:6): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.89" name="file" dev="configfs" ino=8637 res=0 errno=0 [ 130.300583][ T28] audit: type=1800 audit(1787260677.176:7): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.89" name="UDC" dev="configfs" ino=8638 res=0 errno=0 [ 131.686589][ T6111] syzkaller0: entered promiscuous mode [ 131.701594][ T6111] syzkaller0: entered allmulticast mode [ 132.919246][ T5779] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.162092][ T5779] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.190656][ T5779] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 133.226690][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.234003][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.311970][ T5779] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 133.359175][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.367272][ T5779] usb 3-1: Product: syz [ 133.420680][ T5779] usb 3-1: Manufacturer: syz [ 133.436170][ T5779] usb 3-1: SerialNumber: syz [ 134.738409][ T5784] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 134.744957][ T5788] Bluetooth: hci0: command 0x206a tx timeout [ 135.115863][ T5779] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.301808][ T5779] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 135.339539][ T5779] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 135.797086][ T5779] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 136.029292][ T5779] usb 3-1: USB disconnect, device number 2 [ 137.295717][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.109141][ T790] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.579296][ T790] usb 3-1: Using ep0 maxpacket: 8 [ 138.595654][ T790] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.619604][ T790] usb 3-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.645614][ T790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.669157][ T790] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 138.720549][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.760349][ T790] usb 3-1: config 0 descriptor?? [ 139.194140][ T790] kye 0003:0458:0138.0001: unknown main item tag 0x3 [ 139.249947][ T790] kye 0003:0458:0138.0001: unknown main item tag 0x1 [ 139.269504][ T790] kye 0003:0458:0138.0001: unknown main item tag 0xd [ 139.279180][ T790] kye 0003:0458:0138.0001: ignoring exceeding usage max [ 139.287682][ T790] kye 0003:0458:0138.0001: ignoring exceeding usage max [ 139.332154][ T790] kye 0003:0458:0138.0001: usage index exceeded [ 139.354063][ T790] kye 0003:0458:0138.0001: item 0 0 2 2 parsing failed [ 139.380170][ T790] kye 0003:0458:0138.0001: parse failed [ 139.410869][ T790] kye: probe of 0003:0458:0138.0001 failed with error -22 [ 139.455887][ T790] usb 3-1: USB disconnect, device number 3 [ 140.970030][ T5784] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 140.976494][ T5784] Bluetooth: hci3: command 0x206a tx timeout [ 143.799571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 149.539497][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.378136][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.390645][ T5818] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.413402][ T5818] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 151.436473][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.449241][ T5818] usb 3-1: Product: syz [ 151.453573][ T5818] usb 3-1: Manufacturer: syz [ 151.470323][ T5818] usb 3-1: SerialNumber: syz [ 151.495364][ T5818] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 151.523129][ T5818] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 151.523129][ T5818] Please send a copy of this message to and [ 151.664396][ T6235] syzkaller0: entered promiscuous mode [ 151.679730][ T6235] syzkaller0: entered allmulticast mode [ 151.849539][ T5818] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 151.919907][ T5818] usb 3-1: USB disconnect, device number 4 [ 152.282838][ T28] audit: type=1326 audit(1787260699.206:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.359318][ T28] audit: type=1326 audit(1787260699.216:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.411939][ T28] audit: type=1326 audit(1787260699.216:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.464936][ T28] audit: type=1326 audit(1787260699.216:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.497244][ T28] audit: type=1326 audit(1787260699.236:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.528326][ T28] audit: type=1326 audit(1787260699.236:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.578806][ T28] audit: type=1326 audit(1787260699.236:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.611578][ T28] audit: type=1326 audit(1787260699.246:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.641724][ T28] audit: type=1326 audit(1787260699.246:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 152.693929][ T28] audit: type=1326 audit(1787260699.246:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.136" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f79e0d9 code=0x7ffc0000 [ 155.142720][ T6261] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 158.267416][ T6295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.159'. [ 161.681558][ T6311] syzkaller0: entered promiscuous mode [ 161.687117][ T6311] syzkaller0: entered allmulticast mode [ 164.539337][ T2944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.759263][ T5856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 165.015620][ T2944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.063963][ T5856] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 165.079437][ T5856] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.111577][ T5856] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 165.139211][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.147299][ T5856] usb 1-1: Product: syz [ 165.169111][ T5856] usb 1-1: Manufacturer: syz [ 165.173808][ T5856] usb 1-1: SerialNumber: syz [ 