last executing test programs: 5.15566515s ago: executing program 0 (id=259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno', 0xfe01) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 4.807073641s ago: executing program 2 (id=262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x10001, 0xf09}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) 4.756203924s ago: executing program 3 (id=263): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) fanotify_init(0x200, 0x0) 4.643541809s ago: executing program 3 (id=264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x608d8d0) close(0x3) 4.622792008s ago: executing program 3 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01190f20e06635000200000f22e00f01d1f26d711cba430066b80000000066ef66b9eb0b00000f3266b80500000066b90b0000000f01c1baa000ec360f09", 0x3f}], 0x1, 0x60, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x100000000000033e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.306168836s ago: executing program 3 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.256081794s ago: executing program 1 (id=268): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}], 0x1, 0x480e0) 4.209000789s ago: executing program 1 (id=269): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 4.159358641s ago: executing program 0 (id=270): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x800542) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.987874216s ago: executing program 1 (id=271): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010160, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) listen(r3, 0x1ff) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="ab", 0x1, 0xc1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 3.728439662s ago: executing program 2 (id=272): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) close(0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.041391279s ago: executing program 0 (id=273): socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xffff, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f00000002c0)="8a", 0x1}], 0x1, 0x6) 2.987852498s ago: executing program 2 (id=274): syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 2.987500945s ago: executing program 1 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01190f20e06635000200000f22e00f01d1f26d711cba430066b80000000066ef66b9eb0b00000f3266b80500000066b90b0000000f01c1baa000ec360f09", 0x3f}], 0x1, 0x60, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x100000000000033e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.914994987s ago: executing program 3 (id=276): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44040084}, 0x8880) 2.784676659s ago: executing program 2 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) 2.723605451s ago: executing program 0 (id=278): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000640)={{0x2, 0x4e22, @loopback}, {0x306, @remote}, 0x20, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 'pimreg1\x00'}) unshare(0x28000600) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) fanotify_init(0x2, 0x1000) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchdir(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.863198306s ago: executing program 2 (id=279): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x5) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) 1.510988584s ago: executing program 0 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RGETLOCK(r3, &(0x7f0000002780)={0x24, 0x37, 0x1, {0x0, 0xa, 0xb, 0xffffffffffffffff, 0x6, 'tmpfs\x00'}}, 0x24) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000027c0)={0x2, "a37b2c312fbbddf541ec6ab4cddae44ad3d6e21d8151f628c5918f2b3e01ed103a558d33b2c3a78b37406e838861b40fd45077d46df94a641d7f309104cfd86ca3119c21fdc48a0d38d82c854c16e9d833e85f2549d63f265e9535347e4d13afe588b595942933a5427b3140e9eed8dc9984a06f7871155dc1d0ffbcf58ebd6118555f8db73599ff15bf2f90c46fb858315441e8634f3034aa1da0ae0a8995cfc7079c7e74f07c6529f17eaaeed1a96e8b6d51c917a271be074bfa95a6183e5d330fb8aa60b351978f813c167a4fe8b304f3a18d4d2c3ec5b6bd5786f910f2871ef408f2f680c173914576a96e96c6c826583660b4f3a4358403e21cb2a4556b"}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0xfffd, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001fc0)=""/179, 0xb3) getrusage(0x1, &(0x7f0000002980)) sendmsg$nl_generic(r5, &(0x7f0000002240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x81) 987.733239ms ago: executing program 2 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) 987.277788ms ago: executing program 3 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_wakeup_irq', 0x60000, 0x100) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) socket$kcm(0x29, 0x5, 0x0) creat(0x0, 0x125) io_setup(0x401, &(0x7f0000000040)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x100000001, &(0x7f0000000080)=0x2) 981.556664ms ago: executing program 1 (id=283): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700a6"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 69.452571ms ago: executing program 0 (id=284): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x7fe) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) getegid() write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 0s ago: executing program 1 (id=285): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts. [ 85.261348][ T5808] cgroup: Unknown subsys name 'net' [ 85.453022][ T5808] cgroup: Unknown subsys name 'cpuset' [ 