last executing test programs: 7.111537376s ago: executing program 2 (id=80): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) 6.898353489s ago: executing program 4 (id=83): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f90009050300000000000009050426d1834d5641ddf72db6866e78c2875c80e114c42c60053fc5e87afc7ddfc0fba387dd2bebe344ec855f9d003d7380c4be2bd6d9d1e59eac68f773e83d9a715efb0b430c23ac2798bf3159c7dc49d41656442011de52f598d2"], 0x0) 6.592664284s ago: executing program 2 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x98f90e}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) 6.48317606s ago: executing program 2 (id=89): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000880)={0x84, 0x6, 0x2, 0x8, 0x0, [@mcast2, @loopback, @local]}, 0x38) 6.242393383s ago: executing program 2 (id=91): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0xe}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0xfffbfff6, @mcast2, 0xfffff000}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0xe, 0x7ffffffe}]}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131010039ff"}) 5.522752553s ago: executing program 4 (id=92): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 5.469208976s ago: executing program 0 (id=93): shutdown(0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4003) 5.162982037s ago: executing program 0 (id=96): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 4.729653357s ago: executing program 4 (id=100): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = fsopen(&(0x7f00000004c0)='hpfs\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000680)=ANY=[@ANYBLOB="1201500900000008732b13004001010000010902bd000301f40006080b0002010020400904000000010120000924010300063f00130f240805050100010000000000010010240206ff0101056f070000000000000724080106030091949bf01e2f9ab20f5b00000006d47f0904010000010220000904010101010220000a2402025200050003030a24020211ff0a005905090501090800030509082501030f0c08000904020000010220000904020101010220000a24020200000d0000b609058209200007ff4c082501810f40050306a2de9fbb1034b84248eb5e0d3f"], &(0x7f0000000240)={0x0, 0x0, 0x15, &(0x7f0000000540)=ANY=[@ANYBLOB="0000004207000000000015638a708abc85", @ANYRES32=r0, @ANYBLOB="5ed9dd04a0287ed8108adb0252962034d65e188366a779ca0b39ef4dabe75f5d18a1a9ca49910c46afa4c0188a581e63a2b75c79d4f39aa86a6cded072256f5f794d0e3c5479f6fd664281a30deaf5b69dbfd9ce8c6ecf43fd0f2b47fea2b8a5378fc6958d5e898f00301bb3ef9938ea", @ANYRES64=r6, @ANYRESDEC=r3]}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="00df250600000380000000000000e8000000ecf703ef971a93b1dd5ed4e73b9352916e9bee29ab9ac74dfb58bc1ff9f9d204000000000000000d62b78c6765e0ee5fffdfe708c273b8e1898043f63ad0cc0000a3eadf73fc350deabc35f5ba657fdc9dc177fbdb3dd2a2a8e4596c88362a0f16b41b37ff830f5dd64efdc582f0990a22af774f1e888b74ad48c23bdefd233bf4c5c9d80628be45df94c41822e5ee78a79324ae8b9d240ebdcdba5b482b07261ba24e05d37c3c41e02087fadc03963c94a90ecfb8b9", @ANYRESOCT=r7, @ANYRESOCT=r1, @ANYRESDEC=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x4084080}, 0x20000004) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r11, &(0x7f0000000080), 0x0, 0x0, 0x1) fsetxattr(r11, &(0x7f0000000440)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 3.731856301s ago: executing program 2 (id=106): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)={'#! ', './file0', [], 0xa, "129dd500000000570c0f7cda50ef16a37b47835722648c94e61d360546fad278570e0dfd8fcbbcb40a0bddee505ea3d467c5adbcc9999e9e03b6fc3e2c0a"}, 0x49) execveat(0xffffffffffffffff, &(0x7f0000000680)='./file1\x00', 0x0, 0x0, 0x100) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x4, 0x5, 0x0, 0x10000, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x6f5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa0, 0x40000007, 0x4, 0x0, 0x6, 0x9, 0x1, 0x2, 0xae4f, 0x0, 0xe8, 0x1, 0xfffffffffffffffd, 0x5f23, 0xfffffffefffffffd, 0x80000003, 0x598c054, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1ff, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x1, 0x0, 0x40, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x93, 0x1000000000000, 0x0, 0x1, 0x0, 0xf9c, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x804000000001, 0x3, 0xfffffffffffffffd, 0xc58f, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd2c, 0x4, 0x4, 0x4000000000000004, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x6]}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x801d) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::]]:/\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 2.995258171s ago: executing program 3 (id=108): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') connect(r0, 0x0, 0x0) 2.937243864s ago: executing program 1 (id=109): keyctl$link(0x8, 0x0, 0xfffffffffffffff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.861592202s ago: executing program 3 (id=110): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) close(0x3) 2.79756722s ago: executing program 0 (id=111): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc5}, 0x80) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) socket$netlink(0x10, 0x3, 0x0) shutdown(r4, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="90cd7525d485c666b79d03c458898a33d8bcb129868a14cf4cf7ac094ecc7df1833482b1cdb399b21e8ddcea7e52b8b40ce6a2d6240f58d12eebe22bb0b74e1d8a072b430dbc3ae5ecc6a83aa6003080893cc119153e830897f3d55cdfe29f0361dd9228312151b5e7ca813c66ff5826353d452f06e26b6f41ada323bcaba792c74c8a199559a028332bb7de9a337bae5e441e91280f276b39e3b6003d05ee286d750cd5de5aee3cef4c0bdd1ecb11", 0xaf, r5) ioctl(r7, 0x8b27, &(0x7f0000000040)) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r6, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80000, 0x100) 2.426976637s ago: executing program 3 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.948481042s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.698089996s ago: executing program 1 (id=114): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x3, 0x1, 0x1, 0x955}, 0x0, 0x40c, 0x400004}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) write$UHID_INPUT2(r1, &(0x7f0000000400)={0xc, {0xe, "11ff0100"/14}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}}, 0xc4) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {0xfff2, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x24004810) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) utime(&(0x7f0000000040)='./file0\x00', 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xfd, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) writev(r7, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 999.52462ms ago: executing program 3 (id=115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) socket$kcm(0xa, 0x3, 0x11) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 870.579084ms ago: executing program 4 (id=116): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b1411012cbd7000fddbdf2508000100000000002955e1abd5926f05e70a45001cfb0dc4446378a7871adb"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') lseek(r1, 0xffffff60, 0x1) ioprio_get$pid(0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000196000/0x3000)=nil, &(0x7f0000277000/0x2000)=nil, &(0x7f00001a3000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000102000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 842.520346ms ago: executing program 1 (id=117): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0xffe0}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 707.947644ms ago: executing program 3 (id=118): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x5, 0x7, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) 618.638075ms ago: executing program 1 (id=119): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x2, 0x87, 0xd, 0x3}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000200)=0x2) 510.897221ms ago: executing program 4 (id=120): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7) 480.380089ms ago: executing program 2 (id=121): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getrusage(0x1, &(0x7f0000000440)={{0x0}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x49, &(0x7f00000006c0)={0x0, 0x3ff}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x19, &(0x7f00000000c0)='\r', 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r6) ptrace$getsig(0x4202, r6, 0x40, &(0x7f0000000040)) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0x800, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xfff1}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x19, 0x13, 0xa, 0x0, 0xe6, {0x4, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x8000f28, 0x5) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x401}, {0x1, 0x0, 0x8}]}, 0x6, 0x7, 0x1, 0x1, 0x0, 0x4, 0x9, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r8, 