165.197404][ T5856] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 165.234546][ T2944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.353673][ T2944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.440050][ T5126] bcm5974 1-1:1.0: could not read from device [ 165.487218][ T5126] bcm5974 1-1:1.0: could not read from device [ 165.507216][ T5856] usb 1-1: USB disconnect, device number 2 [ 165.540172][ T5126] bcm5974 1-1:1.0: could not read from device [ 165.678506][ T5870] udevd[5870]: Error opening device "/dev/input/event4": No such file or directory [ 165.722305][ T5870] udevd[5870]: Unable to EVIOCGABS device "/dev/input/event4" [ 165.742654][ T5870] udevd[5870]: Unable to EVIOCGABS device "/dev/input/event4" [ 165.761938][ T5870] udevd[5870]: Unable to EVIOCGABS device "/dev/input/event4" [ 165.794279][ T5870] udevd[5870]: Unable to EVIOCGABS device "/dev/input/event4" [ 167.242112][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.252625][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.264584][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.278106][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.300718][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.308719][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.549197][ T5788] Bluetooth: hci2: command tx timeout [ 170.845658][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 171.052912][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.088324][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.097291][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.106022][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.114321][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.150411][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.608547][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.619972][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.627275][ T6345] bridge_slave_0: entered allmulticast mode [ 171.635485][ T6345] bridge_slave_0: entered promiscuous mode [ 171.671144][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.678433][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.686454][ T6345] bridge_slave_1: entered allmulticast mode [ 171.695233][ T6345] bridge_slave_1: entered promiscuous mode [ 171.760315][ T2944] hsr_slave_0: left promiscuous mode [ 171.800844][ T2944] hsr_slave_1: left promiscuous mode [ 171.811308][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.818849][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.892453][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.919232][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.949839][ T2944] bridge_slave_1: left allmulticast mode [ 171.955575][ T2944] bridge_slave_1: left promiscuous mode [ 171.989726][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.029214][ T2944] bridge_slave_0: left allmulticast mode [ 172.049056][ T2944] bridge_slave_0: left promiscuous mode [ 172.054883][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.200614][ T2944] veth1_macvtap: left promiscuous mode [ 172.206762][ T2944] veth0_macvtap: left promiscuous mode [ 172.247084][ T2944] veth1_vlan: left promiscuous mode [ 172.256001][ T2944] veth0_vlan: left promiscuous mode [ 172.381988][ T6385] loop8: detected capacity change from 0 to 6 [ 172.419278][ T6385] Dev loop8: unable to read RDB block 6 [ 172.425427][ T6385] loop8: unable to read partition table [ 172.449434][ T6385] loop8: partition table beyond EOD, truncated [ 172.455724][ T6385] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 172.569353][ T5788] Bluetooth: hci2: command tx timeout [ 172.782099][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.806568][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.814861][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.825848][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.837050][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.851256][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.200387][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 173.209403][ T5788] Bluetooth: hci3: command tx timeout [ 173.246659][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 173.289930][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.336810][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.666784][ T2944] bond0 (unregistering): Released all slaves [ 173.769301][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.818024][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.958002][ T6345] team0: Port device team_slave_0 added [ 174.007702][ T6345] team0: Port device team_slave_1 added [ 174.454276][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.505465][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.658901][ T5788] Bluetooth: hci2: command tx timeout [ 174.716381][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.890089][ T5788] Bluetooth: hci0: command tx timeout [ 175.101857][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.139078][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.225882][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.289121][ T5788] Bluetooth: hci3: command tx timeout [ 175.342707][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 175.342723][ T28] audit: type=1326 audit(1787260722.276:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 175.378262][ T28] audit: type=1326 audit(1787260722.276:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 175.407180][ T28] audit: type=1326 audit(1787260722.306:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 175.458138][ T28] audit: type=1326 audit(1787260722.306:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 175.508316][ T28] audit: type=1326 audit(1787260722.306:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 175.562653][ T6345] hsr_slave_0: entered promiscuous mode [ 175.579605][ T6345] hsr_slave_1: entered promiscuous mode [ 175.586974][ T6345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.609436][ T6345] Cannot create hsr debugfs directory [ 175.633000][ T6372] chnl_net:caif_netlink_parms(): no params data found [ 175.846846][ T28] audit: type=1326 audit(1787260722.776:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 175.889876][ T28] audit: type=1326 audit(1787260722.816:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.0.