85.462913][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.296706][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.702935][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.716802][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.724862][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.732756][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.740546][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.749471][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.757095][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.761615][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.765116][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.774632][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.780534][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.787366][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.801718][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.803016][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.811419][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.834702][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.845783][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.855878][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.864985][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.883779][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.376241][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 91.612243][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 91.642277][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 91.729573][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.737452][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.745061][ T5817] bridge_slave_0: entered allmulticast mode [ 91.752620][ T5817] bridge_slave_0: entered promiscuous mode [ 91.766685][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.774003][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.781322][ T5817] bridge_slave_1: entered allmulticast mode [ 91.788704][ T5817] bridge_slave_1: entered promiscuous mode [ 91.828730][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.922853][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.973332][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.983128][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.990932][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.998165][ T5818] bridge_slave_0: entered allmulticast mode [ 92.005722][ T5818] bridge_slave_0: entered promiscuous mode [ 92.047046][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.054533][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.061822][ T5818] bridge_slave_1: entered allmulticast mode [ 92.069555][ T5818] bridge_slave_1: entered promiscuous mode [ 92.077283][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.084523][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.092189][ T5819] bridge_slave_0: entered allmulticast mode [ 92.099749][ T5819] bridge_slave_0: entered promiscuous mode [ 92.130118][ T5817] team0: Port device team_slave_0 added [ 92.149160][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.156351][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.163648][ T5819] bridge_slave_1: entered allmulticast mode [ 92.171700][ T5819] bridge_slave_1: entered promiscuous mode [ 92.198769][ T5817] team0: Port device team_slave_1 added [ 92.260892][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.283154][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.290947][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.298144][ T5826] bridge_slave_0: entered allmulticast mode [ 92.305807][ T5826] bridge_slave_0: entered promiscuous mode [ 92.333218][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.345352][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.355553][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.363230][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.370968][ T5826] bridge_slave_1: entered allmulticast mode [ 92.379505][ T5826] bridge_slave_1: entered promiscuous mode [ 92.387428][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.394547][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.421710][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.450478][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.478282][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.485790][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.512758][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.572481][ T5818] team0: Port device team_slave_0 added [ 92.595228][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.611121][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.622637][ T5818] team0: Port device team_slave_1 added [ 92.630754][ T5819] team0: Port device team_slave_0 added [ 92.640053][ T5819] team0: Port device team_slave_1 added [ 92.749472][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.756476][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.783151][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.797112][ T5826] team0: Port device team_slave_0 added [ 92.809117][ T5817] hsr_slave_0: entered promiscuous mode [ 92.815890][ T5817] hsr_slave_1: entered promiscuous mode [ 92.824065][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.831099][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.858041][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.868604][ T5834] Bluetooth: hci0: command tx timeout [ 92.875921][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.882947][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.909174][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.919159][ T5824] Bluetooth: hci2: command tx timeout [ 92.924240][ T5826] team0: Port device team_slave_1 added [ 92.925571][ T52] Bluetooth: hci3: command tx timeout [ 92.935783][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.936889][ T5834] Bluetooth: hci1: command tx timeout [ 92.943829][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.975124][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.043327][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.050771][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.077451][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.110513][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.117490][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.143524][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.226242][ T5818] hsr_slave_0: entered promiscuous mode [ 93.232858][ T5818] hsr_slave_1: entered promiscuous mode [ 93.239950][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 93.245814][ T5818] Cannot create hsr