0xc010644a, &(0x7f0000000100)={r9}) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES64, @ANYRES32=r4, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4044891) close_range(r1, 0xffffffffffffffff, 0x2) 355.631089ms ago: executing program 0 (id=122): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) 298.412252ms ago: executing program 4 (id=123): r0 = socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) getsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r3, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @broadcast}, @redirect={0x8, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}}}, 0x0) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x844) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42140, 0x41) close(r7) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='@ \x00', 0x0, r7) recvfrom(r0, &(0x7f00000000c0)=""/94, 0x5e, 0x40000000, &(0x7f0000000140)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000000000)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r9, &(0x7f0000000240)=[{&(0x7f0000000b00)=""/227, 0xe3}, {&(0x7f00000001c0)=""/80, 0x50}], 0x2, 0x2, 0x6) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f00000002c0)={0x5, 0x7e, &(0x7f0000000240)="5de054039b0f95de676af460baf553ec5de3c71b1594b0b153e8b24946dbbf157bf2954e17e4388d9f4f27d90a4b92e04db2db4e75b61e3293b8bcf835565dd17d370bb5f3b3daa95df61963913a5d69a450978b553ff88926fce3a59395a876e85dc2acb0dd8aae29024b3bc760e1f723ba2579f2f49a22823a99440f12"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 180.271891ms ago: executing program 1 (id=124): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31110000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0) 75.09386ms ago: executing program 1 (id=125): syz_open_dev$video4linux(&(0x7f0000000380), 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@deltfilter={0x3c, 0x2d, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xfff1}, {0x3, 0x4b0d4c341e959c58}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_CHAIN={0xffffffffffffff0b, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x40844) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414bbff020000000000000000000000000001950090780000000060256b5400000000ff010000000000000000000000000001fe8000"/102], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x1000, 0x0, 0x0, {[@mptcp=@generic={0x20, 0x2}]}}}}}}}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_io_uring_setup(0x1d61, 0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 74.738846ms ago: executing program 0 (id=126): shutdown(0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4003) 0s ago: executing program 0 (id=127): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x8929, &(0x7f00000010c0)={'syz_tun\x00', @ifru_addrs=@rc={0x1f, @none}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x3a, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r6 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x50a2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000140)=0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="78aa2a1bea674e9b8e2bfc97", @ANYRES64=0x0], 0x20) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x10000, 0x10000, 0x2, 0xffffffffffffffff, 0x8}) eventfd2(0x40, 0x80001) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 84.243080][ T5606] cgroup: Unknown subsys name 'net' [ 84.363599][ T5606] cgroup: Unknown subsys name 'cpuset' [ 84.366700][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.081351][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.413123][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.418740][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.419094][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.426973][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.435982][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.436317][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.436705][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.445777][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.446005][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.449163][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.449379][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.449566][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.450277][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.465651][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.467341][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.468420][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.469646][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.471044][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.480072][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.481872][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.569109][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.573850][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.574941][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.583364][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.585920][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.897982][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.898117][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.898237][ T5631] bridge_slave_0: entered allmulticast mode [ 89.900175][ T5631] bridge_slave_0: entered promiscuous mode [ 89.952399][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.952503][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.952972][ T5631] bridge_slave_1: entered allmulticast mode [ 89.954391][ T5631] bridge_slave_1: entered promiscuous mode [ 89.999826][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.999975][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.000297][ T5634] bridge_slave_0: entered allmulticast mode [ 90.001487][ T5634] bridge_slave_0: entered promiscuous mode [ 90.044636][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.044773][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.044858][ T5633] bridge_slave_0: entered allmulticast mode [ 90.046160][ T5633] bridge_slave_0: entered promiscuous mode [ 90.048968][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.049071][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.049535][ T5633] bridge_slave_1: entered allmulticast mode [ 90.051425][ T5633] bridge_slave_1: entered promiscuous mode [ 90.089024][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.089163][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.089281][ T5634] bridge_slave_1: entered allmulticast mode [ 90.092190][ T5634] bridge_slave_1: entered promiscuous mode [ 90.161308][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.161438][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.162208][ T5632] bridge_slave_0: entered allmulticast mode [ 90.163728][ T5632] bridge_slave_0: entered promiscuous mode [ 90.186470][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.190345][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.231117][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.233871][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.234151][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.234269][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.234725][ T5632] bridge_slave_1: entered allmulticast mode [ 90.236193][ T5632] bridge_slave_1: entered promiscuous mode [ 90.240859][ T5634] team0: Port device team_slave_0 added [ 90.260381][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.281485][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.324582][ T5634] team0: Port device team_slave_1 added [ 90.341685][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.341906][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.342043][ T5635] bridge_slave_0: entered allmulticast mode [ 90.344574][ T5635] bridge_slave_0: entered promiscuous mode [ 90.379261][ T5633] team0: Port device team_slave_0 added [ 90.403714][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.403856][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.403949][ T5635] bridge_slave_1: entered allmulticast mode [ 90.405565][ T5635] bridge_slave_1: entered promiscuous mode [ 90.426427][ T5631] team0: Port device team_slave_0 added [ 90.429751][ T5633] team0: Port device team_slave_1 added [ 90.433063][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.464791][ T5631] team0: Port device team_slave_1 added [ 90.479192][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.480187][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.480198][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.480213][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.484060][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.489524][ T5627] Bluetooth: hci0: command tx timeout [ 