last executing test programs: 3m40.942390232s ago: executing program 4 (id=5): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000280), 0x80, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0'], 0x13) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m25.403771592s ago: executing program 32 (id=5): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000280), 0x80, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0'], 0x13) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 16.301967211s ago: executing program 1 (id=420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="1268a3db5ba40fe82ecf3465af3b9884890941251ee0", 0x16}, {&(0x7f00000004c0)="6059337673465062eacefc40e1b405cebc348d134fc35955cd0faaf679", 0x1d}, {&(0x7f0000000480)="421451baa0a0db86bb45108b5682e3b12e9794b15c70cc3e977a8947cae6d3aaa0a213355827b2ed96d2097dcbef0d6848e99cb81065", 0x36}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="56a8c6ad830a8f74a318", 0xa}, {&(0x7f0000000080)="18c01ab5a41c262306d7d5661e70c1f60d254a68318c81aad7e16dd3", 0x1c}, {&(0x7f0000000600)="9c46f2b6aec7ddf8fe83fd452bb6ed0d3949234d4bf8f7f5ae31889f08042779c2a20d1ebee3a5b435b9632debfc43d90571315da865ef", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="5a7bfb23ecd78eb611f04e232fc7a3b9cf746eb059e3ef86a60c", 0x1a}, {&(0x7f0000001400)="4e9c05000000597ce06ac118933a2ba40800da2d5febc66f3d003cc2972f3c9bbdea7d528c0000fcffffff00"/58, 0x3a}, {&(0x7f0000000c80)='*', 0x1}, {&(0x7f0000000d00)="f05a43f1c3a0f11db08405c5f817983bb055efacfe3ff4498ca1f6184c093c91b8a4c352d18400198972ee9fbc0b3670008506cbfe", 0x35}], 0x4}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000700)="ab5aea0bd151f2b012853e83b3d630b72f62d53374645d5bce5728ad78befd38ae96478d1052086b322bed4faa4b9979cabf55baafb3f9eb887824928a45", 0x3e}], 0x1}}], 0x4, 0x44008090) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) 14.809057511s ago: executing program 1 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.825992228s ago: executing program 0 (id=428): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b000200000000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 11.791628235s ago: executing program 1 (id=429): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2a, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[], 0x14) 11.734045148s ago: executing program 5 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.340257059s ago: executing program 5 (id=432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 10.140916783s ago: executing program 1 (id=434): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0xc, 0xed, 0x6be8, 0x48, @rand_addr=' \x01\x00', @private0, 0x7, 0x10, 0x8, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 10.002897794s ago: executing program 3 (id=435): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) syz_open_dev$loop(0x0, 0xf01c, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) connect$ax25(r5, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) 9.799295268s ago: executing program 5 (id=439): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000200)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904fcee14db4241544716b9ea42231e63373a3e299531fd05dacf5bb18c3e6c807bc4b5d29a0ed834a6bd8c6f412bd3fca85921504f64d9161c6e3fa3b66840b6554128686e23595ee8cbe9d0137923b47ce083b3f6179c269f30e1d4fca495e440c205ffafda026330afd9efaebd879e4010632a46ab83f66f97214caeccd21b76d68a6762d", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100d}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0xc0000) ioctl$FIBMAP(r0, 0x1, 0x0) 9.787039323s ago: executing program 5 (id=440): r0 = socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000500)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.63530854s ago: executing program 0 (id=441): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 8.583341445s ago: executing program 5 (id=442): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 7.818171857s ago: executing program 0 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x80, 0xff, 0x3}) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42}) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xa06}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 7.641012954s ago: executing program 2 (id=444): socket$netlink(0x10, 0x3, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x840000000002, 0x3, 0x100) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000500)="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", 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.538257657s ago: executing program 0 (id=445): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, 0x0, &(0x7f0000000cc0)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 5.483896831s ago: executing program 1 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ff, 0x1f480, 0x1, 0x399, 0x0, r1}) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) socket$igmp6(0xa, 0x3, 0x2) sigaltstack(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = dup(r0) write$P9_RREAD(r4, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb) write$tcp_mem(r5, &(0x7f00000004c0)={0x7, 0x20, 0xffffffffffff, 0x20, 0x9}, 0x59) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c) 3.611270258s ago: executing program 0 (id=447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 3.433147539s ago: executing program 1 (id=448): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) socket$unix(0x1, 0x1, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x1e, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) close_range(r3, 0xffffffffffffffff, 0x0) 3.412784129s ago: executing program 3 (id=449): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f0000000100)=""/11, 0xb}], 0x2, 0x1, 0x4) 1.91606818s ago: executing program 2 (id=455): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ff, 0x1f480, 0x1, 0x399, 0x0, r1}) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sigaltstack(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r6 = dup(r0) write$P9_RREAD(r4, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb) write$tcp_mem(r6, &(0x7f00000004c0)={0x7, 0x20, 0xffffffffffff, 0x20, 0x9}, 0x59) 778.187085ms ago: executing program 3 (id=456): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) fcntl$dupfd(r0, 0x406, r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) 0s ago: executing program 2 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, 0x0, &(0x7f0000000cc0)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 84.577464][ T5782] cgroup: Unknown subsys name 'net' [ 84.818895][ T5782] cgroup: Unknown subsys name 'cpuset' [ 84.904026][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.782063][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.114709][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.116204][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.116927][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.118404][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.119189][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.463495][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.464920][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.466203][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.495515][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.499307][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.524952][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.556325][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.560727][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.560811][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.561677][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.562706][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.563694][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.589936][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.597891][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.599604][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.602596][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.615491][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.626901][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.664146][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.664949][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.055373][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 90.336761][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.337922][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.338061][ T5795] bridge_slave_0: entered allmulticast mode [ 90.339947][ T5795] bridge_slave_0: entered promiscuous mode [ 90.389239][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.389356][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.389486][ T5795] bridge_slave_1: entered allmulticast mode [ 90.391431][ T5795] bridge_slave_1: entered promiscuous mode [ 90.562224][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.599264][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 90.616505][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.779892][ T5795] team0: Port device team_slave_0 added [ 90.809668][ T5795] team0: Port device team_slave_1 