last executing test programs: 16.662213138s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000043447b4e4b69f2e9c8aac0f94312bb8633d195a7dc91de59d389d9b2bb3d29d4cb8111527f0af0852cda17cffb3da3af74141650c57af6d647341100455b4c0a8740a8c34543c8663939436b8d0736e699ab76a22c6f94ffdd593336a55cf5725bb7d057225d7f62788d40c702e131fd945df3eff18bb8f50515f06fd7a45ec8b42695b674aea6f6cd9439d1f3984494ace2c07ff1aafb8754cb97b025e51af06b19d7fbda8648396e063158fa8c1420c4a5df2946ce5116e41954ecc36f63fef60e39ea953dd108be", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf250800000018000280100003800c000180080001000700000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x10004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0740290b6e58e1c3a68d0f3a05a3500d6eaeb86597814eea35b9f0f4f6a941d216"], 0x1c}}, 0x4000054) r8 = socket(0x22, 0x80000, 0x10000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r10, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x56, r10}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x40848c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811", @ANYRES8, @ANYRES32=r3, @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=r2], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.652583882s ago: executing program 1 (id=157): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 15.560289085s ago: executing program 0 (id=158): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xc6\x8c\xd7\xf3|\xc7\x8d\xf3\xcd\xc4\xc4\x87\xc5\x9c\xb3\x93\xe2\x80\x96lr\xdb\x82\xb9C\xe0#c\x1b\x173Ur{E$\xa2*0S\xda2\xf2a6\x93]\x9eK|\\\x1a\xba\x8c\xce9\xa7\xaf\xf7\xb8\xf8i\xc3\xef\n\bR==\x81\x8d6 \x95\xd0\xbf\x80\x97\x9bQR\xdfw\xd2\x0e`\xbd\xb4\x153\x0f]\xaa-\x81Q)k-c0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x141900) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[], 0x0) syz_open_dev$video(&(0x7f00000008c0), 0x7, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 12.666320815s ago: executing program 4 (id=169): socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a682", 0xd2}], 0x1}, 0x40824) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYRESHEX=r1, @ANYRES32=r7, @ANYBLOB="35ec07c7cc48ac8b0f2f0fbe28261d2ecdfd6a1a0b02c30728348ac5aa03a932c6b708b4bc3375369911201e9eb554f8a6fb57e591027003862f43142b0fce821e907cd64c4dd0c0a8a1a679321475fbce601825b62a741589f816a4d2597339998e319b064f107679e1fda2a39086427d528952705c8a275941d1e9498fc726155972c1c3423a6064d07d369c026570f639160cbc028f5c1e6c1d5c97366edacb1eeb2f59c05ffdf86775c2e874cdf121920b1c54fb48c997c5770a9e70c2e744526de5a588bb4fcd50e2bb186fe035159dc4250b273e0e0e2e3612bfa7ab029bd363ce", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f0000002420000004000000", @ANYRES32=r8], 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 11.690650228s ago: executing program 1 (id=170): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_fuse_handle_req(r2, &(0x7f0000001480)="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", 0x2000, &(0x7f000000aac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1, 0x41, 0xfffffffc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x8002, 0x2, 0xf1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) 11.507486024s ago: executing program 4 (id=171): process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff, 0xfffffcfc}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0xb}, 0x1c) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14f6c9cabc2bad2577000000", @ANYRES16=0x0, @ANYBLOB="0100adbd6000f8dbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x2, 0xd, "087383", 0x3, 0xfc}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) r5 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x101}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 9.618298935s ago: executing program 2 (id=173): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x141000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x95\\4\x150xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x0, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) 6.735379234s ago: executing program 4 (id=177): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x204001) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f00000003c0)={{0xeeee0000, 0x200000, 0x0, 0x5, 0x4, 0x4, 0xcd, 0x1, 0x9, 0x9, 0x6f}, {0x6000, 0x25000, 0x10, 0xc, 0xa2, 0x7, 0x6, 0xa, 0xd, 0x5, 0x44, 0x6}, {0x8080000, 0xfec00000, 0xa, 0x0, 0x8, 0x8, 0x4, 0x9, 0x17, 0x9, 0x1e, 0xb7}, {0xdddd0000, 0xfffa8000, 0x3, 0x8, 0x5, 0x8, 0x22, 0x0, 0x9, 0x5d, 0x5f, 0x6f}, {0xffff1000, 0x80a0000, 0xa, 0x2, 0xb, 0xff, 0xeb, 0x0, 0x1, 0xc, 0x10, 0xe}, {0x70000, 0x0, 0xd, 0xc6, 0x4, 0xb, 0x5f, 0x9, 0x80, 0x8, 0x6, 0x4}, {0x3000, 0xc000, 0xb, 0x6, 0x6, 0x81, 0xd, 0x8c, 0xe, 0x1, 0x0, 0xaa}, {0xc000, 0x7000, 0x3, 0x0, 0x6, 0x4, 0x10, 0x4, 0x5, 0x2, 0x59, 0x81}, {0x6000, 0x10}, {0x6000, 0x5}, 0xc0000005, 0x0, 0x40000, 0x12260, 0xd, 0x501, 0x8000000, 0x2000000, [0xeb, 0x0, 0x100000000000, 0x4]}) 6.63811403s ago: executing program 2 (id=178): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r0, 0x62c21a4ade68aba1, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) 6.37795089s ago: executing program 0 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x38011, 0xffffffffffffffff, 0xffffc000) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000500)={0x1, @pix={0xfffffffe, 0xb, 0x34324948, 0x5, 0x5030839c, 0x1, 0x6, 0x3, 0x0, 0x1, 0x1, 0x3}}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x400) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x9f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0xee01) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) getrlimit(0xf, &(0x7f0000000280)) keyctl$update(0x2, r4, &(0x7f00000003c0)="3d9a809b49c167b61d15c354c3783390ca0281ca9e7e2e31b9acd7c81b51822e8faf5b276f1f2cdeba1d6000330ce1f6f80dbdd0844edc9c20ca23e6196f6fc08076240cb3bc54a3957d994a0f3b77787a3549997f7d85", 0x57) 6.349405845s ago: executing program 1 (id=180): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2000, 0x0) (fail_nth: 3) 6.33153936s ago: executing program 2 (id=181): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') getdents64(r0, 0xfffffffffffffffe, 0xfffffffffffffe2a) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffff5}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000100)={0x6, 0x2, r1}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcc9c4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2a020400) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x88) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='cpu.idle\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x7ffff000) 4.942460953s ago: executing program 1 (id=182): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], 0x2, 0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="8033e7feb9ad073a0200000000000000945c3ad18899868be407346ffa4d042e37ee4808a4b8bc1224316bc8708ad5a060281cfa0dd30f4c2e67fd468c5cecf44b20e072cd5a99b88d05ec6ad31c5584c16ddac9e5088232d8836ac0eb9eeb5936262c7732961aa8ccc2fbd64b8a6b12c84cc089a927", 0x76, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 3.25937526s ago: executing program 0 (id=183): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000180)={0x20, 0xc}, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f00000002c0)={0x40, 0x1, 0x9d, {0x9d, 0x10, "909410475376371256bfa44706bf7eb123a752676dd9a178d7223e63f380249c4cfc413e0c3ad8afa28bd5aee40e7e5615ecb0548af9201ed122c4d57d4ce40fa7044e6ca88b3ae29d8e053f57e54ee5c7a6120f339d0b68ab62afffa3d6ac09c173c21eaf7c59d1c09638ed4df2c793f6124f895f6470479eb485f24e0376c802b6f2e96926add8eee067e21fce77abde7585ac99d327d0358360"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x40, 0x795a9a254289459d, 0x8, "979e7f5ce6b22efb"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000440)={0x20, 0x81, 0x1, '\r'}, &(0x7f0000000480)={0x20, 0x82, 0x3, '9c2'}, &(0x7f00000004c0)={0x20, 0x83, 0x1, "12"}, &(0x7f0000000500)={0x20, 0x84, 0x4, 'bB:7'}, &(0x7f0000000540)={0x20, 0x85, 0x3, "fccd8a"}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 3.1166693s ago: executing program 3 (id=184): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x8, 0x6, 0x200000000000000d, 0x5, 0x96b, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xfffffde0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') fchdir(r3) r4 = fspick(r3, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000040)='&\']{^\x9b#\x00', &(0x7f0000000640)="5c6dc039b6b7bdb8a0108824d23aed64863dbf8454f8e9bd7f75c9a9903966a2b5a675b42ba4b1966b16a92f60f9cc46f009318f306dfff1deca6c3656ad944177f1c7f6fee59d4545dc9b85f0edb3380a69121ffa35393bc85c22ea08e722c0e78d9b795bac92b2c99a9354f7a143378761c7dcd8dde2e1f251058447c7de6551bbab4a09e4cd6bde63e37db7f64c52be6c92a9cfbaffc1be37aaf0fd2ffa6bd3123b028ea02134e62423e2aca85602ad2eccbfbbd1bc716778acf5858ef6e1e920ab1409ed5609cc64e4b5c01675ef5fb0a8cc7836d0dca0c3f1", 0xdb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff98030000000000004000000000000000560000000000000000000000000038000100feff020000000300"], 0x878) close(r5) r6 = fanotify_init(0x40, 0x80000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r6, 0x1, 0x40001019, r7, 0x0) execveat(r3, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x7437, 0x4000}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x10000003, 0x0, 0x100}, 0x10) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a0001002dbd7000000000000a000000000000000000000006001c004e20000005001b"], 0x2c}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2481) r11 = fcntl$dupfd(r10, 0x0, r10) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto(r12, 0x0, 0x0, 0x80, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x400c110}, 0x4004004) ioctl$USBDEVFS_REAPURB(r11, 0x4008550c, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000002c0)) 2.986088524s ago: executing program 1 (id=185): ftruncate(0xffffffffffffffff, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x141900) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[], 0x0) syz_open_dev$video(&(0x7f00000008c0), 0x7, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 1.727095271s ago: executing program 3 (id=186): r0 = syz_open_dev$loop(0x0, 0xf01c, 0x141000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xc6\x8c\xd7\xf3|\xc7\x8d\xf3\xcd\xc4\xc4\x87\xc5\x9c\xb3\x93\xe2\x80\x96lr\xdb\x82\xb9C\xe0#c\x1b\x173Ur{E$\xa2*0S\xda2\xf2a6\x93]\x9eK|\\\x1a\xba\x8c\xce9\xa7\xaf\xf7\xb8\xf8i\xc3\xef\n\bR==\x81\x8d6 \x95\xd0\xbf\x80\x97\x9bQR\xdfw\xd2\x0e`\xbd\xb4\x153\x0f]\xaa-\x81Q)k-c0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 1.459689859s ago: executing program 3 (id=190): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r1 = syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x7, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010102}}}}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r7, @ANYRES8=r0, @ANYRES16=r0], 0xe4}, 0x1, 0x0, 0x0, 0x4048000}, 0x4050004) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101) (async) r9 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r9, 0x1277, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 1.354155926s ago: executing program 4 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 1.235703124s ago: executing program 2 (id=192): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000000)="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", 0x357}], 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b46, &(0x7f0000000000)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000000)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4cb6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49b2427f0e8ba1017c7517a35fa36a4e258378e2b68f82a39c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cc1ea2008ae8a61634a70aa875bd39831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d85e31bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f499b6812850273d04ed44cea50d3e7019ada5b6342ea378df700fe826b1e918538f1d98a73503b6aff148de6c454d0de9080000005298e38d41a0a35472632144c53738b271d19671f962c8084319da96b0533dca42527e88942bef8c19a14cce1338828e4fc8b729b0503b182641db69f91d4d8d83a3636ba1e56564f43b71a0aaea82937ee5c84eb9af29a7a5158bbce2e3ba4026961cf15b47d0e42b9544dd0af0064818096ec48a6c7b26698919e8303daf8d06c5317f92fbd601deb5562247bd3b0a5cfb7c2192ea4ebe06d8d0f093e5e9d838cc5215963df8f315aaeb2e54547cbd651675ab4557c18c4fdcb0adff2a112efd8a30ade408351fb116299570eecf838733a81b45f646e4fdc4f97cd51392e664d4b44e7f9b8531f33c227993c1edeaed5315cc32cda5d643fa352a706cc9242405e5a807029f886b4240f3227e95635c5eedf11ce9615b60a25a8ca788c13b920f262b6745203fd244428fda8c88eb0b7b4457b93ec6b85b2074e8ad246ae1765cfa4835791465bb0b8dd13d0c10cbb45c64620c636fcef73738dfa121052c7d352a95ca06c33a785fabac39faf052b073f059e8a2d13c5063d5a1295799df4626b2e9b025559ae23ae419191be4d121ef471b53e5f7", 