90.548662][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.548679][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.548701][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.551445][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.551463][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.551486][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.556580][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.557562][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.557575][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.557596][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.566438][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.566456][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.566478][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.601531][ T5627] Bluetooth: hci2: command tx timeout [ 90.601709][ T5627] Bluetooth: hci3: command tx timeout [ 90.601779][ T5627] Bluetooth: hci1: command tx timeout [ 90.632078][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.632097][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.632118][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.658819][ T54] Bluetooth: hci4: command tx timeout [ 90.716281][ T5632] team0: Port device team_slave_0 added [ 90.753196][ T5635] team0: Port device team_slave_0 added [ 90.760798][ T5632] team0: Port device team_slave_1 added [ 90.846753][ T5635] team0: Port device team_slave_1 added [ 90.894012][ T5634] hsr_slave_0: entered promiscuous mode [ 90.894869][ T5634] hsr_slave_1: entered promiscuous mode [ 90.940721][ T5633] hsr_slave_0: entered promiscuous mode [ 90.941475][ T5633] hsr_slave_1: entered promiscuous mode [ 90.942048][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 90.942115][ T5633] Cannot create hsr debugfs directory [ 90.952284][ T5631] hsr_slave_0: entered promiscuous mode [ 90.953518][ T5631] hsr_slave_1: entered promiscuous mode [ 90.954356][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.954375][ T5631] Cannot create hsr debugfs directory [ 90.974641][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.974659][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.974680][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.976393][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.976406][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.976436][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.031572][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.031589][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.031611][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.032765][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.032777][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.032798][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.294698][ T5632] hsr_slave_0: entered promiscuous mode [ 91.295580][ T5632] hsr_slave_1: entered promiscuous mode [ 91.296050][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 91.296070][ T5632] Cannot create hsr debugfs directory [ 91.338086][ T5635] hsr_slave_0: entered promiscuous mode [ 91.338849][ T5635] hsr_slave_1: entered promiscuous mode [ 91.339319][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 91.339339][ T5635] Cannot create hsr debugfs directory [ 91.781945][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.787447][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.789831][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.801061][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.816268][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.828025][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.828939][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.836411][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.924679][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.934378][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.935302][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.944686][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.962258][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.966766][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.993357][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.996255][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.093509][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.096945][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.109614][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.125131][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.138546][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.142608][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.143836][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.147667][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.271395][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.276606][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.295140][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.300012][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.302533][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.309354][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.310962][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.320288][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.355270][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.433746][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.440802][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.458835][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.462782][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.463931][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.485178][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.510237][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.513206][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.521077][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.537536][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.554198][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.579506][ T54] Bluetooth: hci0: command tx timeout [ 92.586708][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.586934][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.630189][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.630254][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.632040][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.632102][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.658689][ T4934] Bluetooth: hci2: command tx timeout [ 92.658775][ T5627] Bluetooth: hci3: command tx timeout [ 92.658839][ T54] Bluetooth: hci1: command tx timeout [ 92.697511][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.697574][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.728096][ T54] Bluetooth: hci4: command tx timeout [ 92.835877][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.871836][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.926336][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.927614][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.950221][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.957230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.957293][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.000235][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.002493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.002556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.003860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.003917][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.056326][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.056391][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.119671][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.154481][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.154548][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.182670][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.182737][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.199270][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.262042][ T5634] veth0_vlan: entered promiscuous mode [ 93.300107][ T5634] veth1_vlan: entered promiscuous mode [ 93.343416][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.371763][ T25] cfg80211: failed to load regulatory.db [ 93.387403][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.411772][ T5633] veth0_vlan: entered promiscuous mode [ 93.452779][ T5633] veth1_vlan: entered promiscuous mode [ 93.457463][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.491021][ T5634] veth0_macvtap: entered promiscuous mode [ 93.515492][ T5634] veth1_macvtap: entered promiscuous mode [ 93.589999][ T5632] veth0_vlan: entered promiscuous mode [ 93.591599][ T5631] veth0_vlan: entered promiscuous mode [ 93.594915][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.621701][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.658176][ T5632] veth1_vlan: entered promiscuous mode [ 93.663187][ T5633] veth0_macvtap: entered