added [ 90.810052][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 90.890972][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 90.918802][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 91.104936][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.104956][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.104976][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.186037][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.186055][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.186082][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.205508][ T5810] Bluetooth: hci0: command tx timeout [ 91.291176][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.291333][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.291462][ T5802] bridge_slave_0: entered allmulticast mode [ 91.295571][ T5802] bridge_slave_0: entered promiscuous mode [ 91.359612][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.359719][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.359839][ T5802] bridge_slave_1: entered allmulticast mode [ 91.361684][ T5802] bridge_slave_1: entered promiscuous mode [ 91.517666][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.555783][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.555970][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.556097][ T5804] bridge_slave_0: entered allmulticast mode [ 91.557955][ T5804] bridge_slave_0: entered promiscuous mode [ 91.597856][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.606280][ T60] Bluetooth: hci4: command tx timeout [ 91.606830][ T5810] Bluetooth: hci2: command tx timeout [ 91.624824][ T5795] hsr_slave_0: entered promiscuous mode [ 91.626009][ T5795] hsr_slave_1: entered promiscuous mode [ 91.651092][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.651242][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.651423][ T5804] bridge_slave_1: entered allmulticast mode [ 91.666163][ T5804] bridge_slave_1: entered promiscuous mode [ 91.683375][ T5810] Bluetooth: hci1: command tx timeout [ 91.714113][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.714266][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.714499][ T5801] bridge_slave_0: entered allmulticast mode [ 91.716427][ T5801] bridge_slave_0: entered promiscuous mode [ 91.754191][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.754314][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.754663][ T5803] bridge_slave_0: entered allmulticast mode [ 91.756448][ T5803] bridge_slave_0: entered promiscuous mode [ 91.763384][ T5810] Bluetooth: hci3: command tx timeout [ 91.797654][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.797783][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.797910][ T5801] bridge_slave_1: entered allmulticast mode [ 91.799791][ T5801] bridge_slave_1: entered promiscuous mode [ 91.835559][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.835726][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.835904][ T5803] bridge_slave_1: entered allmulticast mode [ 91.838045][ T5803] bridge_slave_1: entered promiscuous mode [ 91.876508][ T5802] team0: Port device team_slave_0 added [ 91.898138][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.933300][ T812] cfg80211: failed to load regulatory.db [ 91.937870][ T5802] team0: Port device team_slave_1 added [ 91.963896][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.019967][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.051016][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.289779][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.315391][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.330012][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.330055][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.330133][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.380892][ T5804] team0: Port device team_slave_0 added [ 92.420291][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.420304][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.420323][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.471602][ T5804] team0: Port device team_slave_1 added [ 92.509868][ T5801] team0: Port device team_slave_0 added [ 92.531453][ T5803] team0: Port device team_slave_0 added [ 92.549626][ T5801] team0: Port device team_slave_1 added [ 92.569875][ T5803] team0: Port device team_slave_1 added [ 92.599438][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.599452][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.599471][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.688767][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.688785][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.688812][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.771699][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.771715][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.771741][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.814074][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.814124][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.814192][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.874256][ T5802] hsr_slave_0: entered promiscuous mode [ 92.875227][ T5802] hsr_slave_1: entered promiscuous mode [ 92.876263][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.876358][ T5802] Cannot create hsr debugfs directory [ 92.877302][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.877312][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.877331][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.879853][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.879870][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.879889][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.105153][ T5804] hsr_slave_0: entered promiscuous mode [ 93.106119][ T5804] hsr_slave_1: entered promiscuous mode [ 93.106796][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 93.106812][ T5804] Cannot create hsr debugfs directory [ 93.284744][ T5810] Bluetooth: hci0: command tx timeout [ 93.524637][ T5801] hsr_slave_0: entered promiscuous mode [ 93.525570][ T5801] hsr_slave_1: entered promiscuous mode [ 93.526261][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 93.526279][ T5801] Cannot create hsr debugfs directory [ 93.567110][ T5803] hsr_slave_0: entered promiscuous mode [ 93.568097][ T5803] hsr_slave_1: entered promiscuous mode [ 93.568753][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 93.568770][ T5803] Cannot create hsr debugfs directory [ 93.693242][ T5810] Bluetooth: hci2: command tx timeout [ 93.693275][ T5810] Bluetooth: hci4: command tx timeout [ 93.763325][ T60] Bluetooth: hci1: command tx timeout [ 93.843245][ T60] Bluetooth: hci3: command tx timeout [ 93.872481][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.941667][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.003443][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.101085][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.426187][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.459542][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.509005][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.562401][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.692438][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.737408][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.797325][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.844764][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.977034][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.018607][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.080421][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.121340][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.226565][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.276406][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.312574][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.358970][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.365320][ T60] Bluetooth: hci0: command tx timeout [ 95.407128][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.451445][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.498014][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.498726][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.556026][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.556145][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.582408][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.677142][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.729385][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.752523][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.752724][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.763278][ T60] Bluetooth: hci4: command tx timeout [ 95.763312][ T60] Bluetooth: hci2: command tx timeout [ 95.806974][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.807117][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.844291][ T5810] Bluetooth: hci1: command tx timeout [ 