last executing test programs: 2m53.170945634s ago: executing program 3 (id=1157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8923, 0x0) 2m51.455984887s ago: executing program 3 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc.0', 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m49.035003137s ago: executing program 3 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x20, 0x26, 0x1, 0x270bd1d, 0x25dfdbf7, {0x5}, [@nested={0xc, 0x138, 0x0, 0x1, [@nested={0x8, 0xa7, 0x0, 0x1, [@nested={0x4, 0x71}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) 2m48.792879883s ago: executing program 3 (id=1169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r2 = semget$private(0x0, 0x1, 0xc9) semctl$SETVAL(r2, 0x3, 0x10, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000840)={0x35b, 0x2, 0x2, {{0x51f, 0x21a, 0x0, 0xffffffff, {}, 0x2810000, 0x8, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x103, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x91, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x35b) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='disable=', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='./m', 0x3) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000403e"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000102000081ff04000002000003000400", @ANYRES32=0x0], 0x30, 0x44855}, 0x24000052) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m48.405134323s ago: executing program 3 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) 2m48.220781787s ago: executing program 3 (id=1172): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x128, 0x1403, 0x1, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m33.065272975s ago: executing program 32 (id=1172): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x128, 0x1403, 0x1, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m33.689911135s ago: executing program 2 (id=1382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) 1m32.918239114s ago: executing program 0 (id=1384): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) fsmount(r4, 0x0, 0x1) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) write$sndseq(r0, &(0x7f00000006c0), 0x0) 1m32.809855147s ago: executing program 2 (id=1386): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x200000000000000, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 1m30.928454754s ago: executing program 0 (id=1388): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7638}, @NL80211_ATTR_IE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40d4}, 0x4) 1m30.358959078s ago: executing program 2 (id=1389): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000040000000400", @ANYRES32, @ANYBLOB="fdd3b68f000000001800000080000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1m28.816902076s ago: executing program 0 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) 1m27.808882871s ago: executing program 2 (id=1393): pipe(0x0) ptrace$setregs(0xd, 0x0, 0x280000000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpid() mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4040) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, &(0x7f00000000c0)={0x0, 0x0, 0x89, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 1m27.713794264s ago: executing program 0 (id=1394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1m25.792870291s ago: executing program 2 (id=1396): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) 1m25.784663692s ago: executing program 0 (id=1397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m25.524834268s ago: executing program 2 (id=1399): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000061be18710000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[], 0x20) 1m24.577779642s ago: executing program 0 (id=1401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x80000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000001c0)={0x3ff, 0xa, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80020006, 0x400}, 0x0, 0x0) io_uring_setup(0xc01, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x2f) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf803}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) 1m10.169075651s ago: executing program 33 (id=1399): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000061be18710000", @ANYRES32=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[], 0x20) 1m9.256709914s ago: executing program 34 (id=1401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x80000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000001c0)={0x3ff, 0xa, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80020006, 0x400}, 0x0, 0x0) io_uring_setup(0xc01, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x2f) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf803}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) 16.004928601s ago: executing program 4 (id=1569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x1, {0x0, 0x0, 0x0, 0xffffffff, {0xa, 0xe}, {0x1}, {0x10, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x4b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.747865587s ago: executing program 4 (id=1571): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)="b3185d7bb56f70f0"}) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000004800)={0x2020}, 0x2020) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 14.228690365s ago: executing program 1 (id=1573): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = socket(0x2, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x41, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) 14.133359447s ago: executing program 4 (id=1576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13.399871776s ago: executing program 4 (id=1578): mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x2000, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, 0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/187, 0xbb}, {&(0x7f0000000680)=""/224, 0xe0}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f0000000a80)=""/140, 0x8c}], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) write$proc_mixer(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) clock_nanosleep(0x9, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xc4) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') vmsplice(r0, &(0x7f0000000a00)=[{&(0x7f00000003c0)="e27e095ed59d0c1cf42e31236b080118402da24a0d0c216673aa0dfd2399568d481ae7907b07aa0f5a9152cfaa857c214228a367c1b1fe68a545a4966f8bffc9372b0fdd21abc1200d87a604591d1b8361edb41995ba836c882f3b14601838edacb22ea19f5051bd6797e4e74213883c4f43dfe460f6f166a2bc6c0f43f816ad2f821f6669277fa5a547b7e2a177db", 0x8f}, {&(0x7f0000000880)="86f4ccbd0b53e223fef0b1818ef33586c69a97149a81e901c19da876f620d0681e3b071e84aad6667302b807c04135f2622916ab71de451b04e125520d6205858f373b6d2e564783318aecd89ec0ddda06376431998ee5dd54e69bc3617cb371bd93af09ab34d09e0481fd4c5d468efe66d8c7b73780b0f136d451f90966b5501d3d951f394d421dce10bc3833d1ac4642a9c52e58db52f8e9db14ced83b836955691331fec610a493833fb34d7e2587dc962d29f44b3e1339fbfa457b58cb92e3f0332aac755a72405cfdcb38f4d68a82c54d64f5d206838a0150719a699c2086ce9f6777102956dc4481ee2fe91d36d0ff42da", 0xf4}], 0x2, 0x8) 12.098345138s ago: executing program 1 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/256, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r4, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)='* / 128\n\x00', 0x8) r8 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv2(r8, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 11.943306912s ago: executing program 5 (id=1582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 8.622204335s ago: executing program 6 (id=1585): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa44f123d6da2f1ac3eb2448cc74afac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d2d5f2c0a9423debbb86f29ba4a2dba4dbe076c022626555d46a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa789defca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e0736061d391ffa606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"], 0xe0}], 0x1}, 0x40040) 8.521625297s ago: executing program 4 (id=1586): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x1fd, 0x2, 0x401, 0x400000000000003, 0xffffff45, 0x5}) 8.457350629s ago: executing program 5 (id=1587): semget$private(0x0, 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) 7.040772664s ago: executing program 4 (id=1589): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = socket(0x2, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x41, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) 7.040572614s ago: executing program 6 (id=1590): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f314000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x9e8}], 0x3}, 0x0) 5.944883831s ago: executing program 7 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/4096, 0x1000) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 5.942266732s ago: executing program 6 (id=1592): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.660562118s ago: executing program 5 (id=1593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x6, 0x2000, 0x1, r2, 0x20}) 5.520855452s ago: executing program 7 (id=1594): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r0, 0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xb3) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) sendmmsg$inet6(r1, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x87}}}, @rthdr={{0x18, 0x29, 0x39, {0x33, 0x0, 0x2, 0x2}}}], 0x30}}], 0x1, 0x1) 5.384544386s ago: executing program 6 (id=1595): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$hidraw(&(0x7f0000000100), 0x3, 0x2000) r2 = inotify_init() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) read(r4, &(0x7f0000000000)=""/147, 0x93) 5.351690806s ago: executing program 5 (id=1596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.235874689s ago: executing program 1 (id=1597): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) 5.20421787s ago: executing program 7 (id=1598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 4.297922912s ago: executing program 5 (id=1599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073"], 0x7c}}, 0x0) 3.480954943s ago: executing program 1 (id=1600): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000003c0)={0x30, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x30}}, 0x810) 2.78510635s ago: executing program 7 (id=1601): syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) 2.724936392s ago: executing program 6 (id=1602): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f314000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa3d}], 0x3}, 0x0) 2.430953749s ago: executing program 5 (id=1603): semget$private(0x0, 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) 1.652406829s ago: executing program 1 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/4096, 0x1000) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 1.574115621s ago: executing program 7 (id=1605): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x5c009, &(0x7f0000000600), 0x1, 0x56b, &(0x7f0000000bc0)="$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") mknod(0x0, 0xb935e4179b2d3c7d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x4c3d, 0x2002) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f00000003c0)='3\x00', 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 978.383155ms ago: executing program 6 (id=1606): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x10}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) 892.813608ms ago: executing program 1 (id=1607): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = inotify_init() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) read(r4, &(0x7f0000000000)=""/147, 0x93) 0s ago: executing program 7 (id=1608): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x811, 0x9, 0x2f, 0x415, 0x605, 0xc232, 0x0, 0x40000400, 0xfffd, 0x9, 0xff83, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): it(1786084466.374:17): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.279" name="zoned" dev="configfs" ino=37160 res=0 errno=0 [ 191.406947][ T5350] block device autoloading is deprecated and will be removed. [ 192.813113][ T27] audit: type=1800 audit(1786084469.254:18): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.284" name="addr_trtype" dev="configfs" ino=37212 res=0 errno=0 [ 192.848724][ T5348] nvmet_tcp: address family 255 not supported [ 194.190429][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.197599][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279066][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 194.315709][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 194.644137][ T5379] UDC core: g1: couldn't find an available UDC or it's busy [ 196.209172][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 196.634101][ T4282] Bluetooth: hci4: link tx timeout [ 196.640136][ T4282] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.839531][ T27] audit: type=1800 audit(1786084473.284:19): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="zoned" dev="configfs" ino=37295 res=0 errno=0 [ 197.479306][ T5405] process 'syz.0.297' launched '/dev/fd/9' with NULL argv: empty string added [ 198.654251][ T27] audit: type=1800 audit(1786084475.094:20): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.299" name="addr_trtype" dev="configfs" ino=37335 res=0 errno=0 [ 198.678131][ T5417] nvmet_tcp: address family 255 not supported [ 198.679093][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 200.126053][ T5431] UDC core: g1: couldn't find an available UDC or it's busy [ 200.854586][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 200.929886][ T5428] MTRR 0 not used [ 200.973874][ T5428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 202.085156][ T4282] Bluetooth: hci2: failed to read key size for handle 200 [ 202.368699][ T27] audit: type=1800 audit(1786084478.814:21): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.310" name="zoned" dev="configfs" ino=37428 res=0 errno=0 [ 206.508168][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 206.514734][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 206.514817][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 206.521552][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 207.358699][ T5473] UDC core: g1: couldn't find an available UDC or it's busy [ 208.920978][ T5485] MTRR 0 not used [ 208.926006][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 209.628947][ T4287] Bluetooth: hci2: failed to read key size for handle 200 [ 210.770479][ T5501] tmpfs: Unknown parameter 'quota' [ 213.834974][ T5521] netlink: 144 bytes leftover after parsing attributes in process `syz.1.329'. [ 213.877069][ T5521] device syzkaller0 entered promiscuous mode [ 214.098660][ T5517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.327'. [ 214.112357][ T5517] netlink: 48 bytes leftover after parsing attributes in process `syz.4.327'. [ 215.216471][ T5526] MTRR 0 not used [ 215.264412][ T5519] syz.4.327 (5519): drop_caches: 2 [ 215.279094][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 215.745165][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 216.472701][ T4287] Bluetooth: hci2: failed to read key size for handle 200 [ 221.943810][ T5570] netlink: 144 bytes leftover after parsing attributes in process `syz.0.342'. [ 222.141431][ T5570] device syzkaller0 entered promiscuous mode [ 223.563884][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 223.810051][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.820551][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 223.828057][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 223.835380][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 223.843155][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 223.850747][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 223.858416][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 223.877259][ T5590] sctp_transport_update_pmtu: 108 callbacks suppressed [ 223.877276][ T5590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.895297][ T5590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.906984][ T5590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.918737][ T5590] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.950904][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.961505][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.971763][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.982320][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.992572][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.002818][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.021086][ T5585] MTRR 0 not used [ 224.054764][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 224.910492][ T5604] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 226.928271][ T5621] netlink: 144 bytes leftover after parsing attributes in process `syz.1.356'. [ 226.953462][ T5621] device syzkaller0 entered promiscuous mode [ 227.657880][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 228.460794][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 229.167230][ T5642] MTRR 0 not used [ 229.192344][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 234.143195][ T5677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'. [ 234.152979][ T4287] Bluetooth: hci1: failed to read key size for handle 200 [ 234.277038][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 235.766884][ T5704] netlink: 144 bytes leftover after parsing attributes in process `syz.2.382'. [ 235.892003][ T5704] device syzkaller0 entered promiscuous mode [ 238.046491][ T5700] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 238.056507][ T5700] netlink: 'syz.3.379': attribute type 2 has an invalid length. [ 239.441686][ T4287] Bluetooth: hci0: failed to read key size for handle 200 [ 239.694284][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 245.983917][ T5753] netlink: 144 bytes leftover after parsing attributes in process `syz.0.395'. [ 246.241248][ T4287] Bluetooth: hci1: failed to read key size for handle 200 [ 246.549775][ T4287] Bluetooth: hci2: failed to read key size for handle 200 [ 247.227656][ T5773] device syzkaller0 entered promiscuous mode [ 248.058334][ T4287] Bluetooth: hci3: failed to read key size for handle 200 [ 248.262197][ T5796] sctp_transport_update_pmtu: 48 callbacks suppressed [ 248.262222][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.279906][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.290642][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.301891][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.313450][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.324097][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.334682][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.345277][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.356004][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.366627][ T5796] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 248.428139][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 250.668267][ T4361] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 250.908662][ T4361] usb 1-1: Using ep0 maxpacket: 32 [ 250.967489][ T4361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.052751][ T4282] Bluetooth: hci2: failed to read key size for handle 200 [ 251.141907][ T4361] usb 1-1: config 0 has no interfaces? [ 251.209398][ T4361] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 251.289801][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.431806][ T4361] usb 1-1: config 0 descriptor?? [ 251.614169][ T4321] usb 1-1: USB disconnect, device number 2 [ 254.049748][ T5833] device syzkaller0 entered promiscuous mode [ 254.314117][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 254.555842][ T5845] CIFS: VFS: Unable to allocate memory for devname [ 255.630557][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.637030][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.507455][ T5853] netlink: 144 bytes leftover after parsing attributes in process `syz.4.427'. [ 257.645147][ T5853] device syzkaller0 entered promiscuous mode [ 259.688962][ T4282] Bluetooth: hci2: failed to read key size for handle 200 [ 259.789992][ T5879] device syzkaller0 entered promiscuous mode [ 259.876752][ T5883] CIFS: VFS: Unable to allocate memory for devname [ 263.791017][ T5903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 263.798107][ T5903] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 263.847175][ T5903] vhci_hcd vhci_hcd.0: Device attached [ 264.058892][ T130] vhci_hcd: vhci_device speed not set [ 264.172709][ T130] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 264.345947][ T5904] vhci_hcd: connection reset by peer [ 264.460493][ T4407] vhci_hcd: stop threads [ 264.465624][ T4407] vhci_hcd: release socket [ 264.486922][ T4407] vhci_hcd: disconnect device [ 264.776651][ T5917] device syzkaller0 entered promiscuous mode [ 266.523535][ T5938] device xfrm0 entered promiscuous mode [ 266.827514][ T5941] device syzkaller0 entered promiscuous mode [ 266.836316][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 268.277885][ T5957] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 268.284679][ T5957] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.594947][ T5957] vhci_hcd vhci_hcd.0: Device attached [ 268.721477][ T5958] vhci_hcd: connection closed [ 268.722481][ T4373] vhci_hcd: stop threads [ 268.784243][ T4373] vhci_hcd: release socket [ 268.790320][ T7] vhci_hcd: vhci_device speed not set [ 268.851716][ T4373] vhci_hcd: disconnect device [ 268.873105][ T7] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 269.469881][ T130] vhci_hcd: vhci_device speed not set [ 271.347225][ T5979] CIFS: Attempting to mount \\::1\share [ 271.365677][ T4282] Bluetooth: hci2: failed to read key size for handle 200 [ 272.168888][ T5979] CIFS: VFS: Error connecting to socket. Aborting operation. [ 272.179377][ T5979] CIFS: VFS: cifs_mount failed w/return code = -4 [ 272.911168][ T5993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.468'. [ 273.108052][ T5996] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 273.114663][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.163272][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 273.189374][ T5998] vhci_hcd: connection reset by peer [ 273.196238][ T2974] vhci_hcd: stop threads [ 273.200710][ T2974] vhci_hcd: release socket [ 273.210491][ T2974] vhci_hcd: disconnect device [ 274.028433][ T7] vhci_hcd: vhci_device speed not set [ 277.073333][ T6013] device syzkaller0 entered promiscuous mode [ 278.147602][ T4375] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 278.215119][ T6039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.480'. [ 278.258899][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 278.448914][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 278.658549][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 278.679881][ T26] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 278.689590][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.713196][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.783124][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.866419][ T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.888460][ T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.901574][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.158452][ T26] usb 1-1: GET_CAPABILITIES returned 0 [ 279.166987][ T26] usbtmc 1-1:16.0: can't read capabilities [ 279.221991][ T6050] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 279.228700][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 279.247485][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 279.256800][ T6051] vhci_hcd: connection closed [ 279.257085][ T4435] vhci_hcd: stop threads [ 279.272193][ T4435] vhci_hcd: release socket [ 279.276866][ T4435] vhci_hcd: disconnect device [ 279.400320][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.417923][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.427086][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.444783][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.453944][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.463135][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.472248][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.481363][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.490588][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.510624][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.519813][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.528949][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.540150][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.549393][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.558505][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.567628][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.576781][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 279.617382][ T26] usb 1-1: USB disconnect, device number 3 [ 279.813108][ T6057] tmpfs: Unknown parameter 'quota' [ 280.748278][ T6029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.982586][ T6064] device syzkaller0 entered promiscuous mode [ 285.631656][ T6093] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 285.638359][ T6093] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 285.719503][ T6093] vhci_hcd vhci_hcd.0: Device attached [ 285.823364][ T6094] vhci_hcd: connection closed [ 285.823694][ T2974] vhci_hcd: stop threads [ 285.845395][ T2974] vhci_hcd: release socket [ 285.864905][ T2974] vhci_hcd: disconnect device [ 285.918410][ T26] vhci_hcd: vhci_device speed not set [ 286.243448][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 286.983264][ T6113] tmpfs: Unknown parameter 'quota' [ 290.027733][ T6145] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 290.034361][ T6145] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 290.126212][ T6145] vhci_hcd vhci_hcd.0: Device attached [ 290.216439][ T6146] vhci_hcd: connection closed [ 290.241020][ T4375] vhci_hcd: stop threads [ 290.318771][ T26] vhci_hcd: vhci_device speed not set [ 290.364027][ T4375] vhci_hcd: release socket [ 290.371055][ T4375] vhci_hcd: disconnect device [ 290.392694][ T6153] Bluetooth: MGMT ver 1.22 [ 290.408346][ T26] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 290.465233][ T26] usb 39-1: enqueue for inactive port 0 [ 290.568767][ T26] vhci_hcd: vhci_device speed not set [ 291.383476][ T6160] tmpfs: Unknown parameter 'quota' [ 292.156262][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 293.309579][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 293.649573][ T6184] sctp_transport_update_pmtu: 49 callbacks suppressed [ 293.649599][ T6184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.668101][ T6184] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.696248][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.706939][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.750430][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.762687][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.783564][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.796732][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.807733][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.832341][ T6182] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 294.085681][ T6190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 294.092297][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 294.129204][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 294.146399][ T6191] vhci_hcd: connection closed [ 294.146693][ T4442] vhci_hcd: stop threads [ 294.175961][ T4442] vhci_hcd: release socket [ 294.196445][ T4442] vhci_hcd: disconnect device [ 294.916353][ T6195] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 295.180382][ T27] audit: type=1800 audit(1786084571.624:22): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.525" name="addr_adrfam" dev="configfs" ino=40506 res=0 errno=0 [ 295.207272][ T6200] nvmet: Invalid value 'ipv' for adrfam [ 298.484806][ T6237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 298.491436][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 298.525506][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 298.552057][ T6238] vhci_hcd: connection closed [ 298.553794][ T4442] vhci_hcd: stop threads [ 298.566892][ T4442] vhci_hcd: release socket [ 298.593761][ T4442] vhci_hcd: disconnect device [ 298.952337][ T6247] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 299.340950][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 300.526886][ T6262] jffs2: notice: (6262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 300.921287][ T6273] nvmet_tcp: address family 255 not supported [ 300.958099][ T27] audit: type=1800 audit(1786084577.364:23): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.546" name="addr_trtype" dev="configfs" ino=39724 res=0 errno=0 [ 301.330359][ T6284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 301.330477][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.331820][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 301.334662][ T6285] vhci_hcd: connection closed [ 301.334825][ T76] vhci_hcd: stop threads [ 301.334868][ T76] vhci_hcd: release socket [ 301.334888][ T76] vhci_hcd: disconnect device [ 301.353956][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 301.560470][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 301.748042][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 301.769504][ T4320] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 301.795008][ T4320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.821591][ T4320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.852013][ T4320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.883317][ T4320] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.937671][ T4320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.958862][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.193916][ T4320] usb 3-1: usb_control_msg returned -71 [ 302.859598][ T4320] usbtmc 3-1:16.0: can't read capabilities [ 302.881350][ T4320] usb 3-1: USB disconnect, device number 2 [ 304.111514][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 304.367174][ T6312] nvmet_tcp: address family 255 not supported [ 304.368803][ T27] audit: type=1800 audit(1786084580.804:24): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.557" name="addr_trtype" dev="configfs" ino=40752 res=0 errno=0 [ 304.393796][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.334047][ T6326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 305.340666][ T6326] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.380699][ T6326] vhci_hcd vhci_hcd.0: Device attached [ 305.400960][ T6327] vhci_hcd: connection closed [ 305.402575][ T4389] vhci_hcd: stop threads [ 305.413625][ T4389] vhci_hcd: release socket [ 305.426092][ T4389] vhci_hcd: disconnect device [ 308.116527][ T27] audit: type=1800 audit(1786084584.554:25): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.571" name="addr_trtype" dev="configfs" ino=39838 res=0 errno=0 [ 308.308220][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 308.479896][ T6353] nvmet_tcp: address family 255 not supported [ 308.746700][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 312.199920][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 312.477486][ T27] audit: type=1800 audit(1786084588.914:26): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.585" name="addr_trtype" dev="configfs" ino=40985 res=0 errno=0 [ 312.505144][ T6400] nvmet_tcp: address family 255 not supported [ 314.398357][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 317.071276][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.079162][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.069801][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 319.261866][ T27] audit: type=1800 audit(1786084595.704:27): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.596" name="addr_trtype" dev="configfs" ino=42061 res=0 errno=0 [ 319.291129][ T6468] nvmet_tcp: address family 255 not supported [ 321.070784][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 322.832976][ T6499] tmpfs: Unknown parameter 'quota' [ 323.042533][ T27] audit: type=1800 audit(1786084599.484:28): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.617" name="addr_trtype" dev="configfs" ino=42249 res=0 errno=0 [ 323.067537][ T6503] nvmet_tcp: address family 255 not supported [ 324.939165][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 324.982672][ T6511] device team_slave_0 entered promiscuous mode [ 324.993404][ T6511] device team_slave_0 left promiscuous mode [ 325.203055][ T4361] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 325.654593][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 325.678047][ T4361] usb 2-1: Using ep0 maxpacket: 32 [ 326.226682][ T4361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.245674][ T4361] usb 2-1: config 14 has an invalid interface number: 228 but max is 0 [ 326.254317][ T4361] usb 2-1: config 14 has no interface number 0 [ 326.260716][ T4361] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 326.272165][ T4361] usb 2-1: config 14 interface 228 has no altsetting 0 [ 326.289270][ T4361] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 326.307856][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.318309][ T4361] usb 2-1: Product: syz [ 326.324088][ T4361] usb 2-1: Manufacturer: syz [ 326.331824][ T4361] usb 2-1: SerialNumber: syz [ 326.708161][ T6537] tmpfs: Unknown parameter 'quota' [ 327.586150][ T6517] comedi comedi0: reset error (fatal) [ 327.625077][ T4361] legousbtower 2-1:14.228: interrupt endpoints not found [ 327.697629][ T4361] usb 2-1: USB disconnect, device number 2 [ 327.841140][ T6549] nvmet_tcp: address family 255 not supported [ 328.030950][ T6551] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 328.386896][ T6556] capability: warning: `syz.0.632' uses deprecated v2 capabilities in a way that may be insecure [ 328.405945][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 331.630325][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 331.810254][ T6590] nvmet_tcp: address family 255 not supported [ 333.536138][ T6603] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 336.423667][ T6627] nvmet_tcp: address family 255 not supported [ 336.899825][ T6635] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 339.572129][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 342.521877][ T6674] tmpfs: Unknown parameter 'quota' [ 343.279114][ T6675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 343.285760][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.294866][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 343.304158][ T6676] vhci_hcd: connection closed [ 343.304422][ T4442] vhci_hcd: stop threads [ 343.315576][ T4442] vhci_hcd: release socket [ 343.359054][ T4442] vhci_hcd: disconnect device [ 344.436838][ T6685] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 344.537858][ T6687] usb usb2: usbfs: process 6687 (syz.3.673) did not claim interface 0 before use [ 345.502514][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'. [ 347.272205][ T6717] tmpfs: Unknown parameter 'quota' [ 348.306216][ T6723] jffs2: notice: (6723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 349.139029][ T6737] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 349.145632][ T6737] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 349.372770][ T6737] vhci_hcd vhci_hcd.0: Device attached [ 349.414990][ T6739] vhci_hcd: connection closed [ 349.415408][ T5553] vhci_hcd: stop threads [ 349.444107][ T5553] vhci_hcd: release socket [ 349.602476][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 349.615292][ T5553] vhci_hcd: disconnect device [ 349.692476][ T4320] vhci_hcd: vhci_device speed not set [ 351.668107][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 352.309929][ T7] usb 2-1: config 0 has no interfaces? [ 352.322060][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 352.362729][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.451848][ T7] usb 2-1: config 0 descriptor?? [ 352.708133][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.823592][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.918330][ T4282] Bluetooth: hci2: adv larger than maximum supported [ 352.918374][ T4282] Bluetooth: hci2: Malformed LE Event: 0x0d [ 352.968858][ T6765] tmpfs: Unknown parameter 'quota' [ 352.993028][ T26] usb 2-1: USB disconnect, device number 3 [ 353.781153][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 353.781157][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.701'. [ 356.127982][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 356.135161][ T26] usb 4-1: config 0 has no interfaces? [ 356.155556][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.172939][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.202439][ T6790] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 356.209142][ T6790] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 356.269211][ T26] usb 4-1: config 0 descriptor?? [ 356.299895][ T6790] vhci_hcd vhci_hcd.0: Device attached [ 356.317162][ T6795] vhci_hcd: connection closed [ 356.323751][ T4389] vhci_hcd: stop threads [ 356.337403][ T4389] vhci_hcd: release socket [ 356.354802][ T4389] vhci_hcd: disconnect device [ 356.554030][ T4320] usb 4-1: USB disconnect, device number 2 [ 357.386207][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 357.702965][ T6804] tmpfs: Unknown parameter 'quota' [ 360.107972][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 361.485722][ T6847] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 361.492338][ T6847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.562105][ T6847] vhci_hcd vhci_hcd.0: Device attached [ 361.609560][ T6848] vhci_hcd: connection closed [ 361.661447][ T4373] vhci_hcd: stop threads [ 361.836991][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 362.081528][ T4373] vhci_hcd: release socket [ 362.113517][ T4373] vhci_hcd: disconnect device [ 362.393447][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 362.401983][ T7] vhci_hcd: vhci_device speed not set [ 362.570216][ T6851] tmpfs: Unknown parameter 'quota' [ 362.609723][ T6857] jffs2: notice: (6857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.618284][ T4320] usb 2-1: Using ep0 maxpacket: 8 [ 362.651834][ T4320] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 362.761354][ T4320] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.939011][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.283410][ T4320] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.302480][ T4320] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.349358][ T4320] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.369905][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.623104][ T4320] usb 2-1: usb_control_msg returned -71 [ 363.663930][ T4320] usbtmc 2-1:16.0: can't read capabilities [ 363.975261][ T4320] usb 2-1: USB disconnect, device number 4 [ 365.199149][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 365.980468][ T6906] tmpfs: Unknown parameter 'quota' [ 366.982371][ T6908] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 366.988942][ T6908] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 367.009424][ T6908] vhci_hcd vhci_hcd.0: Device attached [ 367.050579][ T6911] vhci_hcd: connection closed [ 367.052606][ T2974] vhci_hcd: stop threads [ 367.066395][ T2974] vhci_hcd: release socket [ 367.083553][ T2974] vhci_hcd: disconnect device [ 369.258490][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 370.465938][ T6955] tmpfs: Unknown parameter 'quota' [ 371.606184][ T6967] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 371.612787][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 371.622649][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 371.632975][ T6973] vhci_hcd: connection closed [ 371.633294][ T5567] vhci_hcd: stop threads [ 371.646339][ T5567] vhci_hcd: release socket [ 371.653176][ T5567] vhci_hcd: disconnect device [ 372.028625][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 372.419003][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 373.022131][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 373.036220][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.051764][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.066369][ T26] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 373.102665][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.169784][ T26] usb 5-1: config 0 descriptor?? [ 373.856048][ T26] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 374.172049][ T7007] tmpfs: Unknown parameter 'quota' [ 374.878100][ T7] usb 5-1: USB disconnect, device number 2 [ 375.162186][ T7016] Bluetooth: MGMT ver 1.22 [ 375.254773][ T7010] fido_id[7010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 376.317585][ T7028] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 376.324200][ T7028] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 376.351406][ T7028] vhci_hcd vhci_hcd.0: Device attached [ 376.363829][ T7029] vhci_hcd: connection closed [ 376.364270][ T4391] vhci_hcd: stop threads [ 376.373973][ T4391] vhci_hcd: release socket [ 376.378804][ T4391] vhci_hcd: disconnect device [ 376.595270][ T7033] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 377.342101][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 378.512886][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.524823][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.598190][ T4321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 378.798073][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 378.806302][ T4321] usb 5-1: config 0 has no interfaces? [ 378.818792][ T4321] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 378.845917][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.876599][ T4321] usb 5-1: config 0 descriptor?? [ 379.105998][ T4321] usb 5-1: USB disconnect, device number 3 [ 380.138018][ T4282] Bluetooth: hci2: failed to read key size for handle 200 [ 380.400764][ T7082] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 380.758708][ T7083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 380.765307][ T7083] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 380.785147][ T7083] vhci_hcd vhci_hcd.0: Device attached [ 380.982470][ T4361] vhci_hcd: vhci_device speed not set [ 381.550007][ T7088] vhci_hcd: connection closed [ 381.568259][ T4403] vhci_hcd: stop threads [ 381.568280][ T4403] vhci_hcd: release socket [ 381.569132][ T4403] vhci_hcd: disconnect device [ 381.618953][ T4361] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 382.106324][ T4361] usb 37-1: enqueue for inactive port 0 [ 382.208684][ T4361] vhci_hcd: vhci_device speed not set [ 383.367375][ T7108] device syzkaller0 entered promiscuous mode [ 383.800598][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 384.707997][ T4319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 385.680452][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 385.827979][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 385.868756][ T4319] usb 5-1: config 0 has no interfaces? [ 385.874349][ T4319] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 385.892410][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.918631][ T4319] usb 5-1: config 0 descriptor?? [ 386.008991][ T7131] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 386.099862][ T7140] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 386.106459][ T7140] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 386.115859][ T7140] vhci_hcd vhci_hcd.0: Device attached [ 386.125792][ T7142] vhci_hcd: connection closed [ 386.132992][ T4752] vhci_hcd: stop threads [ 386.152364][ T4752] vhci_hcd: release socket [ 386.156889][ T4752] vhci_hcd: disconnect device [ 386.191196][ T4319] usb 5-1: USB disconnect, device number 4 [ 389.616739][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 390.445872][ T7158] device syzkaller0 entered promiscuous mode [ 391.477740][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 391.952940][ T7178] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 392.865064][ T7187] device bridge_slave_1 left promiscuous mode [ 392.899794][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.007412][ T7187] device bridge_slave_0 left promiscuous mode [ 393.042134][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.675398][ T7193] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 393.682182][ T7193] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 393.692232][ T7193] vhci_hcd vhci_hcd.0: Device attached [ 393.710388][ T7194] vhci_hcd: connection closed [ 393.710583][ T5016] vhci_hcd: stop threads [ 393.734133][ T5016] vhci_hcd: release socket [ 393.756645][ T5016] vhci_hcd: disconnect device [ 393.793923][ T7184] comedi comedi0: reset error (fatal) [ 394.250601][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 395.671253][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 401.975779][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 405.608575][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 410.312497][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 412.855763][ T7366] ======================================================= [ 412.855763][ T7366] WARNING: The mand mount option has been deprecated and [ 412.855763][ T7366] and is ignored by this kernel. Remove the mand [ 412.855763][ T7366] option from the mount to silence this warning. [ 412.855763][ T7366] ======================================================= [ 412.995720][ T7377] vivid-000: ================= START STATUS ================= [ 413.004497][ T7377] vivid-000: Test Pattern: 75% Colorbar [ 413.016302][ T7377] vivid-000: Fill Percentage of Frame: 100 [ 413.022671][ T7377] vivid-000: Horizontal Movement: No Movement [ 413.040466][ T7377] vivid-000: Vertical Movement: No Movement [ 413.060760][ T7377] vivid-000: OSD Text Mode: All [ 413.086839][ T7377] vivid-000: Show Border: false [ 413.096973][ T7377] vivid-000: Show Square: false [ 413.117256][ T7377] vivid-000: Sensor Flipped Horizontally: false [ 413.147604][ T7377] vivid-000: Sensor Flipped Vertically: false [ 413.185657][ T7377] vivid-000: Insert SAV Code in Image: false [ 413.244785][ T7377] vivid-000: Insert EAV Code in Image: false [ 413.260661][ T7377] vivid-000: Insert Video Guard Band: false [ 413.270057][ T7388] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 413.278341][ T7377] vivid-000: Reduced Framerate: false [ 413.285153][ T7377] vivid-000: Enable Capture Cropping: true [ 413.299752][ T7377] vivid-000: Enable Capture Composing: true [ 413.306341][ T7377] vivid-000: Enable Capture Scaler: true [ 413.312771][ T7377] vivid-000: Timestamp Source: End of Frame [ 413.320061][ T7377] vivid-000: Colorspace: sRGB [ 413.327162][ T7377] vivid-000: Transfer Function: Default [ 413.349518][ T7377] vivid-000: Y'CbCr Encoding: Default [ 413.372894][ T7377] vivid-000: HSV Encoding: Hue 0-179 [ 413.393294][ T7377] vivid-000: Quantization: Default [ 413.415731][ T7377] vivid-000: Apply Alpha To Red Only: false [ 413.437427][ T7377] vivid-000: Standard Aspect Ratio: 4x3 [ 413.459847][ T7377] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 413.526968][ T7377] vivid-000: DV Timings: 640x480p59 inactive [ 413.569376][ T7377] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 413.623322][ T7377] vivid-000: Maximum EDID Blocks: 2 [ 413.656226][ T7377] vivid-000: Limited RGB Range (16-235): false [ 413.696855][ T7377] vivid-000: Rx RGB Quantization Range: Automatic [ 413.745299][ T7377] vivid-000: Power Present: 0x00000001 [ 413.768397][ T7377] tpg source WxH: 640x360 (Y'CbCr) [ 413.795335][ T7377] tpg field: 1 [ 413.809909][ T27] audit: type=1800 audit(1786084690.254:29): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.887" name="addr_adrfam" dev="configfs" ino=44881 res=0 errno=0 [ 413.831403][ T7377] tpg crop: 640x360@0x0 [ 413.856951][ T7377] tpg compose: 640x360@0x0 [ 413.879214][ T7377] tpg colorspace: 8 [ 413.898057][ T7377] tpg transfer function: 0/0 [ 413.931700][ T7377] tpg Y'CbCr encoding: 0/0 [ 413.970841][ T7377] tpg quantization: 0/0 [ 414.009344][ T7377] tpg RGB range: 0/2 [ 414.013797][ T7377] vivid-000: ================== END STATUS ================== [ 414.038684][ T7397] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 414.045284][ T7397] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.091937][ T7397] vhci_hcd vhci_hcd.0: Device attached [ 414.126428][ T7398] vhci_hcd: connection closed [ 414.127637][ T4375] vhci_hcd: stop threads [ 414.137783][ T4375] vhci_hcd: release socket [ 414.158723][ T4375] vhci_hcd: disconnect device [ 414.997931][ T4282] Bluetooth: hci3: command 0x0401 tx timeout [ 419.968231][ T7455] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 419.974844][ T7455] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 420.012200][ T7455] vhci_hcd vhci_hcd.0: Device attached [ 420.043722][ T7457] vhci_hcd: connection closed [ 420.044243][ T4389] vhci_hcd: stop threads [ 420.054319][ T4389] vhci_hcd: release socket [ 420.086912][ T4389] vhci_hcd: disconnect device [ 424.380492][ T7508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 424.387142][ T7508] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 424.467575][ T7508] vhci_hcd vhci_hcd.0: Device attached [ 424.494044][ T7510] vhci_hcd: connection closed [ 424.496474][ T4437] vhci_hcd: stop threads [ 424.525052][ T4437] vhci_hcd: release socket [ 424.556752][ T4437] vhci_hcd: disconnect device [ 424.676682][ T4322] vhci_hcd: vhci_device speed not set [ 424.996785][ T7524] block device autoloading is deprecated and will be removed. [ 425.017679][ T7524] block device autoloading is deprecated and will be removed. [ 425.042535][ T7524] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 425.123794][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 425.166222][ T7524] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 425.253199][ T7524] device-mapper: ioctl: error adding target to table [ 427.378317][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 428.419621][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 428.433755][ T4319] usb 3-1: config 0 has no interfaces? [ 428.452139][ T4319] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.480743][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.506136][ T4319] usb 3-1: config 0 descriptor?? [ 428.551871][ T7563] CIFS: Attempting to mount \\127.0.0.1\share [ 428.739424][ T4361] usb 3-1: USB disconnect, device number 3 [ 429.584340][ T7563] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 429.667058][ T7563] CIFS: VFS: cifs_mount failed w/return code = -512 [ 430.001525][ T27] audit: type=1800 audit(1786084706.444:30): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.947" name="addr_trtype" dev="configfs" ino=46269 res=0 errno=0 [ 432.516191][ T27] audit: type=1800 audit(1786084708.954:31): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.959" name="addr_trtype" dev="configfs" ino=45710 res=0 errno=0 [ 432.857971][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 433.136908][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 433.308168][ T4322] usb 3-1: config 0 has no interfaces? [ 433.313765][ T4322] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.414202][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.463879][ T4322] usb 3-1: config 0 descriptor?? [ 433.733748][ T4319] usb 3-1: USB disconnect, device number 4 [ 433.898837][ T4282] Bluetooth: hci1: failed to read key size for handle 200 [ 436.547017][ T4319] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 436.728323][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 436.740191][ T4319] usb 4-1: config 0 has no interfaces? [ 436.746572][ T4319] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.769479][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.792672][ T4319] usb 4-1: config 0 descriptor?? [ 437.013798][ T4319] usb 4-1: USB disconnect, device number 3 [ 437.110358][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 439.689233][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'. [ 439.950240][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.956791][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.457963][ T4322] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 440.698131][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 440.888264][ T26] usb 2-1: device descriptor read/64, error -71 [ 441.478865][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 441.486327][ T4322] usb 1-1: config 0 has no interfaces? [ 441.492319][ T4322] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.502711][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.518829][ T4322] usb 1-1: config 0 descriptor?? [ 441.578130][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 441.737646][ T7] usb 1-1: USB disconnect, device number 4 [ 441.738354][ T26] usb 2-1: device descriptor read/64, error -71 [ 441.964212][ T26] usb usb2-port1: attempt power cycle [ 442.445887][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'. [ 442.557913][ T26] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 442.598744][ T26] usb 2-1: device descriptor read/8, error -71 [ 442.786348][ T4282] Bluetooth: hci3: failed to read key size for handle 200 [ 442.794002][ T4282] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 443.098814][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 444.041407][ T26] usb 2-1: device descriptor read/8, error -71 [ 444.158596][ T26] usb usb2-port1: unable to enumerate USB device [ 445.982789][ T7800] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 446.008076][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 446.548233][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 446.559549][ T26] usb 4-1: config 0 has no interfaces? [ 446.565440][ T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.582397][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.595829][ T26] usb 4-1: config 0 descriptor?? [ 446.808739][ T26] usb 4-1: USB disconnect, device number 4 [ 447.708008][ T4322] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 448.106413][ T4322] usb 1-1: device descriptor read/64, error -71 [ 448.115207][ T4282] Bluetooth: hci2: failed to read key size for handle 200 [ 448.417931][ T4322] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 448.655976][ T7820] sctp: failed to load transform for md5: -2 [ 448.967986][ T4322] usb 1-1: device descriptor read/64, error -71 [ 449.163853][ T27] audit: type=1800 audit(1786084725.604:32): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1034" name="idVendor" dev="configfs" ino=47111 res=0 errno=0 [ 449.187741][ T27] audit: type=1800 audit(1786084725.624:33): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1034" name="manufacturer" dev="configfs" ino=47113 res=0 errno=0 [ 449.217999][ T27] audit: type=1800 audit(1786084725.644:34): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1034" name="product" dev="configfs" ino=47114 res=0 errno=0 [ 449.238715][ T4322] usb usb1-port1: attempt power cycle [ 449.668317][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 449.778108][ T27] audit: type=1800 audit(1786084726.214:35): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1037" name="idVendor" dev="configfs" ino=46655 res=0 errno=0 [ 450.167596][ T27] audit: type=1800 audit(1786084726.354:36): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1037" name="manufacturer" dev="configfs" ino=46657 res=0 errno=0 [ 450.490380][ T27] audit: type=1800 audit(1786084726.354:37): pid=7840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1037" name="product" dev="configfs" ino=46658 res=0 errno=0 [ 450.510782][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.576056][ T4322] usb 1-1: device descriptor read/8, error -71 [ 450.636664][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 450.960680][ T7851] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 451.527926][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 451.608477][ T7858] using random self ethernet address [ 451.641062][ T7858] using random host ethernet address [ 452.358610][ T7863] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 452.490391][ T7863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.504049][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 452.511162][ T26] usb 2-1: config 0 has no interfaces? [ 452.516692][ T26] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.604060][ T7864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.623986][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.641090][ T7864] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 452.664145][ T26] usb 2-1: config 0 descriptor?? [ 452.693367][ T7864] bond1: (slave gre1): Error -95 calling set_mac_address [ 452.759666][ T7869] device gretap1 entered promiscuous mode [ 453.001289][ T7869] bond1: (slave gretap1): making interface the new active one [ 453.139467][ T7869] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 453.694887][ T7863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.749994][ T7863] bond1: (slave bond2): Enslaving as an active interface with a down link [ 453.978279][ T7871] bond1 (unregistering): (slave gretap1): Releasing active interface [ 454.018063][ T7871] bond1 (unregistering): (slave bond2): Releasing active interface [ 454.051787][ T7871] bond1 (unregistering): Released all slaves [ 454.104755][ T4361] usb 2-1: USB disconnect, device number 9 [ 454.223667][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 454.406954][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 454.569039][ T4320] usb 5-1: device descriptor read/64, error -71 [ 454.940761][ T4320] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 455.118090][ T4320] usb 5-1: device descriptor read/64, error -71 [ 455.328854][ T4320] usb usb5-port1: attempt power cycle [ 455.406940][ T7894] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 455.883145][ T4320] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 455.933150][ T4320] usb 5-1: device descriptor read/8, error -71 [ 456.207996][ T4320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 457.064316][ T4320] usb 5-1: device descriptor read/8, error -71 [ 457.188153][ T4320] usb usb5-port1: unable to enumerate USB device [ 457.418301][ T4319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 457.608014][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 457.626503][ T4319] usb 3-1: config 0 has no interfaces? [ 457.633412][ T4319] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.645972][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.702462][ T4319] usb 3-1: config 0 descriptor?? [ 458.054702][ T4319] usb 3-1: USB disconnect, device number 5 [ 458.305119][ T4282] Bluetooth: hci4: failed to read key size for handle 200 [ 458.387634][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1060'. [ 460.522756][ T27] audit: type=1800 audit(1786084736.964:38): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1078" name="addr_trsvcid" dev="configfs" ino=46868 res=0 errno=0 [ 460.543437][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.554329][ T7957] nvmet_tcp: address family 255 not supported [ 461.713304][ T130] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 461.828984][ T7983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 462.577958][ T130] usb 5-1: Using ep0 maxpacket: 8 [ 462.604826][ T130] usb 5-1: config 0 has no interfaces? [ 462.653543][ T130] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.850810][ T130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.861451][ T130] usb 5-1: config 0 descriptor?? [ 462.909272][ T27] audit: type=1800 audit(1786084739.354:39): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1093" name="idVendor" dev="configfs" ino=46999 res=0 errno=0 [ 462.929560][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.113020][ T27] audit: type=1800 audit(1786084739.384:40): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1093" name="product" dev="configfs" ino=47000 res=0 errno=0 [ 463.145936][ T4320] usb 5-1: USB disconnect, device number 9 [ 463.513157][ T4282] Bluetooth: hci0: failed to read key size for handle 200 [ 465.128127][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1101'. [ 465.895588][ T27] audit: type=1800 audit(1786084742.334:41): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1107" name="idVendor" dev="configfs" ino=48142 res=0 errno=0 [ 466.037354][ T27] audit: type=1800 audit(1786084742.344:42): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1107" name="manufacturer" dev="configfs" ino=48143 res=0 errno=0 [ 466.408054][ T4321] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 466.611407][ T4321] usb 1-1: Dual-Role OTG device on HNP port [ 466.624393][ T4321] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 466.754769][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.820913][ T4321] usb 1-1: Product: Test Gadg [ 466.901163][ T4321] gspca_main: spca501-2.14.0 probing 0000:0000 [ 466.919844][ T4321] gspca_spca501: reg write: error -32 [ 466.932470][ T4321] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 466.961010][ T4321] spca501: probe of 1-1:1.0 failed with error -22 [ 467.144793][ T8048] MTRR 0 not used [ 467.171705][ T8048] db_root: cannot open: ./m [ 