last executing test programs: 7.419520789s ago: executing program 0 (id=505): pipe2$watch_queue(0x0, 0x80) r0 = fsopen(0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x323) r1 = fsmount(r0, 0x0, 0x83) symlinkat(&(0x7f0000000040)='.\x00', r1, &(0x7f0000000140)='./file0\x00') syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x100000, 0x10100, 0x0, 0x3bc}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) userfaultfd(0x80801) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000680108805400078008000500000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c0007800800050000000000080006000000000008000600000000000800050000000000080005000000000044000780080005000000000008000500000000000800060000000000080006000000000008000500000000000000060000000000080006000000000008000500000000003400078008000600000000000800050000000a00080005000000000008000500000000000800060000000000080005000000000014000780080005000000000008000600000000002400078000000600000000000800050000000000faff0600000000000000060000000000340007800800050000000000080005000000000008000500000000000800050000000000080006000000000008000600000000001800048014000b80080009000000000008000a0000"], 0x1a8}}, 0x0) 6.819427533s ago: executing program 0 (id=508): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f00000001c0)) close(r0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 6.435744332s ago: executing program 0 (id=511): ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0x5450, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000010040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="a2", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) rt_sigreturn() 6.243585547s ago: executing program 1 (id=513): mq_open(0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)='cgroupncontrollers\x00', 0x40, 0x23, 0x0) 6.104233848s ago: executing program 0 (id=514): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x8, 0x6}, {0x0, 0x7ff, 0x5, 0x1b8e400000000000}], ['\x00', '\x00']}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}}, 0x0, 0x32, 0x0, 0x8}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8b040400000000002800128008000100677470001c000280080001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x64, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) 6.071053324s ago: executing program 1 (id=515): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$poke(0x1, r0, &(0x7f0000000080), 0x20000000) 5.927571338s ago: executing program 0 (id=516): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000580)) 5.907463494s ago: executing program 4 (id=517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7", 0xc) r1 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) 5.811818184s ago: executing program 3 (id=518): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sigaltstack(&(0x7f0000001340)={0x0}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) 5.687237337s ago: executing program 4 (id=519): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) poll(0x0, 0x0, 0x64) rt_sigreturn() mlockall(0x1) 5.334043198s ago: executing program 4 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 4.973186364s ago: executing program 2 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 4.585449768s ago: executing program 3 (id=523): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}, 0x0, 0x3, 0x4, 0x7fffffff}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xfffffff7, 0x49, 0x200, 0x266, 0x4}, &(0x7f0000000300)=0x98) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480), 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x6) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(0xffffffffffffffff, 0x801) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.459166058s ago: executing program 1 (id=524): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.240593729s ago: executing program 4 (id=525): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401c1b3e1b0000000000010902240001000000000904000001030000000921000000012205000905810310"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x2dec, &(0x7f0000001600)={0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001200)=""/51, 0x33}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) 3.738618724s ago: executing program 3 (id=526): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xac42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) 3.446438002s ago: executing program 3 (id=527): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)={0x0, 0x0, 0x1, "c2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x0, 0x6, "94b1612049e0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.204475916s ago: executing program 2 (id=528): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) 3.051216218s ago: executing program 1 (id=529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7", 0xc) r1 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) 2.805406193s ago: executing program 1 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2.69369808s ago: executing program 2 (id=531): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfffffffc, 0x0, 0x0, 0xfffffffb, 0x0, "ff3f90c98fe587b88a00be000000000400"}) r1 = gettid() syz_emit_ethernet(0x4e, &(0x7f0000000700)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c2a095", 0x18, 0x3a, 0x0, @private0, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @loopback}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) 2.418072733s ago: executing program 4 (id=532): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08007b0c"], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) r5 = io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x876b, 0x800, 0x3, 0x58}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write$binfmt_misc(r7, 0x0, 0xfffffecc) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000480)={0xf62d, 0x0, &(0x7f0000000440)=[r1, r4, r8, r1]}, 0x4) fstat(r6, &(0x7f0000000600)) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = fcntl$dupfd(r9, 0x0, r10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8d}]}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c030000000601026a73092d00100000000000000500010007000000"], 0x1c}}, 0x0) getsockopt$MISDN_TIME_STAMP(r11, 0x0, 0x1, 0x0, &(0x7f0000000400)) write$sysctl(r11, &(0x7f00000004c0)='5\x00', 0x2) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448c1}, 0x400c0c4) 2.069462653s ago: executing program 4 (id=533): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100009d8358101d0620c061c90102030109021b00010000000009040000010546"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0x48, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x8, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x0, 0xa, 0x68, 0x3, 0x10, 0x7}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44a}}, {0x66, &(0x7f00000005c0)=@string={0x66, 0x3, "8d7a474040afd7d119e5754c032a4f05d70944cb861f03f7aa0f8f4357902b3fd5cda66b7799bfa75b36825440b26f1a77724e95eeb90fe40c4816af7384a2a41c4d5cf36130634c0f64127a0cba26f6c3940cf8f6b9d3dc7ab2f1fbaa233cc029639c90"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x6a, &(0x7f0000000680)=@string={0x6a, 0x3, "fba3bcc91c691de0472c8acd248991057fa09847d2d9bb86791d9a71d0ca6f3ec73efa93f20bf52d5c162e83ac4567bdf2da12fcf9dfacbdeb31f4719aaa5553a42070880bc67d74c71d30f2d1b45c90fcd3887981743a5b395d1c7634c9ea5721d3f2c9e0e3f215"}}]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x10d, 0xe5, &(0x7f0000002400)={'nat\x00'}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xd, 0x22, {0x22, 0x0, "909e1b86c9add302c7d006e5b58cc4c0d8c963bc7f3d270b3066db9e1dd52d14"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x9b, "fcf9a7d9cd20abceeca87ef8140c9720ac1ab414705938a285c847be08f71a6389cc9f6a527bc7791ffe5d69213fff5c7220e5c73842fed78f31d7f95fae402c2d30b4b6472bbf2c2f3695330d6a6afbbb400f25dc5a2508ad3df5b7b6661f40e4217bd99cd6687a6da32b6b49c6f33720a73cc157c11e07969b3d74c5bf81a6a7bfa47b981d5e6a74ffb2f48ed25063b84587074b7e1304354925"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xa7}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x2, 0x4, 0xfff, 0xb, 0x0, 0x0, 0x2, 0x7fff, 0x8001, 0x0, 0x3, 0x98df}}, 0x0, &(0x7f0000000340)={0x20, 0x83, 0x2}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xb}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) 1.847091828s ago: executing program 0 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) 1.489403672s ago: executing program 2 (id=535): socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup2(r3, r3) socket(0x10, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0xc00) accept$alg(0xffffffffffffffff, 0x0, 0x0) 941.13712ms ago: executing program 3 (id=536): r0 = memfd_create(&(0x7f0000006e80)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\x950\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x01\x00\x00\x00\xa3\xb9\xff\xff\xebw\xdeM\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x00\x00v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\x00\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\x18\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x9d\x8e\x0f\x14Uc\x15n\xd5!}\x00+\xa5\xdcxUY3\x9b\xe7\xa1\x95\xc8\xf4G\xc3G\xf0\xed+\xa4\xec~7\xf3\"\x9c\x9e\xfaN\xc5\x8cM\xa7D\xb5\xe5\xfb\xda\xbc\x8a\xdc\x8adI\r\fO\xa7-\x98\xa3FM\xc2', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cmdline\x00') sendfile(r0, r1, 0x0, 0x9d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x11, r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000524000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000346000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 326.157563ms ago: executing program 2 (id=537): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xac42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) 295.154185ms ago: executing program 3 (id=538): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r1]}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe0000000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) unshare(0x22020600) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000040)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x35) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000640)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18030000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0d0700c3001000000000496b31143860dbd100", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) timer_create(0x0, 0x0, 0x0) 39.155506ms ago: executing program 2 (id=539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$TCXONC(r1, 0x540a, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) 0s ago: executing program 1 (id=540): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000900)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b3", 0xe) r1 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 63.551294][ T5081] cgroup: Unknown subsys name 'net' [ 63.723044][ T5081] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.390132][ T5081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.203382][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.209457][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.212952][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.219709][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.227740][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.232495][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.247807][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.248095][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.256399][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.269744][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.269767][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.277958][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.284938][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.298392][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.301628][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.313265][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.320137][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.326083][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.329365][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.334890][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.348597][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.354009][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.363589][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.364948][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.378866][ T5112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.391256][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.402205][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.418095][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.427293][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.435758][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.073393][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 67.144355][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 67.192925][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 67.262403][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 67.373417][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 67.416957][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.424970][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.432608][ T5097] bridge_slave_0: entered allmulticast mode [ 67.439799][ T5097] bridge_slave_0: entered promiscuous mode [ 67.454270][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.461406][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.468904][ T5094] bridge_slave_0: entered allmulticast