95.878893][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.917087][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.919904][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.922031][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.925435][ T5810] Bluetooth: hci3: command tx timeout [ 95.999443][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.999634][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.101862][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.121671][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.170478][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.170700][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.207185][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.207338][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.279288][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.328795][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.329024][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.370733][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.406087][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.406263][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.692860][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.765384][ T5795] veth0_vlan: entered promiscuous mode [ 96.817756][ T5795] veth1_vlan: entered promiscuous mode [ 96.825879][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.971251][ T5802] veth0_vlan: entered promiscuous mode [ 97.045807][ T5795] veth0_macvtap: entered promiscuous mode [ 97.049262][ T5802] veth1_vlan: entered promiscuous mode [ 97.088257][ T5795] veth1_macvtap: entered promiscuous mode [ 97.104875][ T5804] veth0_vlan: entered promiscuous mode [ 97.137967][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.159789][ T5804] veth1_vlan: entered promiscuous mode [ 97.186331][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.219213][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.234567][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.302390][ T5802] veth0_macvtap: entered promiscuous mode [ 97.314882][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.338005][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.352529][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.375862][ T5802] veth1_macvtap: entered promiscuous mode [ 97.378208][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.443340][ T5810] Bluetooth: hci0: command tx timeout [ 97.532429][ T5804] veth0_macvtap: entered promiscuous mode [ 97.606716][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.651614][ T5804] veth1_macvtap: entered promiscuous mode [ 97.681736][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.738842][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.738868][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.768719][ T2265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.774210][ T5803] veth0_vlan: entered promiscuous mode [ 97.787614][ T2265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.804203][ T2265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824697][ T2265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.843319][ T60] Bluetooth: hci4: command tx timeout [ 97.843365][ T5810] Bluetooth: hci2: command tx timeout [ 97.864031][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.923375][ T5810] Bluetooth: hci1: command tx timeout [ 97.930951][ T5803] veth1_vlan: entered promiscuous mode [ 97.932860][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.932879][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.958988][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.003509][ T5810] Bluetooth: hci3: command tx timeout [ 98.110875][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.149376][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.164572][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.187873][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.292039][ T5801] veth0_vlan: entered promiscuous mode [ 98.354396][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.354418][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.435756][ T5801] veth1_vlan: entered promiscuous mode [ 98.524885][ T5803] veth0_macvtap: entered promiscuous mode [ 98.670066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.670086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.694978][ T5803] veth1_macvtap: entered promiscuous mode [ 98.843496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.843518][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.694682][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.776045][ T5801] veth0_macvtap: entered promiscuous mode [ 99.789000][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.912672][ T5801] veth1_macvtap: entered promiscuous mode [ 99.951543][ T735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.962054][ T735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.114801][ T735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.118882][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.118905][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.150474][ T735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.374890][ T5919] binder: 5914:5919 ioctl c0306201 2000000003c0 returned -14 [ 101.189483][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.234032][ T811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.286513][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.316970][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.422019][ T811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.422088][ T811] usb 3-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 101.422111][ T811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.454601][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.492347][ T811] usb 3-1: config 0 descriptor?? [ 101.513248][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.522588][ T811] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 101.588544][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.607190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.607209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.612519][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.869736][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.549307][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.549329][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.786375][ T1529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.786397][ T1529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.032846][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.032867][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.258300][ T811] usb 3-1: USB disconnect, device number 2 [ 110.243093][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880619d1000: rx timeout, send abort [ 110.254052][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880619d1000: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 110.653127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.891428][ T5976] syzkaller0: entered promiscuous mode [ 110.891448][ T5976] syzkaller0: entered allmulticast mode [ 110.916888][ T5978] tipc: Started in network mode [ 110.916925][ T5978] tipc: Node identity 4e36a02861dc, cluster identity 4711 [ 110.920207][ T5978] tipc: Enabled bearer , priority 0 [ 112.707896][ T5972] tipc: Resetting bearer [ 112.870257][ T5995] loop2: detected capacity change from 0 to 7 [ 112.971868][ T5799] Dev loop2: unable to read RDB block 7 [ 112.971913][ T5799] loop2: unable to read partition table [ 112.972172][ T5799] loop2: partition table beyond EOD, truncated [ 113.005936][ T5995] Dev loop2: unable to read RDB block 7 [ 113.005983][ T5995] loop2: unable to read partition table [ 113.006224][ T5995] loop2: partition table beyond EOD, truncated [ 113.006253][ T5995] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.082470][ T5972] tipc: Disabling bearer [ 113.113218][ T5861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.276042][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.276082][ T5861] usb 3-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 113.276099][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.327771][ T5861] usb 3-1: config 0 descriptor?? [ 113.330046][ T5853] tipc: Node number set to 803905576 [ 113.421100][ T5861] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 115.823076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.823265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.883079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.883277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.124023][ T10] usb 3-1: USB disconnect, device number 3 [ 116.164340][ T6016] gfs2: gfs2 mount does not exist [ 116.276030][ T6018] overlay: Unknown parameter '/' [ 117.393134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.973683][ T6034] binder: 6033:6034 ioctl 4018620d 0 returned -22 [ 120.204384][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.301213][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.304237][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.313486][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.316308][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.317411][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.471944][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 