467.189826][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 468.110634][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1115'. [ 469.174522][ T27] audit: type=1800 audit(1786084745.614:43): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1120" name="idVendor" dev="configfs" ino=48199 res=0 errno=0 [ 469.244716][ T27] audit: type=1800 audit(1786084745.614:44): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1120" name="manufacturer" dev="configfs" ino=48200 res=0 errno=0 [ 469.487498][ T8079] MTRR 0 not used [ 469.513305][ T8079] db_root: cannot open: ./m [ 469.526528][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 469.802677][ T4389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.884074][ T27] audit: type=1800 audit(1786084746.324:45): pid=8089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1130" name="product" dev="configfs" ino=48232 res=0 errno=0 [ 470.078230][ T4389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.155153][ T8092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 470.399354][ T4389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.779348][ T4389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.896491][ T27] audit: type=1800 audit(1786084747.334:46): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1133" name="idVendor" dev="configfs" ino=47777 res=0 errno=0 [ 470.948123][ T27] audit: type=1800 audit(1786084747.334:47): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1133" name="product" dev="configfs" ino=47778 res=0 errno=0 [ 471.611284][ T8124] MTRR 0 not used [ 471.622168][ T8122] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1141'. [ 471.665877][ T8124] db_root: cannot open: ./m [ 472.107712][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 472.492814][ T27] audit: type=1800 audit(1786084748.934:48): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1143" name="product" dev="configfs" ino=47935 res=0 errno=0 [ 472.781280][ T27] audit: type=1800 audit(1786084749.224:49): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1145" name="idVendor" dev="configfs" ino=47941 res=0 errno=0 [ 472.847888][ T27] audit: type=1800 audit(1786084749.254:50): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1145" name="product" dev="configfs" ino=47942 res=0 errno=0 [ 473.055590][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.118387][ T8149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 473.201751][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.212079][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.227136][ T4292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.250390][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 473.260605][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.388647][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 476.588478][ T27] audit: type=1800 audit(1786084753.034:51): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1156" name="idVendor" dev="configfs" ino=48041 res=0 errno=0 [ 476.678672][ T8187] MTRR 0 not used [ 476.689211][ T8187] db_root: cannot open: ./m [ 476.730609][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 476.740234][ T27] audit: type=1800 audit(1786084753.064:52): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1156" name="product" dev="configfs" ino=48042 res=0 errno=0 [ 476.832347][ T4389] device hsr_slave_0 left promiscuous mode [ 476.875203][ T4389] device hsr_slave_1 left promiscuous mode [ 476.895433][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.916779][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.935530][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.152375][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.250654][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 477.468009][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 477.720305][ T4389] device bridge_slave_1 left promiscuous mode [ 477.914307][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.121857][ T4389] device bridge_slave_0 left promiscuous mode [ 478.207367][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.548072][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 479.839554][ T4389] device veth1_macvtap left promiscuous mode [ 479.846505][ T4389] device veth0_macvtap left promiscuous mode [ 479.869844][ T4389] device veth1_vlan left promiscuous mode [ 479.879606][ T4389] device veth0_vlan left promiscuous mode [ 480.996421][ T27] audit: type=1800 audit(1786084757.434:53): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1168" name="idVendor" dev="configfs" ino=48560 res=0 errno=0 [ 481.077254][ T27] audit: type=1800 audit(1786084757.484:54): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1168" name="manufacturer" dev="configfs" ino=48561 res=0 errno=0 [ 481.127639][ T27] audit: type=1800 audit(1786084757.484:55): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1168" name="product" dev="configfs" ino=48562 res=0 errno=0 [ 481.241097][ T8233] MTRR 0 not used [ 481.246000][ T8233] db_root: cannot open: ./m [ 481.255124][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 481.633656][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 481.843216][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 481.896177][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 481.939303][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.985322][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.284100][ T4389] bond0 (unregistering): Released all slaves [ 482.382120][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 482.495485][ T8239] device syzkaller0 entered promiscuous mode [ 484.681296][ T27] audit: type=1800 audit(1786084761.124:56): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1180" name="idVendor" dev="configfs" ino=49172 res=0 errno=0 [ 484.702007][ T27] audit: type=1800 audit(1786084761.124:57): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1180" name="manufacturer" dev="configfs" ino=49173 res=0 errno=0 [ 484.724894][ T27] audit: type=1800 audit(1786084761.124:58): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1180" name="product" dev="configfs" ino=49174 res=0 errno=0 [ 484.947377][ T8277] MTRR 0 not used [ 484.972698][ T8277] db_root: cannot open: ./m [ 484.981262][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 489.154433][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.257589][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.305019][ T8144] device bridge_slave_0 entered promiscuous mode [ 489.332760][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.362373][ T27] audit: type=1800 audit(1786084765.804:59): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1191" name="idVendor" dev="configfs" ino=49237 res=0 errno=0 [ 489.386375][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.419193][ T8144] device bridge_slave_1 entered promiscuous mode [ 489.770168][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.794743][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.010188][ T27] audit: type=1800 audit(1786084766.014:60): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1191" name="product" dev="configfs" ino=48661 res=0 errno=0 [ 490.311553][ T27] audit: type=1800 audit(1786084766.034:61): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1191" name="manufacturer" dev="configfs" ino=49238 res=0 errno=0 [ 490.354615][ T8144] team0: Port device team_slave_0 added [ 490.375924][ T8144] team0: Port device team_slave_1 added [ 490.387973][ T8246] infiniband syz0: set active [ 490.393100][ T8246] infiniband syz0: added team0 [ 490.454652][ T8246] rdma_rxe: unable to create cq [ 490.467608][ T8246] infiniband syz0: Couldn't create ib_mad CQ [ 490.482569][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.491211][ T8246] infiniband syz0: Couldn't open port 1 [ 490.528050][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.723235][ T8246] RDS/IB: syz0: added [ 490.745937][ T8246] smc: adding ib device syz0 with port count 1 [ 490.760683][ T8144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.774776][ T8246] smc: ib device syz0 port 1 has pnetid [ 490.821726][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.829269][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.857588][ T8144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.510871][ T8144] device hsr_slave_0 entered promiscuous mode [ 491.544933][ T8144] device hsr_slave_1 entered promiscuous mode [ 491.578406][ T8144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.596282][ T8144] Cannot create hsr debugfs directory [ 495.225681][ T8144] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.293516][ T8144] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.416679][ T8144] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.449551][ T8144] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.741862][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.819467][ T8144] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.869286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.900935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.926395][ T8440] siw: device registration error -23 [ 496.725580][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.777191][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.941993][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.949211][ T5016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.685342][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.732933][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.848556][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.857019][ T5016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.928541][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.997498][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 498.079807][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 498.139742][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 498.205120][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.236057][ T8469] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 498.262947][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 498.318955][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.366249][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.397022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 498.584572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.676990][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 498.726926][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.787424][ T8144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.818952][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 500.829666][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 500.838992][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 500.860275][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.868372][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 500.875731][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.390065][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.396579][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.389070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.439085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.487436][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.837136][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.851913][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.907960][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 503.015273][ T8144] device veth0_vlan entered promiscuous mode [ 503.080246][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.118575][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.297646][ T8144] device veth1_vlan entered promiscuous mode [ 503.348933][ T4292] Bluetooth: hci4: failed to read key size for handle 200 [ 503.357309][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.376759][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.387072][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.434858][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.512674][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.523594][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.631668][ T8144] device veth0_macvtap entered promiscuous mode [ 503.745394][ T8144] device veth1_macvtap entered promiscuous mode [ 503.753726][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 503.829393][ T27] audit: type=1800 audit(1786084780.274:62): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1241" name="manufacturer" dev="configfs" ino=49797 res=0 errno=0 [ 503.883978][ T27] audit: type=1800 audit(1786084780.274:63): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1241" name="product" dev="configfs" ino=49798 res=0 errno=0 [ 504.353925][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1245'. [ 505.371737][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 505.454537][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.473801][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.511730][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.576774][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.388084][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 508.543982][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.555055][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.565375][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.576127][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.589147][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.597330][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 508.610275][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 508.619056][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.637783][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.854510][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.917925][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.963243][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.001272][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.012885][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.024093][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.034236][ T8558] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 509.040823][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 509.048645][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.064482][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 509.079579][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.084225][ T8559] vhci_hcd: connection closed [ 509.091098][ T4373] vhci_hcd: stop threads [ 509.122988][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.146527][ T4373] vhci_hcd: release socket [ 509.158185][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 509.177190][ T4373] vhci_hcd: disconnect device [ 509.192819][ T8556] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1247'. [ 509.230780][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.271924][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 509.289660][ T8144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.323583][ T8144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.377897][ T8144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.396989][ T8144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.468175][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 509.669399][ T27] audit: type=1800 audit(1786084786.114:64): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1251" name="manufacturer" dev="configfs" ino=49886 