0x357}], 0x1) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) (async) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_OPENQRY(r2, 0x4b46, &(0x7f0000000000)) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) (async) 1.162180455s ago: executing program 3 (id=193): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f00000000c0)={'\x00', 0x80000000, 0x3, 0x3}) 1.02452615s ago: executing program 3 (id=194): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x45, [0x0, 0x89ff]}}) shutdown(r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r8}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r12, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 25.526056ms ago: executing program 4 (id=195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xc6\x8c\xd7\xf3|\xc7\x8d\xf3\xcd\xc4\xc4\x87\xc5\x9c\xb3\x93\xe2\x80\x96lr\xdb\x82\xb9C\xe0#c\x1b\x173Ur{E$\xa2*0S\xda2\xf2a6\x93]\x9eK|\\\x1a\xba\x8c\xce9\xa7\xaf\xf7\xb8\xf8i\xc3\xef\n\bR==\x81\x8d6 \x95\xd0\xbf\x80\x97\x9bQR\xdfw\xd2\x0e`\xbd\xb4\x153\x0f]\xaa-\x81Q)k-c 1 [ 75.840056][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.845405][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.848148][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.850875][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.870750][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.871051][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.872187][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.899400][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.901770][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.022922][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.029338][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.030215][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.030343][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.049838][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.050863][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.053725][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.053741][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.055694][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.055908][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.057218][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.058687][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.060791][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.079265][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.095388][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.773377][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 76.778554][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 76.977828][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 76.984971][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 77.037977][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 77.166871][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.167601][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.167935][ T5792] bridge_slave_0: entered allmulticast mode [ 77.169320][ T5792] bridge_slave_0: entered promiscuous mode [ 77.175721][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.175838][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.176011][ T5790] bridge_slave_0: entered allmulticast mode [ 77.178454][ T5790] bridge_slave_0: entered promiscuous mode [ 77.244098][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.244183][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.244479][ T5792] bridge_slave_1: entered allmulticast mode [ 77.245876][ T5792] bridge_slave_1: entered promiscuous mode [ 77.248549][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.248627][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.248899][ T5790] bridge_slave_1: entered allmulticast mode [ 77.250244][ T5790] bridge_slave_1: entered promiscuous mode [ 77.416288][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.418619][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.439428][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.439589][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.439888][ T5802] bridge_slave_0: entered allmulticast mode [ 77.458628][ T5802] bridge_slave_0: entered promiscuous mode [ 77.461549][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.461666][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.461834][ T5800] bridge_slave_0: entered allmulticast mode [ 77.465508][ T5800] bridge_slave_0: entered promiscuous mode [ 77.472545][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.476307][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.494563][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.494676][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.494828][ T5802] bridge_slave_1: entered allmulticast mode [ 77.497929][ T5802] bridge_slave_1: entered promiscuous mode [ 77.499759][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.499874][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.500020][ T5800] bridge_slave_1: entered allmulticast mode [ 77.503785][ T5800] bridge_slave_1: entered promiscuous mode [ 77.542914][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.543033][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.543193][ T5801] bridge_slave_0: entered allmulticast mode [ 77.546133][ T5801] bridge_slave_0: entered promiscuous mode [ 77.612727][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.612818][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.612931][ T5801] bridge_slave_1: entered allmulticast mode [ 77.614286][ T5801] bridge_slave_1: entered promiscuous mode [ 77.647281][ T5792] team0: Port device team_slave_0 added [ 77.658940][ T5790] team0: Port device team_slave_0 added [ 77.679553][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.875284][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.877097][ T5792] team0: Port device team_slave_1 added [ 77.878572][ T5790] team0: Port device team_slave_1 added [ 77.884386][ T5108] Bluetooth: hci1: command tx timeout [ 77.900838][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.917782][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.946704][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.961714][ T5108] Bluetooth: hci0: command tx timeout [ 78.002635][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.029907][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.029919][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.029933][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.034804][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.034820][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.034843][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.056794][ T5802] team0: Port device team_slave_0 added [ 78.059634][ T5800] team0: Port device team_slave_0 added [ 78.063149][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.063164][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.063187][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.064610][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.064622][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.064645][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.088024][ T5802] team0: Port device team_slave_1 added [ 78.091716][ T5800] team0: Port device team_slave_1 added [ 78.118482][ T5801] team0: Port device team_slave_0 added [ 78.122080][ T5108] Bluetooth: hci3: command tx timeout [ 78.163970][ T5801] team0: Port device team_slave_1 added [ 78.201363][ T5108] Bluetooth: hci4: command tx timeout [ 78.201549][ T5108] Bluetooth: hci2: command tx timeout [ 78.228220][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.228236][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.228260][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.268124][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.268139][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.268163][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.290044][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.290059][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.290083][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.334167][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.334185][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.334209][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.335686][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.335699][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.335722][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.360398][ T5792] hsr_slave_0: entered promiscuous mode [ 78.362745][ T5792] hsr_slave_1: entered promiscuous mode [ 78.373953][ T5790] hsr_slave_0: entered promiscuous mode [ 78.375161][ T5790] hsr_slave_1: entered promiscuous mode [ 78.376289][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 78.376405][ T5790] Cannot create hsr debugfs directory [ 78.390454][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.390469][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.390499][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.571886][ T5802] hsr_slave_0: entered promiscuous mode [ 78.572994][ T5802] hsr_slave_1: entered promiscuous mode [ 78.573974][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 78.573996][ T5802] Cannot create hsr debugfs directory [ 78.605253][ T5800] hsr_slave_0: entered promiscuous mode [ 78.606326][ T5800] hsr_slave_1: entered promiscuous mode [ 78.606899][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 78.606920][ T5800] Cannot create hsr debugfs directory [ 78.685918][ T5801] hsr_slave_0: entered promiscuous mode [ 78.686676][ T5801] hsr_slave_1: entered promiscuous mode [ 78.687184][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 78.687202][ T5801] Cannot create hsr debugfs directory [ 79.662215][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.692540][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.727622][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.777416][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.879363][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.910144][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.927860][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.962892][ T60] Bluetooth: hci1: command tx timeout [ 79.991909][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.042195][ T60] Bluetooth: hci0: command tx timeout [ 80.124628][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.169508][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.201332][ T60] Bluetooth: hci3: command tx timeout [ 80.214723][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.260066][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.281335][ T60] Bluetooth: hci2: command tx timeout [ 80.281365][ T5108] Bluetooth: hci4: command tx timeout [ 