mode [ 67.476549][ T5094] bridge_slave_0: entered promiscuous mode [ 67.509211][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.516724][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.524728][ T5097] bridge_slave_1: entered allmulticast mode [ 67.531983][ T5097] bridge_slave_1: entered promiscuous mode [ 67.545014][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.555495][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.562949][ T5094] bridge_slave_1: entered allmulticast mode [ 67.569977][ T5094] bridge_slave_1: entered promiscuous mode [ 67.708373][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.727729][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.735353][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.744431][ T5095] bridge_slave_0: entered allmulticast mode [ 67.751524][ T5095] bridge_slave_0: entered promiscuous mode [ 67.762580][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.774947][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.784736][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.792116][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.799338][ T5093] bridge_slave_0: entered allmulticast mode [ 67.807291][ T5093] bridge_slave_0: entered promiscuous mode [ 67.817542][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.854342][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.861571][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.869475][ T5095] bridge_slave_1: entered allmulticast mode [ 67.877144][ T5095] bridge_slave_1: entered promiscuous mode [ 67.908840][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.916381][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.923954][ T5093] bridge_slave_1: entered allmulticast mode [ 67.931012][ T5093] bridge_slave_1: entered promiscuous mode [ 67.969690][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.977275][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.985418][ T5092] bridge_slave_0: entered allmulticast mode [ 67.992870][ T5092] bridge_slave_0: entered promiscuous mode [ 68.018526][ T5097] team0: Port device team_slave_0 added [ 68.047805][ T5094] team0: Port device team_slave_0 added [ 68.054327][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.061783][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.069404][ T5092] bridge_slave_1: entered allmulticast mode [ 68.078264][ T5092] bridge_slave_1: entered promiscuous mode [ 68.099177][ T5097] team0: Port device team_slave_1 added [ 68.135852][ T5094] team0: Port device team_slave_1 added [ 68.180017][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.210049][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.223435][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.246241][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.266888][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.279038][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.299696][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.307121][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.333445][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.359122][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.366620][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.392688][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.403576][ T5112] Bluetooth: hci1: command tx timeout [ 68.403596][ T4491] Bluetooth: hci2: command tx timeout [ 68.419089][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.426133][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.452380][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.482483][ T4491] Bluetooth: hci0: command tx timeout [ 68.482506][ T5112] Bluetooth: hci3: command tx timeout [ 68.482812][ T5112] Bluetooth: hci4: command tx timeout [ 68.501336][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.508752][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.535689][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.565955][ T5093] team0: Port device team_slave_0 added [ 68.593720][ T5092] team0: Port device team_slave_0 added [ 68.607016][ T5095] team0: Port device team_slave_0 added [ 68.623253][ T5093] team0: Port device team_slave_1 added [ 68.633842][ T5092] team0: Port device team_slave_1 added [ 68.646377][ T5095] team0: Port device team_slave_1 added [ 68.753218][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.760227][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.786713][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.825834][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.835974][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.862583][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.875291][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.882885][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.909755][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.928073][ T5094] hsr_slave_0: entered promiscuous mode [ 68.934902][ T5094] hsr_slave_1: entered promiscuous mode [ 68.944639][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.951638][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.977985][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.993930][ T5097] hsr_slave_0: entered promiscuous mode [ 69.000546][ T5097] hsr_slave_1: entered promiscuous mode [ 69.006923][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.015325][ T5097] Cannot create hsr debugfs directory [ 69.021951][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.028917][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.055828][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.067923][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.075167][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.101993][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.278635][ T5093] hsr_slave_0: entered promiscuous mode [ 69.290353][ T5093] hsr_slave_1: entered promiscuous mode [ 69.297453][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.306674][ T5093] Cannot create hsr debugfs directory [ 69.359118][ T5092] hsr_slave_0: entered promiscuous mode [ 69.367578][ T5092] hsr_slave_1: entered promiscuous mode [ 69.374627][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.382707][ T5092] Cannot create hsr debugfs directory [ 69.393989][ T5095] hsr_slave_0: entered promiscuous mode [ 69.400549][ T5095] hsr_slave_1: entered promiscuous mode [ 69.407057][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.415032][ T5095] Cannot create hsr debugfs directory [ 69.969749][ T5094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.004767][ T5094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.024919][ T5097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.041481][ T5094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.054612][ T5094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.068560][ T5097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.079198][ T5097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.100326][ T5097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.192235][ T5095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.209672][ T5095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.231551][ T5095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.261538][ T5095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.341386][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.351651][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.388769][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.413445][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.482517][ T5112] Bluetooth: hci1: command tx timeout [ 70.482561][ T5105] Bluetooth: hci2: command tx timeout [ 70.530578][ T5093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.545774][ T5093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.562334][ T5105] Bluetooth: hci4: command tx timeout [ 70.562402][ T5112] Bluetooth: hci0: command tx timeout [ 70.567766][ T5105] Bluetooth: hci3: command tx timeout [ 70.589948][ T5093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.600491][ T5093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.747381][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.778493][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.841670][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.885990][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.893417][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.916253][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.936749][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.958333][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.965662][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.005968][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.013200][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.052984][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.060192][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.115532][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.138185][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.186870][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.194102][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.243497][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.250688][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.293311][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.340566][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.348365][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.406492][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.441577][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.449417][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.561280][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.609666][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.617000][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.689821][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.697111][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.847039][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.856617][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.899002][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.927526][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.037807][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.264756][ T5094] veth0_vlan: entered promiscuous mode [ 72.286825][ T5097] veth0_vlan: entered promiscuous mode [ 72.344250][ T5097] veth1_vlan: entered promiscuous mode [ 72.368329][ T5094] veth1_vlan: entered promiscuous mode [ 72.485976][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.509823][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.550873][ T5094] veth0_macvtap: entered promiscuous mode [ 72.562152][ T4491] Bluetooth: hci2: command tx timeout [ 72.567666][ T5105] Bluetooth: hci1: command tx timeout [ 72.591073][ T5094] veth1_macvtap: entered promiscuous mode [ 72.598684][ T5097] veth0_macvtap: entered promiscuous mode [ 72.643139][ T5105] Bluetooth: hci0: command tx timeout [ 72.645107][ T4491] Bluetooth: hci4: command tx timeout [ 72.648774][ T5105] Bluetooth: hci3: command tx timeout [ 72.669998][ T5097] veth1_macvtap: entered promiscuous mode [ 72.741440][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.789293][ T5095] veth0_vlan: entered promiscuous mode [ 72.797823][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.808650][ T5093] veth0_vlan: entered promiscuous mode [ 72.821304][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.832619][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.844804][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.852614][ T5092] veth0_vlan: entered promiscuous mode [ 72.878410][ T5094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.889566][ T5094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.898624][ T5094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907661][ T5094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.923306][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.934034][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.946480][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.974828][ T5095] veth1_vlan: entered promiscuous mode [ 72.989237][ T5097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999189][ T5097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.008491][ T5097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.017463][ T5097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.035548][ T5092] veth1_vlan: entered promiscuous mode [ 73.049995][ T5093] veth1_vlan: entered promiscuous mode [ 73.271049][ T5095] veth0_macvtap: entered promiscuous mode [ 73.300299][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.321125][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.331078][ T5092] veth0_macvtap: entered promiscuous mode [ 73.363796][ T5093] veth0_macvtap: entered promiscuous mode [ 73.376478][ T5095] veth1_macvtap: entered promiscuous mode [ 73.398912][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.410000][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.420638][ T5092] veth1_macvtap: entered promiscuous mode [ 73.437004][ T5093] veth1_macvtap: entered promiscuous mode [ 73.452437][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.461604][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.543092][ T2794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.551483][ T2794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.575751][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.586317][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.596490][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.608351][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.620159][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.634835][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.659012][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.687518][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.703960][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.726165][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.751978][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.773913][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.794826][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.806535][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.816615][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.827209][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.839324][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.872616][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.904508][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.915244][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.928600][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.938998][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.949833][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.961330][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.976531][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.986643][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.995972][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.006131][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035618][ T5093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.070542][ T5093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.092098][ T5093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100881][ T5093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.144235][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.174273][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.192096][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.203237][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.213787][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.224378][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.234861][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.248182][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.269884][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.336045][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.353786][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.365190][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.376233][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.386219][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.396861][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.410979][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.421726][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.450507][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.530357][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.558218][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.571210][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.581710][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645644][ T5105] Bluetooth: hci2: command tx timeout [ 74.647457][ T5112] Bluetooth: hci1: command tx timeout [ 74.722105][ T5112] Bluetooth: hci4: command tx timeout [ 74.722429][ T4491] Bluetooth: hci0: command tx timeout [ 74.734405][ T5105] Bluetooth: hci3: command tx timeout [ 75.006336][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.029603][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.131733][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.146204][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.244080][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.259259][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.363751][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.459932][ T2794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.480361][ T2794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.527052][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.571319][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.621040][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.644685][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.664592][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.679737][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.688715][ T9] usb 4-1: SerialNumber: syz [ 75.708636][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.719754][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.964778][ T9] usb 4-1: 0:2 : does not exist [ 75.970042][ T9] usb 4-1: unit 5 not found! [ 76.132546][ T9] usb 4-1: USB disconnect, device number 2 [ 76.249583][ T5246] netlink: 'syz.2.26': attribute type 11 has an invalid length. [ 76.280296][ T5246] netlink: 140924 bytes leftover after parsing attributes in process `syz.2.26'. [ 76.482795][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.562646][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 76.614689][ T5179] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.852439][ T5179] usb 2-1: Using ep0 maxpacket: 8 [ 76.877756][ T5179] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 76.908164][ T5179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.946299][ T5179] usb 2-1: config 0 descriptor?? [ 77.635721][ T5249] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 77.739590][ T5249] team0: Device veth1_macvtap failed to register rx_handler [ 78.790478][ T29] audit: type=1326 audit(1719539017.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c10f75b29 code=0x7ffc0000 [ 78.827003][ T29] audit: type=1326 audit(1719539017.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c10f75b29 code=0x7ffc0000 [ 78.877404][ T29] audit: type=1326 audit(1719539017.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1c10f75b29 code=0x7ffc0000 [ 78.920612][ T29] audit: type=1326 audit(1719539017.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c10f75b29 code=0x7ffc0000 [ 78.946511][ T29] audit: type=1326 audit(1719539017.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c10f75b29 code=0x7ffc0000 [ 78.972750][ T5147] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.172827][ T5147] usb 4-1: Using ep0 maxpacket: 16 [ 79.208884][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 79.242944][ T5147] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 79.261906][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.282013][ T5147] usb 4-1: config 0 descriptor?? [ 79.538512][ T5311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 80.069215][ T5179] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 80.100765][ T5179] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 80.112966][ T5330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.151645][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.168705][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.185816][ T5179] asix 2-1:0.0: probe with driver asix failed with error -71 [ 80.205254][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.234839][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.273267][ T5179] usb 2-1: USB disconnect, device number 2 [ 80.359174][ T5147] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 80.395202][ T5147] hid-generic 0003:0158:0100.0001: unexpected long global item [ 80.417311][ T5147] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 80.493840][ T5334] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 80.516541][ T5150] usb 4-1: USB disconnect, device number 3 [ 81.866578][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 82.090971][ T29] audit: type=1326 audit(1719539021.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5354 comm="syz.3.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec1ab75b29 code=0x0 [ 82.475747][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 82.512638][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 82.672410][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 82.721811][ T5377] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.815596][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 82.848419][ T5377] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.022508][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 83.087248][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 83.128504][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 83.159350][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 83.201127][ T5377] ip6gretap0 speed is unknown, defaulting to 1000 [ 83.412381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.466015][ T5395] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 83.524509][ T5395] netlink: 244 bytes leftover after parsing attributes in process `syz.0.80'. [ 83.783506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 84.164010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 84.402839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.508845][ T5411] ALSA: seq fatal error: cannot create timer (-22) [ 84.580691][ T5417] capability: warning: `syz.0.86' uses 32-bit capabilities (legacy support in use) [ 84.603348][ T5417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.202383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.523886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.541769][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 85.684597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 86.052906][ T5428] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 86.094797][ T5428] team0: Device ipvlan1 failed to register rx_handler [ 87.012189][ T5150] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.218604][ T25] cfg80211: failed to load regulatory.db [ 87.240296][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 87.261932][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 87.299659][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.358871][ T5150] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.390816][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.445406][ T5150] usb 3-1: config 0 descriptor?? [ 87.452604][ T5444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.839495][ T5479] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 87.889645][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 87.911988][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 87.914464][ T5479] team0: Device ipvlan1 failed to register rx_handler [ 87.940026][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 87.994035][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.042024][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.049536][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.081022][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.115067][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.135631][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.148666][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.167213][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.201458][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.216913][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.240483][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.257105][ T5150] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 88.278569][ T5150] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 88.356258][ T5150] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 88.412616][ T5150] usb 3-1: USB disconnect, device number 2 [ 88.902003][ T5152] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.001979][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.112017][ T5152] usb 4-1: Using ep0 maxpacket: 16 [ 89.121575][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 89.152817][ T5152] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 89.162718][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.183805][ T5152] usb 4-1: config 0 descriptor?? [ 89.244135][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.267613][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.292002][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.326826][ T9] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 89.360960][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.403360][ T5499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 89.423584][ T9] usb 2-1: config 0 descriptor?? [ 89.469765][ T5515] ALSA: seq fatal error: cannot create timer (-22) [ 89.942079][ T5522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.259217][ C0] hrtimer: interrupt took 51290 ns [ 90.577420][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.647081][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.672940][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.694440][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.712230][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.745354][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.782172][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.800459][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.828729][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.853972][ T5499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.863679][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.882876][ T5499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.887801][ T9] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 90.929497][ T9] samsung 0003:0419:0001.0003: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 90.943694][ T5499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.983242][ T9] usb 2-1: USB disconnect, device number 3 [ 91.011469][ T5499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.069060][ T5152] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 91.082204][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.091960][ T5152] hid-generic 0003:0158:0100.0004: unexpected long global item [ 91.126470][ T5152] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 91.240354][ T928] usb 4-1: USB disconnect, device number 4 [ 91.293814][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 91.301347][ T25] usb 5-1: config 0 has no interfaces? [ 91.318541][ T25] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.331590][ T25] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.353408][ T25] usb 5-1: Product: syz [ 91.357646][ T25] usb 5-1: Manufacturer: syz [ 91.381175][ T25] usb 5-1: SerialNumber: syz [ 91.398093][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 91.413049][ T25] usb 5-1: config 0 descriptor?? [ 91.447517][ T5539] ip6gretap0 speed is unknown, defaulting to 1000 [ 91.624147][ T5525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.986346][ T928] usb 5-1: USB disconnect, device number 2 [ 92.275422][ T5563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 92.316225][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 92.544120][ T5556] infiniband syz1: set down [ 92.551145][ T5556] infiniband syz1: added ipvlan1 [ 92.760005][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 92.793131][ T5576] ip6gretap0 speed is unknown, defaulting to 1000 [ 92.806443][ T5556] RDS/IB: syz1: added [ 92.821419][ T5556] smc: adding ib device syz1 with port count 1 [ 92.853428][ T5556] smc: ib device syz1 port 1 has pnetid [ 93.011990][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.172180][ T25] usb 1-1: device descriptor read/64, error -71 [ 93.380182][ T5590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 93.444187][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.544220][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 93.612348][ T25] usb 1-1: device descriptor read/64, error -71 [ 93.720334][ T5149] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.758928][ T25] usb usb1-port1: attempt power cycle [ 93.948097][ T5149] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 93.972519][ T5149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.001202][ T5149] usb 5-1: Product: syz [ 94.020489][ T5149] usb 5-1: Manufacturer: syz [ 94.026493][ T5149] usb 5-1: SerialNumber: syz [ 94.062636][ T5149] usb 5-1: config 0 descriptor?? [ 94.192120][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.259141][ T25] usb 1-1: device descriptor read/8, error -71 [ 94.274870][ T5149] usb 5-1: USB disconnect, device number 3 [ 94.304888][ T29] audit: type=1800 audit(1719539033.260:8): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.158" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 94.554048][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.594176][ T25] usb 1-1: device descriptor read/8, error -71 [ 94.733672][ T25] usb usb1-port1: unable to enumerate USB device [ 94.767083][ T25] IPVS: starting estimator thread 0... [ 94.872171][ T5613] IPVS: using max 17 ests per chain, 40800 per kthread [ 95.069870][ T5621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.221470][ T29] audit: type=1800 audit(1719539034.170:9): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.162" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 95.262225][ T5152] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.385919][ T5625] batadv1: entered allmulticast mode [ 95.476291][ T5152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.503576][ T5152] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.521361][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.535463][ T5105] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 95.543641][ T5152] usb 5-1: Product: syz [ 95.544652][ T5105] Bluetooth: hci0: Injecting HCI hardware error event [ 95.548166][ T5152] usb 5-1: Manufacturer: syz [ 95.556741][ T5105] Bluetooth: hci0: hardware error 0x00 [ 95.614525][ T5152] usb 5-1: SerialNumber: syz [ 95.638643][ T5152] hub 5-1:1.0: bad descriptor, ignoring hub [ 95.655404][ T5152] hub 5-1:1.0: probe with driver hub failed with error -5 [ 95.996852][ T29] audit: type=1800 audit(1719539034.950:10): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 96.343452][ T5649] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 96.962825][ T4491] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 96.972809][ T4491] Bluetooth: hci2: Injecting HCI hardware error event [ 96.981704][ T4491] Bluetooth: hci2: hardware error 0x00 [ 96.991292][ T5152] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 97.041057][ T5152] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 97.149372][ T5152] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 97.173408][ T5150] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.289592][ T5152] usb 5-1: USB disconnect, device number 4 [ 97.324067][ T5152] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 97.425589][ T5150] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.484748][ T5150] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 97.496514][ T5099] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.552507][ T5150] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 97.596712][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.641635][ T5150] usb 4-1: Product: syz [ 97.657622][ T5150] usb 4-1: Manufacturer: syz [ 97.676988][ T5150] usb 4-1: SerialNumber: syz [ 97.693438][ T5099] usb 1-1: device descriptor read/64, error -71 [ 97.722500][ T5150] usb 4-1: config 0 descriptor?? [ 97.854568][ T5105] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 97.957917][ T5660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 97.988460][ T5099] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.192327][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.492155][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 98.496490][ T29] audit: type=1800 audit(1719539037.450:11): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.181" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 98.505013][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 98.530218][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 98.534309][ T5099] usb 1-1: device descriptor read/64, error -71 [ 98.540435][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.558738][ T25] usb 3-1: config 0 descriptor?? [ 98.688804][ T5099] usb usb1-port1: attempt power cycle [ 98.799549][ T5653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 98.970236][ T29] audit: type=1800 audit(1719539037.920:12): pid=5683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 99.042947][ T4491] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 99.122216][ T5099] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.154383][ T5099] usb 1-1: device descriptor read/8, error -71 [ 99.180603][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 99.192024][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.223979][ T25] usb 3-1: USB disconnect, device number 3 [ 99.412284][ T5148] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.432035][ T5099] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 99.463496][ T5099] usb 1-1: device descriptor read/8, error -71 [ 99.551819][ T25] usb 4-1: USB disconnect, device number 5 [ 99.583101][ T5099] usb usb1-port1: unable to enumerate USB device [ 99.649572][ T5148] usb 5-1: Using ep0 maxpacket: 16 [ 99.668278][ T5148] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.700521][ T5148] usb 5-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.751052][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.769229][ T5148] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 99.784381][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.800945][ T5148] usb 5-1: Product: syz [ 99.808095][ T5148] usb 5-1: Manufacturer: syz [ 99.813564][ T5148] usb 5-1: SerialNumber: syz [ 99.880894][ T5148] usb 5-1: config 0 descriptor?? [ 99.889730][ T29] audit: type=1800 audit(1719539038.840:13): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.191" name="file0" dev="sda1" ino=1968 res=0 errno=0 [ 99.902665][ T5148] sierra 5-1:0.0: Sierra USB modem converter detected [ 99.910236][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.986270][ T5702] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.274806][ T5148] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 100.317624][ T5148] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 100.374231][ T5148] usb 5-1: USB disconnect, device number 5 [ 100.432825][ T5148] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 100.500847][ T5148] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 100.525090][ T5148] sierra 5-1:0.0: device disconnected [ 100.539817][ T5722] syzkaller1: entered promiscuous mode [ 100.550766][ T5722] syzkaller1: entered allmulticast mode [ 101.077117][ T5148] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 101.223981][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.304905][ T29] audit: type=1800 audit(1719539040.260:14): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.206" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 101.325166][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.343375][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 10 [ 101.381894][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 101.403959][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.420128][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.427982][ T5148] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.438744][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.449031][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 101.456996][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 101.481001][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 101.492477][ T5148] usb 4-1: config 0 descriptor?? [ 101.518095][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.550684][ T25] usb 5-1: config 0 descriptor?? [ 101.602296][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 101.622489][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.637916][ T47] usb 2-1: config 0 has no interface number 0 [ 101.648045][ T47] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 64 [ 101.670141][ T47] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.681464][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.706814][ T47] usb 2-1: config 0 descriptor?? [ 101.727485][ T47] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 101.792139][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.201'. [ 101.907000][ T5751] siw: device registration error -23 [ 101.955377][ T5673] usb 2-1: USB disconnect, device number 4 [ 101.980870][ T5148] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 102.031594][ T5148] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 102.223169][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 102.237712][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.257320][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.272432][ T25] usb 5-1: USB disconnect, device number 6 [ 102.454114][ T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 102.472006][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.495817][ T47] usb 3-1: config 0 descriptor?? [ 102.529189][ T47] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 102.980649][ T29] audit: type=1800 audit(1719539041.930:15): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 103.678377][ T5782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 104.272296][ T47] usb 3-1: USB disconnect, device number 4 [ 104.352601][ T5151] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.362524][ T25] usb 4-1: reset full-speed USB device number 6 using dummy_hcd [ 104.513288][ T25] usb 4-1: device descriptor read/64, error -32 [ 104.573829][ T5151] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 104.609263][ T5151] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 104.627874][ T29] audit: type=1800 audit(1719539043.580:16): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 104.632101][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.678718][ T5151] usb 1-1: config 0 descriptor?? [ 104.812162][ T5150] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.004428][ T5150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.030800][ T5150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.062174][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.070270][ T5150] usb 5-1: Product: syz [ 105.082140][ T5150] usb 5-1: Manufacturer: syz [ 105.090808][ T5150] usb 5-1: SerialNumber: syz [ 105.104238][ T5150] hub 5-1:1.0: bad descriptor, ignoring hub [ 105.113071][ T5150] hub 5-1:1.0: probe with driver hub failed with error -5 [ 105.131454][ T5151] [drm:udl_init] *ERROR* Selecting channel failed [ 105.158005][ T5151] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 105.166170][ T5151] [drm] Initialized udl on minor 2 [ 105.174826][ T5151] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.190120][ T5151] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 105.200735][ T5099] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 105.214733][ T5151] usb 1-1: USB disconnect, device number 10 [ 105.224239][ T5099] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 105.583229][ T5148] usb 4-1: USB disconnect, device number 6 [ 105.788179][ T5148] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.016450][ T5148] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 106.042388][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.077950][ T29] audit: type=1800 audit(1719539045.030:17): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.241" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 106.102318][ T5148] usb 4-1: config 0 descriptor?? [ 106.133818][ T5148] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 106.180486][ T5150] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 106.208694][ T5150] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 106.262838][ T5150] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 106.595738][ T5673] usb 5-1: USB disconnect, device number 7 [ 106.624240][ T5673] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 106.972041][ T5150] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.146203][ T5148] usb 4-1: USB disconnect, device number 7 [ 107.174673][ T5150] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.199032][ T5150] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.254342][ T5150] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.293471][ T5150] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.329154][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.395246][ T29] audit: type=1800 audit(1719539046.350:18): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.254" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 107.462862][ T5150] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 107.545604][ T5879] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.646261][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.717826][ T5673] usb 2-1: USB disconnect, device number 5 [ 107.930288][ T5894] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.261'. [ 107.995494][ T5894] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 108.774323][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.002766][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 109.017850][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 109.039659][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 109.058980][ T5941] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.274'. [ 109.071922][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.093418][ T25] usb 2-1: config 0 descriptor?? [ 109.102409][ T5150] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.121003][ T5941] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 109.306647][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 109.324053][ T5150] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 109.343846][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.378217][ T5150] usb 3-1: config 0 descriptor?? [ 109.642073][ T5099] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 109.745079][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.763006][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.812190][ T5150] usb 3-1: Cannot read MAC address [ 109.817547][ T5150] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 109.846816][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.853995][ T5099] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 109.883965][ T5099] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.892422][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.918577][ T5099] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.952654][ T5099] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.983627][ T25] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 109.988862][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.012904][ T25] hid-generic 0003:0158:0100.0006: unexpected long global item [ 110.031671][ T25] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 110.138995][ T5099] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 110.195486][ T25] usb 2-1: USB disconnect, device number 6 [ 110.252824][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.312345][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.346663][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.360734][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.371708][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.380192][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.400834][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.405230][ T5148] usb 1-1: USB disconnect, device number 11 [ 110.467697][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.557869][ T5962] ip6gretap0 speed is unknown, defaulting to 1000 [ 110.586720][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.687807][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.825248][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.837533][ T5974] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.287'. [ 110.863311][ T5974] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 110.876533][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.4.287 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 110.886691][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 110.896806][ T5974] Call Trace: [ 110.900132][ T5974] [ 110.903100][ T5974] dump_stack_lvl+0x241/0x360 [ 110.907833][ T5974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.913071][ T5974] ? __pfx__printk+0x10/0x10 [ 110.917709][ T5974] ? sysfs_warn_dup+0x51/0xa0 [ 110.922448][ T5974] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 110.928081][ T5974] sysfs_warn_dup+0x8e/0xa0 [ 110.932647][ T5974] sysfs_do_create_link_sd+0xbe/0x110 [ 110.938077][ T5974] device_add_class_symlinks+0x1c5/0x250 [ 110.943770][ T5974] device_add+0x553/0xbf0 [ 110.948154][ T5974] ? rtnl_lock+0xe7/0x130 [ 110.952537][ T5974] wiphy_register+0x1d3f/0x2b30 [ 110.957435][ T5974] ? __pfx_wiphy_register+0x10/0x10 [ 110.962666][ T5974] ? minstrel_ht_alloc+0x72b/0x860 [ 110.967839][ T5974] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 110.973970][ T5974] ieee80211_register_hw+0x3098/0x3d80 [ 110.979554][ T5974] ? ieee80211_register_hw+0x1191/0x3d80 [ 110.985231][ T5974] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 110.991107][ T5974] ? __asan_memset+0x23/0x50 [ 110.995741][ T5974] ? __hrtimer_init+0x170/0x250 [ 111.000645][ T5974] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 111.006450][ T5974] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 111.012578][ T5974] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 111.019143][ T5974] ? kstrndup+0x5c/0xb0 [ 111.023361][ T5974] ? __asan_memcpy+0x40/0x70 [ 111.028010][ T5974] hwsim_new_radio_nl+0xe4c/0x21d0 [ 111.033256][ T5974] ? __pfx___nla_validate_parse+0x10/0x10 [ 111.039051][ T5974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 111.044704][ T5974] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 111.051140][ T5974] genl_rcv_msg+0xb14/0xec0 [ 111.055713][ T5974] ? mark_lock+0x9a/0x360 [ 111.060115][ T5974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.065231][ T5974] ? __pfx_lock_acquire+0x10/0x10 [ 111.070317][ T5974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 111.076013][ T5974] ? __pfx___might_resched+0x10/0x10 [ 111.081351][ T5974] netlink_rcv_skb+0x1e3/0x430 [ 111.086175][ T5974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.091268][ T5974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.096624][ T5974] ? __netlink_deliver_tap+0x77e/0x7c0 [ 111.102251][ T5974] genl_rcv+0x28/0x40 [ 111.106290][ T5974] netlink_unicast+0x7f0/0x990 [ 111.111107][ T5974] ? __pfx_netlink_unicast+0x10/0x10 [ 111.116422][ T5974] ? __virt_addr_valid+0x183/0x530 [ 111.121631][ T5974] ? __check_object_size+0x49c/0x900 [ 111.126959][ T5974] ? bpf_lsm_netlink_send+0x9/0x10 [ 111.132137][ T5974] netlink_sendmsg+0x8e4/0xcb0 [ 111.136953][ T5974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.142271][ T5974] ? __import_iovec+0x536/0x820 [ 111.147177][ T5974] ? aa_sock_msg_perm+0x91/0x160 [ 111.152148][ T5974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 111.152173][ T5151] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 111.157460][ T5974] ? security_socket_sendmsg+0x87/0xb0 [ 111.170493][ T5974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.175828][ T5974] __sock_sendmsg+0x221/0x270 [ 111.180545][ T5974] ____sys_sendmsg+0x525/0x7d0 [ 111.185373][ T5974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.190739][ T5974] __sys_sendmsg+0x2b0/0x3a0 [ 111.195401][ T5974] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.200588][ T5974] ? __sys_bpf+0x481/0x810 [ 111.205105][ T5974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.211487][ T5974] ? do_syscall_64+0x100/0x230 [ 111.216285][ T5974] ? do_syscall_64+0xb6/0x230 [ 111.220978][ T5974] do_syscall_64+0xf3/0x230 [ 111.225510][ T5974] ? clear_bhb_loop+0x35/0x90 [ 111.230237][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.236227][ T5974] RIP: 0033:0x7f8c9db75b29 [ 111.240658][ T5974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.260807][ T5974] RSP: 002b:00007f8c9e952048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.269357][ T5974] RAX: ffffffffffffffda RBX: 00007f8c9dd03fa0 RCX: 00007f8c9db75b29 [ 111.277403][ T5974] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 111.285573][ T5974] RBP: 00007f8c9dbf6756 R08: 0000000000000000 R09: 0000000000000000 [ 111.293576][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.301587][ T5974] R13: 000000000000000b R14: 00007f8c9dd03fa0 R15: 00007ffd32628a98 [ 111.309605][ T5974] [ 111.322095][ T5151] usb 2-1: device descriptor read/64, error -71 [ 111.370135][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.289'. [ 111.482365][ T5982] Zero length message leads to an empty skb [ 111.602060][ T5151] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.772511][ T5151] usb 2-1: device descriptor read/64, error -71 [ 111.836477][ T5099] usb 3-1: USB disconnect, device number 5 [ 111.915056][ T5151] usb usb2-port1: attempt power cycle [ 112.063354][ T5150] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.080370][ T35] bridge_slave_1: left allmulticast mode [ 112.088547][ T35] bridge_slave_1: left promiscuous mode [ 112.096576][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.120170][ T35] bridge_slave_0: left allmulticast mode [ 112.126190][ T35] bridge_slave_0: left promiscuous mode [ 112.133823][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.223852][ T928] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 112.259393][ T5150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.277722][ T5150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.288123][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.298281][ T5150] usb 5-1: Product: syz [ 112.302905][ T5150] usb 5-1: Manufacturer: syz [ 112.307554][ T5150] usb 5-1: SerialNumber: syz [ 112.352289][ T5151] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 112.393110][ T5151] usb 2-1: device descriptor read/8, error -71 [ 112.424483][ T928] usb 1-1: too many configurations: 255, using maximum allowed: 8 [ 112.447420][ T928] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 112.457431][ T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.485286][ T928] usb 1-1: config 0 descriptor?? [ 112.486676][ T5105] Bluetooth: hci3: command tx timeout [ 112.647170][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.664849][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.674326][ T5151] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 112.686173][ T35] bond0 (unregistering): Released all slaves [ 112.713167][ T5151] usb 2-1: device descriptor read/8, error -71 [ 112.727821][ T5962] chnl_net:caif_netlink_parms(): no params data found [ 112.839130][ T5151] usb usb2-port1: unable to enumerate USB device [ 112.898592][ T928] [drm:udl_init] *ERROR* Selecting channel failed [ 112.955840][ T928] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 112.980385][ T928] [drm] Initialized udl on minor 2 [ 113.003866][ T928] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.014605][ T928] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 113.033580][ T47] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.060672][ T928] usb 1-1: USB disconnect, device number 12 [ 113.067333][ T47] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 113.175397][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.192917][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.223056][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.248431][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.262626][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.281548][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.306389][ T5962] bridge_slave_0: entered allmulticast mode [ 113.316866][ T5962] bridge_slave_0: entered promiscuous mode [ 113.573962][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.581364][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.613044][ T5962] bridge_slave_1: entered allmulticast mode [ 113.614699][ T5150] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 113.620690][ T5962] bridge_slave_1: entered promiscuous mode [ 113.639549][ T5150] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 113.651310][ T6012] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.299'. [ 113.661744][ T5150] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 113.747205][ T5962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.769170][ T6012] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 113.780811][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz.0.299 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 113.790939][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 113.801035][ T6012] Call Trace: [ 113.804353][ T6012] [ 113.807316][ T6012] dump_stack_lvl+0x241/0x360 [ 113.812047][ T6012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.817306][ T6012] ? __pfx__printk+0x10/0x10 [ 113.821956][ T6012] ? sysfs_warn_dup+0x51/0xa0 [ 113.826695][ T6012] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 113.832301][ T6012] sysfs_warn_dup+0x8e/0xa0 [ 113.836953][ T6012] sysfs_do_create_link_sd+0xbe/0x110 [ 113.842412][ T6012] device_add_class_symlinks+0x1c5/0x250 [ 113.848116][ T6012] device_add+0x553/0xbf0 [ 113.852518][ T6012] ? rtnl_lock+0xe7/0x130 [ 113.856899][ T6012] wiphy_register+0x1d3f/0x2b30 [ 113.861824][ T6012] ? __pfx_wiphy_register+0x10/0x10 [ 113.867069][ T6012] ? minstrel_ht_alloc+0x72b/0x860 [ 113.872262][ T6012] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 113.878392][ T6012] ieee80211_register_hw+0x3098/0x3d80 [ 113.883932][ T6012] ? ieee80211_register_hw+0x1191/0x3d80 [ 113.889675][ T6012] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 113.895558][ T6012] ? __asan_memset+0x23/0x50 [ 113.900288][ T6012] ? __hrtimer_init+0x170/0x250 [ 113.905199][ T6012] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 113.911005][ T6012] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 113.917133][ T6012] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 113.923599][ T6012] ? kstrndup+0x5c/0xb0 [ 113.927809][ T6012] ? __asan_memcpy+0x40/0x70 [ 113.932471][ T6012] hwsim_new_radio_nl+0xe4c/0x21d0 [ 113.937664][ T6012] ? __pfx___nla_validate_parse+0x10/0x10 [ 113.943454][ T6012] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.949111][ T6012] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 113.955635][ T6012] genl_rcv_msg+0xb14/0xec0 [ 113.960199][ T6012] ? mark_lock+0x9a/0x360 [ 113.964609][ T6012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.970169][ T6012] ? __pfx_lock_acquire+0x10/0x10 [ 113.975257][ T6012] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 113.980949][ T6012] ? __pfx___might_resched+0x10/0x10 [ 113.986300][ T6012] netlink_rcv_skb+0x1e3/0x430 [ 113.991118][ T6012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.996211][ T6012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.001568][ T6012] ? __netlink_deliver_tap+0x77e/0x7c0 [ 114.007101][ T6012] genl_rcv+0x28/0x40 [ 114.011141][ T6012] netlink_unicast+0x7f0/0x990 [ 114.015973][ T6012] ? __pfx_netlink_unicast+0x10/0x10 [ 114.021306][ T6012] ? __virt_addr_valid+0x183/0x530 [ 114.026487][ T6012] ? __check_object_size+0x49c/0x900 [ 114.031827][ T6012] ? bpf_lsm_netlink_send+0x9/0x10 [ 114.036997][ T6012] netlink_sendmsg+0x8e4/0xcb0 [ 114.041830][ T6012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.047167][ T6012] ? __import_iovec+0x536/0x820 [ 114.052072][ T6012] ? aa_sock_msg_perm+0x91/0x160 [ 114.057075][ T6012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 114.062465][ T6012] ? security_socket_sendmsg+0x87/0xb0 [ 114.068043][ T6012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.073382][ T6012] __sock_sendmsg+0x221/0x270 [ 114.078107][ T6012] ____sys_sendmsg+0x525/0x7d0 [ 114.082932][ T6012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.088264][ T6012] __sys_sendmsg+0x2b0/0x3a0 [ 114.092907][ T6012] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.098057][ T6012] ? __sys_bpf+0x481/0x810 [ 114.102558][ T6012] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.108921][ T6012] ? do_syscall_64+0x100/0x230 [ 114.113729][ T6012] ? do_syscall_64+0xb6/0x230 [ 114.118450][ T6012] do_syscall_64+0xf3/0x230 [ 114.122967][ T6012] ? clear_bhb_loop+0x35/0x90 [ 114.127686][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.133618][ T6012] RIP: 0033:0x7f1c10f75b29 [ 114.138063][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.157687][ T6012] RSP: 002b:00007f1c11d77048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.166156][ T6012] RAX: ffffffffffffffda RBX: 00007f1c11103fa0 RCX: 00007f1c10f75b29 [ 114.174176][ T6012] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 114.182192][ T6012] RBP: 00007f1c10ff6756 R08: 0000000000000000 R09: 0000000000000000 [ 114.190197][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.198213][ T6012] R13: 000000000000000b R14: 00007f1c11103fa0 R15: 00007ffceaf5a548 [ 114.206269][ T6012] [ 114.244401][ T5962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.309767][ T35] hsr_slave_0: left promiscuous mode [ 114.319352][ T35] hsr_slave_1: left promiscuous mode [ 114.336400][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.344441][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.354668][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.363219][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.367965][ T5150] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 114.404425][ T35] veth1_macvtap: left promiscuous mode [ 114.410505][ T35] veth0_macvtap: left promiscuous mode [ 114.422833][ T35] veth1_vlan: left promiscuous mode [ 114.428530][ T35] veth0_vlan: left promiscuous mode [ 114.562169][ T5105] Bluetooth: hci3: command tx timeout [ 114.959677][ T35] team0 (unregistering): Port device team_slave_1 removed [ 115.033520][ T35] team0 (unregistering): Port device team_slave_0 removed [ 115.773054][ T6034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.411772][ T5150] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 116.502721][ T5151] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 116.511954][ T5962] team0: Port device team_slave_0 added [ 116.521004][ T5150] usb 5-1: USB disconnect, device number 8 [ 116.548514][ T5150] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 116.598233][ T5962] team0: Port device team_slave_1 added [ 116.642133][ T5105] Bluetooth: hci3: command tx timeout [ 116.727861][ T5151] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 116.749034][ T5151] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.789425][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.801983][ T5151] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.822072][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.862811][ T5151] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.880065][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.892037][ T5962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.921704][ T5151] usb 1-1: invalid MIDI out EP 0 [ 116.943702][ T5962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.950715][ T5962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.041926][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.102388][ T5151] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 117.222240][ T5150] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.238456][ T5148] usb 1-1: USB disconnect, device number 13 [ 117.260386][ T5145] udevd[5145]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.374847][ T5962] hsr_slave_0: entered promiscuous mode [ 117.411058][ T5962] hsr_slave_1: entered promiscuous mode [ 117.423870][ T5150] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.462021][ T5150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.493555][ T5150] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.539170][ T5150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.567854][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.592583][ T5150] usb 5-1: Product: syz [ 117.597328][ T5150] usb 5-1: Manufacturer: syz [ 117.612970][ T5150] usb 5-1: SerialNumber: syz [ 117.666614][ T5150] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 117.687849][ T5150] cdc_ncm 5-1:1.0: bind() failure [ 118.553161][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 118.656439][ T6083] loop2: detected capacity change from 0 to 8192 [ 118.723486][ T4491] Bluetooth: hci3: command tx timeout [ 119.118916][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 119.158177][ T6115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.325'. [ 119.241487][ T5962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.283375][ T5962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.328801][ T5962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.358793][ T5962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.722155][ T5151] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 119.762607][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 119.798393][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.808843][ T9] usb 5-1: USB disconnect, device number 9 [ 119.901251][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.924532][ T5151] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 119.942343][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.969125][ T5151] usb 2-1: config 0 descriptor?? [ 119.982710][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 119.996369][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 119.998632][ T5151] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 120.019029][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 120.031012][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.038247][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.047038][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.070341][ T25] usb 1-1: config 0 descriptor?? [ 120.083397][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.090656][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.320389][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 120.562252][ T4491] Bluetooth: hci1: command tx timeout [ 120.650666][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.666143][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.716206][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.742702][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.816761][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 120.834690][ T25] hid-generic 0003:0158:0100.0007: unexpected long global item [ 120.842048][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.853909][ T25] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 121.018869][ T5151] usb 2-1: USB disconnect, device number 11 [ 121.041679][ T25] usb 1-1: USB disconnect, device number 14 [ 121.066885][ T9] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 121.124324][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.147968][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.167870][ T9] usb 5-1: config 0 descriptor?? [ 121.265427][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.454946][ T5962] veth0_vlan: entered promiscuous mode [ 121.532598][ T5962] veth1_vlan: entered promiscuous mode [ 121.590897][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 121.636629][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 121.661710][ T9] [drm] Initialized udl on minor 2 [ 121.696232][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 121.729371][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 121.781024][ T5150] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 121.808440][ T9] usb 5-1: USB disconnect, device number 10 [ 121.820782][ T5150] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 122.133115][ T6171] netlink: 80 bytes leftover after parsing attributes in process `syz.0.335'. [ 122.252316][ T6159] blktrace: Concurrent blktraces are not allowed on sg0 [ 122.289402][ T5962] veth0_macvtap: entered promiscuous mode [ 122.328503][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 122.337958][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.336'. [ 122.389938][ T5962] veth1_macvtap: entered promiscuous mode [ 122.732994][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.792101][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.813470][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.832715][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.859961][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.890320][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.932334][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.951962][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.983885][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.023259][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.032544][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 123.054936][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 123.103964][ T9] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 123.141378][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.194611][ T9] usb 3-1: config 0 descriptor?? [ 123.250614][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.272896][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.340442][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.396919][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.422810][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 123.462028][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.524550][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.576657][ T5962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.587829][ T5962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.601495][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.796455][ T5962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.842953][ T5962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.861477][ T5962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.870839][ T5962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.895780][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.915361][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.952989][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 124.960999][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.017039][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.059009][ T9] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 125.084548][ T9] hid-generic 0003:0158:0100.0008: unexpected long global item [ 125.113622][ T9] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 125.189250][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.216536][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.243619][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.251782][ T8] usb 1-1: Product: syz [ 125.261706][ T9] usb 3-1: USB disconnect, device number 6 [ 125.524021][ T8] usb 1-1: Manufacturer: syz [ 125.528702][ T8] usb 1-1: SerialNumber: syz [ 125.538913][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 125.556291][ T8] hub 1-1:1.0: probe with driver hub failed with error -5 [ 125.628840][ T6233] netlink: 80 bytes leftover after parsing attributes in process `syz.4.349'. [ 125.691576][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.793454][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.850995][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.936036][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.955030][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.380037][ T29] audit: type=1326 audit(1719539065.330:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.2.