promiscuous mode [ 93.684029][ T5631] veth1_vlan: entered promiscuous mode [ 93.711553][ T5633] veth1_macvtap: entered promiscuous mode [ 93.713671][ T5635] veth0_vlan: entered promiscuous mode [ 93.777484][ T5632] veth0_macvtap: entered promiscuous mode [ 93.787121][ T5635] veth1_vlan: entered promiscuous mode [ 93.790138][ T1108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.796711][ T5632] veth1_macvtap: entered promiscuous mode [ 93.811911][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.828810][ T1108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.829499][ T1108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.872596][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.900237][ T5631] veth0_macvtap: entered promiscuous mode [ 93.926445][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.934145][ T5631] veth1_macvtap: entered promiscuous mode [ 93.946495][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.947434][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.947448][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.962467][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.055727][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.082505][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.082528][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.118223][ T5635] veth0_macvtap: entered promiscuous mode [ 94.124833][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.128283][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129261][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129296][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129328][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129358][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129389][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129420][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.129451][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.181226][ T5635] veth1_macvtap: entered promiscuous mode [ 94.276788][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.298266][ T3300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311210][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.311225][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.381428][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.386814][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.386833][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.438568][ T91] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.469336][ T3300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.481583][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.488734][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.488754][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.488963][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597447][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.597471][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.652374][ T54] Bluetooth: hci0: command tx timeout [ 94.709549][ T5691] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.719173][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.719193][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.736102][ T54] Bluetooth: hci1: command tx timeout [ 94.736139][ T54] Bluetooth: hci3: command tx timeout [ 94.736162][ T54] Bluetooth: hci2: command tx timeout [ 94.809032][ T5627] Bluetooth: hci4: command tx timeout [ 94.828833][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.829036][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.829052][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.829512][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.848332][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.858614][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.928592][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 94.932234][ T5691] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=bd.11 [ 94.959442][ T5691] usb 2-1: config 4 has an invalid interface number: 139 but max is 0 [ 94.959474][ T5691] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 94.959494][ T5691] usb 2-1: config 4 has no interface number 0 [ 94.959604][ T5691] usb 2-1: config 4 interface 139 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 94.959626][ T5691] usb 2-1: config 4 interface 139 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 94.959653][ T5691] usb 2-1: config 4 interface 139 altsetting 8 endpoint 0x4 has invalid maxpacket 1552, setting to 64 [ 94.959680][ T5691] usb 2-1: config 4 interface 139 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 94.959705][ T5691] usb 2-1: config 4 interface 139 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 94.959728][ T5691] usb 2-1: config 4 interface 139 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 94.960053][ T5691] usb 2-1: config 4 interface 139 altsetting 8 endpoint 0xE has invalid wMaxPacketSize 0 [ 94.960077][ T5691] usb 2-1: config 4 interface 139 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 94.960099][ T5691] usb 2-1: config 4 interface 139 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 94.960121][ T5691] usb 2-1: config 4 interface 139 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.960143][ T5691] usb 2-1: config 4 interface 139 altsetting 8 endpoint 0x2 has invalid maxpacket 1056, setting to 64 [ 94.960168][ T5691] usb 2-1: config 4 interface 139 has no altsetting 0 [ 94.963362][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.963390][ T5691] usb 2-1: Product: syz [ 94.963404][ T5691] usb 2-1: Manufacturer: syz [ 94.963418][ T5691] usb 2-1: SerialNumber: syz [ 94.993339][ T5713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.064470][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.064491][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.319835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.319860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.355554][ T5718] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 95.528258][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.676381][ T5724] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.698408][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.698454][ T50] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 95.709707][ T50] usb 5-1: config 0 has no interfaces? [ 95.725451][ T50] usb 5-1: config 0 has no interfaces? [ 95.735516][ T50] usb 5-1: config 0 has no interfaces? [ 95.736186][ T50] usb 5-1: config 0 has no interfaces? [ 95.736717][ T50] usb 5-1: config 0 has no interfaces? [ 95.737403][ T50] usb 5-1: config 0 has no interfaces? [ 95.745610][ T50] usb 5-1: config 0 has no interfaces? [ 95.760746][ T50] usb 5-1: config 0 has no interfaces? [ 95.795572][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.795611][ T50] usb 5-1: Product: syz [ 95.795632][ T50] usb 5-1: Manufacturer: syz [ 95.795647][ T50] usb 5-1: SerialNumber: syz [ 95.839945][ T50] usb 5-1: config 0 descriptor?? [ 96.076621][ T5350] usb 5-1: USB disconnect, device number 2 [ 96.267403][ T5691] kvaser_usb 2-1:4.139: error -ENODEV: Cannot get usb endpoint(s) [ 96.400945][ T5691] usb 2-1: USB disconnect, device number 2 [ 96.454415][ T5742] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 96.454456][ T5742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.708368][ T5711] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.729609][ T5627] Bluetooth: hci0: command tx timeout [ 96.745857][ T5732] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.798588][ T5757] fuse: fd is not a fuse device [ 96.818847][ T5627] Bluetooth: hci2: command tx timeout [ 96.818971][ T5627] Bluetooth: hci3: command tx timeout [ 96.818995][ T5627] Bluetooth: hci1: command tx timeout [ 96.870856][ T5711] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 96.873860][ T5711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 96.873890][ T5711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 96.873923][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.879411][ T5684] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.898531][ T54] Bluetooth: hci4: command tx timeout [ 97.032086][ T5684] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.032158][ T5684] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 97.032858][ T5684] usb 5-1: config 0 has no interfaces? [ 97.040904][ T5684] usb 5-1: config 0 has no interfaces? [ 97.043374][ T5684] usb 5-1: config 0 has no interfaces? [ 97.045116][ T5684] usb 5-1: config 0 has no interfaces? [ 97.045611][ T5684] usb 5-1: config 0 has no interfaces? [ 97.050117][ T5684] usb 5-1: config 0 has no interfaces? [ 97.053130][ T5684] usb 5-1: config 0 has no interfaces? [ 97.055964][ T5684] usb 5-1: config 0 has no interfaces? [ 97.075697][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.075724][ T5684] usb 5-1: Product: syz [ 97.075764][ T5684] usb 5-1: Manufacturer: syz [ 97.075776][ T5684] usb 5-1: SerialNumber: syz [ 97.122093][ T5684] usb 5-1: config 0 descriptor?? [ 97.277076][ T5766] FAULT_INJECTION: forcing a failure. [ 97.277076][ T5766] name failslab, interval 1, probability 0, space 0, times 1 [ 97.277110][ T5766] CPU: 0 UID: 0 PID: 5766 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 97.277133][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.277143][ T5766] Call Trace: [ 97.277151][ T5766] [ 97.277160][ T5766] dump_stack_lvl+0xe8/0x150 [ 97.277191][ T5766] should_fail_ex+0x410/0x560 [ 97.277219][ T5766] ? __alloc_skb+0x1db/0x7a0 [ 97.277244][ T5766] should_failslab+0xa8/0x100 [ 97.277271][ T5766] ? __alloc_skb+0x1db/0x7a0 [ 97.277293][ T5766] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 97.277311][ T5766] ? __alloc_skb+0x18d/0x7a0 [ 97.277335][ T5766] ? __alloc_skb+0x1db/0x7a0 [ 97.277365][ T5766] __alloc_skb+0x1db/0x7a0 [ 97.277395][ T5766] netlink_sendmsg+0x5d4/0xb40 [ 97.277426][ T5766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.277455][ T5766] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.277482][ T5766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.277502][ T5766] sock_sendmsg_nosec+0x13a/0x180 [ 97.277528][ T5766] ____sys_sendmsg+0x54e/0x850 [ 97.277560][ T5766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.277597][ T5766] ? import_iovec+0x73/0xa0 [ 97.277626][ T5766] ___sys_sendmsg+0x2a5/0x360 [ 97.277653][ T5766] ? __lock_acquire+0x747/0x2de0 [ 97.277680][ T5766] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.277746][ T5766] ? __fget_files+0x2a/0x420 [ 97.277777][ T5766] ? __fget_files+0x3a2/0x420 [ 97.277814][ T5766] __x64_sys_sendmsg+0x1b1/0x290 [ 97.277845][ T5766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.277906][ T5766] do_syscall_64+0x166/0x520 [ 97.277934][ T5766] ? trace_irq_disable+0x3b/0x140 [ 97.277955][ T5766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.277975][ T5766] ? clear_bhb_loop+0x70/0xc0 [ 97.277999][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.278019][ T5766] RIP: 0033:0x7f1a44b9e159 [ 97.278039][ T5766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.278056][ T5766] RSP: 002b:00007f1a459e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.278078][ T5766] RAX: ffffffffffffffda RBX: 00007f1a44e25fa0 RCX: 00007f1a44b9e159 [ 97.278091][ T5766] RDX: 0000000000000884 RSI: 0000200000000580 RDI: 0000000000000003 [ 97.278104][ T5766] RBP: 00007f1a459e7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.278115][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.278126][ T5766] R13: 00007f1a44e26038 R14: 00007f1a44e25fa0 R15: 00007f1a44f4fa48 [ 97.278159][ T5766] [ 97.470407][ T5676] usb 5-1: USB disconnect, device number 3 [ 97.671290][ T835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.831693][ T835] usb 1-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=37.2b [ 97.833149][ T835] usb 1-1: config 2 has an invalid interface number: 104 but max is 0 [ 97.833177][ T835] usb 1-1: config 2 has no interface number 0 [ 97.833249][ T835] usb 1-1: config 2 interface 104 altsetting 13 bulk endpoint 0x4 has invalid maxpacket 64 [ 97.833273][ T835] usb 1-1: config 2 interface 104 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1023 [ 97.833297][ T835] usb 1-1: config 2 interface 104 has no altsetting 0 [ 97.846620][ T835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.846647][ T835] usb 1-1: Product: syz [ 97.846659][ T835] usb 1-1: Manufacturer: syz [ 97.846675][ T835] usb 1-1: SerialNumber: syz [ 97.878957][ T5770] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 97.879119][ T5770] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.255996][ T5780] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 98.490048][ T5785] Zero length message leads to an empty skb [ 98.608123][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 99.304997][ T5711] pegasus 4-1:1.0: probe with driver pegasus failed with error -32 [ 99.433157][ T10] usb 4-1: USB disconnect, device number 2 [ 99.536107][ T5801] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 99.617100][ T30] audit: type=1326 audit(1790906012.161:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.644785][ T30] audit: type=1326 audit(1790906012.171:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.644859][ T30] audit: type=1326 audit(1790906012.171:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.644903][ T30] audit: type=1326 audit(1790906012.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.644945][ T30] audit: type=1326 audit(1790906012.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.644986][ T30] audit: type=1326 audit(1790906012.171:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.645027][ T30] audit: type=1326 audit(1790906012.171:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.645067][ T30] audit: type=1326 audit(1790906012.201:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.657276][ T5801] FAULT_INJECTION: forcing a failure. [ 99.657276][ T5801] name failslab, interval 1, probability 0, space 0, times 0 [ 99.657316][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 99.657336][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.657347][ T5801] Call Trace: [ 99.657354][ T5801] [ 99.657362][ T5801] dump_stack_lvl+0xe8/0x150 [ 99.657398][ T5801] should_fail_ex+0x410/0x560 [ 99.657432][ T5801] should_failslab+0xa8/0x100 [ 99.657458][ T5801] __kmalloc_noprof+0xfe/0x720 [ 99.657475][ T5801] ? rcu_is_watching+0x16/0xb0 [ 99.657498][ T5801] ? tomoyo_realpath_from_path+0xef/0x640 [ 99.657523][ T5801] ? tomoyo_realpath_from_path+0xef/0x640 [ 99.657553][ T5801] tomoyo_realpath_from_path+0xef/0x640 [ 99.657587][ T5801] ? tomoyo_path_number_perm+0x219/0x5f0 [ 99.657608][ T5801] tomoyo_path_number_perm+0x246/0x5f0 [ 99.657632][ T5801] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.657652][ T5801] ? __lock_acquire+0x747/0x2de0 [ 99.657687][ T5801] ? hook_file_ioctl+0x1f2/0x600 [ 99.657728][ T5801] ? __fget_files+0x2a/0x420 [ 99.657755][ T5801] ? __fget_files+0x2a/0x420 [ 99.657778][ T5801] ? __fget_files+0x3a2/0x420 [ 99.657801][ T5801] ? __fget_files+0x2a/0x420 [ 99.657829][ T5801] security_file_ioctl+0xc3/0x2a0 [ 99.657852][ T5801] __se_sys_ioctl+0x47/0x170 [ 99.657875][ T5801] do_syscall_64+0x166/0x520 [ 99.657899][ T5801] ? trace_irq_disable+0x3b/0x140 [ 99.657918][ T5801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.657936][ T5801] ? clear_bhb_loop+0x70/0xc0 [ 99.657958][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.657976][ T5801] RIP: 0033:0x7f224419e159 [ 99.657993][ T5801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.658008][ T5801] RSP: 002b:00007f2244fe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.658029][ T5801] RAX: ffffffffffffffda RBX: 00007f2244425fa0 RCX: 00007f224419e159 [ 99.658043][ T5801] RDX: 0000200000000400 RSI: 000000004048aecb RDI: 0000000000000006 [ 99.658055][ T5801] RBP: 00007f2244fe3090 R08: 0000000000000000 R09: 0000000000000000 [ 99.658066][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.658076][ T5801] R13: 00007f2244426038 R14: 00007f2244425fa0 R15: 00007f224454fa48 [ 99.658106][ T5801] [ 99.664435][ T5801] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.669784][ T30] audit: type=1326 audit(1790906012.201:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.669850][ T30] audit: type=1326 audit(1790906012.201:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.4.25" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa343b9e159 code=0x7ffc0000 [ 99.815540][ T5804] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 99.890594][ T5806] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 100.073586][ T835] pl2303 1-1:2.104: required interrupt-in endpoint missing [ 100.116429][ T835] usb 1-1: USB disconnect, device number 2 [ 100.348214][ T5808] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 100.390668][ T5808] FAULT_INJECTION: forcing a failure. [ 100.390668][ T5808] name failslab, interval 1, probability 0, space 0, times 0 [ 100.390703][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: syz.4.26 Not tainted syzkaller #0 PREEMPT(full) [ 100.390725][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.390737][ T5808] Call Trace: [ 100.390746][ T5808] [ 100.390754][ T5808] dump_stack_lvl+0xe8/0x150 [ 100.390789][ T5808] should_fail_ex+0x410/0x560 [ 100.390818][ T5808] ? __alloc_skb+0x1db/0x7a0 [ 100.390997][ T5808] should_failslab+0xa8/0x100 [ 100.391030][ T5808] ? __alloc_skb+0x1db/0x7a0 [ 100.391055][ T5808] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 100.391076][ T5808] ? __alloc_skb+0x18d/0x7a0 [ 100.391102][ T5808] ? __alloc_skb+0x1db/0x7a0 [ 100.391132][ T5808] __alloc_skb+0x1db/0x7a0 [ 100.391162][ T5808] audit_log_start+0x1b3/0xa10 [ 100.391196][ T5808] ? __pfx_audit_log_start+0x10/0x10 [ 100.391234][ T5808] ? get_pid_task+0x20/0x1f0 [ 100.391253][ T5808] ? get_pid_task+0x20/0x1f0 [ 100.391269][ T5808] ? get_pid_task+0x20/0x1f0 [ 100.391295][ T5808] audit_seccomp+0x63/0x190 [ 100.391318][ T5808] ? clear_bhb_loop+0x70/0xc0 [ 100.391341][ T5808] ? clear_bhb_loop+0xe/0xc0 [ 100.391364][ T5808] __seccomp_filter+0xd14/0x1de0 [ 100.391403][ T5808] ? __pfx___seccomp_filter+0x10/0x10 [ 100.391519][ T5808] ? __mutex_unlock_slowpath+0x731/0x900 [ 100.391549][ T5808] ? __fget_files+0x2a/0x420 [ 100.391575][ T5808] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.391602][ T5808] ? __fget_files+0x3a2/0x420 [ 100.391631][ T5808] ? fput+0xa0/0xd0 [ 100.391657][ T5808] ? __pfx_ksys_write+0x10/0x10 [ 100.391678][ T5808] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 100.391704][ T5808] do_syscall_64+0x11f/0x520 [ 100.391727][ T5808] ? trace_irq_disable+0x3b/0x140 [ 100.391744][ T5808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.391761][ T5808] ? clear_bhb_loop+0x70/0xc0 [ 100.391781][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.391806][ T5808] RIP: 0033:0x7fa343b9e159 [ 100.391829][ T5808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.391843][ T5808] RSP: 002b:00007fa3449ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 100.391862][ T5808] RAX: ffffffffffffffda RBX: 00007fa343e25fa0 RCX: 00007fa343b9e159 [ 100.391874][ T5808] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 000000000000000b [ 100.391884][ T5808] RBP: 00007fa3449ad090 R08: 0000200000000080 R09: 0000000000000000 [ 100.391894][ T5808] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 100.391903][ T5808] R13: 00007fa343e26038 R14: 00007fa343e25fa0 R15: 00007fa343f4fa48 [ 100.391931][ T5808] [ 100.870016][ T835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.959750][ T5820] tipc: Started in network mode [ 100.959801][ T5820] tipc: Node identity da9a5b56aacc, cluster identity 4711 [ 100.960775][ T5820] tipc: Enabled bearer , priority 0 [ 100.963161][ T5820] syzkaller0: entered promiscuous mode [ 100.963182][ T5820] syzkaller0: entered allmulticast mode [ 101.029862][ T835] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 101.031629][ T835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.047622][ T835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.047649][ T835] usb 5-1: Product: syz [ 101.047663][ T835] usb 5-1: Manufacturer: syz [ 101.047675][ T835] usb 5-1: SerialNumber: syz [ 101.166654][ T835] ttusb_dec_send_command: command bulk message failed: error -22 [ 101.167045][ T835] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -22 [ 101.338603][ T5819] tipc: Resetting bearer [ 101.358073][ T5812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.367353][ T5812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.383672][ T5812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.384131][ T5812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.461586][ T5819] tipc: Disabling bearer [ 102.137954][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 103.032473][ T5810] syz.3.27 (5810): drop_caches: 1 [ 103.057899][ T50] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.210006][ T50] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 103.211116][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.211142][ T50] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.211179][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.259142][ T50] usb 1-1: config 0 descriptor?? [ 103.342462][ T5858] raw_sendmsg: syz.1.41 forgot to set AF_INET. Fix it! [ 103.506508][ T5858] : renamed from vlan0 (while UP) [ 103.652467][ T5867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.44'. [ 103.712967][ T10] usb 5-1: USB disconnect, device number 4 [ 103.753188][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.753234][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.753259][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.753284][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.753308][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.753332][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.753357][ T50] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 103.828298][ T50] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 103.844639][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 103.930160][ T50] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 104.090546][ T5739] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 104.256597][ T5739] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.263540][ T5739] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 104.263588][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.275419][ T5739] usb 2-1: config 0 descriptor?? [ 104.291942][ T5739] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 104.366668][ T5884] batman_adv: batadv0: Adding interface: gretap1 [ 104.366693][ T5884] batman_adv: batadv0: Interface activated: gretap1 [ 104.536185][ T5846] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 104.536973][ T50] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 104.562164][ T50] usb 1-1: USB disconnect, device number 3 [ 104.687939][ T5739] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 104.803998][ T5891] mmap: syz.2.53 (5891) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.841258][ T5739] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 104.845243][ T5739] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 104.845277][ T5739] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 104.845312][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.961620][ T5889] kvm: apic: phys broadcast and lowest prio [ 105.194016][ T5898] syzkaller0: entered promiscuous mode [ 105.194042][ T5898] syzkaller0: entered allmulticast mode [ 105.211173][ T5900] netlink: 'syz.3.56': attribute type 17 has an invalid length. [ 105.274531][ T5901] netlink: 100 bytes leftover after parsing attributes in process `syz.3.56'. [ 105.294915][ T5901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.56'. [ 105.294984][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 105.420790][ T5904] capability: warning: `syz.3.56' uses deprecated v2 capabilities in a way that may be insecure [ 105.427746][ T5896] : renamed from vlan0 (while UP) [ 105.672135][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.672738][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.761197][ T5907] kvm [5906]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x2 [ 105.818809][ T5907] netlink: 104 bytes leftover after parsing attributes in process `syz.0.57'. [ 105.821994][ T5911] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 105.851222][ T5908] netlink: 'syz.0.57': attribute type 12 has an invalid length. [ 105.851246][ T5908] netlink: 'syz.0.57': attribute type 29 has an invalid length. [ 105.851258][ T5908] netlink: 148 bytes leftover after parsing attributes in process `syz.0.57'. [ 105.851307][ T5908] netlink: 59 bytes leftover after parsing attributes in process `syz.0.57'. [ 106.344322][ T5739] pegasus 5-1:1.0: can't reset MAC [ 106.344687][ T5739] pegasus 5-1:1.0: probe with driver pegasus failed with error -5 [ 106.389585][ T5739] usb 5-1: USB disconnect, device number 5 [ 106.455637][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 106.755502][ T5917] netlink: 'syz.2.59': attribute type 9 has an invalid length. [ 106.771229][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 106.771258][ T30] audit: type=1326 audit(1790906019.321:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224419e159 code=0x7ffc0000 [ 106.772148][ T30] audit: type=1326 audit(1790906019.321:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224419e159 code=0x7ffc0000 [ 106.772449][ T30] audit: type=1326 audit(1790906019.321:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f224419e159 code=0x7ffc0000 [ 106.772746][ T30] audit: type=1326 audit(1790906019.321:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224419e159 code=0x7ffc0000 [ 106.773395][ T30] audit: type=1326 audit(1790906019.321:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f224415e98e code=0x7ffc0000 [ 106.774251][ T30] audit: type=1326 audit(1790906019.321:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f224419ddeb code=0x7ffc0000 [ 106.774668][ T30] audit: type=1326 audit(1790906019.321:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f224419ddeb code=0x7ffc0000 [ 106.779338][ T30] audit: type=1326 audit(1790906019.331:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f224419ddeb code=0x7ffc0000 [ 106.779704][ T30] audit: type=1326 audit(1790906019.331:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f224419ddeb code=0x7ffc0000 [ 106.799985][ T5739] usb 2-1: USB disconnect, device number 3 [ 106.896803][ T30] audit: type=1326 audit(1790906019.441:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz.3.61" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f224419ddeb code=0x7ffc0000 [ 107.019140][ T835] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.170321][ T835] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 107.183664][ T835] usb 4-1: config index 0 descriptor too short (expected 1158, got 134) [ 107.183693][ T835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.183709][ T835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.197213][ T835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.197247][ T835] usb 4-1: Product: syz [ 107.197261][ T835] usb 4-1: Manufacturer: syz [ 107.197273][ T835] usb 4-1: SerialNumber: syz [ 107.261768][ T5907] syz.0.57 (5907): drop_caches: 2 [ 107.961929][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 108.151146][ T5958] kvm: user requested TSC rate below hardware speed [ 108.209071][ T5961] ip_tables: iptables: counters copy to user failed while replacing table [ 108.633382][ T835] usb 4-1: USB disconnect, device number 3 [ 108.923824][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.031253][ T835] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 109.182158][ T835] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.183931][ T835] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 109.183984][ T835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.196628][ T835] usb 4-1: config 0 descriptor?? [ 109.240978][ T835] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 110.632210][ T5944] syz.2.67 (5944) used greatest stack depth: 18256 bytes left [ 111.328166][ T50] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.388110][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.438945][ T5739] usb 4-1: USB disconnect, device number 4 [ 111.488659][ T50] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 111.491440][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.491471][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 33745, setting to 1024 [ 111.491494][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 111.491897][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.496156][ T50] usb 5-1: config 0 descriptor?? [ 111.554563][ T6000] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.567866][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 111.570402][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.572511][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 111.572570][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.572593][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.572618][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.572641][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.572685][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.774437][ T50] ath6kl: Failed to submit usb control message: -71 [ 111.774524][ T50] ath6kl: unable to send the bmi data to the device: -71 [ 111.774541][ T50] ath6kl: Unable to send get target info: -71 [ 111.799907][ T50] ath6kl: Failed to init ath6kl core: -71 [ 111.815058][ T50] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 111.853039][ T50] usb 5-1: USB disconnect, device number 6 [ 111.906429][ T10] usb 2-1: usb_control_msg returned -32 [ 111.906486][ T10] usbtmc 2-1:16.0: can't read capabilities [ 112.308973][ T6023] usbtmc 2-1:16.0: INDICATOR_PULSE returned 0 [ 112.512436][ T5711] usb 2-1: USB disconnect, device number 4 [ 112.771217][ T6028] : renamed from bridge_slave_0 (while UP) [ 113.101832][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 113.101863][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.101893][ T54] Tainted: [L]=SOFTLOCKUP [ 113.101901][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.101915][ T54] Workqueue: hci3 hci_rx_work [ 113.101946][ T54] Call Trace: [ 113.101956][ T54] [ 113.101965][ T54] dump_stack_lvl+0xe8/0x150 [ 113.102002][ T54] sysfs_create_dir_ns+0x271/0x2a0 [ 113.102042][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 113.102081][ T54] ? do_raw_spin_unlock+0xf5/0x200 [ 113.102120][ T54] kobject_add_internal+0x622/0xcd0 [ 113.102151][ T54] kobject_add+0x163/0x240 [ 113.102180][ T54] ? __pfx_kobject_add+0x10/0x10 [ 113.102207][ T54] ? get_device_parent+0x366/0x3a0 [ 113.102239][ T54] device_add+0x3fa/0xb80 [ 113.102268][ T54] hci_conn_add_sysfs+0xd5/0x210 [ 113.102296][ T54] le_conn_complete_evt+0xfe3/0x16d0 [ 113.102335][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 113.102367][ T54] ? __mutex_unlock_slowpath+0x731/0x900 [ 113.102403][ T54] ? skb_pull_data+0xf0/0x200 [ 113.102429][ T54] hci_le_enh_conn_complete_evt+0x189/0x490 [ 113.102458][ T54] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 113.102490][ T54] hci_event_packet+0x67a/0xf10 [ 113.102521][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 113.102547][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 113.102577][ T54] ? audit_filter_rules+0x36b0/0x5d10 [ 113.102610][ T54] ? hci_send_to_monitor+0xe2/0x590 [ 113.102669][ T54] hci_rx_work+0x3ee/0x1020 [ 113.102713][ T54] ? process_scheduled_works+0x97a/0x1630 [ 113.102744][ T54] process_scheduled_works+0xc3d/0x1630 [ 113.102810][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.102847][ T54] ? assign_work+0x3cf/0x5d0 [ 113.102883][ T54] worker_thread+0xa47/0xfb0 [ 113.102945][ T54] kthread+0x38b/0x480 [ 113.102969][ T54] ? __pfx_worker_thread+0x10/0x10 [ 113.102997][ T54] ? __pfx_kthread+0x10/0x10 [ 113.103021][ T54] ret_from_fork+0x514/0xb70 [ 113.103046][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 113.103068][ T54] ? __switch_to+0xc89/0x1420 [ 113.103101][ T54] ? __pfx_kthread+0x10/0x10 [ 113.103125][ T54] ret_from_fork_asm+0x1a/0x30 [ 113.103177][ T54] [ 113.103206][ T54] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.103245][ T54] Bluetooth: hci3: failed to register connection device [ 113.568116][ T6053] __nla_validate_parse: 1 callbacks suppressed [ 113.568133][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 113.568152][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 113.568195][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 113.798442][ T5711] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.949635][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 114.013616][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.013653][ T5711] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 114.030869][ T5711] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 114.030898][ T5711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.080342][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 114.080364][ T5711] usb 5-1: Manufacturer: syz [ 114.389452][ T5711] usb 5-1: 0:1 : does not exist [ 114.750487][ T5711] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 114.776093][ T5711] usb 5-1: USB disconnect, device number 7 [ 114.803538][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.535942][ T6085] warning: `syz.0.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.756042][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756628][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756655][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756678][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756701][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756724][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756757][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756781][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756803][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.756827][ T5711] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 116.883408][ T5711] hid-generic 0000:0000:0004.0003: hidraw0: HID v0.03 Device [syz1] on syz0 [ 117.040442][ T5739] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 117.099993][ T6099] fido_id[6099]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.287328][ T6104] fido_id[6104]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.637916][ T5684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.788063][ T5684] usb 4-1: Using ep0 maxpacket: 16 [ 117.788865][ T5684] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 117.792429][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.792456][ T5684] usb 4-1: Product: syz [ 117.792471][ T5684] usb 4-1: Manufacturer: syz [ 117.792484][ T5684] usb 4-1: SerialNumber: syz [ 117.979249][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.057123][ T5684] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 118.080320][ T5684] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.080837][ T5684] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 118.080889][ T5684] usb 4-1: media controller created [ 118.137288][ T5684] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.148586][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 118.153013][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.153068][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 118.155349][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 118.159700][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 118.159726][ T10] usb 5-1: Manufacturer: syz [ 118.159740][ T10] usb 5-1: SerialNumber: syz [ 118.349855][ T50] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.444515][ T5684] zl10353_read_register: readreg error (reg=127, ret==-110) [ 118.447743][ T6126] ------------[ cut here ]------------ [ 118.447846][ T6126] usb 4-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType c0 [ 118.447865][ T6126] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.4.123/6126 [ 118.480703][ T6126] Modules linked in: [ 118.484695][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.4.123 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.495718][ T6126] Tainted: [L]=SOFTLOCKUP [ 118.500351][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.510724][ T6126] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 118.516632][ T6126] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 118.537010][ T6126] RSP: 0018:ffffc9000489f698 EFLAGS: 00010246 [ 118.543396][ T6126] RAX: 0000000000000000 RBX: ffff8880744fde00 RCX: 0000000080000580 [ 118.551505][ T6126] RDX: ffff88807bca4560 RSI: ffffffff8cc533c0 RDI: ffffffff90881a40 [ 118.559612][ T6126] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 118.567649][ T6126] R10: ffffc9000489f780 R11: fffff52000913efc R12: 1ffff110056efc9c [ 118.576364][ T6126] R13: ffff88802b77e4e0 R14: ffff88807bca4560 R15: 0000000080000580 [ 118.584510][ T6126] FS: 00007fa3449ad6c0(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 118.594240][ T6126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.601178][ T6126] CR2: 0000001b33f11ff8 CR3: 0000000079e90000 CR4: 00000000003526f0 [ 118.609995][ T6126] Call Trace: [ 118.613428][ T6126] [ 118.616430][ T6126] usb_start_wait_urb+0x13f/0x5b0 [ 118.621730][ T6126] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 118.627700][ T6126] usb_control_msg+0x234/0x3e0 [ 118.632968][ T6126] gl861_ctrl_msg+0x207/0x420 [ 118.637862][ T6126] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 118.643243][ T6126] ? rt_mutex_slowlock+0x1f2/0x780 [ 118.649026][ T6126] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 118.654712][ T6126] ? aa_file_perm+0x4ed/0x15f0 [ 118.659610][ T6126] gl861_i2c_master_xfer+0x439/0x6a0 [ 118.665053][ T6126] __i2c_transfer+0x7bf/0x1fe0 [ 118.669917][ T6126] ? rt_mutex_lock_nested+0x167/0x1c0 [ 118.675452][ T6126] ? i2c_transfer+0xc7/0x2d0 [ 118.680162][ T6126] i2c_transfer+0x1cb/0x2d0 [ 118.684839][ T6126] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 118.690681][ T6126] ? __asan_memset+0x22/0x50 [ 118.695581][ T6126] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 118.701856][ T6126] ? i2cdev_read+0xe8/0x250 [ 118.706440][ T6126] i2cdev_read+0x10d/0x250 [ 118.711133][ T6126] vfs_readv+0x57c/0x850 [ 118.715442][ T6126] ? __pfx_i2cdev_read+0x10/0x10 [ 118.720588][ T6126] ? __pfx_vfs_readv+0x10/0x10 [ 118.725631][ T6126] ? __pfx_do_futex+0x10/0x10 [ 118.730583][ T6126] ? kmem_cache_free+0x182/0x650 [ 118.735607][ T6126] __x64_sys_preadv+0x19c/0x2b0 [ 118.740660][ T6126] ? __pfx___x64_sys_preadv+0x10/0x10 [ 118.746220][ T6126] do_syscall_64+0x166/0x520 [ 118.751117][ T6126] ? trace_irq_disable+0x3b/0x140 [ 118.757962][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.764443][ T6126] ? clear_bhb_loop+0x70/0xc0 [ 118.769841][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.776140][ T6126] RIP: 0033:0x7fa343b9e159 [ 118.780624][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.801053][ T6126] RSP: 002b:00007fa3449ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 118.809793][ T6126] RAX: ffffffffffffffda RBX: 00007fa343e25fa0 RCX: 00007fa343b9e159 [ 118.818157][ T6126] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000009 [ 118.826612][ T6126] RBP: 00007fa343c3506b R08: 0000000000002bd6 R09: 0000000000000000 [ 118.835053][ T6126] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 118.843431][ T6126] R13: 00007fa343e26038 R14: 00007fa343e25fa0 R15: 00007fa343f4fa48 [ 118.851854][ T6126] [ 118.856225][ T6126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.864181][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.4.123 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.875237][ T6126] Tainted: [L]=SOFTLOCKUP [ 118.879790][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.890553][ T6126] Call Trace: [ 118.894317][ T6126] [ 118.897358][ T6126] vpanic+0x56d/0xa60 [ 118.901456][ T6126] ? __pfx__printk+0x10/0x10 [ 118.906267][ T6126] ? __pfx_vpanic+0x10/0x10 [ 118.910908][ T6126] ? is_bpf_text_address+0x292/0x2b0 [ 118.916302][ T6126] ? is_bpf_text_address+0x26/0x2b0 [ 118.921700][ T6126] panic+0xc5/0xd0 [ 118.925618][ T6126] ? __pfx_panic+0x10/0x10 [ 118.930082][ T6126] __warn+0x315/0x4c0 [ 118.934174][ T6126] ? usb_submit_urb+0x1057/0x18b0 [ 118.939313][ T6126] ? usb_submit_urb+0x1057/0x18b0 [ 118.944443][ T6126] __report_bug+0x276/0x570 [ 118.949061][ T6126] ? usb_submit_urb+0x1057/0x18b0 [ 118.954109][ T6126] ? __pfx___report_bug+0x10/0x10 [ 118.959447][ T6126] ? stack_depot_save_flags+0x404/0x7f0 [ 118.965116][ T6126] report_bug_entry+0x19b/0x290 [ 118.970258][ T6126] ? usb_submit_urb+0x1100/0x18b0 [ 118.975300][ T6126] ? usb_submit_urb+0x1105/0x18b0 [ 118.980418][ T6126] handle_bug+0xce/0x200 [ 118.984679][ T6126] exc_invalid_op+0x1a/0x50 [ 118.989275][ T6126] asm_exc_invalid_op+0x1a/0x20 [ 118.994145][ T6126] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 118.999787][ T6126] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 119.019488][ T6126] RSP: 0018:ffffc9000489f698 EFLAGS: 00010246 [ 119.025649][ T6126] RAX: 0000000000000000 RBX: ffff8880744fde00 RCX: 0000000080000580 [ 119.033750][ T6126] RDX: ffff88807bca4560 RSI: ffffffff8cc533c0 RDI: ffffffff90881a40 [ 119.041812][ T6126] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 119.049792][ T6126] R10: ffffc9000489f780 R11: fffff52000913efc R12: 1ffff110056efc9c [ 119.057984][ T6126] R13: ffff88802b77e4e0 R14: ffff88807bca4560 R15: 0000000080000580 [ 119.066260][ T6126] ? usb_submit_urb+0x1091/0x18b0 [ 119.071402][ T6126] usb_start_wait_urb+0x13f/0x5b0 [ 119.076543][ T6126] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 119.082203][ T6126] usb_control_msg+0x234/0x3e0 [ 119.087783][ T6126] gl861_ctrl_msg+0x207/0x420 [ 119.092488][ T6126] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 119.097917][ T6126] ? rt_mutex_slowlock+0x1f2/0x780 [ 119.104336][ T6126] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 119.110551][ T6126] ? aa_file_perm+0x4ed/0x15f0 [ 119.116337][ T6126] gl861_i2c_master_xfer+0x439/0x6a0 [ 119.122868][ T6126] __i2c_transfer+0x7bf/0x1fe0 [ 119.127974][ T6126] ? rt_mutex_lock_nested+0x167/0x1c0 [ 119.134447][ T6126] ? i2c_transfer+0xc7/0x2d0 [ 119.139505][ T6126] i2c_transfer+0x1cb/0x2d0 [ 119.144472][ T6126] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 119.150143][ T6126] ? __asan_memset+0x22/0x50 [ 119.154932][ T6126] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 119.161627][ T6126] ? i2cdev_read+0xe8/0x250 [ 119.166346][ T6126] i2cdev_read+0x10d/0x250 [ 119.170782][ T6126] vfs_readv+0x57c/0x850 [ 119.175130][ T6126] ? __pfx_i2cdev_read+0x10/0x10 [ 119.181506][ T6126] ? __pfx_vfs_readv+0x10/0x10 [ 119.186592][ T6126] ? __pfx_do_futex+0x10/0x10 [ 119.191850][ T6126] ? kmem_cache_free+0x182/0x650 [ 119.197194][ T6126] __x64_sys_preadv+0x19c/0x2b0 [ 119.202067][ T6126] ? __pfx___x64_sys_preadv+0x10/0x10 [ 119.207589][ T6126] do_syscall_64+0x166/0x520 [ 119.212225][ T6126] ? trace_irq_disable+0x3b/0x140 [ 119.217446][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.223604][ T6126] ? clear_bhb_loop+0x70/0xc0 [ 119.228465][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.234370][ T6126] RIP: 0033:0x7fa343b9e159 [ 119.238889][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.258680][ T6126] RSP: 002b:00007fa3449ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 119.267137][ T6126] RAX: ffffffffffffffda RBX: 00007fa343e25fa0 RCX: 00007fa343b9e159 [ 119.275164][ T6126] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000009 [ 119.283151][ T6126] RBP: 00007fa343c3506b R08: 0000000000002bd6 R09: 0000000000000000 [ 119.291133][ T6126] R10: 00000000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 119.299203][ T6126] R13: 00007fa343e26038 R14: 00007fa343e25fa0 R15: 00007fa343f4fa48 [ 119.307367][ T6126] [ 119.310714][ T6126] Kernel Offset: disabled [ 119.315215][ T6126] Rebooting in 86400 seconds..