80.379570][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.427330][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.457870][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.509091][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.636850][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.638909][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.714447][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.765124][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.799473][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.878471][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.900124][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.924019][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.924162][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.965243][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.965475][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.007278][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.045145][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.045265][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.074118][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.094588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.094710][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.153557][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.167302][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.213003][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.221302][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.256886][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.257826][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.335289][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.353731][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.376093][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.376356][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.447661][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.447860][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.490400][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.536049][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.538310][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.579846][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.580376][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.654634][ T9] cfg80211: failed to load regulatory.db [ 81.714416][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.927545][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.053841][ T5108] Bluetooth: hci1: command tx timeout [ 82.121919][ T5108] Bluetooth: hci0: command tx timeout [ 82.158190][ T5790] veth0_vlan: entered promiscuous mode [ 82.207257][ T5790] veth1_vlan: entered promiscuous mode [ 82.282469][ T5108] Bluetooth: hci3: command tx timeout [ 82.361275][ T5108] Bluetooth: hci2: command tx timeout [ 82.361306][ T5108] Bluetooth: hci4: command tx timeout [ 82.430871][ T5790] veth0_macvtap: entered promiscuous mode [ 82.466963][ T5790] veth1_macvtap: entered promiscuous mode [ 82.493252][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.527223][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.589134][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.614851][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.618156][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.654038][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.670220][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.687265][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.697306][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.832612][ T5802] veth0_vlan: entered promiscuous mode [ 82.929104][ T5800] veth0_vlan: entered promiscuous mode [ 82.932455][ T5792] veth0_vlan: entered promiscuous mode [ 82.960798][ T5802] veth1_vlan: entered promiscuous mode [ 82.999180][ T5800] veth1_vlan: entered promiscuous mode [ 83.015880][ T5792] veth1_vlan: entered promiscuous mode [ 83.030964][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.034689][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.058727][ T5801] veth0_vlan: entered promiscuous mode [ 83.118630][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.118649][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.131996][ T5801] veth1_vlan: entered promiscuous mode [ 83.206131][ T5802] veth0_macvtap: entered promiscuous mode [ 83.212885][ T5800] veth0_macvtap: entered promiscuous mode [ 83.230642][ T5792] veth0_macvtap: entered promiscuous mode [ 83.235371][ T5802] veth1_macvtap: entered promiscuous mode [ 83.238434][ T5800] veth1_macvtap: entered promiscuous mode [ 83.267766][ T5792] veth1_macvtap: entered promiscuous mode [ 83.307862][ T5801] veth0_macvtap: entered promiscuous mode [ 83.329466][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.340332][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.349081][ T5801] veth1_macvtap: entered promiscuous mode [ 83.365519][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.369378][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.373532][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.405673][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.439798][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.457882][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467205][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.492111][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.492181][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.528677][ T173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.544064][ T173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.602663][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.602757][ T173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.649428][ T173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.661678][ T173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726173][ T173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.773636][ T173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.790653][ T173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793872][ T809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.934274][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.942151][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991165][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.992333][ T809] usb 2-1: config 248 has an invalid interface number: 255 but max is 1 [ 83.992361][ T809] usb 2-1: config 248 has an invalid interface number: 80 but max is 1 [ 83.992379][ T809] usb 2-1: config 248 has no interface number 0 [ 83.992395][ T809] usb 2-1: config 248 has no interface number 1 [ 83.992471][ T809] usb 2-1: config 248 interface 255 altsetting 25 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 83.992497][ T809] usb 2-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0x7, skipping [ 83.992520][ T809] usb 2-1: config 248 interface 255 altsetting 25 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 83.992546][ T809] usb 2-1: config 248 interface 255 altsetting 25 endpoint 0xE has invalid wMaxPacketSize 0 [ 83.992568][ T809] usb 2-1: config 248 interface 255 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 83.992590][ T809] usb 2-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0x7, skipping [ 83.992610][ T809] usb 2-1: config 248 interface 255 altsetting 25 has an endpoint descriptor with address 0x1E, changing to 0xE [ 83.992633][ T809] usb 2-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0xE, skipping [ 83.992664][ T809] usb 2-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 83.992685][ T809] usb 2-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 83.992702][ T809] usb 2-1: config 248 interface 80 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 83.992714][ T809] usb 2-1: config 248 interface 80 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 83.992727][ T809] usb 2-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 83.992741][ T809] usb 2-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 83.992752][ T809] usb 2-1: config 248 interface 255 has no altsetting 0 [ 83.992761][ T809] usb 2-1: config 248 interface 80 has no altsetting 0 [ 83.995321][ T809] usb 2-1: New USB device found, idVendor=0bb4, idProduct=abd1, bcdDevice=8b.98 [ 83.995348][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.995358][ T809] usb 2-1: Product: syz [ 83.995365][ T809] usb 2-1: Manufacturer: syz [ 83.995373][ T809] usb 2-1: SerialNumber: syz [ 84.121188][ T60] Bluetooth: hci1: command tx timeout [ 84.171340][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.201898][ T60] Bluetooth: hci0: command tx timeout [ 84.324579][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.324599][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.371302][ T60] Bluetooth: hci3: command tx timeout [ 84.417425][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.417446][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.441347][ T60] Bluetooth: hci4: command tx timeout [ 84.441376][ T60] Bluetooth: hci2: command tx timeout [ 84.485311][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.485339][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.500897][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.505164][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.515861][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.516353][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.529407][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.529903][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.547602][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.548112][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.592183][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.593453][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.655944][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.655964][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.739857][ T809] usb 2-1: USB disconnect, device number 2 [ 84.835908][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.835929][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.879656][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.879674][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.090145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.090172][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.260028][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.260047][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.401463][ T5778] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.450657][ T5919] af_packet: tpacket_rcv: packet too big, clamped from 171 to 4294967290. macoff=78 [ 85.682912][ T5778] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 85.682938][ T5778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 85.682962][ T5778] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 85.682981][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.688660][ T5778] usb 5-1: config 0 descriptor?? [ 86.639832][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.919825][ T5932] loop8: detected capacity change from 0 to 8 [ 87.019830][ T5932] Dev loop8: unable to read RDB block 8 [ 87.019879][ T5932] loop8: unable to read partition table [ 87.020057][ T5932] loop8: partition table beyond EOD, truncated [ 87.020073][ T5932] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 87.569884][ T5778] ath6kl: Failed to submit usb control message: -110 [ 87.569932][ T5778] ath6kl: unable to send the bmi data to the device: -110 [ 87.569946][ T5778] ath6kl: Unable to send get target info: -110 [ 87.611757][ T5778] ath6kl: Failed to init ath6kl core: -110 [ 87.613582][ T5778] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 87.613819][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.733142][ T5916] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 87.937267][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 87.937299][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 87.937338][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 87.937359][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.024698][ T9] usb 1-1: config 0 descriptor?? [ 88.036303][ T36] usb 5-1: USB disconnect, device number 2 [ 88.372935][ T5949] loop8: detected capacity change from 0 to 8 [ 88.421815][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.455286][ T5912] Dev loop8: unable to read RDB block 8 [ 88.455330][ T5912] loop8: unable to read partition table [ 88.455557][ T5912] loop8: partition table beyond EOD, truncated [ 88.457078][ T5949] Dev loop8: unable to read RDB block 8 [ 88.457120][ T5949] loop8: unable to read partition table [ 88.457315][ T5949] loop8: partition table beyond