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f534bd75b29 code=0x0 [ 126.597515][ T8] cdc_ncm 1-1:1.0: failed to get mac address [ 126.631919][ T8] cdc_ncm 1-1:1.0: bind() failure [ 126.653137][ T8] hub 1-1:1.1: probe with driver hub failed with error -71 [ 126.681772][ T8] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 126.703287][ T8] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 126.728861][ T8] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 126.783445][ T8] usb 1-1: USB disconnect, device number 15 [ 126.842052][ T5099] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.045202][ T5099] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 127.068613][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.107847][ T5099] usb 5-1: config 0 descriptor?? [ 127.330029][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.343972][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.385779][ T5099] usb 5-1: string descriptor 0 read error: -71 [ 127.425133][ T5099] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 127.462314][ T5099] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 127.499228][ T5099] usb 5-1: USB disconnect, device number 11 [ 128.377353][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.390694][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.420238][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.450105][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.467584][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.482907][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.648977][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.986304][ T6280] netlink: 80 bytes leftover after parsing attributes in process `syz.1.364'. [ 129.021644][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.189487][ T6272] ip6gretap0 speed is unknown, defaulting to 1000 [ 129.247837][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.352683][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.4.363'. [ 129.510895][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.972294][ T5673] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.012515][ T53] bridge_slave_1: left allmulticast mode [ 130.022899][ T53] bridge_slave_1: left promiscuous mode [ 130.040984][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.064607][ T53] bridge_slave_0: left allmulticast mode [ 130.081662][ T53] bridge_slave_0: left promiscuous mode [ 130.102368][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.172060][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.182154][ T5673] usb 2-1: Using ep0 maxpacket: 16 [ 130.199289][ T5673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 130.227110][ T5673] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 130.260994][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.288978][ T5673] usb 2-1: config 0 descriptor?? [ 130.374421][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.408018][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.434870][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.462001][ T8] usb 1-1: Product: syz [ 130.472421][ T8] usb 1-1: Manufacturer: syz [ 130.477616][ T8] usb 1-1: SerialNumber: syz [ 130.505119][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 130.518403][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 130.521357][ T8] hub 1-1:1.0: probe with driver hub failed with error -5 [ 130.573319][ T4491] Bluetooth: hci3: command tx timeout [ 130.979239][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.999968][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.011500][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.030610][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.074885][ T5673] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 131.087662][ T5673] hid-generic 0003:0158:0100.0009: unexpected long global item [ 131.125104][ T5673] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 131.372562][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.430282][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.466477][ T53] bond0 (unregistering): Released all slaves [ 131.588613][ T8] cdc_ncm 1-1:1.0: failed to get mac address [ 131.603803][ T8] cdc_ncm 1-1:1.0: bind() failure [ 131.628066][ T8] hub 1-1:1.1: probe with driver hub failed with error -71 [ 131.645694][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.661374][ T8] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 131.688195][ T8] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 131.710777][ T8] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 131.793025][ T8] usb 1-1: USB disconnect, device number 16 [ 131.865815][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 131.898873][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.919864][ T9] usb 5-1: config 0 descriptor?? [ 132.012725][ T5099] usb 2-1: USB disconnect, device number 12 [ 132.151393][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.194011][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.304074][ T9] usb 5-1: string descriptor 0 read error: -71 [ 132.322462][ T9] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 132.339582][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 132.365766][ T9] usb 5-1: USB disconnect, device number 12 [ 132.643179][ T4491] Bluetooth: hci3: command tx timeout [ 133.127875][ T6326] netlink: 80 bytes leftover after parsing attributes in process `syz.0.377'. [ 133.159695][ T53] hsr_slave_0: left promiscuous mode [ 133.205937][ T53] hsr_slave_1: left promiscuous mode [ 133.267915][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.285078][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.309625][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.316095][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.399934][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.471932][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.662119][ T53] veth1_macvtap: left promiscuous mode [ 133.685194][ T53] veth0_macvtap: left promiscuous mode [ 133.716898][ T53] veth1_vlan: left promiscuous mode [ 133.744070][ T53] veth0_vlan: left promiscuous mode [ 133.775705][ T29] audit: type=1800 audit(1719539072.720:20): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 133.958054][ T6345] loop0: detected capacity change from 0 to 128 [ 134.008416][ T6345] ======================================================= [ 134.008416][ T6345] WARNING: The mand mount option has been deprecated and [ 134.008416][ T6345] and is ignored by this kernel. Remove the mand [ 134.008416][ T6345] option from the mount to silence this warning. [ 134.008416][ T6345] ======================================================= [ 134.728348][ T4491] Bluetooth: hci3: command tx timeout [ 135.373424][ T53] team0 (unregistering): Port device team_slave_1 removed [ 135.479462][ T53] team0 (unregistering): Port device team_slave_0 removed [ 136.629734][ T6369] batadv1: entered allmulticast mode [ 136.667513][ T6272] chnl_net:caif_netlink_parms(): no params data found [ 136.802530][ T4491] Bluetooth: hci3: command tx timeout [ 137.189360][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.213344][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.220644][ T6272] bridge_slave_0: entered allmulticast mode [ 137.251643][ T6272] bridge_slave_0: entered promiscuous mode [ 137.314804][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.356889][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.372742][ T6272] bridge_slave_1: entered allmulticast mode [ 137.393236][ T6272] bridge_slave_1: entered promiscuous mode [ 137.573998][ T6272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.614436][ T6272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.896993][ T6272] team0: Port device team_slave_0 added [ 137.933387][ T6272] team0: Port device team_slave_1 added [ 138.091487][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.113930][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.188697][ T6272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.224941][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.251783][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.322280][ T6272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.597086][ T6272] hsr_slave_0: entered promiscuous mode [ 138.614256][ T6272] hsr_slave_1: entered promiscuous mode [ 140.061748][ T6272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.135725][ T6272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.218866][ T6272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.246800][ T6272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.262671][ T6423] blktrace: Concurrent blktraces are not allowed on sg0 [ 140.890471][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.942258][ T5673] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.020664][ T6272] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.116192][ T6446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.142036][ T5673] usb 3-1: Using ep0 maxpacket: 8 [ 141.149981][ T5673] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 141.151329][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.166401][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.169935][ T5673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.209518][ T5673] usb 3-1: config 0 descriptor?? [ 141.293583][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.300878][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.851007][ T6438] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 141.968885][ T6438] team0: Device veth1_macvtap failed to register rx_handler [ 142.288539][ T6272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.334640][ T47] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 142.483146][ T6272] veth0_vlan: entered promiscuous mode [ 142.533571][ T6272] veth1_vlan: entered promiscuous mode [ 142.555071][ T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.581236][ T47] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.604676][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.625505][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.673258][ T6474] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.686098][ T6272] veth0_macvtap: entered promiscuous mode [ 142.744022][ T6272] veth1_macvtap: entered promiscuous mode [ 143.018909][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.050800][ T5150] usb 1-1: USB disconnect, device number 17 [ 143.090299][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.116070][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.144881][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.191799][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.231471][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.250251][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.261290][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.284789][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.308120][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 143.358074][ T6490] warning: `syz.4.411' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.388544][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.412758][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.452690][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.472220][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.495502][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.507480][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.569253][ T6272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.631956][ T6272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.676432][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.733588][ T5105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.743392][ T5105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.752595][ T5105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.765823][ T5105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.774808][ T5105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.782739][ T5105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.844882][ T6272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.872401][ T6272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.881199][ T6272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.906518][ T6272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.963919][ T5673] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 143.997685][ T5673] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 144.034776][ T5673] asix 3-1:0.0: probe with driver asix failed with error -71 [ 144.074400][ T5673] usb 3-1: USB disconnect, device number 7 [ 144.208195][ T6503] ip6gretap0 speed is unknown, defaulting to 1000 [ 144.445065][ T29] audit: type=1326 audit(1719539083.390:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.0.416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c10f75b29 code=0x0 [ 144.586838][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.631252][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.801528][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.844500][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.843145][ T4491] Bluetooth: hci5: command tx timeout [ 145.932002][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.940035][ T6503] chnl_net:caif_netlink_parms(): no params data found [ 146.092006][ T8] usb 1-1: device descriptor read/64, error -71 [ 146.200972][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.217498][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.239538][ T6503] bridge_slave_0: entered allmulticast mode [ 146.274492][ T6503] bridge_slave_0: entered promiscuous mode [ 146.297565][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.309516][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.317274][ T6503] bridge_slave_1: entered allmulticast mode [ 146.330576][ T6503] bridge_slave_1: entered promiscuous mode [ 146.372061][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.387917][ T29] audit: type=1326 audit(1719539085.340:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.3.