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4f99e0d9 code=0x7ffc0000 [ 176.034969][ T2944] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.326601][ T2944] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.377189][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.389259][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.389997][ T6433] fuse: Invalid rootmode [ 176.397394][ T6372] bridge_slave_0: entered allmulticast mode [ 176.424062][ T6372] bridge_slave_0: entered promiscuous mode [ 176.447993][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.466262][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.490568][ T6372] bridge_slave_1: entered allmulticast mode [ 176.498139][ T6372] bridge_slave_1: entered promiscuous mode [ 176.555281][ T6438] program syz.0.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.573782][ T2944] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.622906][ T6388] chnl_net:caif_netlink_parms(): no params data found [ 176.731170][ T5788] Bluetooth: hci2: command tx timeout [ 176.740480][ T2944] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.836520][ T6372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.902587][ T6372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.969200][ T5788] Bluetooth: hci0: command tx timeout [ 177.031945][ T6372] team0: Port device team_slave_0 added [ 177.052011][ T6372] team0: Port device team_slave_1 added [ 177.079590][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 177.152620][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.171684][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.178979][ T6388] bridge_slave_0: entered allmulticast mode [ 177.187431][ T6388] bridge_slave_0: entered promiscuous mode [ 177.196947][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.204397][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.212836][ T6388] bridge_slave_1: entered allmulticast mode [ 177.220700][ T6388] bridge_slave_1: entered promiscuous mode [ 177.269209][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 177.277045][ T5820] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 177.286536][ T5820] usb 1-1: config 0 has no interface number 0 [ 177.295909][ T5820] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 177.305667][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.318221][ T5820] usb 1-1: Product: syz [ 177.325433][ T5820] usb 1-1: Manufacturer: syz [ 177.334807][ T5820] usb 1-1: SerialNumber: syz [ 177.340737][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.348342][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.376500][ T5788] Bluetooth: hci3: command tx timeout [ 177.383937][ T5820] usb 1-1: config 0 descriptor?? [ 177.390966][ T6372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.397051][ T5820] visor 1-1:0.255: Sony Clie 3.5 converter detected [ 177.443423][ T2944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.491679][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.522774][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.535813][ T6372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.544609][ T6372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.571192][ T6372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.603202][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.626976][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.657110][ T2944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.713925][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.726189][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.762118][ T6388] team0: Port device team_slave_0 added [ 177.782118][ T2944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.805107][ T5820] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 177.831770][ T6372] hsr_slave_0: entered promiscuous mode [ 177.839533][ T6372] hsr_slave_1: entered promiscuous mode [ 177.846256][ T6372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.856470][ T6372] Cannot create hsr debugfs directory [ 177.869675][ T6388] team0: Port device team_slave_1 added [ 177.911490][ T2944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.028754][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.049176][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.085443][ T5779] usb 1-1: USB disconnect, device number 3 [ 178.104936][ T5779] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 178.119186][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.132854][ T5779] visor 1-1:0.255: device disconnected [ 178.198113][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.205297][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.241636][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.351477][ T6388] hsr_slave_0: entered promiscuous mode [ 178.358588][ T6388] hsr_slave_1: entered promiscuous mode [ 178.366845][ T6388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.375073][ T6388] Cannot create hsr debugfs directory [ 178.963363][ T6467] Bluetooth: MGMT ver 1.22 [ 179.049409][ T5784] Bluetooth: hci0: command tx timeout [ 179.261666][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.449201][ T5784] Bluetooth: hci3: command tx timeout [ 180.225203][ T6372] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.399248][ T6372] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 180.421298][ T6372] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.446250][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.663956][ T6372] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 180.945959][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.953238][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.990772][ T6388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 181.030046][ T6388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.050127][ T5788] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 181.136025][ T5788] Bluetooth: hci0: command 0x0419 tx timeout [ 181.157931][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.165199][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.194265][ T6388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.214122][ T6388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.293062][ T6497] syz.0.206 uses obsolete (PF_INET,SOCK_PACKET) [ 182.964650][ T5788] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 183.077411][ T2944] hsr_slave_0: left promiscuous mode [ 183.110882][ T2944] hsr_slave_1: left promiscuous mode [ 183.171402][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.209437][ T5788] Bluetooth: hci0: command 0x0419 tx timeout [ 183.220061][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.261655][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.299295][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.328845][ T2944] bridge_slave_1: left allmulticast mode [ 183.350711][ T2944] bridge_slave_1: left promiscuous mode [ 183.356583][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.440157][ T2944] bridge_slave_0: left allmulticast mode [ 183.445895][ T2944] bridge_slave_0: left promiscuous mode [ 183.505188][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.608201][ T2944] hsr_slave_0: left promiscuous mode [ 183.629485][ T2944] hsr_slave_1: left promiscuous mode [ 183.661222][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.686828][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.700069][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.722868][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.760122][ T2944] bridge_slave_1: left allmulticast mode [ 183.789382][ T2944] bridge_slave_1: left promiscuous mode [ 183.798038][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.808906][ T2944] bridge_slave_0: left allmulticast mode [ 183.815167][ T2944] bridge_slave_0: left promiscuous mode [ 183.822425][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.878865][ T2944] veth1_macvtap: left promiscuous mode [ 183.889138][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.892507][ T2944] veth0_macvtap: left promiscuous mode [ 183.902949][ T2944] veth1_vlan: left promiscuous mode [ 183.908353][ T2944] veth0_vlan: left promiscuous mode [ 183.924469][ T2944] veth1_macvtap: left promiscuous mode [ 183.935239][ T2944] veth0_macvtap: left promiscuous mode [ 183.942624][ T2944] veth1_vlan: left promiscuous mode [ 183.955810][ T2944] veth0_vlan: left promiscuous mode [ 184.099247][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.119215][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.139120][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 184.157969][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 184.196630][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 184.212240][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.242176][ T23] cxacru 1-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 184.259462][ T23] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 184.267279][ T23] cxacru: probe of 1-1:1.0 failed with error -22 [ 184.463297][ T5779] usb 1-1: USB disconnect, device number 4 [ 184.922670][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 184.972928][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 185.037902][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.104287][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.676459][ T5788] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 185.728439][ T2944] bond0 (unregistering): Released all slaves [ 186.609474][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 186.658086][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 186.714278][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.765860][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.148127][ T2944] bond0 (unregistering): Released all slaves [ 187.296760][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.354453][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.436129][ T6372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.472905][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.566247][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.573516][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.603472][ T6372] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.652200][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.660153][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.697336][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.704623][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.802049][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.809359][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.951302][ T6388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.111561][ T6570] Zero length message leads to an empty skb [ 189.150366][ T6570] process 'syz.0.222' launched '/dev/fd/-1' with NULL argv: empty string added [ 189.232435][ T6345] veth0_vlan: entered promiscuous mode [ 189.282839][ T6345] veth1_vlan: entered promiscuous mode [ 189.381116][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.418410][ T6345] veth0_macvtap: entered promiscuous mode [ 189.448091][ T6345] veth1_macvtap: entered promiscuous mode [ 189.470069][ T23] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 189.526148][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.557712][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.603228][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.620585][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.637056][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.657007][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.685003][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.694748][ T5788] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 189.704639][ T5788] Bluetooth: hci1: Injecting HCI hardware error event [ 189.712523][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.714746][ T5788] Bluetooth: hci1: hardware error 0x00 [ 189.733253][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 189.747188][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.755978][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 189.756033][ T23] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 58, changing to 4 [ 189.766188][ T23] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 189.789193][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.797342][ T23] usb 1-1: Product: syz [ 189.801727][ T23] usb 1-1: Manufacturer: syz [ 189.806401][ T23] usb 1-1: SerialNumber: syz [ 189.812592][ T6345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.829703][ T6345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.916177][ T6372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.069167][ T23] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 190.192512][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.222867][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.333509][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.350107][ T23] usb 1-1: USB disconnect, device number 5 [ 190.365177][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.620383][ T6388] veth0_vlan: entered promiscuous mode [ 190.648456][ T6388] veth1_vlan: entered promiscuous mode [ 190.656789][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 190.807843][ T6388] veth0_macvtap: entered promiscuous mode [ 190.865839][ T6388] veth1_macvtap: entered promiscuous mode [ 190.942616][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.963824][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.994190][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.027839][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.051557][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.089579][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.108629][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.138850][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.150625][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.172318][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.262473][ T6388] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.283898][ T6388] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.339133][ T6388] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.348155][ T6388] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.547253][ T6372] veth0_vlan: entered promiscuous mode [ 191.600538][ T6372] veth1_vlan: entered promiscuous mode [ 191.639253][ T5856] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 191.684084][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.705501][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.765375][ T6372] veth0_macvtap: entered promiscuous mode [ 191.792171][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.801140][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.807605][ T6372] veth1_macvtap: entered promiscuous mode [ 191.842990][ T5856] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.854158][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.887331][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.908598][ T5856] usb 5-1: config 0 has no interface number 0 [ 191.915645][ T5856] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.929983][ T5788] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 191.937071][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.947897][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.961788][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.973241][ T5856] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.983464][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.994135][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 192.003166][ T5856] usb 5-1: Product: syz [ 192.007491][ T5856] usb 5-1: SerialNumber: syz [ 192.020000][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.051697][ T5856] usb 5-1: config 0 descriptor?? [ 192.058870][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.065436][ T5856] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 192.125941][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.176145][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.202749][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.215919][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.226876][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.248316][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.270895][ T6372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.279923][ T9] usb 5-1: USB disconnect, device number 2 [ 192.303445][ T6372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.100256][ T6372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.125113][ T6372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.149063][ T6372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.835193][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.174412][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.562919][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.599703][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.408073][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.449656][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.821559][ T790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 198.021969][ T790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.049285][ T790] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.075148][ T790] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 198.087930][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.115502][ T790] usb 1-1: Product: syz [ 198.126267][ T790] usb 1-1: Manufacturer: syz [ 198.140623][ T790] usb 1-1: SerialNumber: syz [ 198.168171][ T790] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 