last executing test programs: 8.527121236s ago: executing program 3 (id=524): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x205}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.259180681s ago: executing program 3 (id=533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(0x0, 0x16, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = io_uring_setup(0x70c4, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc04c5609, &(0x7f0000002d00)=@fd={0x6, 0xe, 0x4, 0x4, 0x3, {0x77359400}, {0x4, 0x8, 0x2, 0x1, 0xc, 0x8, "7ea65b46"}, 0x180d, 0x4, {}, 0xf537}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 6.437827509s ago: executing program 3 (id=537): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xffff0001, 0x14436c48, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x100, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2c101, 0x105) 6.303518361s ago: executing program 1 (id=539): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xffffffffff60014a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x2def, 0x0, &(0x7f0000000700)=0x0, 0x0, &(0x7f0000000300)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r2, r3, 0x0, r4, 0x0, &(0x7f0000000480)) dup(r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e24, 0x5, @empty, 0xffffffb6}}, 0x7, 0x6}, &(0x7f0000000180)=0x90) 6.177608791s ago: executing program 3 (id=541): socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp], 0x2) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f000014c000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000000)=0x9, 0x9, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0xffffffffffffffff, 0xca1d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) mbind(&(0x7f000034b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xfffffffd, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400"], 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x18, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, &(0x7f0000000180)="3b826a86871d9a3d70e7c44b615ec95585a8238e3651c99acb57b8", 0x1b, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 4.743405757s ago: executing program 1 (id=547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 2.707134818s ago: executing program 2 (id=553): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x35, &(0x7f0000000040), 0x4) 2.639299194s ago: executing program 2 (id=554): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 2.563531052s ago: executing program 1 (id=556): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.403471811s ago: executing program 2 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000180080001000100000008000200", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x4c}}, 0x0) 2.350402034s ago: executing program 1 (id=558): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2.28152948s ago: executing program 2 (id=559): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x2, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(0x0, 0x16, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x70c4, 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f0000002d00)=@fd={0x6, 0xe, 0x4, 0x4, 0x3, {0x77359400}, {0x4, 0x8, 0x2, 0x1, 0xc, 0x8, "7ea65b46"}, 0x180d, 0x4, {}, 0xf537}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 1.541249539s ago: executing program 3 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04080400c8"], 0x7) 1.41011233s ago: executing program 1 (id=562): syz_clone(0x44000, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000002980), 0x12) 1.059484485s ago: executing program 0 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48400, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 968.244367ms ago: executing program 0 (id=565): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88e83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbdd, 0x2}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) r4 = socket$inet(0x2b, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xc7d}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB], 0x3c}}, 0x40000) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x6, 0x3, @vifc_lcl_addr=@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 875.981209ms ago: executing program 3 (id=566): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 619.305851ms ago: executing program 0 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0xd, r7, 0x1, 0xda, 0x6, @random="98c8ca7122df"}, 0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 430.590156ms ago: executing program 1 (id=568): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f00000006c0)={0x20, 0xf, 0x3, "57ee15"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 327.866801ms ago: executing program 0 (id=569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)\r\n', 0x2e) 318.966723ms ago: executing program 2 (id=570): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xffff0001, 0x14436c48, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x100, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2c101, 0x105) 159.168522ms ago: executing program 2 (id=571): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6000000000302c00196e2001000000000000ffffac1414bbff020000000000000000000000000001"], 0x0) madvise(&(0x7f0000143000/0x4000)=nil, 0x4000, 0xa) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001ac0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4048010) 79.292661ms ago: executing program 0 (id=572): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040051) 0s ago: executing program 0 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x2040) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f0000013adb"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r3, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e23, 0x0, 0x3, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000080000000, 0x95, 0xfffffffffffffffa}, {0x40, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f0000000800010001000000e25578e32fa9381b73ddfa471714a86098a6837b25612717d7646d4a150d8afbbee72e4a53c178a3c50e16b7980adc8f8a"], 0x1c}}, 0x4000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 84.136827][ T5764] cgroup: Unknown subsys name 'net' [ 84.270820][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.971312][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.853212][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.864849][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.873497][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.881755][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.890475][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.943209][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.951998][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.959504][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.968578][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.976803][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.985348][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.993707][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.002687][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.010183][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.032437][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.041099][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.050809][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.054708][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.067253][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.076090][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.083944][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.091372][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.092606][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.105966][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.538160][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 88.716172][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.764139][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.771426][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.780836][ T5784] bridge_slave_0: entered allmulticast mode [ 88.788948][ T5784] bridge_slave_0: entered promiscuous mode [ 88.816852][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.827596][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.835003][ T5784] bridge_slave_1: entered allmulticast mode [ 88.844792][ T5784] bridge_slave_1: entered promiscuous mode [ 88.859026][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.910063][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.924566][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.968351][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.048632][ T5784] team0: Port device team_slave_0 added [ 89.070451][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.078225][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.086248][ T5781] bridge_slave_0: entered allmulticast mode [ 89.094449][ T5781] bridge_slave_0: entered promiscuous mode [ 89.104704][ T5784] team0: Port device team_slave_1 added [ 89.129457][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.136776][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.144217][ T5781] bridge_slave_1: entered allmulticast mode [ 89.151294][ T5781] bridge_slave_1: entered promiscuous mode [ 89.211225][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.259166][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.269844][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.277401][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.303876][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.329689][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.337017][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.344552][ T5776] bridge_slave_0: entered allmulticast mode [ 89.351768][ T5776] bridge_slave_0: entered promiscuous mode [ 89.370045][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.377593][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.384925][ T5776] bridge_slave_1: entered allmulticast mode [ 89.392577][ T5776] bridge_slave_1: entered promiscuous mode [ 89.399846][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.407306][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.433584][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.453130][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.460301][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.468479][ T5779] bridge_slave_0: entered allmulticast mode [ 89.476242][ T5779] bridge_slave_0: entered promiscuous mode [ 89.521640][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.531279][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.539042][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.546545][ T5779] bridge_slave_1: entered allmulticast mode [ 89.554161][ T5779] bridge_slave_1: entered promiscuous mode [ 89.592477][ T5781] team0: Port device team_slave_0 added [ 89.613123][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.635939][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.649980][ T5781] team0: Port device team_slave_1 added [ 89.692932][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.726765][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.734424][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.760817][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.779003][ T5784] hsr_slave_0: entered promiscuous mode [ 89.786422][ T5784] hsr_slave_1: entered promiscuous mode [ 89.796826][ T5776] team0: Port device team_slave_0 added [ 89.816986][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.824257][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.850371][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.883527][ T5776] team0: Port device team_slave_1 added [ 89.893105][ T5779] team0: Port device team_slave_0 added [ 89.901834][ T5779] team0: Port device team_slave_1 added [ 89.950296][ T5781] hsr_slave_0: entered promiscuous mode [ 89.956835][ T5781] hsr_slave_1: entered promiscuous mode [ 89.963481][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.971536][ T5781] Cannot create hsr debugfs directory [ 90.036942][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.044261][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.070560][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.075614][ T5783] Bluetooth: hci0: command tx timeout [ 90.087250][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.094303][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.120258][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.132260][ T5783] Bluetooth: hci1: command tx timeout [ 90.148668][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.155719][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.181755][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.194518][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.201506][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.228528][ T5783] Bluetooth: hci2: command tx timeout [ 90.228603][ T5780] Bluetooth: hci3: command tx timeout [ 90.239884][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.331126][ T5779] hsr_slave_0: entered promiscuous mode [ 90.341549][ T5779] hsr_slave_1: entered promiscuous mode [ 90.348077][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.356543][ T5779] Cannot create hsr debugfs directory [ 90.465848][ T5776] hsr_slave_0: entered promiscuous mode [ 90.473227][ T5776] hsr_slave_1: entered promiscuous mode [ 90.479634][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.487533][ T5776] Cannot create hsr debugfs directory [ 90.821497][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.840489][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.861304][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.881550][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.941711][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.973984][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.993267][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.005450][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.085303][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.107550][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.133194][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.145600][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.290817][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.313958][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.325201][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.336048][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.397356][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.446956][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.481664][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.489125][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.522174][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.529353][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.551010][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.584939][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.638575][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.676323][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.686951][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.694262][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.710765][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.717963][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.755944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.763177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.847417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.854594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.897281][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.040217][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.086385][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.093700][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.130155][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.137394][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.145308][ T5783] Bluetooth: hci0: command tx timeout [ 92.213839][ T5783] Bluetooth: hci1: command tx timeout [ 92.258840][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.299884][ T5783] Bluetooth: hci3: command tx timeout [ 92.299922][ T5780] Bluetooth: hci2: command tx timeout [ 92.421933][ T5784] veth0_vlan: entered promiscuous mode [ 92.477483][ T5784] veth1_vlan: entered promiscuous mode [ 92.535562][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.594320][ T5784] veth0_macvtap: entered promiscuous mode [ 92.630852][ T5784] veth1_macvtap: entered promiscuous mode [ 92.655066][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.719910][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.756214][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.800177][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.811107][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.822538][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831292][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.869881][ T5781] veth0_vlan: entered promiscuous mode [ 92.890176][ T5779] veth0_vlan: entered promiscuous mode [ 92.917851][ T5779] veth1_vlan: entered promiscuous mode [ 92.940375][ T5781] veth1_vlan: entered promiscuous mode [ 92.997534][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.093496][ T5781] veth0_macvtap: entered promiscuous mode [ 93.119648][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.127732][ T5779] veth0_macvtap: entered promiscuous mode [ 93.135882][ T5781] veth1_macvtap: entered promiscuous mode [ 93.145309][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.170672][ T5779] veth1_macvtap: entered promiscuous mode [ 93.258042][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.258747][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.277823][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.286950][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.299353][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.316580][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.328834][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.340221][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.350778][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.364253][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.373716][ T5776] veth0_vlan: entered promiscuous mode [ 93.391051][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.414175][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.427222][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.440140][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.453958][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.463632][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476297][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500304][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.521269][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.536072][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.546840][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.558695][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.580472][ T5776] veth1_vlan: entered promiscuous mode [ 93.608196][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.618858][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.628889][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.637965][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.823226][ T5844] netlink: 'syz.1.2': attribute type 25 has an invalid length. [ 93.835311][ T5776] veth0_macvtap: entered promiscuous mode [ 93.860127][ T5776] veth1_macvtap: entered promiscuous mode [ 93.900406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.936003][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.955276][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.989671][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.007115][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.018207][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.029000][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.039608][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.051523][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.103589][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.132401][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.149738][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.166749][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.177758][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.188672][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.200201][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.205719][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.220897][ T5780] Bluetooth: hci0: command tx timeout [ 94.246240][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.257331][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.266439][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.275356][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.292370][ T5780] Bluetooth: hci1: command tx timeout [ 94.344310][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.353017][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.372600][ T5780] Bluetooth: hci3: command tx timeout [ 94.380100][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.388821][ T5780] Bluetooth: hci2: command tx timeout [ 94.396351][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.465088][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.477639][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.585151][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.614637][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.702562][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.742059][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.755227][ T28] audit: type=1326 audit(1790686043.846:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 94.813095][ T28] audit: type=1326 audit(1790686043.886:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 94.857709][ T28] audit: type=1326 audit(1790686043.886:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 94.900250][ T28] audit: type=1326 audit(1790686043.886:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 94.931448][ T28] audit: type=1326 audit(1790686043.886:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 94.976154][ T28] audit: type=1326 audit(1790686043.886:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 95.010450][ T28] audit: type=1326 audit(1790686043.886:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 95.105175][ T28] audit: type=1326 audit(1790686043.886:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 95.177806][ T28] audit: type=1326 audit(1790686043.886:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 95.294277][ T28] audit: type=1326 audit(1790686043.886:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 95.671195][ T5870] netlink: 'syz.3.11': attribute type 25 has an invalid length. [ 95.929397][ T5872] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 95.970957][ T5872] netlink: 'syz.0.12': attribute type 2 has an invalid length. [ 96.293039][ T5780] Bluetooth: hci0: command tx timeout [ 96.382921][ T5780] Bluetooth: hci1: command tx timeout [ 96.397193][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.453472][ T5780] Bluetooth: hci2: command tx timeout [ 96.456838][ T5783] Bluetooth: hci3: command tx timeout [ 96.612820][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 96.642360][ T5820] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.662250][ T5820] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 96.668306][ T5907] netlink: 'syz.2.21': attribute type 25 has an invalid length. [ 96.691437][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.731640][ T5820] usb 2-1: config 0 descriptor?? [ 96.936365][ T5914] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 96.991659][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.009973][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.114899][ T5920] tc_dump_action: action bad kind [ 97.181651][ T5922] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 97.210725][ T5922] netlink: 'syz.3.27': attribute type 2 has an invalid length. [ 97.222083][ T5851] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.261004][ T789] cfg80211: failed to load regulatory.db [ 97.432189][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 97.446937][ T5851] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 97.462577][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.478575][ T5851] usb 1-1: Product: syz [ 97.488645][ T5851] usb 1-1: Manufacturer: syz [ 97.502311][ T5851] usb 1-1: SerialNumber: syz [ 97.750733][ T5851] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 97.769825][ T5851] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.782536][ T5851] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 97.791498][ T5851] usb 1-1: media controller created [ 97.831249][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.083253][ T5851] zl10353_read_register: readreg error (reg=127, ret==-110) [ 98.096711][ T27] usb 2-1: USB disconnect, device number 2 [ 98.248620][ T5851] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 98.291466][ T5851] usb 1-1: USB disconnect, device number 2 [ 98.604008][ T5943] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.34' sets config #541982722 [ 98.804466][ T5954] syzkaller0: entered promiscuous mode [ 98.809976][ T5954] syzkaller0: entered allmulticast mode [ 99.772261][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 99.772277][ T28] audit: type=1326 audit(1790686048.866:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e9955e98e code=0x7ffc0000 [ 99.845685][ T28] audit: type=1326 audit(1790686048.906:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 99.911743][ T28] audit: type=1326 audit(1790686048.906:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 99.970178][ T28] audit: type=1326 audit(1790686048.906:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.061452][ T28] audit: type=1326 audit(1790686048.906:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.124891][ T28] audit: type=1326 audit(1790686048.906:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.176856][ T28] audit: type=1326 audit(1790686048.916:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.206350][ T28] audit: type=1326 audit(1790686048.916:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.292167][ T28] audit: type=1326 audit(1790686048.916:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.339747][ T28] audit: type=1326 audit(1790686048.926:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.3.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9e9959e159 code=0x7ffc0000 [ 100.660132][ T3065] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.843971][ T3065] usb 2-1: Using ep0 maxpacket: 16 [ 100.859790][ T3065] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 100.869610][ T3065] usb 2-1: config 0 has no interface number 0 [ 100.879796][ T3065] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.892189][ T3065] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.906950][ T3065] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 100.916409][ T3065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.924743][ T3065] usb 2-1: Product: syz [ 100.929226][ T3065] usb 2-1: Manufacturer: syz [ 100.935539][ T3065] usb 2-1: SerialNumber: syz [ 100.949698][ T3065] usb 2-1: config 0 descriptor?? [ 101.360523][ T3065] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 101.382663][ T3065] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 101.437305][ T3065] usb 2-1: USB disconnect, device number 3 [ 101.516387][ T5996] input: syz0 as /devices/virtual/input/input9 [ 101.932047][ T5851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.142366][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 102.162559][ T5851] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 102.170873][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.225085][ T5851] usb 4-1: config 0 has no interface number 0 [ 102.235562][ T5851] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 102.265300][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.276130][ T5851] usb 4-1: Product: syz [ 102.280383][ T5851] usb 4-1: Manufacturer: syz [ 102.285223][ T5851] usb 4-1: SerialNumber: syz [ 102.305894][ T5851] usb 4-1: config 0 descriptor?? [ 102.324686][ T5851] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 102.333106][ T5851] usb 4-1: No valid video chain found. [ 102.442729][ T6016] mmap: syz.2.61 (6016) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.556234][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'. [ 