res=0 errno=0 [ 509.699619][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.713216][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.741462][ T27] audit: type=1800 audit(1786084786.144:65): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1251" name="product" dev="configfs" ino=49887 res=0 errno=0 [ 509.812159][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 509.891596][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.906796][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.955463][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1255'. [ 509.964860][ T8495] device bridge_slave_0 entered promiscuous mode [ 509.994910][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.006883][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.025163][ T8495] device bridge_slave_1 entered promiscuous mode [ 510.117505][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.665189][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.633767][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.651162][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.670196][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.808921][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.843083][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.955972][ T8495] team0: Port device team_slave_0 added [ 511.965228][ T8495] team0: Port device team_slave_1 added [ 512.103539][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.223083][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.769950][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.805239][ T8602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 512.811835][ T8602] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 512.822342][ T8602] vhci_hcd vhci_hcd.0: Device attached [ 512.836348][ T8606] vhci_hcd: connection closed [ 512.836629][ T4437] vhci_hcd: stop threads [ 512.849050][ T4437] vhci_hcd: release socket [ 512.858630][ T27] audit: type=1800 audit(1786084789.304:66): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1263" name="idVendor" dev="configfs" ino=49993 res=0 errno=0 [ 512.868092][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.885128][ T4437] vhci_hcd: disconnect device [ 512.914564][ T27] audit: type=1800 audit(1786084789.334:67): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1263" name="manufacturer" dev="configfs" ino=49994 res=0 errno=0 [ 512.969944][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.019773][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.057283][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.088556][ T27] audit: type=1800 audit(1786084789.344:68): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1263" name="product" dev="configfs" ino=49995 res=0 errno=0 [ 513.153142][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.339796][ T8495] device hsr_slave_0 entered promiscuous mode [ 513.347170][ T8495] device hsr_slave_1 entered promiscuous mode [ 513.370893][ T8495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.422163][ T8495] Cannot create hsr debugfs directory [ 515.164403][ T4292] Bluetooth: hci5: command 0x0405 tx timeout [ 515.813421][ T8495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 515.971355][ T8495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.032680][ T8495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.167086][ T8495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.403984][ T8638] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 516.709777][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.412973][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.442294][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.704031][ T8495] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.909135][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 517.943908][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.095781][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.103078][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.212270][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.268336][ T8662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 518.274942][ T8662] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 518.288861][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.380014][ T8662] vhci_hcd vhci_hcd.0: Device attached [ 518.387474][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.394705][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.452605][ T8663] vhci_hcd: connection closed [ 518.453016][ T4380] vhci_hcd: stop threads [ 518.462774][ T4380] vhci_hcd: release socket [ 518.467274][ T4380] vhci_hcd: disconnect device [ 518.539483][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.569324][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 520.587121][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.644679][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.670755][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.681964][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 520.695619][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 520.728537][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 520.811419][ T8687] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 521.144736][ T8495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.196753][ T8495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.239882][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.255189][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.287718][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.340534][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.625265][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 522.133179][ T8711] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 522.139786][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 522.167781][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 522.194680][ T8712] vhci_hcd: connection closed [ 522.195094][ T4437] vhci_hcd: stop threads [ 522.204849][ T4437] vhci_hcd: release socket [ 522.238337][ T4437] vhci_hcd: disconnect device [ 522.329532][ T11] device hsr_slave_0 left promiscuous mode [ 522.382495][ T11] device hsr_slave_1 left promiscuous mode [ 522.392078][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.425883][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.498324][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.510651][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.551742][ T11] device bridge_slave_1 left promiscuous mode [ 522.568120][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.600828][ T11] device bridge_slave_0 left promiscuous mode [ 522.627678][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.918576][ T11] device veth1_macvtap left promiscuous mode [ 522.924788][ T11] device veth0_macvtap left promiscuous mode [ 522.963676][ T11] device veth1_vlan left promiscuous mode [ 523.004095][ T11] device veth0_vlan left promiscuous mode [ 524.567319][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 525.226727][ T8748] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 525.296337][ T11] infiniband syz0: set down [ 525.831458][ T8767] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 525.838083][ T8767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 525.887132][ T8767] vhci_hcd vhci_hcd.0: Device attached [ 525.918610][ T8768] vhci_hcd: connection closed [ 525.919046][ T5016] vhci_hcd: stop threads [ 525.948407][ T5016] vhci_hcd: release socket [ 525.952935][ T5016] vhci_hcd: disconnect device [ 526.920693][ T11] team0 (unregistering): Port device team_slave_1 removed [ 526.964251][ T11] team0 (unregistering): Port device team_slave_0 removed [ 527.009810][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.056433][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.368900][ T30] smc: removing ib device syz0 [ 527.375102][ T11] bond0 (unregistering): Released all slaves [ 527.594465][ T8748] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1298'. [ 527.623651][ T4388] team0 speed is unknown, defaulting to 1000 [ 527.691766][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 527.790240][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.822915][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.855959][ T8495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.192975][ T8807] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 529.199636][ T8807] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 529.232390][ T8807] vhci_hcd vhci_hcd.0: Device attached [ 529.279365][ T8808] vhci_hcd: connection closed [ 529.280284][ T4379] vhci_hcd: stop threads [ 529.318490][ T4379] vhci_hcd: release socket [ 529.338220][ T4379] vhci_hcd: disconnect device [ 530.118000][ T8831] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1318'. [ 530.265814][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 530.293176][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 530.432311][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 530.578881][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 530.630989][ T8495] device veth0_vlan entered promiscuous mode [ 530.648301][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 530.657458][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 530.783082][ T8495] device veth1_vlan entered promiscuous mode [ 531.058437][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.073932][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.119648][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 531.170411][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.227440][ T8495] device veth0_macvtap entered promiscuous mode [ 531.283663][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 531.317683][ T8495] device veth1_macvtap entered promiscuous mode [ 531.386358][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.437966][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.488939][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.509495][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.532434][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.573553][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.704674][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.848009][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.859968][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.871216][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.881982][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.892361][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.903314][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.011935][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.068054][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.131448][ T8495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.226034][ T8495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.012814][ T8495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.081163][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 533.124001][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 533.138943][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 533.189010][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 533.257934][ T8866] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 533.264571][ T8866] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 533.295109][ T8866] vhci_hcd vhci_hcd.0: Device attached [ 533.311681][ T8495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.321335][ T8867] vhci_hcd: connection closed [ 533.329776][ T4373] vhci_hcd: stop threads [ 533.342181][ T8495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.354857][ T8495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.364090][ T8495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.377954][ T4373] vhci_hcd: release socket [ 533.548506][ T4373] vhci_hcd: disconnect device [ 533.643646][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.670961][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.725458][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1327'. [ 533.740609][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 533.781571][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.816928][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.861314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.343046][ T8934] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 538.349674][ T8934] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 538.378720][ T8934] vhci_hcd vhci_hcd.0: Device attached [ 538.389913][ T8935] vhci_hcd: connection closed [ 538.390539][ T30] vhci_hcd: stop threads [ 538.425267][ T30] vhci_hcd: release socket [ 538.445889][ T30] vhci_hcd: disconnect device [ 543.959990][ T4322] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 544.117929][ T4322] usb 5-1: device descriptor read/64, error -71 [ 545.448115][ T4322] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 546.114221][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1360'. [ 547.954823][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1367'. [ 551.335486][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'. [ 556.755838][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 558.368003][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 558.567897][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 558.576698][ T22] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 558.626487][ T22] usb 5-1: config 0 has no interface number 0 [ 558.660411][ T22] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 558.716784][ T22] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 558.779626][ T22] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 559.164962][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.174226][ T22] usb 5-1: Product: syz [ 559.182665][ T22] usb 5-1: Manufacturer: syz [ 559.187593][ T22] usb 5-1: SerialNumber: syz [ 559.244845][ T22] usb 5-1: config 0 descriptor?? [ 559.271766][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.282633][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.605037][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.703315][ T9101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 560.152593][ T22] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 560.360831][ T22] asix: probe of 5-1:0.34 failed with error -71 [ 560.891070][ T22] usb 5-1: USB disconnect, device number 12 [ 562.923293][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.950383][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.523765][ T9165] device syzkaller0 entered promiscuous mode [ 566.992414][ T9178] netlink: 'syz.4.1403': attribute type 153 has an invalid length. [ 569.810003][ T9196] loop5: detected capacity change from 0 to 1024 [ 569.829984][ T9196] ext4: Bad value for 'stripe' [ 572.532392][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1420'. [ 572.807980][ T4361] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 573.761949][ T4361] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.923302][ T4361] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.038614][ T4361] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.053708][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.094795][ T4361] usb 2-1: Product: syz [ 574.105087][ T4361] usb 2-1: Manufacturer: syz [ 574.112757][ T4361] usb 2-1: SerialNumber: syz [ 574.181896][ T4361] cdc_ncm 2-1:1.0: skipping garbage [ 574.191450][ T4361] usb 2-1: selecting invalid altsetting 1 [ 574.562439][ T4361] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 574.582561][ T4361] cdc_ncm 2-1:1.0: bind() failure [ 574.713494][ T4361] usb 2-1: USB disconnect, device number 10 [ 575.979625][ T9266] loop5: detected capacity change from 0 to 1024 [ 576.070551][ T9266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.140494][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.180089][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.200353][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.209903][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.217472][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 580.226830][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.839427][ T9314] loop1: detected capacity change from 0 to 128 [ 580.927477][ T9314] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 581.054091][ T9314] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 582.065364][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 582.305358][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 582.893947][ T9330] loop1: detected capacity change from 0 to 512 [ 583.119344][ T9330] EXT4-fs (loop1): Test dummy encryption mode enabled [ 583.231972][ T9330] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1447: inode has both inline data and extents flags [ 583.373743][ T9330] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1447: couldn't read orphan inode 15 (err -117) [ 583.396315][ T4407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.424102][ T9330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 584.349933][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 584.465671][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 584.478929][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 584.490357][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 584.504064][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 584.515868][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 584.529735][ T9330] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 584.539958][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.651541][ T4407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.775705][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.824470][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.862332][ T8144] EXT4-fs (loop1): unmounting filesystem. [ 584.878481][ T9297] device bridge_slave_0 entered promiscuous mode [ 584.986594][ T4407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.064261][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.076060][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.102851][ T9297] device bridge_slave_1 entered promiscuous mode [ 585.200616][ T4407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.269816][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.328552][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.443806][ T9297] team0: Port device team_slave_0 added [ 585.470237][ T9297] team0: Port device team_slave_1 added [ 585.713114][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.730792][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.818671][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.911074][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.918652][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.951933][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.181081][ T9297] device hsr_slave_0 entered promiscuous mode [ 586.238590][ T9297] device hsr_slave_1 entered promiscuous mode [ 586.332057][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.346373][ T9297] Cannot create hsr debugfs directory [ 586.428050][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 586.559628][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 586.588152][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 588.039592][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.046769][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.082303][ T9342] device bridge_slave_0 entered promiscuous mode [ 588.117639][ T9411] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 588.244711][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.255058][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.270002][ T9342] device bridge_slave_1 entered promiscuous mode [ 588.509579][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 588.668579][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 588.738672][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.823287][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.140676][ T9342] team0: Port device team_slave_0 added [ 589.279456][ T9342] team0: Port device team_slave_1 added [ 589.415452][ T9297] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.412297][ T9297] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 590.525468][ T9297] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 590.601096][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.610128][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.747955][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 592.723988][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.828003][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 592.937547][ T9297] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 593.029852][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.049040][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.164021][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.265394][ T9459] kvm: emulating exchange as write [ 593.632001][ T4407] device hsr_slave_0 left promiscuous mode [ 593.648696][ T4407] device hsr_slave_1 left promiscuous mode [ 593.664665][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.682681][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.694664][ T9463] loop1: detected capacity change from 0 to 512 [ 593.708969][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.730968][ T9463] EXT4-fs: Ignoring removed bh option [ 593.736467][ T9463] EXT4-fs: inline encryption not supported [ 593.800192][ T9463] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.809451][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.172336][ T4407] device veth1_macvtap left promiscuous mode [ 594.221639][ T4407] device veth0_macvtap left promiscuous mode [ 594.445695][ T4407] device veth1_vlan left promiscuous mode [ 594.513499][ T4407] device veth0_vlan left promiscuous mode [ 594.535329][ T9463] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 594.765163][ T9463] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1472: bg 0: block 248: padding at end of block bitmap is not set [ 594.957200][ T9463] Quota error (device loop1): write_blk: dquota write failed [ 595.037138][ T9463] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 595.090149][ T9484] loop5: detected capacity change from 0 to 1024 [ 595.127968][ T9463] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1472: Failed to acquire dquot type 1 [ 595.209118][ T9484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 595.302885][ T9463] EXT4-fs (loop1): 1 truncate cleaned up [ 595.346979][ T9484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 595.357849][ T9463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 595.638742][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 595.749322][ T8144] EXT4-fs (loop1): unmounting filesystem. [ 595.839874][ T8326] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 595.870649][ T8326] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:24: Failed to release dquot type 1 [ 596.156228][ T4407] bond2 (unregistering): Released all slaves [ 596.206557][ T8495] EXT4-fs (loop5): unmounting filesystem. [ 596.454586][ T9495] loop5: detected capacity change from 0 to 512 [ 596.472065][ T9495] EXT4-fs: Ignoring removed orlov option [ 596.482938][ T9495] EXT4-fs: Ignoring removed mblk_io_submit option [ 596.489955][ T9495] EXT4-fs: Ignoring removed bh option [ 596.527499][ T9495] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1478: corrupted in-inode xattr [ 596.545746][ T9495] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1478: couldn't read orphan inode 15 (err -117) [ 596.578231][ T9495] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 596.632199][ T8495] EXT4-fs (loop5): unmounting filesystem. [ 597.814875][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 597.900218][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 597.993710][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.093126][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.574719][ T4407] bond0 (unregistering): Released all slaves [ 599.671075][ T9342] device hsr_slave_0 entered promiscuous mode [ 599.689824][ T9342] device hsr_slave_1 entered promiscuous mode [ 599.696770][ T9342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.722374][ T9342] Cannot create hsr debugfs directory [ 600.188292][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.334736][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.378864][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.495814][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.634614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.671193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.694368][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.701629][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.719156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.730935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.740117][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.747347][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.802561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.816081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.872032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.918099][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 600.949788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.104051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.125323][ T7] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 601.195809][ T7] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 601.326254][ T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=0105, bcdDevice=e2.57 [ 601.345299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.407454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.460050][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.527057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.747270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.858290][ T9545] loop1: detected capacity change from 0 to 256 [ 601.938800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.951472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.960161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.979961][ T9342] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 602.000425][ T9545] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.017635][ T9545] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 602.061154][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.077447][ T9545] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 602.115173][ T9342] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 602.162814][ T9342] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 602.265228][ T9342] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 602.311843][ T8900] usb 2-1: USB disconnect, device number 11 [ 603.214969][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.237470][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 603.290913][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 603.342991][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.409160][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 603.439040][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 603.477697][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.484945][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.533877][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.554806][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.593999][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 603.603210][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.610411][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.621932][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 603.670785][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 603.715788][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 603.789106][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 603.826447][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 603.844927][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 603.877123][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 603.895499][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 603.918690][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 603.946105][ T9342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.965435][ T9342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 603.982949][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 603.994434][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 604.009965][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 604.026242][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 604.065437][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.399733][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.420340][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.485633][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.185761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 607.207557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.514287][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.531696][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.582393][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 607.901210][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 607.949877][ T9297] device veth0_vlan entered promiscuous mode [ 608.006772][ T9297] device veth1_vlan entered promiscuous mode [ 608.056364][ T27] audit: type=1800 audit(1786084884.494:69): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1511" name="manufacturer" dev="configfs" ino=55609 res=0 errno=0 [ 608.154023][ T27] audit: type=1800 audit(1786084884.524:70): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1511" name="product" dev="configfs" ino=55611 res=0 errno=0 [ 608.205943][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 608.254320][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 608.450666][ T9297] device veth0_macvtap entered promiscuous mode [ 608.578184][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 608.745491][ T9297] device veth1_macvtap entered promiscuous mode [ 611.525182][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.536336][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.557836][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.606710][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.634985][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.874868][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.635519][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.696150][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.817558][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.890656][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 