EOD, truncated [ 88.457331][ T5949] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 89.015692][ T9] ath6kl: Failed to submit usb control message: -71 [ 89.015739][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 89.015753][ T9] ath6kl: Unable to send get target info: -71 [ 89.052789][ T9] ath6kl: Failed to init ath6kl core: -71 [ 89.054206][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 89.110837][ T9] usb 1-1: USB disconnect, device number 2 [ 89.252584][ T5956] loop8: detected capacity change from 0 to 7 [ 89.259970][ T5956] Dev loop8: unable to read RDB block 7 [ 89.260014][ T5956] loop8: unable to read partition table [ 89.260223][ T5956] loop8: partition table beyond EOD, truncated [ 89.260270][ T5956] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 89.886637][ T5964] loop8: detected capacity change from 0 to 8 [ 89.891272][ T5964] Dev loop8: unable to read RDB block 8 [ 89.891303][ T5964] loop8: unable to read partition table [ 89.891424][ T5964] loop8: partition table beyond EOD, truncated [ 89.891435][ T5964] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 90.349181][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.511101][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 90.514642][ T5876] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.514675][ T5876] usb 1-1: config 1 interface 0 has no altsetting 0 [ 90.517929][ T5876] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.40 [ 90.517955][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.517974][ T5876] usb 1-1: Product: syz [ 90.517986][ T5876] usb 1-1: Manufacturer: syz [ 90.517999][ T5876] usb 1-1: SerialNumber: syz [ 91.222511][ T5983] mmap: syz.2.25 (5983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.491010][ T5983] syz.2.25 (5983) used greatest stack depth: 16592 bytes left [ 91.701247][ T5876] usbhid 1-1:1.0: can't add hid device: -71 [ 91.701364][ T5876] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 91.740255][ T5876] usb 1-1: USB disconnect, device number 3 [ 91.851098][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.931181][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.011216][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 92.015210][ T36] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.015240][ T36] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.015260][ T36] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.015309][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.015329][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.015353][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.016029][ T36] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.016054][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.181008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.241031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.248156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.272920][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 92.272951][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 92.272990][ T5877] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 92.273012][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.323728][ T5877] usb 3-1: config 0 descriptor?? [ 92.346844][ T36] usb 5-1: config 0 descriptor?? [ 93.659243][ T5877] ath6kl: Failed to submit usb control message: -110 [ 93.659293][ T5877] ath6kl: unable to send the bmi data to the device: -110 [ 93.659307][ T5877] ath6kl: Unable to send get target info: -110 [ 93.707111][ T5988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.707326][ T5877] ath6kl: Failed to init ath6kl core: -110 [ 93.708689][ T5877] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 93.960444][ T36] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.997406][ T36] usb 5-1: USB disconnect, device number 3 [ 94.020652][ T36] usblp0: removed [ 94.824000][ T36] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.235213][ T36] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 95.235246][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 95.235287][ T36] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 95.235309][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.283728][ T36] usb 5-1: config 0 descriptor?? [ 95.526556][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.527049][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.537327][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.605899][ T5779] usb 3-1: USB disconnect, device number 2 [ 96.166415][ T36] ath6kl: Failed to submit usb control message: -71 [ 96.166462][ T36] ath6kl: unable to send the bmi data to the device: -71 [ 96.166476][ T36] ath6kl: Unable to send get target info: -71 [ 96.167586][ T36] ath6kl: Failed to init ath6kl core: -71 [ 96.168789][ T36] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 96.223211][ T36] usb 5-1: USB disconnect, device number 4 [ 96.371782][ T5779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.684482][ T5877] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.964601][ T5779] usb 4-1: config 248 has an invalid interface number: 255 but max is 1 [ 96.964632][ T5779] usb 4-1: config 248 has an invalid interface number: 80 but max is 1 [ 96.964653][ T5779] usb 4-1: config 248 has an invalid interface number: 244 but max is 1 [ 96.964672][ T5779] usb 4-1: config 248 has 3 interfaces, different from the descriptor's value: 2 [ 96.964692][ T5779] usb 4-1: config 248 has no interface number 0 [ 96.964708][ T5779] usb 4-1: config 248 has no interface number 1 [ 96.964721][ T5779] usb 4-1: config 248 has no interface number 2 [ 96.964789][ T5779] usb 4-1: config 248 interface 255 altsetting 25 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 96.964815][ T5779] usb 4-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0x7, skipping [ 96.964838][ T5779] usb 4-1: config 248 interface 255 altsetting 25 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 96.964865][ T5779] usb 4-1: config 248 interface 255 altsetting 25 endpoint 0xE has invalid wMaxPacketSize 0 [ 96.964887][ T5779] usb 4-1: config 248 interface 255 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 96.964910][ T5779] usb 4-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0x7, skipping [ 96.964932][ T5779] usb 4-1: config 248 interface 255 altsetting 25 has an endpoint descriptor with address 0x1E, changing to 0xE [ 96.964961][ T5779] usb 4-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0xE, skipping [ 96.964997][ T5779] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 96.965019][ T5779] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 96.965040][ T5779] usb 4-1: config 248 interface 80 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 96.965063][ T5779] usb 4-1: config 248 interface 80 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 96.965089][ T5779] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 96.965112][ T5779] usb 4-1: config 248 interface 80 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 96.965137][ T5779] usb 4-1: config 248 interface 80 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 11 [ 96.965164][ T5779] usb 4-1: too many endpoints for config 248 interface 244 altsetting 155: 246, using maximum allowed: 30 [ 96.965229][ T5779] usb 4-1: config 248 interface 244 altsetting 155 has a duplicate endpoint with address 0xA, skipping [ 96.965251][ T5779] usb 4-1: config 248 interface 244 altsetting 155 has a duplicate endpoint with address 0xB, skipping [ 96.965273][ T5779] usb 4-1: config 248 interface 244 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 246 [ 96.965299][ T5779] usb 4-1: config 248 interface 255 has no altsetting 0 [ 96.965316][ T5779] usb 4-1: config 248 interface 80 has no altsetting 0 [ 96.965334][ T5779] usb 4-1: config 248 interface 244 has no altsetting 0 [ 96.969595][ T5779] usb 4-1: New USB device found, idVendor=0bb4, idProduct=abd1, bcdDevice=8b.98 [ 96.969623][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.969642][ T5779] usb 4-1: Product: syz [ 96.969656][ T5779] usb 4-1: Manufacturer: syz [ 96.969670][ T5779] usb 4-1: SerialNumber: syz [ 97.102946][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 97.102966][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 97.103001][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 97.103027][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.173473][ T5877] usb 2-1: config 0 descriptor?? [ 97.413855][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.649426][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.649917][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.652178][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.652738][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.654779][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.655288][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.657041][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.657565][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.660232][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.660736][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.773683][ T6055] loop8: detected capacity change from 0 to 8 [ 98.779839][ T5877] ath6kl: Failed to submit usb control message: -110 [ 98.779940][ T5877] ath6kl: unable to send the bmi data to the device: -110 [ 98.779955][ T5877] ath6kl: Unable to send get target info: -110 [ 98.795322][ T5877] ath6kl: Failed to init ath6kl core: -110 [ 98.808613][ T5877] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 98.818303][ T5779] usb 4-1: USB disconnect, device number 2 [ 98.845228][ T6055] Dev loop8: unable to read RDB block 8 [ 98.845257][ T6055] loop8: unable to read partition table [ 98.845382][ T6055] loop8: partition table beyond EOD, truncated [ 98.845393][ T6055] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 98.969853][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.136312][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 99.136347][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 99.136389][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 99.136411][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.186763][ T9] usb 5-1: config 0 descriptor?? [ 99.270475][ T6064] loop8: detected capacity change from 0 to 7 [ 99.288975][ T6064] Dev loop8: unable to read RDB block 7 [ 99.289007][ T6064] loop8: unable to read partition table [ 99.289617][ T6064] loop8: partition table beyond EOD, truncated [ 99.289848][ T6064] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 99.435337][ T5795] usb 2-1: USB disconnect, device number 3 [ 99.440523][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.522831][ T6067] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.011929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.281708][ T9] ath6kl: Failed to submit usb control message: -110 [ 100.281807][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 100.281907][ T9] ath6kl: Unable to send get target info: -110 [ 100.286178][ T9] ath6kl: Failed to init ath6kl core: -110 [ 100.334144][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 100.378237][ T5877] usb 5-1: USB disconnect, device number 5 [ 100.761060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.761450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.111014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.261025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.832045][ T6093] loop8: detected capacity change from 0 to 8 [ 101.845594][ T6093] Dev loop8: unable to read RDB block 8 [ 101.845656][ T6093] loop8: unable to read partition table [ 101.845861][ T6093] loop8: partition table beyond EOD, truncated [ 101.845878][ T6093] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 103.615962][ T6112] loop8: detected capacity change from 0 to 7 [ 103.882921][ T5877] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.932128][ T5912] Dev loop8: unable to read RDB block 7 [ 103.932179][ T5912] loop8: unable to read partition table [ 103.932410][ T5912] loop8: partition table beyond EOD, truncated [ 103.955085][ T6112] Dev