102.981019][ T5820] IPVS: starting estimator thread 0... [ 103.079217][ T6022] input: syz0 as /devices/virtual/input/input10 [ 103.252816][ T6027] IPVS: using max 15 ests per chain, 36000 per kthread [ 103.585405][ T6025] loop9: detected capacity change from 0 to 7 [ 103.617219][ T6025] Dev loop9: unable to read RDB block 7 [ 103.631176][ T6025] loop9: unable to read partition table [ 103.663391][ T6025] loop9: partition table beyond EOD, truncated [ 103.704343][ T6025] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 103.704343][ T6025] ) failed (rc=-5) [ 103.843025][ T3065] IPVS: starting estimator thread 0... [ 103.942049][ T6039] IPVS: using max 18 ests per chain, 43200 per kthread [ 104.803015][ T27] usb 4-1: USB disconnect, device number 2 [ 105.644374][ T6066] input: syz0 as /devices/virtual/input/input12 [ 105.855174][ T6072] dccp_invalid_packet: P.Data Offset(10) too large [ 106.019127][ T6075] loop9: detected capacity change from 0 to 7 [ 106.049574][ T6075] Dev loop9: unable to read RDB block 7 [ 106.085598][ T6075] loop9: unable to read partition table [ 106.091591][ T6075] loop9: partition table beyond EOD, truncated [ 106.165351][ T6075] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.165351][ T6075] ) failed (rc=-5) [ 106.243107][ T6084] capability: warning: `syz.0.81' uses deprecated v2 capabilities in a way that may be insecure [ 106.590960][ T6092] syzkaller0: entered promiscuous mode [ 106.597202][ T6092] syzkaller0: entered allmulticast mode [ 106.636434][ T6092] tipc: Started in network mode [ 106.645928][ T6092] tipc: Node identity fed86cb2898e, cluster identity 4711 [ 106.658622][ T6092] tipc: Enabled bearer , priority 0 [ 106.674112][ T6091] tipc: Resetting bearer [ 106.745995][ T6091] tipc: Disabling bearer [ 106.939226][ T6096] input: syz0 as /devices/virtual/input/input13 [ 108.203299][ T6133] fuse: Bad value for 'fd' [ 108.239957][ T6136] input: syz0 as /devices/virtual/input/input14 [ 110.724207][ T6149] Zero length message leads to an empty skb [ 111.310780][ T6168] process 'syz.1.102' launched './file2' with NULL argv: empty string added [ 111.344458][ T6172] fuse: Bad value for 'fd' [ 111.454376][ T6175] input: syz0 as /devices/virtual/input/input15 [ 113.293764][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 113.364411][ T6185] program syz.2.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.542383][ T6209] fuse: Bad value for 'fd' [ 116.141967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.548367][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 119.548389][ T28] audit: type=1326 audit(1790686068.646:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.592687][ T6265] ======================================================= [ 119.592687][ T6265] WARNING: The mand mount option has been deprecated and [ 119.592687][ T6265] and is ignored by this kernel. Remove the mand [ 119.592687][ T6265] option from the mount to silence this warning. [ 119.592687][ T6265] ======================================================= [ 119.633515][ T28] audit: type=1326 audit(1790686068.646:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.675642][ T28] audit: type=1326 audit(1790686068.686:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.700530][ T28] audit: type=1326 audit(1790686068.686:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.775107][ T28] audit: type=1326 audit(1790686068.686:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.839535][ T28] audit: type=1326 audit(1790686068.686:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.912708][ T28] audit: type=1326 audit(1790686068.686:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 119.988847][ T28] audit: type=1326 audit(1790686068.686:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 120.032417][ T28] audit: type=1326 audit(1790686068.686:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 120.070366][ T28] audit: type=1326 audit(1790686068.686:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.2.134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4f19e159 code=0x7ffc0000 [ 120.105087][ T6275] netlink: 'syz.3.138': attribute type 25 has an invalid length. [ 122.348219][ T6305] netlink: 'syz.2.148': attribute type 25 has an invalid length. [ 124.397122][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.501045][ T6339] netlink: 'syz.1.157': attribute type 25 has an invalid length. [ 124.747958][ T6329] syz.3.154[6329]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 125.752169][ T3065] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.952130][ T3065] usb 3-1: Using ep0 maxpacket: 16 [ 125.979815][ T3065] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 125.998485][ T3065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.024516][ T3065] usb 3-1: config 0 has no interface number 0 [ 126.054684][ T3065] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 126.086155][ T3065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.099839][ T3065] usb 3-1: Product: syz [ 126.114092][ T3065] usb 3-1: Manufacturer: syz [ 126.126521][ T3065] usb 3-1: SerialNumber: syz [ 126.138019][ T3065] usb 3-1: config 0 descriptor?? [ 126.165541][ T3065] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 126.172183][ T3065] usb 3-1: No valid video chain found. [ 126.172435][ T6375] netlink: 'syz.0.167': attribute type 25 has an invalid length. [ 127.603109][ T6396] syzkaller1: entered promiscuous mode [ 127.608675][ T6396] syzkaller1: entered allmulticast mode [ 127.937692][ T6405] netlink: 'syz.1.176': attribute type 25 has an invalid length. [ 128.586300][ T3065] usb 3-1: USB disconnect, device number 2 [ 129.216443][ T6433] netlink: 'syz.0.185': attribute type 25 has an invalid length. [ 129.512498][ T6444] syzkaller0: entered promiscuous mode [ 129.531985][ T6444] syzkaller0: entered allmulticast mode [ 129.942080][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.960301][ T6456] netlink: 'syz.0.194': attribute type 25 has an invalid length. [ 130.149931][ T27] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.172392][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.201243][ T27] usb 2-1: config 0 descriptor?? [ 130.320006][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 130.463660][ T6449] batman_adv: batadv0: Adding interface: macvtap1 [ 130.470329][ T6449] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.498578][ T6449] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 130.540179][ T27] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 130.564882][ T27] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 130.575000][ T27] [drm:udl_init] *ERROR* Selecting channel failed [ 130.608687][ T27] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 130.626597][ T27] [drm] Initialized udl on minor 2 [ 130.640697][ T27] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 130.663114][ T27] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 130.695937][ T5839] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 130.712195][ T27] usb 2-1: USB disconnect, device number 4 [ 130.722705][ T5839] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 131.555747][ T6489] syzkaller0: entered promiscuous mode [ 131.567576][ T6489] syzkaller0: entered allmulticast mode [ 131.782206][ T6492] netlink: 'syz.1.205': attribute type 25 has an invalid length. [ 132.084522][ T6502] loop9: detected capacity change from 0 to 7 [ 132.096531][ T6502] Dev loop9: unable to read RDB block 7 [ 132.102604][ T6502] loop9: unable to read partition table [ 132.108630][ T6502] loop9: partition table beyond EOD, truncated [ 132.116675][ T6502] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 132.116675][ T6502] ) failed (rc=-5) [ 133.190674][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.197786][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.970474][ T6538] input: syz0 as /devices/virtual/input/input16 [ 137.123102][ T6576] input: syz0 as /devices/virtual/input/input17 [ 137.162077][ T3065] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.382254][ T3065] usb 4-1: Using ep0 maxpacket: 16 [ 137.422018][ T3065] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 137.478184][ T3065] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.510098][ T3065] usb 4-1: config 0 has no interface number 0 [ 137.528669][ T3065] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 137.566518][ T3065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.606109][ T3065] usb 4-1: Product: syz [ 137.637401][ T3065] usb 4-1: Manufacturer: syz [ 137.670303][ T3065] usb 4-1: SerialNumber: syz [ 137.714366][ T3065] usb 4-1: config 0 descriptor?? [ 137.773688][ T3065] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 137.801458][ T3065] usb 4-1: No valid video chain found. [ 140.175865][ T6608] input: syz0 as /devices/virtual/input/input18 [ 140.835451][ T3065] usb 4-1: USB disconnect, device number 3 [ 142.453912][ T6644] input: syz0 as /devices/virtual/input/input19 [ 142.864167][ T6657] input: syz0 as /devices/virtual/input/input20 [ 142.911421][ T6661] ip_tables: iptables: counters copy to user failed while replacing table [ 144.882815][ T3065] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.244268][ T3065] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.270322][ T3065] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.289300][ T6693] ip_tables: iptables: counters copy to user failed while replacing table [ 145.329624][ T3065] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 145.346194][ T3065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.356118][ T3065] usb 3-1: Product: syz [ 145.360364][ T3065] usb 3-1: Manufacturer: syz [ 145.368495][ T3065] usb 3-1: SerialNumber: syz [ 146.692969][ T6713] ip_tables: iptables: counters copy to user failed while replacing table [ 147.311767][ T3065] usb 3-1: 0:1 : does not exist [ 147.334011][ T3065] usb 3-1: unit 5 not found! [ 147.487172][ T3065] usb 3-1: USB disconnect, device number 3 [ 147.564577][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.711279][ T6754] netlink: 64 bytes leftover after parsing attributes in process `syz.3.292'. [ 148.760200][ T6754] syzkaller1: entered promiscuous mode [ 148.771403][ T6754] syzkaller1: entered allmulticast mode [ 149.136603][ T6767] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 149.166438][ T6765] syz.1.296 uses obsolete (PF_INET,SOCK_PACKET) [ 151.562130][ T6819] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 153.960637][ T6875] xt_hashlimit: size too large, truncated to 1048576 [ 154.019839][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 156.382208][ T6915] netlink: 72 bytes leftover after parsing attributes in process `syz.0.348'. [ 157.022148][ T3065] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.212077][ T3065] usb 4-1: Using ep0 maxpacket: 16 [ 157.219934][ T3065] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.231409][ T3065] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.245929][ T3065] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.255441][ T3065] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 157.265784][ T3065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.282813][ T3065] usb 4-1: config 0 descriptor?? [ 157.719055][ T6932] syzkaller0: entered promiscuous mode [ 157.724959][ T6932] syzkaller0: entered allmulticast mode [ 157.760122][ T3065] hid-multitouch 0003:0EEF:72C4.0001: No inputs registered, leaving [ 157.832925][ T3065] hid-multitouch 0003:0EEF:72C4.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 158.361785][ T5766] usb 4-1: USB disconnect, device number 4 [ 159.282684][ T5839] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.471912][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 159.486364][ T5839] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 159.506195][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.521990][ T5839] usb 1-1: Product: syz [ 159.531465][ T5839] usb 1-1: Manufacturer: syz [ 159.539460][ T5839] usb 1-1: SerialNumber: syz [ 159.557660][ T5839] r8152-cfgselector 1-1: config 0 descriptor?? [ 159.754752][ T6967] syzkaller0: entered promiscuous mode [ 159.761497][ T6967] syzkaller0: entered allmulticast mode [ 159.797688][ T6967] tipc: Started in network mode [ 159.804294][ T6967] tipc: Node identity ae1d67c5618c, cluster identity 4711 [ 159.815755][ T6967] tipc: Enabled bearer , priority 0 [ 159.830677][ T6966] tipc: Resetting bearer [ 159.926841][ T6966] tipc: Disabling bearer [ 159.961206][ T6943] bridge0: port 3(dummy0) entered blocking state [ 159.983659][ T6943] bridge0: port 3(dummy0) entered disabled state [ 159.990280][ T6943] dummy0: entered allmulticast mode [ 160.034249][ T6943] dummy0: entered promiscuous mode [ 160.041475][ T6943] bridge0: port 3(dummy0) entered blocking state [ 160.048360][ T6943] bridge0: port 3(dummy0) entered forwarding state [ 160.153237][ T6973] syzkaller0: entered promiscuous mode [ 160.158805][ T6973] syzkaller0: entered allmulticast mode [ 160.322055][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.455412][ T5839] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.469744][ T5839] r8152-cfgselector 1-1: bad CDC descriptors [ 160.485551][ T5839] r8152-cfgselector 1-1: Unknown version 0x0000 [ 160.502361][ T5839] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 160.523525][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 160.532653][ T5817] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.545369][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.568981][ T5817] usb 2-1: config 0 has no interface number 0 [ 160.586874][ T5817] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 160.598237][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.606830][ T5817] usb 2-1: Product: syz [ 160.611207][ T5817] usb 2-1: Manufacturer: syz [ 160.619440][ T5817] usb 2-1: SerialNumber: syz [ 160.629241][ T5817] usb 2-1: config 0 descriptor?? [ 160.648273][ T5817] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 160.656463][ T5817] usb 2-1: No valid video chain found. [ 161.283798][ T8] IPVS: starting estimator thread 0... [ 161.452346][ T6985] IPVS: using max 15 ests per chain, 36000 per kthread [ 161.976900][ T6986] syz.3.369(6986): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 163.112528][ T8] usb 2-1: USB disconnect, device number 5 [ 163.243641][ T7003] syzkaller0: entered promiscuous mode [ 163.251079][ T7003] syzkaller0: entered allmulticast mode [ 163.296185][ T7003] tipc: Started in network mode [ 163.301768][ T7003] tipc: Node identity ea80dbb3db09, cluster identity 4711 [ 163.317323][ T7003] tipc: Enabled bearer , priority 0 [ 163.325963][ T7005] syzkaller0: entered promiscuous mode [ 163.349516][ T7005] syzkaller0: entered allmulticast mode [ 163.359205][ T7002] tipc: Resetting bearer [ 163.399019][ T7002] tipc: Disabling bearer [ 163.546614][ T7009] syz_tun: entered allmulticast mode [ 164.662530][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 164.742085][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.872601][ T7038] syzkaller0: entered promiscuous mode [ 164.878245][ T7038] syzkaller0: entered allmulticast mode [ 164.946598][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 164.973078][ T5820] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 164.981614][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.002632][ T5820] usb 2-1: config 0 has no interface number 0 [ 165.020898][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 165.061621][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.072832][ T5820] usb 2-1: Product: syz [ 165.077079][ T5820] usb 2-1: Manufacturer: syz [ 165.081757][ T5820] usb 2-1: SerialNumber: syz [ 165.095405][ T5820] usb 2-1: config 0 descriptor?? [ 165.110986][ T5820] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 165.117514][ T5820] usb 2-1: No valid video chain found. [ 166.387477][ T7046] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 166.407320][ T7046] bridge0: port 3(dummy0) entered disabled state [ 166.414153][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.421603][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.471356][ T7046] bridge0: port 3(dummy0) entered blocking state [ 166.478015][ T7046] bridge0: port 3(dummy0) entered forwarding state [ 166.485979][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.493332][ T7046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.501001][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.508327][ T7046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.529495][ T7046] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.584813][ T7049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.601721][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 166.610830][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 166.634011][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.654218][ T7052] bond1: (slave bond0): making interface the new active one [ 166.676589][ T7052] bond1: (slave bond0): Enslaving as an active interface with an up link [ 166.685586][ T7049] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 166.708128][ T7049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.392'. [ 166.740107][ T7049] .`: renamed from bond0 (while UP) [ 166.792444][ T5766] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.822652][ T1096] bond1: (slave .`): link status definitely down, disabling slave [ 166.842426][ T1096] bond1: now running without any active interface! [ 166.865906][ T7052] syz.2.392 (7052) used greatest stack depth: 19944 bytes left [ 166.996176][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.021271][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.045979][ T5766] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.073577][ T5766] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.093831][ T5766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.120059][ T5766] usb 1-1: config 0 descriptor?? [ 167.260260][ T7065] loop9: detected capacity change from 0 to 7 [ 167.270386][ T7065] Dev loop9: unable to read RDB block 7 [ 167.279999][ T7065] loop9: unable to read partition table [ 167.289107][ T7065] loop9: partition table beyond EOD, truncated [ 167.304053][ T7065] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 167.304053][ T7065] ) failed (rc=-5) [ 167.566520][ T5766] usbhid 1-1:0.0: can't add hid device: -71 [ 167.577615][ T5851] usb 2-1: USB disconnect, device number 6 [ 167.584403][ T5766] usbhid: probe of 1-1:0.0 failed with error -71 [ 167.604001][ T5766] usb 1-1: USB disconnect, device number 4 [ 167.743788][ T7073] syzkaller0: entered promiscuous mode [ 167.774478][ T7073] syzkaller0: entered allmulticast mode [ 168.300662][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 168.541029][ T7084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.575411][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 168.584631][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 168.618027][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.655550][ T7084] bond1: (slave bond0): making interface the new active one [ 168.673146][ T7084] bond1: (slave bond0): Enslaving as an active interface with an up link [ 168.696781][ T7090] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 168.728603][ T7090] netlink: 152 bytes leftover after parsing attributes in process `syz.0.402'. [ 168.747109][ T7090] .