120.471979][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.510072][ T5881] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 120.510107][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.510128][ T5881] usb 2-1: Product: syz [ 120.510143][ T5881] usb 2-1: Manufacturer: syz [ 120.510158][ T5881] usb 2-1: SerialNumber: syz [ 120.660914][ T5881] usb 2-1: config 0 descriptor?? [ 120.685487][ T6037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.736725][ T5881] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 120.954827][ T6047] loop2: detected capacity change from 0 to 7 [ 120.988182][ T6047] Dev loop2: unable to read RDB block 7 [ 120.988236][ T6047] loop2: unable to read partition table [ 120.988457][ T6047] loop2: partition table beyond EOD, truncated [ 120.988488][ T6047] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.502687][ T60] Bluetooth: hci5: command tx timeout [ 122.531220][ T811] usb 2-1: USB disconnect, device number 2 [ 122.666098][ T6059] Zero length message leads to an empty skb [ 124.553366][ T6071] netlink: 'syz.0.43': attribute type 4 has an invalid length. [ 124.566749][ T60] Bluetooth: hci5: command tx timeout [ 125.523653][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 125.836281][ T6094] loop2: detected capacity change from 0 to 7 [ 125.837748][ T6094] Dev loop2: unable to read RDB block 7 [ 125.837784][ T6094] loop2: unable to read partition table [ 125.837955][ T6094] loop2: partition table beyond EOD, truncated [ 125.837977][ T6094] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.650797][ T60] Bluetooth: hci5: command tx timeout [ 128.033094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.093088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.761484][ T60] Bluetooth: hci5: command tx timeout [ 129.303138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.353208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.899348][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.899475][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.899807][ T6041] bridge_slave_0: entered allmulticast mode [ 130.945366][ T6041] bridge_slave_0: entered promiscuous mode [ 131.386748][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.387357][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.388807][ T6041] bridge_slave_1: entered allmulticast mode [ 131.433659][ T6041] bridge_slave_1: entered promiscuous mode [ 131.837481][ T1266] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.369689][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.996330][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.996421][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.214347][ T1266] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.278612][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.708804][ T1266] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.780712][ T6041] team0: Port device team_slave_0 added [ 133.879259][ T6041] team0: Port device team_slave_1 added [ 134.223825][ T6145] binder: 6143:6145 ioctl c0306201 2000000003c0 returned -14 [ 134.350712][ T1266] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.572513][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.572527][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.572547][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.639894][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.639909][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.639930][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.027647][ T6041] hsr_slave_0: entered promiscuous mode [ 135.031982][ T6041] hsr_slave_1: entered promiscuous mode [ 135.032937][ T6041] debugfs: 'hsr0' already exists in 'hsr' [ 135.032962][ T6041] Cannot create hsr debugfs directory [ 135.153672][ T5853] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.243218][ T5861] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.314788][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.314809][ T5853] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.353799][ T5853] usb 2-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=fa.a9 [ 135.353822][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.353837][ T5853] usb 2-1: Product: syz [ 135.353847][ T5853] usb 2-1: Manufacturer: syz [ 135.353858][ T5853] usb 2-1: SerialNumber: syz [ 135.409559][ T5861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 135.409584][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 135.409599][ T5861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 135.454653][ T5861] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 135.454685][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.454705][ T5861] usb 1-1: Product: syz [ 135.454720][ T5861] usb 1-1: Manufacturer: syz [ 135.454734][ T5861] usb 1-1: SerialNumber: syz [ 135.554788][ T5853] usb 2-1: config 0 descriptor?? [ 135.565166][ T5861] usb 1-1: config 0 descriptor?? [ 135.578769][ T6152] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 135.647435][ T5861] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 137.098883][ T1266] bridge_slave_1: left allmulticast mode [ 137.098988][ T1266] bridge_slave_1: left promiscuous mode [ 137.122137][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.249540][ T1266] bridge_slave_0: left allmulticast mode [ 137.249571][ T1266] bridge_slave_0: left promiscuous mode [ 137.252231][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.450373][ T6045] usb 2-1: USB disconnect, device number 3 [ 138.847644][ T5861] usb 1-1: USB disconnect, device number 2 [ 140.544252][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 140.643436][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000a0c [ 140.643528][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 140.644929][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x123f [ 140.646723][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6065 [ 140.646800][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 140.714268][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x71fa [ 140.714336][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 140.743824][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x681d [ 140.743913][ T6185] kvm: kvm [6184]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 141.004444][ T1266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.075662][ T1266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.124106][ T1266] bond0 (unregistering): Released all slaves [ 145.058773][ T6230] syz.1.87 (6230) used greatest stack depth: 18608 bytes left [ 147.598960][ T60] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 149.765108][ T1266] hsr_slave_0: left promiscuous mode [ 149.804640][ T1266] hsr_slave_1: left promiscuous mode [ 149.806177][ T1266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.806266][ T1266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.865301][ T1266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.865330][ T1266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.075285][ T1266] veth1_macvtap: left promiscuous mode [ 150.075523][ T1266] veth0_macvtap: left promiscuous mode [ 150.075807][ T1266] veth1_vlan: left promiscuous mode [ 150.076111][ T1266] veth0_vlan: left promiscuous mode [ 157.497449][ T1266] team0 (unregistering): Port device team_slave_1 removed [ 158.143988][ T1266] team0 (unregistering): Port device team_slave_0 removed [ 159.468062][ T5880] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.555214][ T6041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.615593][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 159.619848][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.619883][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.619922][ T5880] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 159.619946][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.673703][ T6041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.721018][ T5880] usb 3-1: config 0 descriptor?? [ 159.833998][ T6041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.954793][ T6041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.526759][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 160.526876][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.612102][ T5880] usb 3-1: USB disconnect, device number 4 [ 161.672302][ T6356] syz.1.120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 161.860972][ T60] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 162.200890][ T6356] ptrace attach of "./syz-executor exec"[5804] was attempted by " [ 162.272838][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.137887][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.240889][ T6366] binder: 6361:6366 ioctl c0306201 2000000003c0 returned -14 [ 164.016025][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.016170][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.191451][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.191597][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.387907][ T6373] netlink: 620 bytes leftover after parsing attributes in process `syz.0.125'. [ 164.471714][ T6041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.471739][ T6041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.551556][ T6376] sctp: [Deprecated]: syz.3.124 (pid 6376) Use of int in max_burst socket option. [ 164.551556][ T6376] Use struct sctp_assoc_value instead [ 166.099832][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.702938][ T6420] binder: 6415:6420 ioctl c0306201 2000000003c0 returned -14 [ 170.056238][ T6429] netlink: 620 bytes leftover after parsing attributes in process `syz.2.136'. [ 170.303710][ T6041] veth0_vlan: entered promiscuous mode [ 170.341938][ T6041] veth1_vlan: entered promiscuous mode [ 170.488081][ T6041] veth0_macvtap: entered promiscuous mode [ 170.557359][ T6041] veth1_macvtap: entered promiscuous mode [ 170.664762][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.807371][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.913638][ T1417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.915131][ T1417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.072674][ T1417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.091658][ T1417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.982811][ T2265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.982834][ T2265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.134362][ T6459] binder: 6455:6459 ioctl c0306201 2000000003c0 returned -14 [ 172.141462][ T6459] binder_alloc: 6455: binder_alloc_buf, no vma [ 173.099247][ T6463] netlink: 620 bytes leftover after parsing attributes in process `syz.2.146'. [ 174.463684][ T1529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.463709][ T1529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.766229][ T6560] netlink: 620 bytes leftover after parsing attributes in process `syz.3.169'. [ 187.024902][ T6572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.427052][ T6574] binder: 6571:6574 ioctl c0306201 2000000003c0 returned -14 [ 188.427418][ T6574] binder_alloc: 6571: binder_alloc_buf, no vma [ 188.833177][ T5881] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 188.995034][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.995055][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.997354][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.997373][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.997391][ T5881] usb 4-1: Product: syz [ 188.997401][ T5881] usb 4-1: Manufacturer: syz [ 188.997413][ T5881] usb 4-1: SerialNumber: syz [ 191.898316][ T6608] netlink: 620 bytes leftover after parsing attributes in process `syz.1.181'. [ 194.341410][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341484][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.394516][ T5881] usb 4-1: 0:2 : does not exist [ 194.394597][ T5881] usb 4-1: unit 6 not found! [ 195.030051][ T5881] usb 4-1: USB disconnect, device number 2 [ 195.367314][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.573179][ T811] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 200.728315][ T811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.728344][ T811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.756468][ T811] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.756498][ T811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.756512][ T811] usb 1-1: Product: syz [ 200.756522][ T811] usb 1-1: Manufacturer: syz [ 200.756532][ T811] usb 1-1: SerialNumber: syz [ 203.835989][ T811] usb 1-1: 0:2 : does not exist [ 203.836077][ T811] usb 1-1: unit 6 not found! [ 203.965561][ T6706] binder: 6701:6706 ioctl c0306201 2000000003c0 returned -14 [ 205.193293][ T811] usb 1-1: USB disconnect, device number 3 [ 205.596768][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.393873][ T6729] binder: 6723:6729 ioctl c0306201 2000000003c0 returned -14 [ 210.684714][ T6750] overlay: Unknown parameter '/' [ 211.743242][ T6045] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 211.773187][ T5880] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 211.843104][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 211.928340][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 211.928352][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 211.951097][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.951125][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.029546][ T5880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.029578][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.029598][ T5880] usb 4-1: Product: syz [ 212.029612][ T5880] usb 4-1: Manufacturer: syz [ 212.029626][ T5880] usb 4-1: SerialNumber: syz [ 213.313132][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.505252][ T5881] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 213.507532][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.507556][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.507673][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.507702][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.526142][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.539239][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.612785][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.612823][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.659489][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.659517][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.659641][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.659670][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.711776][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.711818][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.712300][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.712321][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.772888][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.772919][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.773257][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.773421][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.824799][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.824828][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.824880][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.824974][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.901295][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.901332][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.901384][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.901410][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.950529][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.950557][ T5881] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.950605][ T5881] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.950691][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.997298][ T5881] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 213.997330][ T5881] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 213.997351][ T5881] usb 2-1: Product: syz [ 213.997366][ T5881] usb 2-1: Manufacturer: syz [ 213.997380][ T5881] usb 2-1: SerialNumber: syz [ 214.045621][ T5881] usb 2-1: config 0 descriptor?? [ 214.080093][ T5881] yurex 2-1:0.0: Could not find endpoints [ 214.316284][ T6024] usb 2-1: USB disconnect, device number 4 [ 217.044045][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 217.224460][ T5880] usb 4-1: 0:2 : does not exist [ 217.224565][ T5880] usb 4-1: unit 6 not found! [ 217.501050][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 221.853925][ T5880] usb 4-1: USB disconnect, device number 3 [ 225.173381][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 225.686584][ T6024] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 225.839165][ T6877] loop2: detected capacity change from 0 to 7 [ 226.049008][ T6024] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.049039][ T6024] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.059085][ T6024] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.059116][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.059137][ T6024] usb 1-1: Product: syz [ 226.059151][ T6024] usb 1-1: Manufacturer: syz [ 226.059165][ T6024] usb 1-1: SerialNumber: syz [ 226.066643][ T6024] usb 1-1: config 0 descriptor?? [ 226.067656][ T6862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.067857][ T6862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.008500][ T6862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.008795][ T6862] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.176201][ T6877] Dev loop2: unable to read RDB block 7 [ 227.176257][ T6877] loop2: unable to read partition table [ 227.176498][ T6877] loop2: partition table beyond EOD, truncated [ 227.176535][ T6877] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.416032][ T6024] Error reading MAC address [ 229.032381][ T5880] usb 1-1: USB disconnect, device number 5 [ 231.698814][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 233.401282][ T10] usb 2-1: unable to read config index 0 descriptor/all [ 233.401481][ T10] usb 2-1: can't read configurations, error -71 [ 233.737566][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 236.259892][ T6937] loop2: detected capacity change from 0 to 7 [ 236.260966][ T5802] Dev loop2: unable to read RDB block 7 [ 236.260998][ T5802] loop2: unable to read partition table [ 236.261285][ T5802] loop2: partition table beyond EOD, truncated [ 236.317652][ T6937] Dev loop2: unable to read RDB block 7 [ 236.317703][ T6937] loop2: unable to read partition table [ 236.317875][ T6937] loop2: partition table beyond EOD, truncated [ 236.317900][ T6937] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.501763][ T811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 237.170910][ T811] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 237.247205][ T811] usb 2-1: config 0 has no interfaces? [ 237.376771][ T811] usb 2-1: config 0 has no interfaces? [ 237.385845][ T811] usb 2-1: config 0 has no interfaces? [ 237.391446][ T811] usb 2-1: config 0 has no interfaces? [ 237.393658][ T811] usb 2-1: config 0 has no interfaces? [ 237.403519][ T811] usb 2-1: config 0 has no interfaces? [ 237.414225][ T811] usb 2-1: config 0 has no interfaces? [ 237.479223][ T811] usb 2-1: config 0 has no interfaces? [ 237.500529][ T811] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 237.500560][ T811] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 237.500580][ T811] usb 2-1: Product: syz [ 237.500594][ T811] usb 2-1: Manufacturer: syz [ 237.500608][ T811] usb 2-1: SerialNumber: syz [ 237.565498][ T811] usb 2-1: config 0 descriptor?? [ 238.243845][ T5880] usb 2-1: USB disconnect, device number 7 [ 240.223957][ T6947] binder_alloc: 6944: binder_alloc_buf, no vma [ 240.301501][ T5810] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 240.377361][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 242.908313][ T5810] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 245.710020][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.282'. [ 245.794241][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.987976][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 246.184264][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.185126][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.193665][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.193690][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.196173][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.196197][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.200450][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.200472][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.205135][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.205158][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.206930][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.206953][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.369645][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.369672][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.372697][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.372721][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 246.378908][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 246.378938][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 246.378958][ T10] usb 2-1: Product: syz [ 246.378971][ T10] usb 2-1: Manufacturer: syz [ 246.378986][ T10] usb 2-1: SerialNumber: syz [ 246.535557][ T10] usb 2-1: config 0 descriptor?? [ 246.560928][ T10] yurex 2-1:0.0: Could not find endpoints [ 246.891674][ T6045] usb 2-1: USB disconnect, device number 8 [ 248.360092][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 249.044822][ T7031] ptrace attach of "./syz-executor exec"[5804] was attempted by " [ 250.510738][ T7036] capability: warning: `syz.3.287' uses 32-bit capabilities (legacy support in use) [ 250.839007][ T7036] program syz.3.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.392365][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'. [ 254.409697][ T7062] overlay: Unknown parameter '/' [ 255.937104][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.937176][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.468162][ T7081] program syz.1.302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.786309][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 260.116236][ T7119] program syz.3.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.179502][ T7082] block device autoloading is deprecated and will be removed. [ 262.814218][ T7149] overlay: Unknown parameter '/' [ 264.291106][ T7159] program syz.3.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.082220][ T7173] binder: 7170:7173 ioctl c0306201 2000000003c0 returned -14 [ 265.359504][ T5881] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 265.535528][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.535568][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.535598][ T5881] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 265.535615][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.539601][ T5881] usb 1-1: config 0 descriptor?? [ 265.685202][ T5881] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 268.427429][ T811] usb 1-1: USB disconnect, device number 6 [ 269.393193][ T811] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 269.760967][ T811] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 269.760999][ T811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.761013][ T811] usb 1-1: Product: syz [ 269.761023][ T811] usb 1-1: Manufacturer: syz [ 269.761033][ T811] usb 1-1: SerialNumber: syz [ 269.796767][ T811] usb 1-1: config 0 descriptor?? [ 269.832351][ T811] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 271.471101][ T811] gspca_sunplus: reg_r err -71 [ 271.471181][ T811] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 271.496142][ T811] usb 1-1: USB disconnect, device number 7 [ 271.818615][ T7217] syzkaller0: entered promiscuous mode [ 271.818644][ T7217] syzkaller0: entered allmulticast mode [ 271.839554][ T7217] tipc: Started in network mode [ 271.839589][ T7217] tipc: Node identity 3e86ba777db, cluster identity 4711 [ 271.841425][ T7217] tipc: Enabled bearer , priority 0 [ 271.933543][ T7216] tipc: Resetting bearer [ 272.705734][ T7216] tipc: Disabling bearer [ 275.223148][ T5961] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 276.783989][ T5961] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 276.786635][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.786660][ T5961] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 276.786730][ T5961] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.786757][ T5961] usb 1-1: config 0 interface 0 has no altsetting 0 [ 277.406900][ T5961] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 277.406943][ T5961] usb 1-1: can't read configurations, error -71 [ 278.737073][ T7250] syz.1.358 (7250) used greatest stack depth: 17736 bytes left [ 279.573098][ T5961] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 281.315024][ T7289] ptrace attach of "./syz-executor exec"[5802] was attempted by ""[7289] [ 283.860680][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 283.860734][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 283.860783][ T5810] Tainted: [L]=SOFTLOCKUP [ 283.860791][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.860805][ T5810] Workqueue: hci0 hci_rx_work [ 283.860856][ T5810] Call Trace: [ 283.860868][ T5810] [ 283.860879][ T5810] dump_stack_lvl+0xe8/0x150 [ 283.860917][ T5810] sysfs_create_dir_ns+0x271/0x2a0 [ 283.860943][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 283.860989][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 283.861018][ T5810] ? rt_spin_unlock+0x160/0x200 [ 283.861046][ T5810] kobject_add_internal+0x631/0xd10 [ 283.861077][ T5810] kobject_add+0x163/0x240 [ 283.861116][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 283.861159][ T5810] ? get_device_parent+0x370/0x3a0 [ 283.861196][ T5810] device_add+0x408/0xb80 [ 283.861234][ T5810] hci_conn_add_sysfs+0xd5/0x210 [ 283.861265][ T5810] le_conn_complete_evt+0xf1d/0x1430 [ 283.861311][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 283.861346][ T5810] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 283.861376][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.861408][ T5810] ? skb_pull_data+0xfb/0x200 [ 283.861446][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 283.861488][ T5810] hci_event_packet+0x7af/0x12c0 [ 283.861521][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 283.861554][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 283.861581][ T5810] ? rt_spin_unlock+0x14f/0x200 [ 283.861615][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 283.861641][ T5810] hci_rx_work+0x3ee/0x1030 [ 283.861676][ T5810] ? process_scheduled_works+0xa25/0x1830 [ 283.861708][ T5810] process_scheduled_works+0xb02/0x1830 [ 283.861769][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.861827][ T5810] ? assign_work+0x3d5/0x5e0 [ 283.861871][ T5810] worker_thread+0xa50/0xfc0 [ 283.861935][ T5810] kthread+0x388/0x470 [ 283.861966][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 283.861996][ T5810] ? __pfx_kthread+0x10/0x10 [ 283.862021][ T5810] ret_from_fork+0x51e/0xb90 [ 283.862058][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 283.862087][ T5810] ? __switch_to+0xc7d/0x1450 [ 283.862120][ T5810] ? __pfx_kthread+0x10/0x10 [ 283.862145][ T5810] ret_from_fork_asm+0x1a/0x30 [ 283.862185][ T5810] [ 283.862217][ T5810] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 283.862257][ T5810] Bluetooth: hci0: failed to register connection device [ 284.543175][ T6024] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 286.023381][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 286.055522][ T6024] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 286.071489][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.071516][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.071587][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.071614][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.131433][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.131462][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.131510][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.131536][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.141378][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.141405][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.141455][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.141482][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.188211][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.188238][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.188287][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.188313][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.193816][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.193842][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.193893][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.193920][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.197352][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.197378][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.197433][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.197461][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.344351][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.344381][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.344432][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.344459][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.389849][ T6024] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.389875][ T6024] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.389926][ T6024] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.389952][ T6024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.411718][ T6024] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.411750][ T6024] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.411772][ T6024] usb 4-1: Product: syz [ 286.411786][ T6024] usb 4-1: Manufacturer: syz [ 286.411800][ T6024] usb 4-1: SerialNumber: syz [ 286.484604][ T6024] usb 4-1: config 0 descriptor?? [ 286.499347][ T6024] yurex 4-1:0.0: Could not find endpoints [ 286.724151][ T5880] usb 4-1: USB disconnect, device number 4 [ 287.017034][ T7328] loop2: detected capacity change from 0 to 7 [ 287.019563][ T5802] Dev loop2: unable to read RDB block 7 [ 287.019611][ T5802] loop2: unable to read partition table [ 287.019869][ T5802] loop2: partition table beyond EOD, truncated [ 287.051369][ T7328] Dev loop2: unable to read RDB block 7 [ 287.051419][ T7328] loop2: unable to read partition table [ 287.051733][ T7328] loop2: partition table beyond EOD, truncated [ 287.051769][ T7328] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.545912][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 291.077180][ T7355] ptrace attach of "./syz-executor exec"[5804] was attempted by " [ 292.476270][ T7356] cgroup: fork rejected by pids controller in /syz0 [ 292.871750][ T1475] ODEBUG: Out of memory. ODEBUG disabled [ 293.951552][ T7503] kvm: kvm [7498]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 295.773497][ T5881] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.933989][ T5881] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 295.935339][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.935391][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 295.935405][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.939760][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.939816][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 295.939838][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.013193][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.013249][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.013270][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.021278][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.021336][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.021367][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.024996][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.025051][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.025073][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.134787][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.134845][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.134867][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.142605][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.142661][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.142688][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.162832][ T5881] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.162888][ T5881] usb 1-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.162908][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.224113][ T5881] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 296.224142][ T5881] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 296.224220][ T5881] usb 1-1: Product: syz [ 296.224235][ T5881] usb 1-1: Manufacturer: syz [ 296.224249][ T5881] usb 1-1: SerialNumber: syz [ 296.280551][ T5881] usb 1-1: config 0 descriptor?? [ 296.294272][ T5881] yurex 1-1:0.0: Could not find endpoints [ 297.530692][ T5881] usb 1-1: USB disconnect, device number 10 [ 305.653268][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 305.804184][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 305.932234][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.932333][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 305.932357][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.156773][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.156841][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 306.156864][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.158979][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.159028][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 306.159049][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.161596][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 306.161650][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 306.161680][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.621164][ T7578] ptrace attach of "./syz-executor exec"[5804] was attempted by " [ 307.064377][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.066481][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 307.066558][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.414626][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.414683][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 307.414705][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.416075][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.416125][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 307.416146][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.417221][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 307.417270][ T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 307.417291][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 307.420082][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 307.420110][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 307.420132][ T10] usb 4-1: Product: syz [ 307.420148][ T10] usb 4-1: Manufacturer: syz [ 307.420162][ T10] usb 4-1: SerialNumber: syz [ 307.622518][ T10] usb 4-1: config 0 descriptor?? [ 307.643742][ T10] yurex 4-1:0.0: Could not find endpoints [ 307.915848][ T10] usb 4-1: USB disconnect, device number 5 [ 309.113127][ T6024] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 310.130605][ T6024] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 310.130636][ T6024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.130656][ T6024] usb 3-1: Product: syz [ 310.130670][ T6024] usb 3-1: Manufacturer: syz [ 310.130684][ T6024] usb 3-1: SerialNumber: syz [ 310.546279][ T6024] usb 3-1: config 0 descriptor?? [ 310.581443][ T6024] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 311.662459][ T6024] gspca_sunplus: reg_w_riv err -110 [ 311.662578][ T6024] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 312.693342][ T5880] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 312.864120][ T5880] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 