loop8: unable to read RDB block 7 [ 103.955130][ T6112] loop8: unable to read partition table [ 103.955348][ T6112] loop8: partition table beyond EOD, truncated [ 103.955383][ T6112] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 104.031527][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 104.067302][ T5877] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 104.067330][ T5877] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 104.067351][ T5877] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 104.067368][ T5877] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 104.067386][ T5877] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.067406][ T5877] usb 3-1: config 0 has no interface number 0 [ 104.067450][ T5877] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 104.067477][ T5877] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 104.067498][ T5877] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.067532][ T5877] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.067558][ T5877] usb 3-1: config 0 interface 125 has no altsetting 0 [ 104.078107][ T5877] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 104.078136][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.078165][ T5877] usb 3-1: Product: syz [ 104.078178][ T5877] usb 3-1: Manufacturer: syz [ 104.078190][ T5877] usb 3-1: SerialNumber: syz [ 104.246588][ T5877] usb 3-1: config 0 descriptor?? [ 104.289694][ T6124] loop8: detected capacity change from 0 to 8 [ 104.306946][ T6124] Dev loop8: unable to read RDB block 8 [ 104.306996][ T6124] loop8: unable to read partition table [ 104.307515][ T6124] loop8: partition table beyond EOD, truncated [ 104.307548][ T6124] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 104.582026][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.781126][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 104.783427][ T36] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.783453][ T36] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.783474][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.783533][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.783555][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.783578][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.783618][ T36] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.783640][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.813466][ T36] usb 4-1: config 0 descriptor?? [ 104.915079][ T5795] usb 3-1: USB disconnect, device number 3 [ 105.077294][ T36] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.097250][ T36] usb 4-1: USB disconnect, device number 3 [ 105.153299][ T36] usblp0: removed [ 106.473861][ T36] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.624210][ T36] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 106.624239][ T36] usb 4-1: config 5 has no interface number 0 [ 106.624281][ T36] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 106.624308][ T36] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 106.624334][ T36] usb 4-1: config 5 interface 123 has no altsetting 0 [ 106.640245][ T36] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 106.640273][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.640292][ T36] usb 4-1: Product: syz [ 106.640305][ T36] usb 4-1: Manufacturer: syz [ 106.640318][ T36] usb 4-1: SerialNumber: syz [ 106.739024][ T6121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.739946][ T36] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 107.767594][ T36] usb 4-1: USB disconnect, device number 4 [ 107.842938][ T6155] loop8: detected capacity change from 0 to 7 [ 107.879092][ T6155] Dev loop8: unable to read RDB block 7 [ 107.879139][ T6155] loop8: unable to read partition table [ 107.879350][ T6155] loop8: partition table beyond EOD, truncated [ 107.879369][ T6155] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 108.422863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.424048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.171110][ T5860] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.325243][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 110.325275][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 110.325316][ T5860] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.325339][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.363093][ T5860] usb 5-1: config 0 descriptor?? [ 110.390633][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.956595][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 110.971626][ T5877] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 110.971649][ T5877] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 110.971660][ T5877] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 110.971670][ T5877] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 110.971681][ T5877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.971699][ T5877] usb 4-1: config 0 has no interface number 0 [ 110.971745][ T5877] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 110.971772][ T5877] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 110.971794][ T5877] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.971819][ T5877] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.971833][ T5877] usb 4-1: config 0 interface 125 has no altsetting 0 [ 110.976610][ T5877] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 110.976638][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.976657][ T5877] usb 4-1: Product: syz [ 110.976670][ T5877] usb 4-1: Manufacturer: syz [ 110.976684][ T5877] usb 4-1: SerialNumber: syz [ 110.995002][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.995551][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.003531][ T5877] usb 4-1: config 0 descriptor?? [ 111.060311][ T6167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.459958][ T5795] usb 4-1: USB disconnect, device number 5 [ 111.491381][ T5860] ath6kl: Failed to submit usb control message: -110 [ 111.491427][ T5860] ath6kl: unable to send the bmi data to the device: -110 [ 111.491442][ T5860] ath6kl: Unable to send get target info: -110 [ 111.492267][ T5860] ath6kl: Failed to init ath6kl core: -110 [ 111.493687][ T5860] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 112.277568][ T5860] usb 5-1: USB disconnect, device number 6 [ 112.517433][ T6196] loop8: detected capacity change from 0 to 7 [ 112.541203][ T6196] Dev loop8: unable to read RDB block 7 [ 112.541256][ T6196] loop8: unable to read partition table [ 112.541469][ T6196] loop8: partition table beyond EOD, truncated [ 112.541507][ T6196] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 112.651347][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.941067][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 112.943857][ T5860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 114.013022][ T5860] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.40 [ 114.013053][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.013072][ T5860] usb 2-1: Product: syz [ 114.013086][ T5860] usb 2-1: Manufacturer: syz [ 114.013100][ T5860] usb 2-1: SerialNumber: syz [ 114.364539][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 114.389681][ T5860] usbhid 2-1:1.0: can't add hid device: -71 [ 114.389799][ T5860] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 114.445160][ T5860] usb 2-1: USB disconnect, device number 4 [ 115.071117][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.223458][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 115.223490][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 115.223530][ T36] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 115.223552][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.241067][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.552817][ T36] usb 1-1: config 0 descriptor?? [ 115.568594][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 115.568613][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 115.568636][ T5860] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 115.568648][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.619947][ T5860] usb 2-1: config 0 descriptor?? [ 115.779418][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.790087][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.817144][ T6228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.837069][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.837502][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.864557][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.612970][ T6241] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01) [ 116.613014][ T6241] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 116.691549][ T36] ath6kl: Failed to submit usb control message: -110 [ 116.691601][ T36] ath6kl: unable to send the bmi data to the device: -110 [ 116.691616][ T36] ath6kl: Unable to send get target info: -110 [ 116.692189][ T5860] ath6kl: Failed to submit usb control message: -110 [ 116.692233][ T5860] ath6kl: unable to send the bmi data to the device: -110 [ 116.692247][ T5860] ath6kl: Unable to send get target info: -110 [ 116.695059][ T5860] ath6kl: Failed to init ath6kl core: -110 [ 116.696482][ T5860] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 116.802435][ T1159] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 116.802921][ T1159] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 116.805685][ T1159] wlan1: authentication with 50:50:50:50:50:50 timed out [ 116.861127][ T5779] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.949956][ T36] ath6kl: Failed to init ath6kl core: -110 [ 117.529603][ T36] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 117.568611][ T5860] usb 2-1: USB disconnect, device number 5 [ 117.733158][ T5779] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 117.733191][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 117.733231][ T5779] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 117.733253][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.738162][ T5779] usb 4-1: config 0 descriptor?? [ 117.960353][ T6250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.267408][ T6265] binder: 6264:6265 ioctl 4018620d 0 returned -22 [ 118.367370][ T5778] usb 1-1: USB disconnect, device number 4 [ 118.801219][ T5779] ath6kl: Failed to submit usb control message: -110 [ 118.801268][ T5779] ath6kl: unable to send the bmi data to the device: -110 [ 118.801283][ T5779] ath6kl: Unable to send get target info: -110 [ 118.802142][ T5779] ath6kl: Failed to init ath6kl core: -110 [ 118.803545][ T5779] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 118.963473][ T5778] usb 4-1: USB disconnect, device number 6 [ 120.324130][ T6277] blktrace: Concurrent blktraces are not allowed on nullb0 [ 124.966756][ T6306] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 124.966992][ T6306] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 124.967121][ T6306] Zero length message leads to an empty skb [ 125.066559][ T6309] loop8: detected capacity change from 0 to 8 [ 125.067351][ T6309] Dev loop8: unable to read RDB block 8 [ 125.067404][ T6309] loop8: unable to read partition table [ 125.067609][ T6309] loop8: partition table beyond EOD, truncated [ 125.067637][ T6309] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 125.101088][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.172681][ T6313] blktrace: Concurrent blktraces are not allowed on nullb0 [ 125.274041][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 125.276641][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 125.276668][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 125.276688][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 125.276749][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 125.276771][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 125.276794][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.276836][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.276858][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.394839][ T9] usb 1-1: config 0 descriptor?? [ 