612.920371][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.961475][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.002829][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.034482][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.117290][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.182109][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.233627][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.253784][ T9297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.267491][ T9297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.290027][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.302887][ T9297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.312109][ T9297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.324713][ T9297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.340491][ T9297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.380157][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 613.409349][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.470308][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.529705][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.628505][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.637161][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.669510][ T9342] device veth0_vlan entered promiscuous mode [ 613.685678][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.698251][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 613.705718][ T27] audit: type=1800 audit(1786084890.144:71): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1521" name="manufacturer" dev="configfs" ino=55770 res=0 errno=0 [ 613.777895][ T27] audit: type=1800 audit(1786084890.174:72): pid=9692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1521" name="product" dev="configfs" ino=55771 res=0 errno=0 [ 613.818213][ T9342] device veth1_vlan entered promiscuous mode [ 613.913520][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.921857][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 613.938924][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 613.947513][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.992724][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.041311][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 614.089145][ T8326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.160882][ T9342] device veth0_macvtap entered promiscuous mode [ 614.337088][ T5016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.340914][ T9342] device veth1_macvtap entered promiscuous mode [ 614.347278][ T5016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.751100][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 614.833069][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 614.914924][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 615.015602][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.046800][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.092287][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.132525][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.148015][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.167928][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.183040][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.215197][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.253982][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.274873][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.315650][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.379389][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.403344][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.421640][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.463218][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.493699][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.564859][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.605535][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.628399][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.646261][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.707338][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.855748][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.110675][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.290289][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.143370][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.086589][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.710595][ T9342] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.795301][ T9342] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.815446][ T9342] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.839208][ T9342] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.154662][ T27] audit: type=1800 audit(1786084895.594:73): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1530" name="manufacturer" dev="configfs" ino=56604 res=0 errno=0 [ 619.202844][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.228351][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.254530][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.268916][ T27] audit: type=1800 audit(1786084895.614:74): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1530" name="product" dev="configfs" ino=56605 res=0 errno=0 [ 619.398583][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.456870][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.615318][ T9744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1533'. [ 619.669089][ T4320] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 619.742849][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 619.948462][ T4320] usb 7-1: Using ep0 maxpacket: 8 [ 620.000057][ T4320] usb 7-1: config 0 interface 0 has no altsetting 0 [ 620.139947][ T4320] usb 7-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 620.201127][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.267520][ T4320] usb 7-1: config 0 descriptor?? [ 620.728751][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0xd [ 620.735862][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0xd [ 620.751600][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x7 [ 623.175461][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x4 [ 623.184579][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.191983][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.200116][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.207088][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.214800][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.225448][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.232827][ T4320] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 623.246214][ T4320] wacom 0003:056A:0057.0002: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.6-1/input0 [ 623.263598][ T4320] usb 7-1: USB disconnect, device number 2 [ 624.308414][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321725][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.392144][ T9766] fido_id[9766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 630.701826][ T9832] tmpfs: Unknown parameter 'quota' [ 630.971671][ T9848] loop6: detected capacity change from 0 to 128 [ 631.082796][ T9848] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 631.243403][ T9848] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 633.696874][ T9297] EXT4-fs (loop6): unmounting filesystem. [ 634.537416][ T9879] loop5: detected capacity change from 0 to 256 [ 634.567475][ T9880] binder: 9876:9880 ioctl c0306201 0 returned -14 [ 634.723840][ T9885] Bluetooth: MGMT ver 1.22 [ 636.343272][ T9896] loop6: detected capacity change from 0 to 256 [ 636.387954][ T9896] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 636.458070][ T9896] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 636.894231][ T9896] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 641.669146][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1583'. [ 643.237402][ T4292] Bluetooth: hci0: failed to read key size for handle 200 [ 644.092517][ T9959] input: syz1 as /devices/virtual/input/input8 [ 646.364038][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1598'. [ 647.068778][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 647.495369][ T4292] Bluetooth: hci0: failed to read key size for handle 200 [ 648.946161][T10005] loop7: detected capacity change from 0 to 1024 [ 649.810468][ T9662] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 650.086729][T10009] ------------[ cut here ]------------ [ 650.092787][T10009] fmt: 'level=%s [ 650.092787][T10009] ' current_buffer: ' <...>-7725 [000] ..... 440.037939: dwc3_ctrl_req: Get Device Status(Length = 0) [ 650.092787][T10009] <...>-1970561396 [000] .p.35 440.093232: Unknown type 25955 [ 650.092787][T10009] -0 [000] ..... 440.118464: initcall_level: level=' [ 650.113329][T10009] WARNING: CPU: 1 PID: 10009 at kernel/trace/trace.c:3891 trace_check_vprintf+0xd4a/0x1080 [ 650.146478][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.163185][T10009] Modules linked in: [ 650.167237][T10009] CPU: 1 PID: 10009 Comm: syz.6.1606 Not tainted syzkaller #0 [ 650.174888][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.185104][T10009] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 650.191302][T10009] Code: e8 db 24 fc ff c6 05 2f 96 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 60 82 90 8a 48 8b 74 24 60 48 89 c2 e8 06 af c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 650.211163][T10009] RSP: 0018:ffffc900053bfa60 EFLAGS: 00010246 [ 650.217484][T10009] RAX: 1a4a2251f8784700 RBX: 0000000000000000 RCX: 0000000000080000 [ 650.225568][T10009] RDX: ffffc9000e899000 RSI: 00000000000085ab RDI: 00000000000085ac [ 650.233732][T10009] RBP: ffff888060ad80d8 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 650.241911][T10009] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffffffff8a800540 [ 650.249971][T10009] R13: ffffc900053bfba0 R14: dffffc0000000000 R15: 0000000000000002 [ 650.258038][T10009] FS: 00007f69a67986c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 650.267080][T10009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.273760][T10009] CR2: 00007f73595db440 CR3: 000000005f2fd000 CR4: 00000000003506e0 [ 650.281828][T10009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.289854][T10009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.297905][T10009] Call Trace: [ 650.301305][T10009] [ 650.304333][T10009] trace_event_printf+0xea/0x140 [ 650.309393][T10009] ? trace_print_seq+0x160/0x160 [ 650.314379][T10009] ? trace_raw_output_prep+0x230/0x230 [ 650.319907][T10009] trace_raw_output_initcall_level+0x93/0xd0 [ 650.325962][T10009] tracing_read_pipe+0x53b/0xb10 [ 650.331003][T10009] ? s_show+0x300/0x300 [ 650.335204][T10009] vfs_read+0x2db/0x960 [ 650.339513][T10009] ? kernel_read+0x1e0/0x1e0 [ 650.344131][T10009] ? __fget_files+0x28/0x460 [ 650.348807][T10009] ? __fget_files+0x3fc/0x460 [ 650.353523][T10009] ? __fdget_pos+0x2ae/0x360 [ 650.358173][T10009] ? ksys_read+0x70/0x260 [ 650.362570][T10009] ksys_read+0x14d/0x260 [ 650.366833][T10009] ? vfs_write+0x9a0/0x9a0 [ 650.371307][T10009] ? lockdep_hardirqs_on+0x94/0x140 [ 650.376590][T10009] do_syscall_64+0x4c/0xa0 [ 650.381114][T10009] ? clear_bhb_loop+0x60/0xb0 [ 650.385890][T10009] ? clear_bhb_loop+0x60/0xb0 [ 650.390629][T10009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.396574][T10009] RIP: 0033:0x7f69a599e0d9 [ 650.401067][T10009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.420843][T10009] RSP: 002b:00007f69a6798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.429418][T10009] RAX: ffffffffffffffda RBX: 00007f69a5c25fa0 RCX: 00007f69a599e0d9 [ 650.437450][T10009] RDX: 0000000000002020 RSI: 0000200000001500 RDI: 0000000000000006 [ 650.445530][T10009] RBP: 00007f69a5a35024 R08: 0000000000000000 R09: 0000000000000000 [ 650.454087][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.462146][T10009] R13: 00007f69a5c26038 R14: 00007f69a5c25fa0 R15: 00007ffca0e66598 [ 650.470218][T10009] [ 650.473263][T10009] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 650.480548][T10009] CPU: 1 PID: 10009 Comm: syz.6.1606 Not tainted syzkaller #0 [ 650.488100][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.498162][T10009] Call Trace: [ 650.501446][T10009] [ 650.504389][T10009] dump_stack_lvl+0x188/0x24e [ 650.509107][T10009] ? memcpy+0x3c/0x60 [ 650.513193][T10009] ? show_regs_print_info+0x12/0x12 [ 650.518408][T10009] ? load_image+0x410/0x410 [ 650.522958][T10009] panic+0x2d3/0x710 [ 650.526866][T10009] ? bpf_jit_dump+0xd0/0xd0 [ 650.531388][T10009] __warn+0x2f8/0x4f0 [ 650.535465][T10009] ? trace_check_vprintf+0xd4a/0x1080 [ 650.540945][T10009] ? trace_check_vprintf+0xd4a/0x1080 [ 650.546329][T10009] report_bug+0x2ba/0x4f0 [ 650.550702][T10009] ? trace_check_vprintf+0xd4a/0x1080 [ 650.556089][T10009] handle_bug+0x3a/0x70 [ 650.560284][T10009] exc_invalid_op+0x16/0x40 [ 650.564816][T10009] asm_exc_invalid_op+0x16/0x20 [ 650.569679][T10009] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 650.575689][T10009] Code: e8 db 24 fc ff c6 05 2f 96 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 60 82 90 8a 48 8b 74 24 60 48 89 c2 e8 06 af c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 650.595307][T10009] RSP: 0018:ffffc900053bfa60 EFLAGS: 00010246 [ 650.601391][T10009] RAX: 1a4a2251f8784700 RBX: 0000000000000000 RCX: 0000000000080000 [ 650.609366][T10009] RDX: ffffc9000e899000 RSI: 00000000000085ab RDI: 00000000000085ac [ 650.617342][T10009] RBP: ffff888060ad80d8 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 650.625324][T10009] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: ffffffff8a800540 [ 650.633325][T10009] R13: ffffc900053bfba0 R14: dffffc0000000000 R15: 0000000000000002 [ 650.641334][T10009] trace_event_printf+0xea/0x140 [ 650.646309][T10009] ? trace_print_seq+0x160/0x160 [ 650.651266][T10009] ? trace_raw_output_prep+0x230/0x230 [ 650.656847][T10009] trace_raw_output_initcall_level+0x93/0xd0 [ 650.662851][T10009] tracing_read_pipe+0x53b/0xb10 [ 650.667843][T10009] ? s_show+0x300/0x300 [ 650.672027][T10009] vfs_read+0x2db/0x960 [ 650.676211][T10009] ? kernel_read+0x1e0/0x1e0 [ 650.680835][T10009] ? __fget_files+0x28/0x460 [ 650.685627][T10009] ? __fget_files+0x3fc/0x460 [ 650.690324][T10009] ? __fdget_pos+0x2ae/0x360 [ 650.694950][T10009] ? ksys_read+0x70/0x260 [ 650.699379][T10009] ksys_read+0x14d/0x260 [ 650.703673][T10009] ? vfs_write+0x9a0/0x9a0 [ 650.708277][T10009] ? lockdep_hardirqs_on+0x94/0x140 [ 650.713501][T10009] do_syscall_64+0x4c/0xa0 [ 650.717978][T10009] ? clear_bhb_loop+0x60/0xb0 [ 650.722711][T10009] ? clear_bhb_loop+0x60/0xb0 [ 650.727460][T10009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.733387][T10009] RIP: 0033:0x7f69a599e0d9 [ 650.737821][T10009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.757461][T10009] RSP: 002b:00007f69a6798028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.765982][T10009] RAX: ffffffffffffffda RBX: 00007f69a5c25fa0 RCX: 00007f69a599e0d9 [ 650.773962][T10009] RDX: 0000000000002020 RSI: 0000200000001500 RDI: 0000000000000006 [ 650.781941][T10009] RBP: 00007f69a5a35024 R08: 0000000000000000 R09: 0000000000000000 [ 650.789919][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.797900][T10009] R13: 00007f69a5c26038 R14: 00007f69a5c25fa0 R15: 00007ffca0e66598 [ 650.805896][T10009] [ 650.809617][T10009] Kernel Offset: disabled [ 650.814059][T10009] Rebooting in 86400 seconds..