debugfs directory [ 93.264368][ T5819] hsr_slave_0: entered promiscuous mode [ 93.270984][ T5819] hsr_slave_1: entered promiscuous mode [ 93.277386][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 93.283188][ T5819] Cannot create hsr debugfs directory [ 93.381083][ T5826] hsr_slave_0: entered promiscuous mode [ 93.387664][ T5826] hsr_slave_1: entered promiscuous mode [ 93.394844][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 93.400783][ T5826] Cannot create hsr debugfs directory [ 93.838400][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.885367][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.897567][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.926795][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.997417][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.012075][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.045856][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.079763][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.151804][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.165445][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.180890][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.218860][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.330779][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.343805][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.361519][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.380990][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.517940][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.578836][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.597506][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.608422][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.615927][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.642822][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.650027][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.701844][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.715544][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.736350][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.751166][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.758355][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.768663][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.775857][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.835246][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.847677][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.876294][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.883485][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.893171][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.900350][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.920557][ T5834] Bluetooth: hci0: command tx timeout [ 94.934217][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.941538][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.964966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.972261][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.999975][ T5824] Bluetooth: hci2: command tx timeout [ 95.007425][ T5834] Bluetooth: hci1: command tx timeout [ 95.013284][ T52] Bluetooth: hci3: command tx timeout [ 95.345026][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.507419][ T5817] veth0_vlan: entered promiscuous mode [ 95.552572][ T5817] veth1_vlan: entered promiscuous mode [ 95.660640][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.681449][ T5817] veth0_macvtap: entered promiscuous mode [ 95.696707][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.712118][ T5817] veth1_macvtap: entered promiscuous mode [ 95.735165][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.781470][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.811925][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.850900][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.861340][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.883267][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.892835][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.902946][ T5818] veth0_vlan: entered promiscuous mode [ 95.937356][ T5819] veth0_vlan: entered promiscuous mode [ 95.958606][ T5826] veth0_vlan: entered promiscuous mode [ 95.982918][ T5818] veth1_vlan: entered promiscuous mode [ 96.003578][ T5819] veth1_vlan: entered promiscuous mode [ 96.028135][ T5826] veth1_vlan: entered promiscuous mode [ 96.093452][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.108804][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.166935][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.175887][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.190672][ T5819] veth0_macvtap: entered promiscuous mode [ 96.199331][ T5818] veth0_macvtap: entered promiscuous mode [ 96.221488][ T5819] veth1_macvtap: entered promiscuous mode [ 96.243206][ T5818] veth1_macvtap: entered promiscuous mode [ 96.257154][ T5826] veth0_macvtap: entered promiscuous mode [ 96.273944][ T5826] veth1_macvtap: entered promiscuous mode [ 96.287224][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.297052][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.334579][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.380509][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.405284][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.422063][ T1005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.453920][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.461478][ T1005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.470965][ T1005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.485843][ T1005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.507429][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.517216][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.527603][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.553122][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.562538][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.587874][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.597735][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.630006][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.643144][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.719673][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.738387][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.815365][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.833352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.882067][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.903324][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.000032][ T5834] Bluetooth: hci0: command tx timeout [ 97.017937][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.053420][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.079146][ T5824] Bluetooth: hci2: command tx timeout [ 97.084619][ T52] Bluetooth: hci3: command tx timeout [ 97.090575][ T5834] Bluetooth: hci1: command tx timeout [ 97.117224][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.135929][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.144259][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.165464][ T41] cfg80211: failed to load regulatory.db [ 97.167701][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.188593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.109975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.289369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.421757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.431680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.519826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.709340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.799882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.080226][ T52] Bluetooth: hci0: command tx timeout [ 99.159177][ T5834] Bluetooth: hci1: command tx timeout [ 99.164703][ T52] Bluetooth: hci3: command tx timeout [ 99.170245][ T5824] Bluetooth: hci2: command tx timeout [ 99.349609][ T5945] Bluetooth: MGMT ver 1.23 [ 99.480576][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.619568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.650832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.676639][ T5892] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 99.689377][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.697719][ T5892] usb 4-1: Product: syz [ 99.704837][ T5892] usb 4-1: Manufacturer: syz [ 99.710424][ T5892] usb 4-1: SerialNumber: syz [ 99.739519][ T5892] usb 4-1: config 0 descriptor?? [ 99.958140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.046392][ T5892] usb 4-1: Firmware version (0.0) predates our first public release. [ 101.058953][ T5892] usb 4-1: Please update to version 0.2 or newer [ 101.238704][ T5892] usb 4-1: USB disconnect, device number 2 [ 101.400969][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.407348][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.712066][ T9] libceph: connect (1)[c::]:6789 error -101 [ 101.722578][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 103.069146][ T5975] ceph: No mds server is up or the cluster is laggy [ 103.099327][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 103.105466][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 103.518178][ T5992] comedi comedi1: pcl726: I/O port conflict (0xfc,16) [ 106.756090][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 106.769093][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 107.347926][ T6015] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 108.644510][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.559178][ T5824] Bluetooth: hci4: command 0x1003 tx timeout [ 111.566010][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.948817][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.208965][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 113.299071][ T5914] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.420327][ T5917] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 113.449244][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.449328][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 113.479660][ T5914] usb 1-1: too many configurations: 91, using maximum allowed: 8 [ 113.519850][ T5917] usb 3-1: Product: syz [ 113.527079][ T5917] usb 3-1: Manufacturer: syz [ 113.527944][ T6093] kvm: pic: non byte read [ 113.542411][ T5914] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef [ 113.553213][ T5914] usb 1-1: New USB device strings: Mfr=6, Product=96, SerialNumber=77 [ 113.561557][ T5917] usb 3-1: SerialNumber: syz [ 113.582864][ T5917] usb 3-1: config 0 descriptor?? [ 113.599073][ T5914] usb 1-1: Product: syz [ 113.621816][ T5914] usb 1-1: Manufacturer: syz [ 113.636891][ T5914] usb 1-1: SerialNumber: syz [ 113.893680][ T5914] ums-datafab 1-1:68.0: USB Mass Storage device detected [ 114.040128][ T5914] ums-sddr55 1-1:68.0: USB Mass Storage device detected [ 114.148596][ T5917] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 114.164276][ T5914] usb 1-1: USB disconnect, device number 2 [ 114.585890][ T1005] Bluetooth: Error in BCSP hdr checksum [ 117.347095][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.574259][ T5928] usb 3-1: USB disconnect, device number 2 [ 117.698662][ T6131] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET) [ 117.861740][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 120.579062][ T5892] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.729667][ T5892] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 