`: renamed from bond0 (while UP) [ 168.758712][ T7090] bond1: Primary slave changed to .`, reselecting active slave [ 168.813026][ T7084] syz.0.402 (7084) used greatest stack depth: 19880 bytes left [ 168.865983][ T48] bond1: (slave .`): link status definitely down, disabling slave [ 168.889931][ T48] bond1: now running without any active interface! [ 169.018286][ T7103] bond1: option mode: unable to set because the bond device has slaves [ 169.089972][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 169.117341][ T7100] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 169.130383][ T7100] netlink: 152 bytes leftover after parsing attributes in process `syz.0.413'. [ 169.232596][ T5851] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.432029][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 169.480372][ T5851] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 169.510104][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.528255][ T5851] usb 4-1: Product: syz [ 169.532720][ T5851] usb 4-1: Manufacturer: syz [ 169.544855][ T5851] usb 4-1: SerialNumber: syz [ 169.553620][ T5851] r8152-cfgselector 4-1: config 0 descriptor?? [ 169.916384][ T7102] bridge0: port 3(dummy0) entered blocking state [ 169.923492][ T7102] bridge0: port 3(dummy0) entered disabled state [ 169.930425][ T7102] dummy0: entered allmulticast mode [ 169.938061][ T7102] dummy0: entered promiscuous mode [ 169.944446][ T7102] bridge0: port 3(dummy0) entered blocking state [ 169.951013][ T7102] bridge0: port 3(dummy0) entered forwarding state [ 170.022078][ T5839] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.190282][ T5851] r8152-cfgselector 4-1: Unknown version 0x0000 [ 170.205515][ T5851] r8152-cfgselector 4-1: bad CDC descriptors [ 170.219415][ T5851] r8152-cfgselector 4-1: Unknown version 0x0000 [ 170.236560][ T5851] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 170.254160][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 170.276927][ T5839] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.308424][ T5839] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.331365][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.339506][ T5839] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 170.373904][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.408088][ T5839] usb 2-1: config 0 descriptor?? [ 170.886696][ T5839] hid-multitouch 0003:0EEF:72C4.0002: No inputs registered, leaving [ 170.962432][ T5839] hid-multitouch 0003:0EEF:72C4.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 171.380397][ T5851] usb 2-1: USB disconnect, device number 7 [ 171.544689][ T7140] bond1: option mode: unable to set because the bond device has slaves [ 171.619113][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 171.631111][ T7143] netlink: 'syz.2.415': attribute type 4 has an invalid length. [ 171.665273][ T7143] netlink: 152 bytes leftover after parsing attributes in process `syz.2.415'. [ 172.431614][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 173.342623][ T7178] bond1: option mode: unable to set because the bond device has slaves [ 173.453651][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'. [ 173.527203][ T7184] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 173.534819][ T7182] netlink: 'syz.2.425': attribute type 4 has an invalid length. [ 173.595064][ T7182] netlink: 152 bytes leftover after parsing attributes in process `syz.2.425'. [ 177.913269][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 178.786913][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.805957][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 178.816568][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 178.836692][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.881128][ T7313] bond1: (slave bond0): making interface the new active one [ 178.900300][ T7313] bond1: (slave bond0): Enslaving as an active interface with an up link [ 178.909741][ T7315] netlink: 'syz.1.471': attribute type 4 has an invalid length. [ 178.927278][ T7315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.471'. [ 178.957570][ T7315] .`: renamed from bond0 (while UP) [ 179.009332][ T3448] bond1: (slave .`): link status definitely down, disabling slave [ 179.030746][ T3448] bond1: now running without any active interface! [ 180.198612][ T7339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.238270][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 180.286412][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 180.396398][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.439441][ T7341] bond1: (slave bond0): making interface the new active one [ 180.459722][ T7341] bond1: (slave bond0): Enslaving as an active interface with an up link [ 180.469887][ T7343] netlink: 'syz.3.480': attribute type 4 has an invalid length. [ 180.490126][ T7343] netlink: 152 bytes leftover after parsing attributes in process `syz.3.480'. [ 180.510622][ T7343] .`: renamed from bond0 (while UP) [ 180.593289][ T12] bond1: (slave .`): link status definitely down, disabling slave [ 180.636323][ T12] bond1: now running without any active interface! [ 181.364109][ T7365] autofs4:pid:7365:autofs_fill_super: called with bogus options [ 182.872126][ T5766] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.052027][ T5766] usb 2-1: Using ep0 maxpacket: 16 [ 183.059390][ T5766] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 183.067854][ T5766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.078468][ T5766] usb 2-1: config 0 has no interface number 0 [ 183.087707][ T5766] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 183.097028][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.105436][ T5766] usb 2-1: Product: syz [ 183.109894][ T5766] usb 2-1: Manufacturer: syz [ 183.117298][ T5766] usb 2-1: SerialNumber: syz [ 183.127386][ T5766] usb 2-1: config 0 descriptor?? [ 183.138467][ T5766] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 183.148572][ T5766] usb 2-1: No valid video chain found. [ 183.609555][ T5839] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.169914][ T5839] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 184.291381][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.304469][ T5783] Bluetooth: hci2: command tx timeout [ 184.312892][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.325427][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.335446][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.345226][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.353709][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.363803][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.372245][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.391017][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.400402][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.408178][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.416712][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.424790][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.433051][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.442659][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 184.454392][ T5839] usb 4-1: config 1 has no interface number 0 [ 184.464696][ T5839] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 184.477240][ T5839] usb 4-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 184.491333][ T5839] usb 4-1: Product: syz [ 184.505342][ T5839] usb 4-1: Manufacturer: syz [ 184.511251][ T5839] usb 4-1: SerialNumber: syz [ 184.748761][ T5839] usb 4-1: 3:0 : does not exist [ 184.766604][ T5839] usb 4-1: 3:0 : does not exist [ 184.823503][ T5839] usb 4-1: USB disconnect, device number 6 [ 184.879308][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.973122][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 185.002247][ T5851] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.192056][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 185.199835][ T5851] usb 3-1: config 0 has no interfaces? [ 185.207944][ T5851] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 185.217099][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.225468][ T5851] usb 3-1: Product: syz [ 185.229858][ T5851] usb 3-1: Manufacturer: syz [ 185.234701][ T5851] usb 3-1: SerialNumber: syz [ 185.241663][ T5851] usb 3-1: config 0 descriptor?? [ 185.456066][ T5851] usb 3-1: USB disconnect, device number 4 [ 185.715889][ T5839] usb 2-1: USB disconnect, device number 8 [ 185.868266][ T7425] syzkaller0: entered promiscuous mode [ 185.881096][ T7425] syzkaller0: entered allmulticast mode [ 186.119965][ T7431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.534094][ T5851] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.637121][ T7444] fuse: Bad value for 'fd' [ 186.722130][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 186.737511][ T5851] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 186.755986][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.778872][ T5851] usb 3-1: config 0 has no interface number 0 [ 186.801032][ T5851] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 186.819828][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.832078][ T5851] usb 3-1: Product: syz [ 186.836710][ T5851] usb 3-1: Manufacturer: syz [ 186.846706][ T5851] usb 