198.205758][ T790] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 198.205758][ T790] Please send a copy of this message to and [ 198.412273][ T790] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 198.456271][ T790] usb 1-1: USB disconnect, device number 6 [ 198.889952][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.235'. [ 198.993859][ T6678] ip6gre0: entered promiscuous mode [ 199.003511][ T6678] ip6gre0: entered allmulticast mode [ 199.083092][ T28] audit: type=1326 audit(1787260746.016:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 199.208238][ T28] audit: type=1326 audit(1787260746.016:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 199.287305][ T28] audit: type=1326 audit(1787260746.016:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 199.659576][ T28] audit: type=1326 audit(1787260746.016:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 199.694244][ T6690] futex_wake_op: syz.6.239 tries to shift op by -1; fix this program [ 199.853180][ T6693] netlink: 132 bytes leftover after parsing attributes in process `syz.6.239'. [ 200.080372][ T28] audit: type=1326 audit(1787260746.016:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 200.105690][ T28] audit: type=1326 audit(1787260746.016:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.5.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 201.001929][ T6703] netlink: 277 bytes leftover after parsing attributes in process `syz.4.243'. [ 203.693483][ T28] audit: type=1326 audit(1787260750.616:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.5.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 205.813504][ T28] audit: type=1326 audit(1787260750.616:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.5.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 205.837861][ T28] audit: type=1326 audit(1787260750.616:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.5.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 205.862871][ T28] audit: type=1326 audit(1787260750.616:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.5.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 205.949401][ T28] audit: type=1326 audit(1787260750.616:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.5.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 206.045409][ T28] audit: type=1326 audit(1787260750.616:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.5.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 207.161349][ T5788] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 210.819238][ T28] audit: type=1326 audit(1787260757.746:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.6.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4619e0d9 code=0x7ffc0000 [ 210.959093][ T28] audit: type=1326 audit(1787260757.746:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.6.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4619e0d9 code=0x7ffc0000 [ 211.073085][ T28] audit: type=1326 audit(1787260757.746:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.6.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fcd4619e0d9 code=0x7ffc0000 [ 211.159369][ T28] audit: type=1326 audit(1787260757.746:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.6.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4619e0d9 code=0x7ffc0000 [ 211.164702][ T6797] program syz.4.270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.227984][ T5788] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 211.238727][ T5788] Bluetooth: hci0: Injecting HCI hardware error event [ 211.250603][ T5784] Bluetooth: hci0: hardware error 0x00 [ 211.256536][ T28] audit: type=1326 audit(1787260757.746:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.6.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4619e0d9 code=0x7ffc0000 [ 211.288190][ T28] audit: type=1326 audit(1787260757.746:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.6.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd4619e0d9 code=0x7ffc0000 [ 211.318864][ T28] audit: type=1326 audit(1787260758.066:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.5.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 211.415956][ T28] audit: type=1326 audit(1787260758.066:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.5.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 211.565370][ T28] audit: type=1326 audit(1787260758.066:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.5.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 211.655838][ T28] audit: type=1326 audit(1787260758.066:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.5.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 213.519225][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 213.529440][ T5784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 213.704996][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.282'. [ 213.719413][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 213.726952][ T23] usb 1-1: config 1 has an invalid interface number: 65 but max is 2 [ 213.739672][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.759116][ T23] usb 1-1: config 1 has no interface number 2 [ 213.775578][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1088, setting to 1024 [ 213.787078][ T6842] hsr_slave_0: entered allmulticast mode [ 213.839223][ T23] usb 1-1: config 1 interface 1 has no altsetting 0 [ 213.852818][ T23] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 8.c0 [ 213.879474][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.900349][ T23] usb 1-1: Product: syz [ 213.906899][ T23] usb 1-1: Manufacturer: syz [ 213.921363][ T23] usb 1-1: SerialNumber: syz [ 214.182544][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 214.243554][ T23] usb 1-1: USB disconnect, device number 7 [ 215.964043][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.292'. [ 215.996756][ T6880] veth0_vlan: entered allmulticast mode [ 216.350732][ T6888] netlink: 277 bytes leftover after parsing attributes in