312.865617][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.865654][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 312.865668][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.974037][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 312.974080][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 312.974095][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.011710][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.011751][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 313.011766][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.057187][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.057257][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 313.057280][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.062643][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.062699][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 313.062719][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.186690][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.186769][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 313.186792][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.279393][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.279451][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 313.279472][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.317790][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 313.317847][ T5880] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 313.317870][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 313.638109][ T5880] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 313.638141][ T5880] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 313.638163][ T5880] usb 4-1: Product: syz [ 313.638179][ T5880] usb 4-1: Manufacturer: syz [ 313.638193][ T5880] usb 4-1: SerialNumber: syz [ 313.689833][ T5880] usb 4-1: config 0 descriptor?? [ 313.691056][ T5961] usb 3-1: USB disconnect, device number 5 [ 313.786006][ T5880] yurex 4-1:0.0: Could not find endpoints [ 314.053295][ T5880] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 314.094444][ T5881] usb 4-1: USB disconnect, device number 6 [ 315.075981][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 315.137313][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.137340][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 315.140251][ T5880] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 315.140281][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.140302][ T5880] usb 1-1: Product: syz [ 315.140318][ T5880] usb 1-1: Manufacturer: syz [ 315.140333][ T5880] usb 1-1: SerialNumber: syz [ 315.194932][ T5880] usb 1-1: config 0 descriptor?? [ 315.633205][ T7653] program syz.5.439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.799071][ T812] usb 1-1: USB disconnect, device number 11 [ 317.246835][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247040][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.148414][ T7676] ptrace attach of "./syz-executor exec"[5795] was attempted by " [ 325.523411][ C0] ------------[ cut here ]------------ [ 325.523427][ C0] 1 [ 325.523449][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 325.523489][ C0] Modules linked in: [ 325.523517][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 325.523547][ C0] Tainted: [L]=SOFTLOCKUP [ 325.523555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.523569][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 325.523591][ C0] Code: 0f 94 c0 5b 41 5e e9 05 2d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 325.523608][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 325.523628][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 325.523645][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 325.523658][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 325.523673][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 325.523690][ C0] R13: 0000000100000940 R14: 1ffff9200002af4c R15: ffff88805fc59f38 [ 325.523708][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 325.523725][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.523740][ C0] CR2: 00007f36f1d06238 CR3: 000000003f41e000 CR4: 00000000003526f0 [ 325.523760][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.523774][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 325.523788][ C0] Call Trace: [ 325.523797][ C0] [ 325.523806][ C0] call_timer_fn+0x192/0x640 [ 325.523831][ C0] ? __pfx_stub_timer+0x10/0x10 [ 325.523850][ C0] ? call_timer_fn+0xd4/0x640 [ 325.523873][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 325.523892][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.523937][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.523970][ C0] ? __pfx_stub_timer+0x10/0x10 [ 325.523994][ C0] __run_timer_base+0x6a3/0x9f0 [ 325.524046][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 325.524078][ C0] ? rt_spin_lock+0x1e0/0x400 [ 325.524124][ C0] run_timer_softirq+0xb7/0x170 [ 325.524160][ C0] handle_softirqs+0x1de/0x6f0 [ 325.524215][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 325.524251][ C0] run_ktimerd+0x69/0x100 [ 325.524288][ C0] smpboot_thread_fn+0x541/0xa50 [ 325.524326][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 325.524372][ C0] kthread+0x388/0x470 [ 325.524397][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.524432][ C0] ? __pfx_kthread+0x10/0x10 [ 325.524458][ C0] ret_from_fork+0x51e/0xb90 [ 325.524496][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.524527][ C0] ? __switch_to+0xc7d/0x1450 [ 325.524561][ C0] ? __pfx_kthread+0x10/0x10 [ 325.524587][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.524629][ C0] [ 325.524647][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.524666][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 325.524697][ C0] Tainted: [L]=SOFTLOCKUP [ 325.524706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 325.524719][ C0] Call Trace: [ 325.524728][ C0] [ 325.524737][ C0] vpanic+0x56c/0xa60 [ 325.524774][ C0] ? __pfx__printk+0x10/0x10 [ 325.524800][ C0] ? __pfx_vpanic+0x10/0x10 [ 325.524832][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 325.524865][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 325.524907][ C0] panic+0xc5/0xd0 [ 325.524942][ C0] ? __pfx_panic+0x10/0x10 [ 325.524987][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 325.525016][ C0] __warn+0x315/0x4f0 [ 325.525049][ C0] ? stub_timer+0xa/0x20 [ 325.525072][ C0] ? stub_timer+0xa/0x20 [ 325.525094][ C0] __report_bug+0x29a/0x540 [ 325.525133][ C0] ? stub_timer+0xa/0x20 [ 325.525154][ C0] ? __pfx___report_bug+0x10/0x10 [ 325.525190][ C0] ? add_lock_to_list+0xc7/0x100 [ 325.525221][ C0] ? lockdep_unlock+0x5d/0xd0 [ 325.525251][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 325.525278][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 325.525304][ C0] ? stub_timer+0xa/0x20 [ 325.525324][ C0] report_bug+0x16a/0x220 [ 325.525356][ C0] ? stub_timer+0xa/0x20 [ 325.525374][ C0] ? stub_timer+0xc/0x20 [ 325.525393][ C0] handle_bug+0x98/0x200 [ 325.525432][ C0] exc_invalid_op+0x1a/0x50 [ 325.525467][ C0] asm_exc_invalid_op+0x1a/0x20 [ 325.525490][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 325.525511][ C0] Code: 0f 94 c0 5b 41 5e e9 05 2d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 325.525529][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 325.525549][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 325.525566][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 325.525581][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 325.525595][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 325.525611][ C0] R13: 0000000100000940 R14: 1ffff9200002af4c R15: ffff88805fc59f38 [ 325.525634][ C0] ? __pfx_stub_timer+0x10/0x10 [ 325.525657][ C0] ? stub_timer+0x9/0x20 [ 325.525685][ C0] ? stub_timer+0x9/0x20 [ 325.525703][ C0] call_timer_fn+0x192/0x640 [ 325.525725][ C0] ? __pfx_stub_timer+0x10/0x10 [ 325.525744][ C0] ? call_timer_fn+0xd4/0x640 [ 325.525766][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 325.525786][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.525831][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.525863][ C0] ? __pfx_stub_timer+0x10/0x10 [ 325.525886][ C0] __run_timer_base+0x6a3/0x9f0 [ 325.525939][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 325.525971][ C0] ? rt_spin_lock+0x1e0/0x400 [ 325.526016][ C0] run_timer_softirq+0xb7/0x170 [ 325.526053][ C0] handle_softirqs+0x1de/0x6f0 [ 325.526096][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 325.526131][ C0] run_ktimerd+0x69/0x100 [ 325.526168][ C0] smpboot_thread_fn+0x541/0xa50 [ 325.526214][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 325.526260][ C0] kthread+0x388/0x470 [ 325.526285][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 325.526319][ C0] ? __pfx_kthread+0x10/0x10 [ 325.526346][ C0] ret_from_fork+0x51e/0xb90 [ 325.526383][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 325.526415][ C0] ? __switch_to+0xc7d/0x1450 [ 325.526449][ C0] ? __pfx_kthread+0x10/0x10 [ 325.526476][ C0] ret_from_fork_asm+0x1a/0x30 [ 325.526530][ C0] [ 325.527130][ C0] Kernel Offset: disabled