3-1: SerialNumber: syz [ 186.893555][ T5851] usb 3-1: config 0 descriptor?? [ 186.919051][ T5851] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 186.928272][ T5851] usb 3-1: No valid video chain found. [ 188.456290][ T7461] loop9: detected capacity change from 0 to 7 [ 188.470176][ T7461] Dev loop9: unable to read RDB block 7 [ 188.476508][ T7461] loop9: unable to read partition table [ 188.483252][ T7461] loop9: partition table beyond EOD, truncated [ 188.489824][ T7461] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 188.489824][ T7461] ) failed (rc=-5) [ 188.706696][ T7471] fuse: Bad value for 'fd' [ 189.362015][ T5817] usb 3-1: USB disconnect, device number 5 [ 190.525027][ T7510] fuse: Invalid rootmode [ 190.579592][ T7512] syz.1.539: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 190.630327][ T7512] CPU: 1 PID: 7512 Comm: syz.1.539 Not tainted syzkaller #0 [ 190.637710][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.647835][ T7512] Call Trace: [ 190.651162][ T7512] [ 190.654152][ T7512] dump_stack_lvl+0x18c/0x250 [ 190.658906][ T7512] ? show_regs_print_info+0x20/0x20 [ 190.664178][ T7512] ? load_image+0x420/0x420 [ 190.668753][ T7512] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.675311][ T7512] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 190.681880][ T7512] warn_alloc+0x246/0x340 [ 190.686270][ T7512] ? _end+0x67dda14a/0x0 [ 190.690574][ T7512] ? zone_watermark_ok_safe+0x230/0x230 [ 190.696195][ T7512] ? _end+0x67dda14a/0x0 [ 190.700532][ T7512] __vmalloc_node_range+0x129/0x1320 [ 190.705883][ T7512] ? __mutex_trylock_common+0x160/0x270 [ 190.711498][ T7512] ? trace_raw_output_contention_end+0xd0/0xd0 [ 190.717709][ T7512] ? rcu_is_watching+0x15/0xb0 [ 190.722652][ T7512] ? trace_contention_end+0x39/0xe0 [ 190.727989][ T7512] ? __mutex_lock+0x30d/0xc80 [ 190.732740][ T7512] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 190.738481][ T7512] ? free_vm_area+0x50/0x50 [ 190.743061][ T7512] ? dvb_demux_do_ioctl+0x317/0x530 [ 190.748350][ T7512] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 190.753890][ T7512] ? mutex_lock_nested+0x20/0x20 [ 190.758875][ T7512] ? _end+0x67dda14a/0x0 [ 190.763261][ T7512] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 190.769132][ T7512] vmalloc+0x79/0x90 [ 190.773066][ T7512] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 190.778905][ T7512] ? _end+0x67dda14a/0x0 [ 190.783174][ T7512] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 190.788853][ T7512] dvb_demux_do_ioctl+0x454/0x530 [ 190.793947][ T7512] ? _end+0x67dda14a/0x0 [ 190.798309][ T7512] ? _end+0x67dda14a/0x0 [ 190.802579][ T7512] dvb_usercopy+0x195/0x2b0 [ 190.807126][ T7512] ? _end+0x67dda14a/0x0 [ 190.811390][ T7512] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 190.816964][ T7512] ? dvb_generic_ioctl+0xb0/0xb0 [ 190.821948][ T7512] ? _end+0x67dda14a/0x0 [ 190.826214][ T7512] ? _end+0x67dda14a/0x0 [ 190.830513][ T7512] ? dvb_demux_poll+0x210/0x210 [ 190.835398][ T7512] ? _end+0x67dda14a/0x0 [ 190.839757][ T7512] dvb_demux_ioctl+0x29/0x30 [ 190.844384][ T7512] __se_sys_ioctl+0xfd/0x170 [ 190.849009][ T7512] do_syscall_64+0x55/0xb0 [ 190.853624][ T7512] ? clear_bhb_loop+0x40/0x90 [ 190.858347][ T7512] ? clear_bhb_loop+0x40/0x90 [ 190.863064][ T7512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.869015][ T7512] RIP: 0033:0x7f736eb9e159 [ 190.873461][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.893137][ T7512] RSP: 002b:00007f736cdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.901588][ T7512] RAX: ffffffffffffffda RBX: 00007f736ee25fa0 RCX: 00007f736eb9e159 [ 190.909592][ T7512] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003 [ 190.917590][ T7512] RBP: 00007f736ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 190.925674][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.933803][ T7512] R13: 00007f736ee26038 R14: 00007f736ee25fa0 R15: 00007ffd5fdd9d58 [ 190.941810][ T7512] ? _end+0x67dda14a/0x0 [ 190.946112][ T7512] [ 190.956629][ T7512] Mem-Info: [ 190.959841][ T7512] active_anon:5506 inactive_anon:0 isolated_anon:6 [ 190.959841][ T7512] active_file:10817 inactive_file:40152 isolated_file:0 [ 190.959841][ T7512] unevictable:785 dirty:18 writeback:0 [ 190.959841][ T7512] slab_reclaimable:10480 slab_unreclaimable:91857 [ 190.959841][ T7512] mapped:24910 shmem:1384 pagetables:612 [ 190.959841][ T7512] sec_pagetables:0 bounce:0 [ 190.959841][ T7512] kernel_misc_reclaimable:0 [ 190.959841][ T7512] free:1350257 free_pcp:11684 free_cma:0 [ 191.049573][ T7512] Node 0 active_anon:22024kB inactive_anon:0kB active_file:43268kB inactive_file:160404kB unevictable:1604kB isolated(anon):24kB isolated(file):0kB mapped:99640kB dirty:72kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11008kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 191.144516][ T7512] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 191.332633][ T7512] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.420391][ T7512] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 191.430600][ T7512] Node 0 DMA32 free:1492776kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21992kB inactive_anon:0kB active_file:43268kB inactive_file:159584kB unevictable:9680kB writepending:132kB present:3129332kB managed:2586800kB mlocked:8188kB bounce:0kB free_pcp:16920kB local_pcp:11860kB free_cma:0kB [ 191.475356][ T7512] lowmem_reserve[]: 0 0 0 0 0 [ 191.480177][ T7512] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 191.521257][ T7512] lowmem_reserve[]: 0 0 0 0 0 [ 191.528540][ T7512] Node 1 Normal free:3892216kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21088kB local_pcp:12764kB free_cma:0kB [ 191.587157][ T7512] lowmem_reserve[]: 0 0 0 0 0 [ 191.595554][ T7512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.648248][ T7512] Node 0 DMA32: 1014*4kB (UM) 451*8kB (UE) 499*16kB (UME) 505*32kB (UM) 444*64kB (UME) 108*128kB (UME) 62*256kB (UME) 29*512kB (UME) 18*1024kB (UM) 8*2048kB (UM) 330*4096kB (UM) = 1491264kB [ 191.706444][ T7512] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 191.730326][ T7512] Node 1 Normal: 160*4kB (UME) 63*8kB (UME) 40*16kB (UME) 58*32kB (UME) 21*64kB (UME) 7*128kB (UE) 1*256kB (U) 2*512kB (UM) 0*1024kB 1*2048kB (U) 948*4096kB (ME) = 3892216kB [ 191.762301][ T7512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.788128][ T7512] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB [ 191.834133][ T7512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.849198][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 191.870979][ T7512] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 191.889169][ T7512] 52358 total pagecache pages [ 191.909045][ T7512] 3 pages in swap cache [ 191.914238][ T7512] Free swap = 124216kB [ 191.930703][ T7512] Total swap = 124996kB [ 191.935111][ T7512] 2097051 pages RAM [ 191.939140][ T7512] 0 pages HighMem/MovableOnly [ 191.950400][ T7512] 416965 pages reserved [ 191.954749][ T7512] 0 pages cma reserved [ 192.401991][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.615678][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.627098][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 192.636772][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.662263][ T5766] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 192.848003][ T5766] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.861012][ T5766] usb 4-1: config 0 has no interfaces? [ 192.866714][ T5766] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 192.876457][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.892490][ T5766] usb 4-1: config 0 descriptor?? [ 192.984219][ T7541] fuse: Invalid rootmode [ 193.108907][ T27] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 193.166891][ T27] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 193.217938][ T27] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0003/input/input24 [ 193.356858][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 193.356903][ T28] audit: type=1326 audit(1790686142.456:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.0.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3c819e159 code=0x0 [ 193.626312][ T27] usb 2-1: USB disconnect, device number 9 [ 194.329853][ T7557] page:ffffea00013d0800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f420 [ 194.340797][ T7557] head:ffffea00013d0800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.358701][ T7557] memcg:ffff88802e017581 [ 194.379035][ T7557] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 194.413784][ T7557] page_type: 0xffffffff() [ 194.425489][ T7557] raw: 00fff00000000840 ffff888019e5b500 dead000000000122 0000000000000000 [ 194.460623][ T7557] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88802e017581 [ 194.498061][ T7557] page dumped because: unmovable page [ 194.518107][ T7557] page_owner tracks the page as allocated [ 194.542335][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549450][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.563250][ T7557] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5784, tgid 5784 (syz-executor), ts 182279763377, free_ts 182274851544 [ 194.609757][ T7557] post_alloc_hook+0x1c1/0x200 [ 194.680120][ T7557] get_page_from_freelist+0x2181/0x22a0 [ 194.740464][ T7557] __alloc_pages+0x1f0/0x460 [ 194.780288][ T7557] alloc_slab_page+0x5d/0x180 [ 194.853202][ T7557] new_slab+0x87/0x2d0 [ 194.941545][ T7557] ___slab_alloc+0xc5c/0x12f0 [ 194.973243][ T7557] kmem_cache_alloc_node+0x12e/0x310 [ 194.985688][ T7557] dup_task_struct+0x57/0x800 [ 195.002300][ T7557] copy_process+0x5a6/0x3da0 [ 195.007145][ T7557] kernel_clone+0x24b/0x8a0 [ 195.028790][ T7557] __x64_sys_clone+0x1b7/0x230 [ 195.054274][ T7557] do_syscall_64+0x55/0xb0 [ 195.062007][ T7557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.069061][ T7557] page last free stack trace: [ 195.073998][ T7557] free_unref_page_prepare+0x7d7/0x8f0 [ 195.080738][ T7557] free_unref_page+0x32/0x2e0 [ 195.085750][ T7557] unpin_user_pages_dirty_lock+0x311/0x540 [ 195.097165][ T7557] xdp_umem_release+0xd7/0x210 [ 195.132039][ T7557] process_scheduled_works+0xa60/0x1600 [ 195.137846][ T7557] worker_thread+0xa5e/0xfe0 [ 195.140986][ T5818] usb 4-1: USB disconnect, device number 7 [ 195.162116][ T7557] kthread+0x2fa/0x390 [ 195.166408][ T7557] ret_from_fork+0x48/0x80 [ 195.176926][ T7557] ret_from_fork_asm+0x11/0x20 [ 195.360793][ T5780] Bluetooth: hci3: link tx timeout [ 195.367421][ T5780] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.996640][ T7584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 196.256758][ T7591] syzkaller0: entered promiscuous mode [ 196.262927][ T7591] syzkaller0: entered allmulticast mode [ 196.285649][ T7591] tipc: Enabled bearer , priority 0 [ 196.297247][ T7590] tipc: Resetting bearer [ 196.374005][ T7590] tipc: Disabling bearer [ 196.605377][ T7597] fuse: Unknown parameter '00000000000000000000' [ 196.752542][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 196.935422][ T7605] [ 196.937854][ T7605] ====================================================== [ 196.944915][ T7605] WARNING: possible circular locking dependency detected [ 196.951989][ T7605] syzkaller #0 Not tainted [ 196.956440][ T7605] ------------------------------------------------------ [ 196.963499][ T7605] syz.0.573/7605 is trying to acquire lock: [ 196.969459][ T7605] ffff888062d580b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 196.978581][ T7605] [ 196.978581][ T7605] but task is already holding lock: [ 196.985990][ T7605] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 196.994925][ T7605] [ 196.994925][ T7605] which lock already depends on the new lock. [ 196.994925][ T7605] [ 197.005355][ T7605] [ 197.005355][ T7605] the existing dependency chain (in reverse order) is: [ 197.014384][ T7605] [ 197.014384][ T7605] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 197.021811][ T7605] __mutex_lock+0x135/0xc80 [ 197.026901][ T7605] rfcomm_security_cfm+0x41/0x550 [ 197.032476][ T7605] hci_encrypt_cfm+0x363/0x4d0 [ 197.037786][ T7605] hci_encrypt_change_evt+0x6c8/0xe30 [ 197.043707][ T7605] hci_event_packet+0x807/0x1280 [ 197.049201][ T7605] hci_rx_work+0x43a/0xd60 [ 197.054182][ T7605] process_scheduled_works+0xa60/0x1600 [ 197.060366][ T7605] worker_thread+0xa5e/0xfe0 [ 197.065498][ T7605] kthread+0x2fa/0x390 [ 197.070104][ T7605] ret_from_fork+0x48/0x80 [ 197.075062][ T7605] ret_from_fork_asm+0x11/0x20 [ 197.080464][ T7605] [ 197.080464][ T7605] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 197.088218][ T7605] __mutex_lock+0x135/0xc80 [ 197.093265][ T7605] hci_remote_features_evt+0x535/0x900 [ 197.099264][ T7605] hci_event_packet+0x807/0x1280 [ 197.104740][ T7605] hci_rx_work+0x43a/0xd60 [ 197.109694][ T7605] process_scheduled_works+0xa60/0x1600 [ 197.115787][ T7605] worker_thread+0xa5e/0xfe0 [ 197.120922][ T7605] kthread+0x2fa/0x390 [ 197.125533][ T7605] ret_from_fork+0x48/0x80 [ 197.130491][ T7605] ret_from_fork_asm+0x11/0x20 [ 197.135798][ T7605] [ 197.135798][ T7605] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 197.143118][ T7605] __lock_acquire+0x37ef/0x7d80 [ 197.148515][ T7605] lock_acquire+0x19e/0x420 [ 197.153563][ T7605] __mutex_lock+0x135/0xc80 [ 197.158606][ T7605] l2cap_chan_connect+0xfc/0xe30 [ 197.164083][ T7605] l2cap_sock_connect+0x586/0x760 [ 197.169647][ T7605] kernel_connect+0x142/0x1c0 [ 197.174872][ T7605] rfcomm_dlc_open+0xa1f/0xec0 [ 197.180177][ T7605] rfcomm_sock_connect+0x2ed/0x600 [ 197.185825][ T7605] __sys_connect+0x3da/0x470 [ 197.190953][ T7605] __x64_sys_connect+0x7a/0x90 [ 197.196255][ T7605] do_syscall_64+0x55/0xb0 [ 197.201212][ T7605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.207654][ T7605] [ 197.207654][ T7605] other info that might help us debug this: [ 197.207654][ T7605] [ 197.217901][ T7605] Chain exists of: [ 197.217901][ T7605] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 197.217901][ T7605] [ 197.230436][ T7605] Possible unsafe locking scenario: [ 197.230436][ T7605] [ 197.237900][ T7605] CPU0 CPU1 [ 197.243282][ T7605] ---- ---- [ 197.248667][ T7605] lock(rfcomm_mutex); [ 197.252843][ T7605] lock(hci_cb_list_lock); [ 197.259975][ T7605] lock(rfcomm_mutex); [ 197.266679][ T7605] lock(&hdev->lock); [ 197.270769][ T7605] [ 197.270769][ T7605] *** DEADLOCK *** [ 197.270769][ T7605] [ 197.278923][ T7605] 1 lock held by syz.0.573/7605: [ 197.283871][ T7605] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 197.293204][ T7605] [ 197.293204][ T7605] stack backtrace: [ 197.299097][ T7605] CPU: 1 PID: 7605 Comm: syz.0.573 Not tainted syzkaller #0 [ 197.306405][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.316479][ T7605] Call Trace: [ 197.319775][ T7605] [ 197.322723][ T7605] dump_stack_lvl+0x18c/0x250 [ 197.327454][ T7605] ? load_image+0x420/0x420 [ 197.331976][ T7605] ? show_regs_print_info+0x20/0x20 [ 197.337214][ T7605] ? print_circular_bug+0x12b/0x1a0 [ 197.342437][ T7605] check_noncircular+0x2fc/0x400 [ 197.347403][ T7605] ? print_deadlock_bug+0x5d0/0x5d0 [ 197.352634][ T7605] ? lockdep_lock+0xf5/0x230 [ 197.357297][ T7605] ? _find_first_zero_bit+0xd6/0x100 [ 197.362609][ T7605] __lock_acquire+0x37ef/0x7d80 [ 197.367489][ T7605] ? is_bpf_text_address+0x28f/0x2a0 [ 197.372892][ T7605] ? verify_lock_unused+0x140/0x140 [ 197.378111][ T7605] ? __lock_acquire+0x1336/0x7d80 [ 197.383161][ T7605] ? verify_lock_unused+0x140/0x140 [ 197.388388][ T7605] lock_acquire+0x19e/0x420 [ 197.392995][ T7605] ? l2cap_chan_connect+0xfc/0xe30 [ 197.398169][ T7605] ? __might_sleep+0xe0/0xe0 [ 197.402800][ T7605] ? read_lock_is_recursive+0x20/0x20 [ 197.408195][ T7605] ? hci_get_route+0x3a5/0x4d0 [ 197.412986][ T7605] ? __lock_acquire+0x7d80/0x7d80 [ 197.418037][ T7605] __mutex_lock+0x135/0xc80 [ 197.422591][ T7605] ? l2cap_chan_connect+0xfc/0xe30 [ 197.427724][ T7605] ? do_raw_read_unlock+0x3d/0x80 [ 197.432775][ T7605] ? _raw_read_unlock+0x28/0x40 [ 197.437653][ T7605] ? hci_get_route+0x3a5/0x4d0 [ 197.442436][ T7605] ? l2cap_chan_connect+0xfc/0xe30 [ 197.447599][ T7605] ? mutex_lock_nested+0x20/0x20 [ 197.452569][ T7605] ? print_unlock_imbalance_bug+0x160/0x160 [ 197.458576][ T7605] ? mark_lock+0x94/0x320 [ 197.462938][ T7605] l2cap_chan_connect+0xfc/0xe30 [ 197.467914][ T7605] ? lock_chain_count+0x20/0x20 [ 197.472795][ T7605] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 197.478701][ T7605] ? __local_bh_enable_ip+0x13a/0x1c0 [ 197.484092][ T7605] ? _local_bh_enable+0xa0/0xa0 [ 197.488959][ T7605] ? bacmp+0xe/0x30 [ 197.492790][ T7605] l2cap_sock_connect+0x586/0x760 [ 197.497922][ T7605] ? l2cap_sock_bind+0x940/0x940 [ 197.502881][ T7605] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.509149][ T7605] ? kernel_connect+0xf2/0x1c0 [ 197.513936][ T7605] kernel_connect+0x142/0x1c0 [ 197.518646][ T7605] ? kernel_accept+0x350/0x350 [ 197.523438][ T7605] ? rfcomm_dlc_open+0x9e3/0xec0 [ 197.528483][ T7605] rfcomm_dlc_open+0xa1f/0xec0 [ 197.533269][ T7605] ? rfcomm_sock_connect+0x2c6/0x600 [ 197.538573][ T7605] ? __local_bh_enable_ip+0x13a/0x1c0 [ 197.543963][ T7605] ? rfcomm_dlc_free+0x50/0x50 [ 197.548749][ T7605] ? __local_bh_enable_ip+0x13a/0x1c0 [ 197.554147][ T7605] ? _local_bh_enable+0xa0/0xa0 [ 197.559019][ T7605] ? do_raw_spin_unlock+0x121/0x230 [ 197.564246][ T7605] rfcomm_sock_connect+0x2ed/0x600 [ 197.569379][ T7605] __sys_connect+0x3da/0x470 [ 197.573995][ T7605] ? __sys_connect_file+0x170/0x170 [ 197.579222][ T7605] __x64_sys_connect+0x7a/0x90 [ 197.584010][ T7605] do_syscall_64+0x55/0xb0 [ 197.588560][ T7605] ? clear_bhb_loop+0x40/0x90 [ 197.593424][ T7605] ? clear_bhb_loop+0x40/0x90 [ 197.598216][ T7605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.604133][ T7605] RIP: 0033:0x7fa3c819e159 [ 197.608568][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.628199][ T7605] RSP: 002b:00007fa3c8fba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 197.636640][ T7605] RAX: ffffffffffffffda RBX: 00007fa3c8425fa0 RCX: 00007fa3c819e159 [ 197.644733][ T7605] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000007 [ 197.652792][ T7605] RBP: 00007fa3c823506b R08: 0000000000000000 R09: 0000000000000000 [ 197.660797][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.668804][ T7605] R13: 00007fa3c8426038 R14: 00007fa3c8425fa0 R15: 00007fff593d3d18 [ 197.676806][ T7605] [ 197.727650][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 197.734230][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 197.774956][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 197.801901][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 197.810047][ T27] usb 2-1: Product: syz [ 197.821896][ T27] usb 2-1: Manufacturer: syz [ 197.826555][ T27] usb 2-1: SerialNumber: syz [ 197.843159][ T27] usb 2-1: config 0 descriptor?? [ 197.853470][ T27] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 198.071945][ T27] gspca_sn9c2028: read1 error -32 [ 198.278266][ T27] gspca_sn9c2028: read1 error -71 [ 198.293800][ T27] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 198.311276][ T27] usb 2-1: USB disconnect, device number 10 [ 199.812529][ T5783] Bluetooth: hci2: command tx timeout