125.940526][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.972850][ T9] usb 1-1: USB disconnect, device number 5 [ 125.993292][ T9] usblp0: removed [ 127.021137][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 127.185463][ T9] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 127.185490][ T9] usb 1-1: config 5 has no interface number 0 [ 127.185541][ T9] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 127.185567][ T9] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 127.185593][ T9] usb 1-1: config 5 interface 123 has no altsetting 0 [ 127.192545][ T9] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 127.192572][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.192591][ T9] usb 1-1: Product: syz [ 127.192604][ T9] usb 1-1: Manufacturer: syz [ 127.192617][ T9] usb 1-1: SerialNumber: syz [ 127.255600][ T6302] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.922607][ T9] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 127.929254][ T9] usb 1-1: USB disconnect, device number 6 [ 128.134751][ T6343] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.155263][ T6343] tipc: Enabling of bearer rejected, failed to enable media [ 128.159649][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 129.305869][ T6360] FAULT_INJECTION: forcing a failure. [ 129.305869][ T6360] name failslab, interval 1, probability 0, space 0, times 1 [ 129.305917][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.4.142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.305939][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.305956][ T6360] Call Trace: [ 129.305967][ T6360] [ 129.305975][ T6360] dump_stack_lvl+0xe8/0x150 [ 129.306015][ T6360] should_fail_ex+0x46b/0x600 [ 129.306048][ T6360] should_failslab+0xa8/0x100 [ 129.306076][ T6360] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 129.306102][ T6360] ? alloc_vmap_area+0x229/0x14b0 [ 129.306131][ T6360] alloc_vmap_area+0x229/0x14b0 [ 129.306168][ T6360] ? __pfx_alloc_vmap_area+0x10/0x10 [ 129.306193][ T6360] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 129.306218][ T6360] ? __get_vm_area_node+0x171/0x350 [ 129.306240][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.306264][ T6360] __get_vm_area_node+0x226/0x350 [ 129.306292][ T6360] __vmalloc_node_range_noprof+0x372/0x1730 [ 129.306316][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.306341][ T6360] ? check_noncircular+0xda/0x150 [ 129.306368][ T6360] ? lockdep_unlock+0x5d/0xd0 [ 129.306391][ T6360] ? __lock_acquire+0x146e/0x2cf0 [ 129.306420][ T6360] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.306458][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.306479][ T6360] __vmalloc_noprof+0xd2/0x120 [ 129.306546][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.306571][ T6360] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.306597][ T6360] bpf_prog_alloc+0x3c/0x1a0 [ 129.306620][ T6360] bpf_prog_load+0x7ba/0x1ae0 [ 129.306656][ T6360] ? __pfx_bpf_prog_load+0x10/0x10 [ 129.306696][ T6360] ? bpf_lsm_bpf+0x9/0x20 [ 129.306714][ T6360] ? security_bpf+0x7e/0x2d0 [ 129.306741][ T6360] __sys_bpf+0x618/0x950 [ 129.306764][ T6360] ? __pfx___sys_bpf+0x10/0x10 [ 129.306782][ T6360] ? rt_mutex_slowunlock+0x1cb/0x300 [ 129.306817][ T6360] ? ksys_write+0x248/0x270 [ 129.306843][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 129.306873][ T6360] __x64_sys_bpf+0x7c/0x90 [ 129.306893][ T6360] do_syscall_64+0x14d/0xf80 [ 129.306916][ T6360] ? trace_irq_disable+0x3b/0x150 [ 129.306935][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.306953][ T6360] ? clear_bhb_loop+0x40/0x90 [ 129.306975][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.306993][ T6360] RIP: 0033:0x7f125189c799 [ 129.307017][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.307032][ T6360] RSP: 002b:00007f124faf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.307052][ T6360] RAX: ffffffffffffffda RBX: 00007f1251b15fa0 RCX: 00007f125189c799 [ 129.307066][ T6360] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 129.307077][ T6360] RBP: 00007f124faf6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.307088][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.307099][ T6360] R13: 00007f1251b16038 R14: 00007f1251b15fa0 R15: 00007fff57c23498 [ 129.307127][ T6360] [ 129.307330][ T6360] syz.4.142: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 129.307614][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz.4.142 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.307635][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.307644][ T6360] Call Trace: [ 129.307651][ T6360] [ 129.307659][ T6360] dump_stack_lvl+0xe8/0x150 [ 129.307687][ T6360] warn_alloc+0x263/0x3e0 [ 129.307716][ T6360] ? kasan_quarantine_put+0xbb/0x1f0 [ 129.307743][ T6360] ? __pfx_warn_alloc+0x10/0x10 [ 129.307770][ T6360] ? __get_vm_area_node+0x23f/0x350 [ 129.307791][ T6360] ? __get_vm_area_node+0x171/0x350 [ 129.307815][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.307838][ T6360] ? __get_vm_area_node+0x23f/0x350 [ 129.307867][ T6360] __vmalloc_node_range_noprof+0x397/0x1730 [ 129.307895][ T6360] ? check_noncircular+0xda/0x150 [ 129.307923][ T6360] ? lockdep_unlock+0x5d/0xd0 [ 129.307944][ T6360] ? __lock_acquire+0x146e/0x2cf0 [ 129.307974][ T6360] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.308011][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.308031][ T6360] __vmalloc_noprof+0xd2/0x120 [ 129.308055][ T6360] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.308079][ T6360] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 129.308104][ T6360] bpf_prog_alloc+0x3c/0x1a0 [ 129.308128][ T6360] bpf_prog_load+0x7ba/0x1ae0 [ 129.308163][ T6360] ? __pfx_bpf_prog_load+0x10/0x10 [ 129.308204][ T6360] ? bpf_lsm_bpf+0x9/0x20 [ 129.308220][ T6360] ? security_bpf+0x7e/0x2d0 [ 129.308247][ T6360] __sys_bpf+0x618/0x950 [ 129.308270][ T6360] ? __pfx___sys_bpf+0x10/0x10 [ 129.308288][ T6360] ? rt_mutex_slowunlock+0x1cb/0x300 [ 129.308322][ T6360] ? ksys_write+0x248/0x270 [ 129.308348][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 129.308379][ T6360] __x64_sys_bpf+0x7c/0x90 [ 129.308399][ T6360] do_syscall_64+0x14d/0xf80 [ 129.308421][ T6360] ? trace_irq_disable+0x3b/0x150 [ 129.308441][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.308459][ T6360] ? clear_bhb_loop+0x40/0x90 [ 129.308481][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.308507][ T6360] RIP: 0033:0x7f125189c799 [ 129.308523][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.308537][ T6360] RSP: 002b:00007f124faf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.308555][ T6360] RAX: ffffffffffffffda RBX: 00007f1251b15fa0 RCX: 00007f125189c799 [ 129.308568][ T6360] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 129.308580][ T6360] RBP: 00007f124faf6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.308591][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.308602][ T6360] R13: 00007f1251b16038 R14: 00007f1251b15fa0 R15: 00007fff57c23498 [ 129.308630][ T6360] [ 129.308643][ T6360] Mem-Info: [ 129.308654][ T6360] active_anon:254 inactive_anon:9497 isolated_anon:0 [ 129.308654][ T6360] active_file:5362 inactive_file:37857 isolated_file:0 [ 129.308654][ T6360] unevictable:768 dirty:348 writeback:0 [ 129.308654][ T6360] slab_reclaimable:11516 slab_unreclaimable:100055 [ 129.308654][ T6360] mapped:33014 shmem:4451 pagetables:1373 [ 129.308654][ T6360] sec_pagetables:0 bounce:0 [ 129.308654][ T6360] kernel_misc_reclaimable:0 [ 129.308654][ T6360] free:1330878 free_pcp:4269 free_cma:0 [ 129.308705][ T6360] Node 0 active_anon:1016kB inactive_anon:37988kB active_file:21248kB inactive_file:151428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132056kB dirty:1392kB writeback:0kB shmem:16268kB kernel_stack:12916kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.308749][ T6360] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.308789][ T6360] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.308848][ T6360] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 129.308879][ T6360] Node 0 DMA32 free:1380476kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:37988kB active_file:21248kB inactive_file:151428kB unevictable:1536kB writepending:1392kB zspages:0kB present:3129332kB managed:2566628kB mlocked:0kB bounce:0kB free_pcp:17060kB local_pcp:13688kB free_cma:0kB [ 129.308937][ T6360] lowmem_reserve[]: 0 0 0 0 0 [ 129.308966][ T6360] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.309018][ T6360] lowmem_reserve[]: 0 0 0 0 0 [ 129.309048][ T6360] Node 1 Normal free:3927676kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.309286][ T6360] lowmem_reserve[]: 0 0 0 0 0 [ 129.309318][ T6360] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.309425][ T6360] Node 0 DMA32: 1487*4kB (U) 1119*8kB (UE) 728*16kB (UME) 66*32kB (UME) 62*64kB (UE) 15*128kB (UME) 37*256kB (ME) 22*512kB (UM) 8*1024kB (UM) 3*2048kB (ME) 320*4096kB (M) = 1380340kB [ 129.309575][ T6360] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.309666][ T6360] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 10*16kB (UM) 12*32kB (UM) 5*64kB (UM) 4*128kB (UM) 5*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 956*4096kB (M) = 3927676kB [ 129.309809][ T6360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.309824][ T6360] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.309839][ T6360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.309854][ T6360] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.309868][ T6360] 47691 total pagecache pages [ 129.309881][ T6360] 0 pages in swap cache [ 129.309887][ T6360] Free swap = 124996kB [ 129.309894][ T6360] Total swap = 124996kB [ 129.309901][ T6360] 2097051 pages RAM [ 129.309907][ T6360] 0 pages HighMem/MovableOnly [ 129.309914][ T6360] 423674 pages reserved [ 129.309920][ T6360] 0 pages cma reserved [ 132.462506][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.611176][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 132.613276][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.623927][ T9] usb 1-1: string descriptor 0 read error: -22 [ 132.624059][ T9] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.40 [ 132.624081][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.852456][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852536][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.891134][ T5778] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.041101][ T5778] usb 4-1: Using ep0 maxpacket: 16 [ 133.053634][ T5778] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 133.053662][ T5778] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.053680][ T5778] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.054208][ T5778] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.054228][ T5778] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.054248][ T5778] usb 4-1: config 0 has no interface number 0 [ 133.054292][ T5778] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 133.054986][ T5778] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.055009][ T5778] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.055044][ T5778] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.055069][ T5778] usb 4-1: config 0 interface 125 has no altsetting 0 [ 133.071476][ T5778] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 133.071504][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.071882][ T5778] usb 4-1: Product: syz [ 133.071897][ T5778] usb 4-1: Manufacturer: syz [ 133.071911][ T5778] usb 4-1: SerialNumber: syz [ 133.094121][ T5778] usb 4-1: config 0 descriptor?? [ 133.109459][ T9] usbhid 1-1:1.0: can't add hid device: -32 [ 133.109781][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 133.186168][ T9] usb 1-1: USB disconnect, device number 7 [ 133.347762][ T5875] usb 4-1: USB disconnect, device number 7 [ 133.566658][ T6387] Bluetooth: MGMT ver 1.23 [ 133.566700][ T6387] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 135.596361][ T6404] loop8: detected capacity change from 0 to 8 [ 135.598485][ T6404] Dev loop8: unable to read RDB block 8 [ 135.598528][ T6404] loop8: unable to read partition table [ 135.598728][ T6404] loop8: partition table beyond EOD, truncated [ 135.598754][ T6404] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 135.713404][ T6411] netlink: 14 bytes leftover after parsing attributes in process `syz.1.157'. [ 135.925882][ T6411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.014126][ T6411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.032941][ T6411] bond0 (unregistering): Released all slaves [ 136.041132][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.041308][ T5778] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.068844][ T6399] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.087845][ T6399] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.181133][ T5778] usb 1-1: device descriptor read/64, error -71 [ 136.192050][ T36] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.208125][ T5875] usb 4-1: config 248 has an invalid interface number: 255 but max is 1 [ 136.208159][ T5875] usb 4-1: config 248 has an invalid interface number: 80 but max is 1 [ 136.208181][ T5875] usb 4-1: config 248 has no interface number 0 [ 136.208196][ T5875] usb 4-1: config 248 has no interface number 1 [ 136.208234][ T5875] usb 4-1: config 248 interface 255 altsetting 25 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 136.208248][ T5875] usb 4-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0x7, skipping [ 136.208260][ T5875] usb 4-1: config 248 interface 255 altsetting 25 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 136.208273][ T5875] usb 4-1: config 248 interface 255 altsetting 25 endpoint 0xE has invalid wMaxPacketSize 0 [ 136.208284][ T5875] usb 4-1: config 248 interface 255 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 136.208296][ T5875] usb 4-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0x7, skipping [ 136.208306][ T5875] usb 4-1: config 248 interface 255 altsetting 25 has an endpoint descriptor with address 0x1E, changing to 0xE [ 136.208319][ T5875] usb 4-1: config 248 interface 255 altsetting 25 has a duplicate endpoint with address 0xE, skipping [ 136.208337][ T5875] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 136.208349][ T5875] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 136.208359][ T5875] usb 4-1: config 248 interface 80 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 136.208371][ T5875] usb 4-1: config 248 interface 80 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 136.208384][ T5875] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 136.208395][ T5875] usb 4-1: config 248 interface 80 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 136.208408][ T5875] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 136.208419][ T5875] usb 4-1: config 248 interface 80 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 136.208430][ T5875] usb 4-1: config 248 interface 255 has no altsetting 0 [ 136.208439][ T5875] usb 4-1: config 248 interface 80 has no altsetting 0 [ 136.210891][ T5875] usb 4-1: New USB device found, idVendor=0bb4, idProduct=abd1, bcdDevice=8b.98 [ 136.210917][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.210935][ T5875] usb 4-1: Product: syz [ 136.211028][ T5875] usb 4-1: Manufacturer: syz [ 136.211042][ T5875] usb 4-1: SerialNumber: syz [ 136.331058][ T36] usb 3-1: device descriptor read/64, error -71 [ 136.561349][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.562111][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.570486][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.574721][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.605972][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.606782][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.611159][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.617315][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.638519][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.639438][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.699454][ T5778] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.718764][ T36] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.773054][ T5875] usb 4-1: USB disconnect, device number 8 [ 136.831080][ T5778] usb 1-1: device descriptor read/64, error -71 [ 136.851061][ T36] usb 3-1: device descriptor read/64, error -71 [ 136.943696][ T5778] usb usb1-port1: attempt power cycle [ 136.961660][ T36] usb usb3-port1: attempt power cycle [ 137.281727][ T5778] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.306973][ T5778] usb 1-1: device descriptor read/8, error -71 [ 137.318674][ T36] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.341908][ T36] usb 3-1: device descriptor read/8, error -71 [ 137.611156][ T5778] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.099077][ T36] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.306050][ T36] usb 3-1: device descriptor read/8, error -71 [ 138.474627][ T36] usb usb3-port1: unable to enumerate USB device [ 138.635796][ T5778] usb 1-1: device descriptor read/8, error -71 [ 138.769455][ T5778] usb usb1-port1: unable to enumerate USB device [ 141.180194][ T6442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.853667][ T6444] ptrace attach of "./syz-executor exec"[6445] was attempted by "./syz-executor exec"[6444] [ 143.278372][ T6448] loop8: detected capacity change from 0 to 8 [ 143.320861][ T6448] Dev loop8: unable to read RDB block 8 [ 143.320919][ T6448] loop8: unable to read partition table [ 143.337271][ T6448] loop8: partition table beyond EOD, truncated [ 143.337321][ T6448] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 143.662847][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'. [ 144.880558][ T6461] FAULT_INJECTION: forcing a failure. [ 144.880558][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 144.880592][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.880611][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.880621][ T6461] Call Trace: [ 144.880630][ T6461] [ 144.880641][ T6461] dump_stack_lvl+0xe8/0x150 [ 144.880673][ T6461] should_fail_ex+0x46b/0x600 [ 144.880706][ T6461] should_failslab+0xa8/0x100 [ 144.880734][ T6461] __kmalloc_node_noprof+0xe7/0x7f0 [ 144.880762][ T6461] ? alloc_slab_obj_exts+0x4b/0x1a0 [ 144.880784][ T6461] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 144.880811][ T6461] alloc_slab_obj_exts+0x4b/0x1a0 [ 144.880838][ T6461] __memcg_slab_post_alloc_hook+0x525/0xa30 [ 144.880877][ T6461] __kmalloc_noprof+0x474/0x7b0 [ 144.880901][ T6461] ? load_msg+0xd1/0x3b0 [ 144.880925][ T6461] load_msg+0xd1/0x3b0 [ 144.880950][ T6461] do_msgsnd+0x1a9/0x1540 [ 144.880969][ T6461] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 144.880992][ T6461] ? rt_mutex_slowunlock+0x1cb/0x300 [ 144.881011][ T6461] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 144.881041][ T6461] ? __pfx_do_msgsnd+0x10/0x10 [ 144.881064][ T6461] ? __might_fault+0xaf/0x130 [ 144.881093][ T6461] ? __x64_sys_msgsnd+0xee/0x120 [ 144.881116][ T6461] do_syscall_64+0x14d/0xf80 [ 144.881139][ T6461] ? trace_irq_disable+0x3b/0x150 [ 144.881158][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.881176][ T6461] ? clear_bhb_loop+0x40/0x90 [ 144.881198][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.881217][ T6461] RIP: 0033:0x7fd68ca2c799 [ 144.881234][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.881250][ T6461] RSP: 002b:00007fd68ac65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 144.881269][ T6461] RAX: ffffffffffffffda RBX: 00007fd68cca6090 RCX: 00007fd68ca2c799 [ 144.881283][ T6461] RDX: 0000000000002000 RSI: 0000200000000340 RDI: 0000000000000000 [ 144.881295][ T6461] RBP: 00007fd68ac65090 R08: 0000000000000000 R09: 0000000000000000 [ 144.881306][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.881317][ T6461] R13: 00007fd68cca6128 R14: 00007fd68cca6090 R15: 00007ffceee3d268 [ 144.881345][ T6461] [ 147.291816][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 147.471386][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 147.496929][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 147.496960][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.503629][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 147.503657][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.503675][ T31] usb 1-1: Product: syz [ 147.503688][ T31] usb 1-1: Manufacturer: syz [ 147.503701][ T31] usb 1-1: SerialNumber: syz [ 147.508593][ T31] usb 1-1: config 0 descriptor?? [ 147.525505][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 147.525541][ T31] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 147.572177][ T5778] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.782581][ T5778] usb 2-1: device descriptor read/64, error -71 [ 148.168623][ T6481] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 148.287711][ T31] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 148.288215][ T31] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 148.311134][ T5778] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.451386][ T5778] usb 2-1: device descriptor read/64, error -71 [ 148.511096][ T31] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 148.511118][ T31] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 148.511132][ T31] em28xx 1-1:0.0: No AC97 audio processor [ 148.571502][ T5778] usb usb2-port1: attempt power cycle [ 148.670358][ T6486] loop8: detected capacity change from 0 to 8 [ 148.705216][ T6486] Dev loop8: unable to read RDB block 8 [ 148.705257][ T6486] loop8: unable to read partition table [ 148.705462][ T6486] loop8: partition table beyond EOD, truncated [ 148.705489][ T6486] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.804077][ T31] usb 1-1: USB disconnect, device number 12 [ 148.808057][ T31] em28xx 1-1:0.0: Disconnecting em28xx [ 148.828755][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 148.885355][ T31] em28xx 1-1:0.0: Freeing device [ 148.911103][ T5778] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.941500][ T5778] usb 2-1: device descriptor read/8, error -71 [ 149.207345][ T6502] capability: warning: `syz.2.192' uses 32-bit capabilities (legacy support in use) [ 149.214806][ T6502] program syz.2.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.226410][ T6502] program syz.2.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.292054][ T5778] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.963677][ T5778] usb 2-1: device descriptor read/8, error -71 [ 150.229062][ T5778] usb usb2-port1: unable to enumerate USB device [ 150.560669][ T5108] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 150.560731][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.560757][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS G[ 150.560757][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.560771][ T5108] Workqueue: hci4 hci_rx_work [ 150.560803][ T5108] Call Trace: [ 150.560813][ T5108] [ 150.560822][ T5108] dump_stack_lvl+0xe8/0x150 [ 150.560864][ T5108] sysfs_create_dir_ns+0x271/0x2a0 [ 150.560888][ T5108] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 150.560914][ T5108] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 150.560937][ T5108] ? __rcu_read_unlock+0x83/0xe0 [ 150.560962][ T5108] ? rt_spin_unlock+0x160/0x200 [ 150.560986][ T5108] kobject_add_internal+0x631/0xd10 [ 150.561026][ T5108] kobject_add+0x163/0x240 [ 150.561060][ T5108] ? __pfx_kobject_add+0x10/0x10 [ 150.561098][ T5108] ? get_device_parent+0x370/0x3a0 [ 150.561132][ T5108] device_add+0x408/0xb80 [ 150.561165][ T5108] hci_conn_add_sysfs+0xd5/0x210 [ 150.561193][ T5108] le_conn_complete_evt+0xf1d/0x1430 [ 150.561234][ T5108] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 150.561272][ T5108] ? skb_pull_data+0xfb/0x200 [ 150.561307][ T5108] hci_le_conn_complete_evt+0x187/0x470 [ 150.561343][ T5108] hci_event_packet+0x7af/0x12c0 [ 150.561375][ T5108] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 150.561403][ T5108] ? __pfx_hci_event_packet+0x10/0x10 [ 150.561428][ T5108] ? preempt_schedule_common+0x82/0xd0 [ 150.561454][ T5108] ? preempt_schedule_thunk+0x16/0x30 [ 