120.751859][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.772928][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.799743][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.821365][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.839499][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.866592][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.884066][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.899267][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.929142][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.939722][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.953955][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.977107][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.995164][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.006570][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.043747][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.070594][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.086008][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.125884][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.145278][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.157558][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.173259][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.181928][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.191346][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.202792][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.213689][ T5892] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.223858][ T5892] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.236505][ T5892] usb 1-1: Product: syz [ 121.248950][ T5892] usb 1-1: Manufacturer: syz [ 121.253597][ T5892] usb 1-1: SerialNumber: syz [ 121.299803][ T5892] usb 1-1: config 0 descriptor?? [ 121.339285][ T5892] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 121.620442][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.630579][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.639415][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 121.640615][ T5928] usb 1-1: USB disconnect, device number 3 [ 121.656104][ T5928] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 123.479719][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 123.486515][ T5824] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 136.988949][ T6296] process 'syz.0.122' launched '/dev/fd/7' with NULL argv: empty string added [ 137.369066][ T6223] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.539144][ T6223] usb 4-1: Using ep0 maxpacket: 32 [ 137.550524][ T6223] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 137.558663][ T6223] usb 4-1: config 0 has no interface number 0 [ 137.609746][ T6223] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 137.618855][ T6223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.648967][ T6223] usb 4-1: Product: syz [ 137.653250][ T6223] usb 4-1: Manufacturer: syz [ 137.657869][ T6223] usb 4-1: SerialNumber: syz [ 137.759774][ T6223] usb 4-1: config 0 descriptor?? [ 137.774614][ T6223] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.375264][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.382264][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.435078][ T6223] usb 4-1: qt2_attach - failed to power on unit: -71 [ 138.452979][ T6223] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 138.549211][ T6223] usb 4-1: USB disconnect, device number 3 [ 138.815188][ T30] audit: type=1800 audit(1764305992.637:2): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.128" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 139.028972][ T6223] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.178966][ T6223] usb 3-1: Using ep0 maxpacket: 8 [ 139.191693][ T6223] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 139.201396][ T6223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.317851][ T6223] usb 3-1: Product: syz [ 139.600722][ T6223] usb 3-1: Manufacturer: syz [ 139.607867][ T6223] usb 3-1: SerialNumber: syz [ 139.658261][ T6223] usb 3-1: config 0 descriptor?? [ 140.650886][ T6330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 141.981719][ T6223] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 141.996213][ T6223] gspca_sunplus: reg_w_riv err -71 [ 142.014876][ T6223] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 142.049927][ T6223] usb 3-1: USB disconnect, device number 3 [ 144.014605][ T6370] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 144.039293][ T6370] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 144.046127][ T6370] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 144.062323][ T6370] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 144.069336][ T6370] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 144.076528][ T6370] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 144.109994][ T6370] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 144.116544][ T6370] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 144.126257][ T6370] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 144.134223][ T6370] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 144.141070][ T6370] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 144.149323][ T6370] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 144.195807][ T6370] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 144.220101][ T6370] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 144.226721][ T6370] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 144.278973][ T6370] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 144.286839][ T6370] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 144.323673][ T6370] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 144.349302][ T6370] comedi comedi3: 8255: I/O port conflict (0x10002,4) [ 144.363951][ T6370] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 151.958585][ T6433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.629148][ T6223] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.819001][ T6223] usb 1-1: Using ep0 maxpacket: 32 [ 154.830820][ T6223] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.858228][ T6223] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 154.871038][ T6223] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 154.909761][ T6223] usb 1-1: config 0 interface 0 has no altsetting 1 [ 154.921964][ T6223] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 154.942609][ T6223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.961702][ T6223] usb 1-1: SerialNumber: syz [ 154.989871][ T6223] usb 1-1: config 0 descriptor?? [ 155.024217][ T6223] usb-storage 1-1:0.0: USB Mass Storage device detected [ 155.074218][ T6223] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 155.177749][ T30] audit: type=1326 audit(1764306008.997:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 155.242870][ T6223] usb 1-1: USB disconnect, device number 4 [ 155.266732][ T30] audit: type=1326 audit(1764306009.027:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 155.336260][ T30] audit: type=1326 audit(1764306009.027:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 155.359298][ T30] audit: type=1326 audit(1764306009.027:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 155.383158][ T30] audit: type=1326 audit(1764306009.027:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 156.044905][ T30] audit: type=1326 audit(1764306009.027:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 156.170293][ T30] audit: type=1326 audit(1764306009.027:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 156.241707][ T30] audit: type=1326 audit(1764306009.027:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 156.268565][ T30] audit: type=1326 audit(1764306009.027:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd74b38f749 code=0x7ffc0000 [ 156.422118][ T30] audit: type=1326 audit(1764306010.247:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6488 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a2f8f749 code=0x7ffc0000 [ 158.860212][ T5928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.989030][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.029475][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.062788][ T5928] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.077240][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.134665][ T5928] usb 1-1: config 0 descriptor?? [ 159.149167][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 159.205015][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.306400][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 159.365392][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.445733][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 159.467832][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 159.482395][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 159.498170][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.550107][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 159.567636][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 159.583455][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 159.589848][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 159.611015][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 159.617194][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 159.646285][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.654582][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.666368][ T5928] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.674495][ T5928] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.684415][ T5928] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.692060][ T5928] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.709287][ T5928] pwc: recv_control_msg error -32 req 02 val 2000 [ 159.720838][ T5928] pwc: recv_control_msg error -32 req 02 val 2100 [ 159.728352][ T5928] pwc: recv_control_msg error -32 req 04 val 1500 [ 159.740320][ T5928] pwc: recv_control_msg error -32 req 02 val 2500 [ 159.797414][ T5928] pwc: recv_control_msg error -32 req 02 val 2400 [ 159.824431][ T5928] pwc: recv_control_msg error -32 req 02 val 2600 [ 159.837311][ T5928] pwc: recv_control_msg error -32 req 02 val 2900 [ 160.063014][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.092385][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.142713][ T5928] pwc: Registered as video103. [ 160.184879][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 160.403114][ T5928] usb 1-1: USB disconnect, device number 5 [ 161.743878][ T6223] usb 3-1: USB disconnect, device number 4 [ 164.718966][ T6223] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.882931][ T6223] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.913506][ T6223] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.928450][ T6223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.957467][ T6223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.985284][ T6223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.996544][ T977] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.040403][ T6223] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.061015][ T6223] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.085568][ T6223] usb 4-1: Product: syz [ 165.098920][ T6223] usb 4-1: Manufacturer: syz [ 165.130369][ T6223] cdc_wdm 4-1:1.0: skipping garbage [ 165.135643][ T6223] cdc_wdm 4-1:1.0: skipping garbage [ 165.157348][ T6223] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 165.165332][ T977] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 165.181939][ T6223] cdc_wdm 4-1:1.0: Unknown control protocol [ 165.191346][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.218959][ T977] usb 3-1: config 0 has no interfaces? [ 165.224525][ T977] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 165.248981][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.302093][ T977] usb 3-1: config 0 descriptor?? [ 165.703441][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 165.787290][ T6622] fuse: Unknown parameter '0x0000000000000007' [ 165.905862][ T977] usb 4-1: USB disconnect, device number 4 [ 166.704619][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 166.704639][ T30] audit: type=1800 audit(1764306020.527:50): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.229" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 167.504908][ T6645] binder: 6643:6645 ioctl 40182103 200000000300 returned -22 [ 168.021823][ T5928] usb 3-1: USB disconnect, device number 5 [ 168.798749][ T6655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 169.017653][ T6664] smc: net device bond0 applied user defined pnetid SYZ0 [ 170.205276][ T977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.398962][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 170.411179][ T977] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 170.420395][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.435389][ T977] usb 4-1: config 0 descriptor?? [ 170.539080][ T5820] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.670805][ T977] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 170.694239][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.712161][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 170.726253][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 170.732345][ T977] usb 4-1: media controller created [ 170.739849][ T5820] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 170.748185][ T5820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.768324][ T5820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.784817][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.793369][ T5820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.810739][ T5820] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.851445][ T5820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.863071][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.884067][ T6677] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 170.910171][ T977] az6027: usb out operation failed. (-71) [ 170.924340][ T977] az6027: usb out operation failed. (-71) [ 170.931230][ T977] stb0899_attach: Driver disabled by Kconfig [ 170.937251][ T977] az6027: no front-end attached [ 170.937251][ T977] [ 170.945548][ T977] az6027: usb out operation failed. (-71) [ 170.951960][ T977] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 170.961554][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 170.978554][ T977] dvb-usb: schedule remote query interval to 400 msecs. [ 170.987067][ T977] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 171.000150][ T977] usb 4-1: USB disconnect, device number 5 [ 171.054815][ T977] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 171.092165][ T5820] usb 1-1: GET_CAPABILITIES returned 0 [ 171.097822][ T5820] usbtmc 1-1:16.0: can't read capabilities [ 171.400955][ T6682] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 171.401322][ T977] usb 1-1: USB disconnect, device number 6 [ 171.407889][ T6692] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 171.765962][ T6699] kvm: kvm [6698]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 172.489539][ T977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.720401][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 172.727724][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.765066][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.779974][ T977] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.789146][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.808769][ T977] usb 2-1: config 0 descriptor?? [ 172.825606][ T977] hub 2-1:0.0: USB hub found [ 173.029972][ T977] hub 2-1:0.0: 1 port detected [ 173.283807][ T977] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 173.300585][ T977] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 173.327242][ T977] usbhid 2-1:0.0: can't add hid device: -71 [ 173.334207][ T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 173.359618][ T977] usb 2-1: USB disconnect, device number 2 [ 177.773518][ T6782] Leaked locks on dev=0x0:0x27 ino=0x3660: [ 177.849184][ T6782] LEASE: fl_owner=ffff88807ac14e00 fl_flags=0x220 fl_type=0x0 fl_pid=6778 [ 177.980734][ T6778] ================================================================== [ 177.988883][ T6778] BUG: KASAN: slab-use-after-free in locks_remove_posix+0x10f/0x630 [ 177.996912][ T6778] Read of size 8 at addr ffff8880334dd7e0 by task syz.2.281/6778 [ 178.004643][ T6778] [ 178.006994][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 178.007016][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.007034][ T6778] Call Trace: [ 178.007045][ T6778] [ 178.007053][ T6778] dump_stack_lvl+0x189/0x250 [ 178.007078][ T6778] ? __kasan_check_byte+0x12/0x40 [ 178.007101][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.007122][ T6778] ? lock_release+0x4b/0x3b0 [ 178.007143][ T6778] ? __virt_addr_valid+0x4a5/0x5c0 [ 178.007169][ T6778] print_report+0xca/0x240 [ 178.007192][ T6778] ? locks_remove_posix+0x10f/0x630 [ 178.007213][ T6778] kasan_report+0x118/0x150 [ 178.007235][ T6778] ? locks_remove_posix+0x10f/0x630 [ 178.007259][ T6778] locks_remove_posix+0x10f/0x630 [ 178.007282][ T6778] ? __pfx_locks_remove_posix+0x10/0x10 [ 178.007313][ T6778] ? do_raw_spin_unlock+0x122/0x240 [ 178.007338][ T6778] ? dnotify_flush+0x1db/0x5e0 [ 178.007355][ T6778] ? mqueue_flush_file+0x21c/0x270 [ 178.007376][ T6778] ? filp_flush+0xae/0x190 [ 178.007402][ T6778] filp_flush+0x113/0x190 [ 178.007427][ T6778] filp_close+0x1d/0x40 [ 178.007450][ T6778] __se_sys_close_range+0x359/0x650 [ 178.007476][ T6778] ? __pfx___se_sys_close_range+0x10/0x10 [ 178.007501][ T6778] ? do_syscall_64+0xbe/0xf80 [ 178.007520][ T6778] do_syscall_64+0xfa/0xf80 [ 178.007537][ T6778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.007554][ T6778] ? clear_bhb_loop+0x60/0xb0 [ 178.007572][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.007589][ T6778] RIP: 0033:0x7ff2a2f8f749 [ 178.007612][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.007626][ T6778] RSP: 002b:00007ffdd2ca7c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 178.007644][ T6778] RAX: ffffffffffffffda RBX: 00007ff2a31e7da0 RCX: 00007ff2a2f8f749 [ 178.007668][ T6778] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 178.007678][ T6778] RBP: 00007ff2a31e7da0 R08: 0000000000000104 R09: 0000000cd2ca7f2f [ 178.007689][ T6778] R10: 00007ff2a31e7cb0 R11: 0000000000000246 R12: 000000000002b6d8 [ 178.007700][ T6778] R13: 00007ffdd2ca7d30 R14: ffffffffffffffff R15: 00007ffdd2ca7d50 [ 178.007720][ T6778] [ 178.007726][ T6778] [ 178.230088][ T6778] Allocated by task 6782: [ 178.234424][ T6778] kasan_save_track+0x3e/0x80 [ 178.239112][ T6778] __kasan_slab_alloc+0x6c/0x80 [ 178.243980][ T6778] kmem_cache_alloc_noprof+0x37d/0x710 [ 178.249460][ T6778] locks_get_lock_context+0x134/0x3b0 [ 178.254849][ T6778] generic_setlease+0x528/0x1280 [ 178.259796][ T6778] do_fcntl_add_lease+0x34d/0x460 [ 178.264833][ T6778] fcntl_setlease+0x123/0x180 [ 178.269517][ T6778] do_fcntl+0x867/0x1a50 [ 178.273765][ T6778] __se_sys_fcntl+0xc8/0x150 [ 178.278367][ T6778] do_syscall_64+0xfa/0xf80 [ 178.282893][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.288795][ T6778] [ 178.291125][ T6778] The buggy address belongs to the object at ffff8880334dd790 [ 178.291125][ T6778] which belongs to the cache file_lock_ctx of size 112 [ 178.305363][ T6778] The buggy address is located 80 bytes inside of [ 178.305363][ T6778] freed 112-byte region [ffff8880334dd790, ffff8880334dd800) [ 178.319351][ T6778] [ 178.321685][ T6778] The buggy address belongs to the physical page: [ 178.328204][ T6778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x334dd [ 178.336971][ T6778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 178.344126][ T6778] page_type: f5(slab) [ 178.348125][ T6778] raw: 00fff00000000000 ffff888140ea4140 dead000000000122 0000000000000000 [ 178.356741][ T6778] raw: 0000000000000000 0000000080170017 00000000f5000000 0000000000000000 [ 178.365326][ T6778] page dumped because: kasan: bad access detected [ 178.371752][ T6778] page_owner tracks the page as allocated [ 178.377481][ T6778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5203, tgid 5203 (udevd), ts 53925131773, free_ts 53919237313 [ 178.396178][ T6778] post_alloc_hook+0x234/0x290 [ 178.400964][ T6778] get_page_from_freelist+0x2365/0x2440 [ 178.406527][ T6778] __alloc_frozen_pages_noprof+0x181/0x370 [ 178.412348][ T6778] alloc_pages_mpol+0x232/0x4a0 [ 178.417215][ T6778] allocate_slab+0x86/0x3b0 [ 178.421732][ T6778] ___slab_alloc+0xf2b/0x1960 [ 178.426418][ T6778] __slab_alloc+0x65/0x100 [ 178.430844][ T6778] kmem_cache_alloc_noprof+0x40f/0x710 [ 178.436320][ T6778] locks_get_lock_context+0x134/0x3b0 [ 178.441705][ T6778] flock_lock_inode+0xf2/0x1410 [ 178.446569][ T6778] locks_lock_inode_wait+0x107/0x410 [ 178.451864][ T6778] __se_sys_flock+0x467/0x5b0 [ 178.456547][ T6778] do_syscall_64+0xfa/0xf80 [ 178.461057][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.466960][ T6778] page last free pid 23 tgid 23 stack trace: [ 178.472942][ T6778] __free_frozen_pages+0xbc8/0xd30 [ 178.478059][ T6778] rcu_core+0xd70/0x1870 [ 178.482324][ T6778] handle_softirqs+0x27d/0x850 [ 178.487112][ T6778] run_ksoftirqd+0x9b/0x100 [ 178.491754][ T6778] smpboot_thread_fn+0x542/0xa60 [ 178.496708][ T6778] kthread+0x711/0x8a0 [ 178.500795][ T6778] ret_from_fork+0x599/0xb30 [ 178.505399][ T6778] ret_from_fork_asm+0x1a/0x30 [ 178.510191][ T6778] [ 178.512524][ T6778] Memory state around the buggy address: [ 178.518154][ T6778] ffff8880334dd680: 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 [ 178.526224][ T6778] ffff8880334dd700: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 178.534295][ T6778] >ffff8880334dd780: fc fc fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.542446][ T6778] ^ [ 178.550004][ T6778] ffff8880334dd800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.558090][ T6778] ffff8880334dd880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.566163][ T6778] ================================================================== [ 178.587335][ T6778] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.594669][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 178.603927][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.614025][ T6778] Call Trace: [ 178.617315][ T6778] [ 178.620338][ T6778] dump_stack_lvl+0x99/0x250 [ 178.624939][ T6778] ? __asan_memcpy+0x40/0x70 [ 178.629625][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.634832][ T6778] ? __pfx__printk+0x10/0x10 [ 178.639439][ T6778] vpanic+0x237/0x6d0 [ 178.643430][ T6778] ? __pfx_vpanic+0x10/0x10 [ 178.647936][ T6778] ? preempt_schedule+0xae/0xc0 [ 178.652803][ T6778] ? __pfx_preempt_schedule+0x10/0x10 [ 178.658189][ T6778] panic+0xb9/0xc0 [ 178.661928][ T6778] ? __pfx_panic+0x10/0x10 [ 178.666370][ T6778] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 178.672294][ T6778] ? locks_remove_posix+0x10f/0x630 [ 178.677518][ T6778] check_panic_on_warn+0x89/0xb0 [ 178.682480][ T6778] ? locks_remove_posix+0x10f/0x630 [ 178.687704][ T6778] end_report+0x6f/0x140 [ 178.691966][ T6778] kasan_report+0x129/0x150 [ 178.696492][ T6778] ? locks_remove_posix+0x10f/0x630 [ 178.701716][ T6778] locks_remove_posix+0x10f/0x630 [ 178.706760][ T6778] ? __pfx_locks_remove_posix+0x10/0x10 [ 178.712333][ T6778] ? do_raw_spin_unlock+0x122/0x240 [ 178.717550][ T6778] ? dnotify_flush+0x1db/0x5e0 [ 178.722322][ T6778] ? mqueue_flush_file+0x21c/0x270 [ 178.727445][ T6778] ? filp_flush+0xae/0x190 [ 178.731875][ T6778] filp_flush+0x113/0x190 [ 178.736221][ T6778] filp_close+0x1d/0x40 [ 178.740390][ T6778] __se_sys_close_range+0x359/0x650 [ 178.745604][ T6778] ? __pfx___se_sys_close_range+0x10/0x10 [ 178.751337][ T6778] ? do_syscall_64+0xbe/0xf80 [ 178.756033][ T6778] do_syscall_64+0xfa/0xf80 [ 178.760545][ T6778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.766655][ T6778] ? clear_bhb_loop+0x60/0xb0 [ 178.771381][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.777296][ T6778] RIP: 0033:0x7ff2a2f8f749 [ 178.781727][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.801448][ T6778] RSP: 002b:00007ffdd2ca7c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 178.809883][ T6778] RAX: ffffffffffffffda RBX: 00007ff2a31e7da0 RCX: 00007ff2a2f8f749 [ 178.817955][ T6778] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 178.825957][ T6778] RBP: 00007ff2a31e7da0 R08: 0000000000000104 R09: 0000000cd2ca7f2f [ 178.833976][ T6778] R10: 00007ff2a31e7cb0 R11: 0000000000000246 R12: 000000000002b6d8 [ 178.841963][ T6778] R13: 00007ffdd2ca7d30 R14: ffffffffffffffff R15: 00007ffdd2ca7d50 [ 178.849978][ T6778] [ 178.853294][ T6778] Kernel Offset: disabled [ 178.857630][ T6778] Rebooting in 86400 seconds..