process `syz.6.294'. [ 216.637972][ T5784] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 216.646948][ T5784] Bluetooth: hci2: Injecting HCI hardware error event [ 216.655840][ T5784] Bluetooth: hci2: hardware error 0x00 [ 219.027141][ T6941] netlink: 277 bytes leftover after parsing attributes in process `syz.5.310'. [ 219.077916][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 220.401137][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 220.522817][ T6969] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 220.537626][ T6969] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 223.032972][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 223.032992][ T28] audit: type=1326 audit(1787260768.952:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 223.111458][ T28] audit: type=1326 audit(1787260769.002:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 223.568363][ T28] audit: type=1326 audit(1787260769.002:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 223.744878][ T28] audit: type=1326 audit(1787260769.082:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 223.818150][ T28] audit: type=1326 audit(1787260769.082:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7023 comm="syz.5.335" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a82b9e0d9 code=0x7ffc0000 [ 231.193190][ T7157] tipc: Started in network mode [ 231.230368][ T7157] tipc: Node identity 7f000001, cluster identity 4711 [ 231.244206][ T7157] tipc: Enabled bearer , priority 10 [ 231.267206][ T28] audit: type=1326 audit(1787260777.192:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26df9e0d9 code=0x7ffc0000 [ 231.300349][ T7156] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 231.364313][ T28] audit: type=1326 audit(1787260777.192:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26df9e0d9 code=0x7ffc0000 [ 231.455468][ T28] audit: type=1326 audit(1787260777.222:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc26df9e0d9 code=0x7ffc0000 [ 231.538177][ T28] audit: type=1326 audit(1787260777.282:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26df9e0d9 code=0x7ffc0000 [ 231.690178][ T28] audit: type=1326 audit(1787260777.282:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7151 comm="syz.4.366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26df9e0d9 code=0x7ffc0000 [ 232.673299][ T5779] tipc: Node number set to 2130706433 [ 235.859582][ T7235] netlink: 277 bytes leftover after parsing attributes in process `syz.6.389'. [ 237.117002][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.393'. [ 247.882548][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 247.891449][ T5784] Bluetooth: hci3: Injecting HCI hardware error event [ 247.901042][ T5784] Bluetooth: hci3: hardware error 0x00 [ 250.401884][ T5784] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 251.049206][ T790] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 251.271426][ T790] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 251.296200][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.341948][ T790] usb 5-1: config 0 descriptor?? [ 251.372347][ T790] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 251.813033][ T790] gp8psk: usb in 137 operation failed. [ 251.843991][ T790] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 251.856563][ T790] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 251.874477][ T790] usb 5-1: USB disconnect, device number 3 [ 256.112487][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.119176][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.370320][ T7460] syzkaller0: entered promiscuous mode [ 256.390870][ T7460] syzkaller0: entered allmulticast mode [ 256.446147][ T7460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.309141][ T5856] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 258.534243][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 258.554683][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.595190][ T5856] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 224, changing to 7 [ 258.643171][ T5856] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 259.805584][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.815061][ T5856] usb 5-1: Product: syz [ 259.820545][ T5856] usb 5-1: Manufacturer: syz [ 259.825245][ T5856] usb 5-1: SerialNumber: syz [ 260.105110][ T5856] snd-ua101 5-1:1.1: invalid format type [ 260.115923][ T5856] snd-ua101 5-1:1.0: invalid num_altsetting [ 260.140574][ T5856] usb 5-1: USB disconnect, device number 4 [ 260.882537][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.445'. [ 261.276607][ T7505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.732129][ T7574] capability: warning: `syz.4.459' uses deprecated v2 capabilities in a way that may be insecure [ 270.237024][ T7588] ------------[ cut here ]------------ [ 270.243215][ T7588] WARNING: CPU: 0 PID: 7588 at mm/page_alloc.c:4477 __alloc_pages+0x2e4/0x460 [ 270.252668][ T7588] Modules linked in: [ 270.256706][ T7588] CPU: 0 PID: 7588 Comm: syz.4.461 Not tainted syzkaller #0 [ 270.265312][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.276314][ T7588] RIP: 0010:__alloc_pages+0x2e4/0x460 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.282312][ T7588] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 80 1d a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 270.303482][ T7588] RSP: 0018:ffffc900048f7a20 EFLAGS: 00010246 [ 270.310013][ T7588] RAX: ffffc900048f7a00 RBX: 1ffff9200091ef48 RCX: 0000000000000000 [ 270.318065][ T7588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900048f7a88 [ 270.326191][ T7588] RBP: ffffc900048f7b10 R08: ffffc900048f7a87 R09: 0000000000000000 [ 270.334304][ T7588] R10: ffffc900048f7a60 R11: fffff5200091ef51 R12: 0000000000000013 [ 270.342436][ T7588] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 270.350629][ T7588] FS: 00007fc26ee276c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 270.360067][ T7588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.368156][ T7588] CR2: 000000110c2804cb CR3: 000000005e4d4000 CR4: 00000000003506f0 [ 270.376458][ T7588] Call Trace: [ 270.379870][ T7588] [ 270.382866][ T7588] ? zone_statistics+0x170/0x170 [ 270.388088][ T7588] ? mtree_load+0x109/0x840 [ 270.392743][ T7588] __kmalloc_large_node+0x8c/0x1f0 [ 270.397993][ T7588] ? bitmap_parse_user+0x23/0x70 [ 270.403265][ T7588] __kmalloc_node_track_caller+0x110/0x230 [ 270.409216][ T7588] memdup_user_nul+0x2c/0xf0 [ 270.413892][ T7588] bitmap_parse_user+0x23/0x70 [ 270.418751][ T7588] irq_affinity_proc_write+0x13c/0x230 [ 270.424411][ T7588] ? irq_affinity_proc_open+0x50/0x50 [ 270.430232][ T7588] ? rcu_read_lock_any_held+0xb4/0x140 [ 270.435861][ T7588] ? rcu_read_lock_bh_held+0x100/0x100 [ 270.441478][ T7588] ? irq_affinity_proc_open+0x50/0x50 [ 270.446955][ T7588] proc_reg_write+0x1e4/0x2d0 [ 270.451859][ T7588] ? proc_reg_llseek+0x280/0x280 [ 270.456860][ T7588] vfs_write+0x299/0x9a0 [ 270.461256][ T7588] ? file_end_write+0x250/0x250 [ 270.466560][ T7588] ? __fget_files+0x28/0x460 [ 270.472570][ T7588] ? __fget_files+0x3fc/0x460 [ 270.477366][ T7588] ? __fdget_pos+0x2a3/0x330 [ 270.482323][ T7588] ? ksys_write+0x74/0x260 [ 270.487096][ T7588] ksys_write+0x151/0x260 [ 270.491673][ T7588] ? __ia32_sys_read+0x90/0x90 [ 270.496560][ T7588] ? lockdep_hardirqs_on+0x98/0x150 [ 270.501879][ T7588] do_syscall_64+0x55/0xb0 [ 270.506723][ T7588] ? clear_bhb_loop+0x40/0x90 [ 270.511548][ T7588] ? clear_bhb_loop+0x40/0x90 [ 270.516315][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.522459][ T7588] RIP: 0033:0x7fc26df9e0d9 [ 270.526954][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.547502][ T7588] RSP: 002b:00007fc26ee27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.556615][ T7588] RAX: ffffffffffffffda RBX: 00007fc26e225fa0 RCX: 00007fc26df9e0d9 [ 270.564835][ T7588] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000003 [ 270.574377][ T7588] RBP: 00007fc26e035024 R08: 0000000000000000 R09: 0000000000000000 [ 270.582766][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.590947][ T7588] R13: 00007fc26e226038 R14: 00007fc26e225fa0 R15: 00007ffce16d2f68 [ 270.599066][ T7588] [ 270.602325][ T7588] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.609713][ T7588] CPU: 0 PID: 7588 Comm: syz.4.461 Not tainted syzkaller #0 [ 270.617380][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.627999][ T7588] Call Trace: [ 270.631300][ T7588] [ 270.634349][ T7588] dump_stack_lvl+0x18c/0x250 [ 270.639167][ T7588] ? show_regs_print_info+0x20/0x20 [ 270.644503][ T7588] ? load_image+0x420/0x420 [ 270.649227][ T7588] panic+0x2ca/0x720 [ 270.653164][ T7588] ? bpf_jit_dump+0xd0/0xd0 [ 270.657931][ T7588] __warn+0x2e0/0x470 [ 270.662038][ T7588] ? __alloc_pages+0x2e4/0x460 [ 270.666839][ T7588] ? __alloc_pages+0x2e4/0x460 [ 270.671828][ T7588] report_bug+0x2be/0x4f0 [ 270.676215][ T7588] ? __alloc_pages+0x2e4/0x460 [ 270.681020][ T7588] ? __alloc_pages+0x2e4/0x460 [ 270.685995][ T7588] ? __alloc_pages+0x2e6/0x460 [ 270.690881][ T7588] handle_bug+0xcf/0x120 [ 270.695177][ T7588] exc_invalid_op+0x1a/0x50 [ 270.699730][ T7588] asm_exc_invalid_op+0x1a/0x20 [ 270.705000][ T7588] RIP: 0010:__alloc_pages+0x2e4/0x460 [ 270.710499][ T7588] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 80 1d a3 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 270.730226][ T7588] RSP: 0018:ffffc900048f7a20 EFLAGS: 00010246 [ 270.736496][ T7588] RAX: ffffc900048f7a00 RBX: 1ffff9200091ef48 RCX: 0000000000000000 [ 270.744497][ T7588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900048f7a88 [ 270.752520][ T7588] RBP: ffffc900048f7b10 R08: ffffc900048f7a87 R09: 0000000000000000 [ 270.760542][ T7588] R10: ffffc900048f7a60 R11: fffff5200091ef51 R12: 0000000000000013 [ 270.768554][ T7588] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 270.776684][ T7588] ? zone_statistics+0x170/0x170 [ 270.781721][ T7588] ? mtree_load+0x109/0x840 [ 270.786272][ T7588] __kmalloc_large_node+0x8c/0x1f0 [ 270.791433][ T7588] ? bitmap_parse_user+0x23/0x70 [ 270.796402][ T7588] __kmalloc_node_track_caller+0x110/0x230 [ 270.802344][ T7588] memdup_user_nul+0x2c/0xf0 [ 270.806983][ T7588] bitmap_parse_user+0x23/0x70 [ 270.811963][ T7588] irq_affinity_proc_write+0x13c/0x230 [ 270.817469][ T7588] ? irq_affinity_proc_open+0x50/0x50 [ 270.823076][ T7588] ? rcu_read_lock_any_held+0xb4/0x140 [ 270.828655][ T7588] ? rcu_read_lock_bh_held+0x100/0x100 [ 270.834184][ T7588] ? irq_affinity_proc_open+0x50/0x50 [ 270.839768][ T7588] proc_reg_write+0x1e4/0x2d0 [ 270.844633][ T7588] ? proc_reg_llseek+0x280/0x280 [ 270.849636][ T7588] vfs_write+0x299/0x9a0 [ 270.854008][ T7588] ? file_end_write+0x250/0x250 [ 270.858915][ T7588] ? __fget_files+0x28/0x460 [ 270.863551][ T7588] ? __fget_files+0x3fc/0x460 [ 270.868383][ T7588] ? __fdget_pos+0x2a3/0x330 [ 270.873109][ T7588] ? ksys_write+0x74/0x260 [ 270.877702][ T7588] ksys_write+0x151/0x260 [ 270.882123][ T7588] ? __ia32_sys_read+0x90/0x90 [ 270.886935][ T7588] ? lockdep_hardirqs_on+0x98/0x150 [ 270.892176][ T7588] do_syscall_64+0x55/0xb0 [ 270.896631][ T7588] ? clear_bhb_loop+0x40/0x90 [ 270.901341][ T7588] ? clear_bhb_loop+0x40/0x90 [ 270.906055][ T7588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.912086][ T7588] RIP: 0033:0x7fc26df9e0d9 [ 270.916724][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.936398][ T7588] RSP: 002b:00007fc26ee27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.944862][ T7588] RAX: ffffffffffffffda RBX: 00007fc26e225fa0 RCX: 00007fc26df9e0d9 [ 270.952868][ T7588] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000003 [ 270.960881][ T7588] RBP: 00007fc26e035024 R08: 0000000000000000 R09: 0000000000000000 [ 270.968889][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.976893][ T7588] R13: 00007fc26e226038 R14: 00007fc26e225fa0 R15: 00007ffce16d2f68 [ 270.984913][ T7588] [ 270.988538][ T7588] Kernel Offset: disabled [ 270.992956][ T7588] Rebooting in 86400 seconds..