150.561483][ T5108] ? hci_send_to_monitor+0xe2/0x590 [ 150.561507][ T5108] hci_rx_work+0x3ee/0x1030 [ 150.561534][ T5108] ? preempt_schedule_thunk+0x16/0x30 [ 150.561560][ T5108] ? process_scheduled_works+0xa25/0x1830 [ 150.561590][ T5108] process_scheduled_works+0xb02/0x1830 [ 150.561646][ T5108] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.561680][ T5108] ? assign_work+0x3d5/0x5e0 [ 150.561712][ T5108] worker_thread+0xa50/0xfc0 [ 150.561768][ T5108] kthread+0x388/0x470 [ 150.561790][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 150.561815][ T5108] ? __pfx_kthread+0x10/0x10 [ 150.561845][ T5108] ret_from_fork+0x51e/0xb90 [ 150.561877][ T5108] ? __pfx_ret_from_fork+0x10/0x10 [ 150.561902][ T5108] ? __switch_to+0xc7d/0x1450 [ 150.561932][ T5108] ? __pfx_kthread+0x10/0x10 [ 150.561954][ T5108] ret_from_fork_asm+0x1a/0x30 [ 150.561992][ T5108] [ 150.562936][ T5108] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.563282][ T5108] Bluetooth: hci4: failed to register connection device [ 150.700205][ T5108] ================================================================== [ 150.700225][ T5108] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.700262][ T5108] Read of size 8 at addr ffff88803f2047b0 by task kworker/u9:1/5108 [ 150.700280][ T5108] [ 150.700294][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.700318][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.700333][ T5108] Workqueue: hci4 hci_rx_work [ 150.700359][ T5108] Call Trace: [ 150.700368][ T5108] [ 150.700377][ T5108] dump_stack_lvl+0xe8/0x150 [ 150.700409][ T5108] print_report+0xba/0x230 [ 150.700434][ T5108] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.700456][ T5108] kasan_report+0x117/0x150 [ 150.700489][ T5108] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.700517][ T5108] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.700543][ T5108] l2cap_connect_cfm+0x368/0x1390 [ 150.700569][ T5108] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 150.700591][ T5108] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 150.700618][ T5108] ? mutex_lock_nested+0x152/0x1d0 [ 150.700638][ T5108] ? hci_connect_cfm+0x2c/0x140 [ 150.700665][ T5108] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 150.700685][ T5108] hci_connect_cfm+0x95/0x140 [ 150.700714][ T5108] le_conn_complete_evt+0xf65/0x1430 [ 150.700750][ T5108] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 150.700784][ T5108] ? skb_pull_data+0xfb/0x200 [ 150.700815][ T5108] hci_le_conn_complete_evt+0x187/0x470 [ 150.700847][ T5108] hci_event_packet+0x7af/0x12c0 [ 150.700875][ T5108] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 150.700902][ T5108] ? __pfx_hci_event_packet+0x10/0x10 [ 150.700935][ T5108] ? preempt_schedule_common+0x82/0xd0 [ 150.700956][ T5108] ? preempt_schedule_thunk+0x16/0x30 [ 150.700978][ T5108] ? hci_send_to_monitor+0xe2/0x590 [ 150.700999][ T5108] hci_rx_work+0x3ee/0x1030 [ 150.701025][ T5108] ? preempt_schedule_thunk+0x16/0x30 [ 150.701049][ T5108] ? process_scheduled_works+0xa25/0x1830 [ 150.701077][ T5108] process_scheduled_works+0xb02/0x1830 [ 150.701120][ T5108] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.701149][ T5108] ? assign_work+0x3d5/0x5e0 [ 150.701178][ T5108] worker_thread+0xa50/0xfc0 [ 150.701221][ T5108] kthread+0x388/0x470 [ 150.701241][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 150.701266][ T5108] ? __pfx_kthread+0x10/0x10 [ 150.701286][ T5108] ret_from_fork+0x51e/0xb90 [ 150.701314][ T5108] ? __pfx_ret_from_fork+0x10/0x10 [ 150.701339][ T5108] ? __switch_to+0xc7d/0x1450 [ 150.701364][ T5108] ? __pfx_kthread+0x10/0x10 [ 150.701384][ T5108] ret_from_fork_asm+0x1a/0x30 [ 150.701413][ T5108] [ 150.701420][ T5108] [ 150.701424][ T5108] Allocated by task 5108: [ 150.701433][ T5108] kasan_save_track+0x3e/0x80 [ 150.701458][ T5108] __kasan_kmalloc+0x93/0xb0 [ 150.701482][ T5108] __kmalloc_noprof+0x3e7/0x7b0 [ 150.701507][ T5108] sk_prot_alloc+0xe7/0x210 [ 150.701529][ T5108] sk_alloc+0x3a/0x390 [ 150.701550][ T5108] bt_sock_alloc+0x3b/0x310 [ 150.701574][ T5108] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 150.701595][ T5108] l2cap_connect_cfm+0x368/0x1390 [ 150.701612][ T5108] hci_connect_cfm+0x95/0x140 [ 150.701636][ T5108] le_conn_complete_evt+0xf65/0x1430 [ 150.701662][ T5108] hci_le_conn_complete_evt+0x187/0x470 [ 150.701687][ T5108] hci_event_packet+0x7af/0x12c0 [ 150.701707][ T5108] hci_rx_work+0x3ee/0x1030 [ 150.701728][ T5108] process_scheduled_works+0xb02/0x1830 [ 150.701751][ T5108] worker_thread+0xa50/0xfc0 [ 150.701775][ T5108] kthread+0x388/0x470 [ 150.701791][ T5108] ret_from_fork+0x51e/0xb90 [ 150.701814][ T5108] ret_from_fork_asm+0x1a/0x30 [ 150.701830][ T5108] [ 150.701834][ T5108] Freed by task 6504: [ 150.701843][ T5108] kasan_save_track+0x3e/0x80 [ 150.701866][ T5108] kasan_save_free_info+0x46/0x50 [ 150.701886][ T5108] __kasan_slab_free+0x5c/0x80 [ 150.701909][ T5108] kfree+0x1c1/0x6c0 [ 150.701937][ T5108] __sk_destruct+0x626/0x880 [ 150.701959][ T5108] l2cap_sock_cleanup_listen+0xe0/0x440 [ 150.701980][ T5108] l2cap_sock_release+0x6e/0x270 [ 150.701997][ T5108] sock_close+0xc3/0x240 [ 150.702011][ T5108] __fput+0x461/0xa90 [ 150.702031][ T5108] task_work_run+0x1d9/0x270 [ 150.702051][ T5108] exit_to_user_mode_loop+0xed/0x480 [ 150.702078][ T5108] do_syscall_64+0x32d/0xf80 [ 150.702101][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.702120][ T5108] [ 150.702124][ T5108] The buggy address belongs to the object at ffff88803f204000 [ 150.702124][ T5108] which belongs to the cache kmalloc-2k of size 2048 [ 150.702141][ T5108] The buggy address is located 1968 bytes inside of [ 150.702141][ T5108] freed 2048-byte region [ffff88803f204000, ffff88803f204800) [ 150.702162][ T5108] [ 150.702167][ T5108] The buggy address belongs to the physical page: [ 150.702178][ T5108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f207000 pfn:0x3f200 [ 150.702198][ T5108] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 150.702215][ T5108] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 150.702231][ T5108] page_type: f5(slab) [ 150.702250][ T5108] raw: 0080000000000240 ffff88813fe1d000 ffffea0000a2be10 ffff88813fe17c88 [ 150.702267][ T5108] raw: ffff88803f207000 0000000800080007 00000000f5000000 0000000000000000 [ 150.702286][ T5108] head: 0080000000000240 ffff88813fe1d000 ffffea0000a2be10 ffff88813fe17c88 [ 150.702303][ T5108] head: ffff88803f207000 0000000800080007 00000000f5000000 0000000000000000 [ 150.702321][ T5108] head: 0080000000000003 ffffea0000fc8001 00000000ffffffff 00000000ffffffff [ 150.702338][ T5108] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 150.702348][ T5108] page dumped because: kasan: bad access detected [ 150.702368][ T5108] page_owner tracks the page as allocated [ 150.702376][ T5108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5147, tgid 5147 (klogd), ts 81492685029, free_ts 81417496207 [ 150.702411][ T5108] post_alloc_hook+0x231/0x280 [ 150.702436][ T5108] get_page_from_freelist+0x28bb/0x2950 [ 150.702454][ T5108] __alloc_frozen_pages_noprof+0x18d/0x380 [ 150.702472][ T5108] allocate_slab+0x77/0x660 [ 150.702491][ T5108] refill_objects+0x334/0x3c0 [ 150.702509][ T5108] __pcs_replace_empty_main+0x328/0x5f0 [ 150.702530][ T5108] __kmalloc_cache_noprof+0x44e/0x690 [ 150.702555][ T5108] syslog_print+0x103/0x610 [ 150.702574][ T5108] do_syslog+0x583/0x7d0 [ 150.702592][ T5108] __x64_sys_syslog+0x7c/0x90 [ 150.702611][ T5108] do_syscall_64+0x14d/0xf80 [ 150.702634][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.702651][ T5108] page last free pid 5801 tgid 5801 stack trace: [ 150.702662][ T5108] __free_frozen_pages+0xfe3/0x1170 [ 150.702687][ T5108] __slab_free+0x24f/0x2a0 [ 150.702712][ T5108] qlist_free_all+0x97/0x100 [ 150.702734][ T5108] kasan_quarantine_reduce+0x148/0x160 [ 150.702756][ T5108] __kasan_slab_alloc+0x22/0x80 [ 150.702780][ T5108] __kmalloc_node_track_caller_noprof+0x323/0x7e0 [ 150.702807][ T5108] __alloc_skb+0x2c1/0x7d0 [ 150.702827][ T5108] rtmsg_ifinfo_build_skb+0x84/0x260 [ 150.702853][ T5108] rtnetlink_event+0x1b7/0x270 [ 150.702871][ T5108] notifier_call_chain+0x1be/0x400 [ 150.702888][ T5108] netif_set_mac_address+0x39f/0x4e0 [ 150.702920][ T5108] do_setlink+0x9b1/0x4590 [ 150.702940][ T5108] rtnl_newlink+0x15a9/0x1be0 [ 150.702959][ T5108] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 150.702978][ T5108] netlink_rcv_skb+0x232/0x4b0 [ 150.702996][ T5108] netlink_unicast+0x831/0x9f0 [ 150.703024][ T5108] [ 150.703028][ T5108] Memory state around the buggy address: [ 150.703039][ T5108] ffff88803f204680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.703053][ T5108] ffff88803f204700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.703066][ T5108] >ffff88803f204780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.703077][ T5108] ^ [ 150.703088][ T5108] ffff88803f204800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.703101][ T5108] ffff88803f204880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.703111][ T5108] ================================================================== [ 150.703163][ T5108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.703179][ T5108] CPU: 0 UID: 0 PID: 5108 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.703203][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.703216][ T5108] Workqueue: hci4 hci_rx_work [ 150.703242][ T5108] Call Trace: [ 150.703250][ T5108] [ 150.703258][ T5108] vpanic+0x56c/0xa60 [ 150.703289][ T5108] ? __pfx_vpanic+0x10/0x10 [ 150.703317][ T5108] ? __pfx___schedule+0x10/0x10 [ 150.703344][ T5108] panic+0xc5/0xd0 [ 150.703371][ T5108] ? __pfx_panic+0x10/0x10 [ 150.703401][ T5108] ? preempt_schedule_common+0x82/0xd0 [ 150.703427][ T5108] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.703450][ T5108] check_panic_on_warn+0x89/0xb0 [ 150.703473][ T5108] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.703495][ T5108] end_report+0x73/0x180 [ 150.703522][ T5108] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.703544][ T5108] kasan_report+0x128/0x150 [ 150.703573][ T5108] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.703599][ T5108] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 150.703624][ T5108] l2cap_connect_cfm+0x368/0x1390 [ 150.703648][ T5108] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 150.703669][ T5108] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 150.703695][ T5108] ? mutex_lock_nested+0x152/0x1d0 [ 150.703713][ T5108] ? hci_connect_cfm+0x2c/0x140 [ 150.703740][ T5108] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 150.703760][ T5108] hci_connect_cfm+0x95/0x140 [ 150.703787][ T5108] le_conn_complete_evt+0xf65/0x1430 [ 150.703821][ T5108] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 150.703853][ T5108] ? skb_pull_data+0xfb/0x200 [ 150.703883][ T5108] hci_le_conn_complete_evt+0x187/0x470 [ 150.703920][ T5108] hci_event_packet+0x7af/0x12c0 [ 150.703946][ T5108] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 150.703973][ T5108] ? __pfx_hci_event_packet+0x10/0x10 [ 150.703996][ T5108] ? preempt_schedule_common+0x82/0xd0 [ 150.704021][ T5108] ? preempt_schedule_thunk+0x16/0x30 [ 150.704047][ T5108] ? hci_send_to_monitor+0xe2/0x590 [ 150.704068][ T5108] hci_rx_work+0x3ee/0x1030 [ 150.704092][ T5108] ? preempt_schedule_thunk+0x16/0x30 [ 150.704116][ T5108] ? process_scheduled_works+0xa25/0x1830 [ 150.704143][ T5108] process_scheduled_works+0xb02/0x1830 [ 150.704181][ T5108] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.704209][ T5108] ? assign_work+0x3d5/0x5e0 [ 150.704236][ T5108] worker_thread+0xa50/0xfc0 [ 150.704275][ T5108] kthread+0x388/0x470 [ 150.704295][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 150.704320][ T5108] ? __pfx_kthread+0x10/0x10 [ 150.704340][ T5108] ret_from_fork+0x51e/0xb90 [ 150.704367][ T5108] ? __pfx_ret_from_fork+0x10/0x10 [ 150.704392][ T5108] ? __switch_to+0xc7d/0x1450 [ 150.704415][ T5108] ? __pfx_kthread+0x10/0x10 [ 150.704435][ T5108] ret_from_fork_asm+0x1a/0x30 [ 150.704461][ T5108] [ 150.704731][ T5108] Kernel Offset: disabled