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40b3d75b29 code=0x0 [ 146.444926][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.468748][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.531989][ T8] usb 1-1: device descriptor read/64, error -71 [ 146.553665][ T6503] team0: Port device team_slave_0 added [ 146.571131][ T6503] team0: Port device team_slave_1 added [ 146.643262][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.652655][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.653014][ T8] usb usb1-port1: attempt power cycle [ 146.682020][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.705219][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.712664][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.750826][ T6503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.903675][ T6503] hsr_slave_0: entered promiscuous mode [ 146.940067][ T6503] hsr_slave_1: entered promiscuous mode [ 146.962066][ T6503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.987395][ T6503] Cannot create hsr debugfs directory [ 147.162332][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 147.232495][ T8] usb 1-1: device descriptor read/8, error -71 [ 147.525737][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 147.562634][ T8] usb 1-1: device descriptor read/8, error -71 [ 147.646688][ T6503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.682471][ T8] usb usb1-port1: unable to enumerate USB device [ 147.829665][ T6604] blktrace: Concurrent blktraces are not allowed on sg0 [ 147.922420][ T4491] Bluetooth: hci5: command tx timeout [ 147.942585][ T6503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.100837][ T6503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.225732][ T6503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.392099][ T5150] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.434213][ T6503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.457116][ T6503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.467754][ T6503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.482043][ T6503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.575621][ T5150] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 148.588057][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.599965][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.611518][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.626595][ T5150] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 148.635841][ T5150] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 148.646976][ T5150] usb 3-1: Manufacturer: syz [ 148.653488][ T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.664514][ T5150] usb 3-1: config 0 descriptor?? [ 148.703058][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.829982][ T6503] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.887092][ T47] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 148.893990][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.903706][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.906752][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.956109][ T47] usb 4-1: config 0 descriptor?? [ 148.999438][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.006822][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.087681][ T5150] usbhid 3-1:0.0: can't add hid device: -32 [ 149.109761][ T5150] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 149.157201][ T5150] usb 3-1: USB disconnect, device number 8 [ 149.779425][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.002388][ T5105] Bluetooth: hci5: command tx timeout [ 150.162281][ T5105] Bluetooth: hci3: command tx timeout [ 150.196520][ T6503] veth0_vlan: entered promiscuous mode [ 150.235520][ T6503] veth1_vlan: entered promiscuous mode [ 150.385130][ T6503] veth0_macvtap: entered promiscuous mode [ 150.427576][ T6503] veth1_macvtap: entered promiscuous mode [ 150.577677][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.598000][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.622006][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.651729][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.675089][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.701941][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.727307][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.753537][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.773533][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.784838][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.800578][ T47] pegasus 4-1:0.0: setup Pegasus II specific registers [ 150.809722][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.865253][ T29] audit: type=1800 audit(1719539089.820:23): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.453" name="bus" dev="sda1" ino=1977 res=0 errno=0 [ 150.953881][ T47] pegasus 4-1:0.0: can't locate MII phy, using default [ 150.990651][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.017658][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.041704][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.082287][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.101900][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.118647][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.137043][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.151900][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.161781][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.181249][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.193241][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.216647][ T5105] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 151.225856][ T5105] Bluetooth: hci4: Injecting HCI hardware error event [ 151.236048][ T4491] Bluetooth: hci4: hardware error 0x00 [ 151.272026][ T47] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 02:6a:d6:10:d3:37 [ 151.284801][ T47] usb 4-1: USB disconnect, device number 8 [ 151.303663][ T5150] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.333599][ T6503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.342615][ T6503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.354719][ T6503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.363694][ T6503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.472029][ T5150] usb 3-1: device descriptor read/64, error -71 [ 151.684701][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.714945][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.772509][ T5150] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.868907][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.893030][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.952039][ T5150] usb 3-1: device descriptor read/64, error -71 [ 152.082440][ T5105] Bluetooth: hci5: command tx timeout [ 152.089059][ T5150] usb usb3-port1: attempt power cycle [ 152.505725][ T29] audit: type=1800 audit(1719539091.450:24): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.463" name="bus" dev="sda1" ino=1982 res=0 errno=0 [ 152.512063][ T5150] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.602794][ T5150] usb 3-1: device descriptor read/8, error -71 [ 152.722757][ T5148] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.912344][ T5150] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 152.927659][ T5148] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffee, bcdDevice=e6.a3 [ 152.939523][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.961632][ T5148] usb 5-1: Product: syz [ 152.963126][ T5150] usb 3-1: device descriptor read/8, error -71 [ 152.970214][ T5148] usb 5-1: Manufacturer: syz [ 152.977766][ T5148] usb 5-1: SerialNumber: syz [ 152.985629][ T6687] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 153.004866][ T5148] usb 5-1: config 0 descriptor?? [ 153.030250][ T5148] usb-storage 5-1:0.0: USB Mass Storage device detected [ 153.118060][ T5150] usb usb3-port1: unable to enumerate USB device [ 153.220704][ T5148] usb 5-1: USB disconnect, device number 13 [ 153.294912][ T4491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 153.971315][ T29] audit: type=1800 audit(1719539092.920:25): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.474" name="bus" dev="sda1" ino=1983 res=0 errno=0 [ 154.503219][ T6721] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 154.720683][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'. [ 154.758679][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.479'. [ 155.467398][ T29] audit: type=1800 audit(1719539094.420:26): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.485" name="bus" dev="sda1" ino=1981 res=0 errno=0 [ 155.683994][ T29] audit: type=1800 audit(1719539094.640:27): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.486" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 155.745049][ T6751] 9pnet_fd: Insufficient options for proto=fd [ 156.286815][ T6761] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 156.503942][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.493'. [ 156.569207][ T6768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.493'. [ 157.102934][ T5151] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 157.192973][ T29] audit: type=1800 audit(1719539096.140:28): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.499" name="bus" dev="sda1" ino=1981 res=0 errno=0 [ 157.218756][ T6783] 9pnet_fd: Insufficient options for proto=fd [ 157.322973][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 157.336516][ T5151] usb 2-1: config 0 has no interfaces? [ 157.353377][ T5151] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.390279][ T5151] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.426797][ T5151] usb 2-1: Product: syz [ 157.442798][ T5151] usb 2-1: Manufacturer: syz [ 157.447568][ T5151] usb 2-1: SerialNumber: syz [ 157.457348][ T5151] usb 2-1: config 0 descriptor?? [ 157.906163][ T8] usb 2-1: USB disconnect, device number 13 [ 158.259069][ T6799] blktrace: Concurrent blktraces are not allowed on sg0 [ 158.347292][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 158.380399][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.505'. [ 158.632138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.672591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.079473][ T29] audit: type=1800 audit(1719539098.030:29): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.510" name="bus" dev="sda1" ino=1977 res=0 errno=0 [ 159.106954][ T6823] 9pnet_fd: Insufficient options for proto=fd [ 161.222623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.572065][ T5150] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.793967][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.844415][ T5150] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 161.888899][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.939073][ T5150] usb 5-1: config 0 descriptor?? [ 162.392516][ T5151] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.444888][ T5150] usbhid 5-1:0.0: can't add hid device: -71 [ 162.450986][ T5150] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 162.509739][ T5150] usb 5-1: USB disconnect, device number 14 [ 162.632264][ T5151] usb 4-1: Using ep0 maxpacket: 16 [ 162.665919][ T5151] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 162.695617][ T5151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.725937][ T5151] usb 4-1: Product: syz [ 162.743554][ T5151] usb 4-1: Manufacturer: syz [ 162.748231][ T5151] usb 4-1: SerialNumber: syz [ 162.823629][ T5151] usb 4-1: config 0 descriptor?? [ 162.844539][ T5151] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 163.448376][ T5151] gp8psk: FW Version = 97.177.148 (0x61b194) Build 2224/73/32 [ 163.642151][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.662600][ T5151] gp8psk: usb in 149 operation failed. [ 163.668660][ T5151] gp8psk: failed to get FPGA version [ 163.709623][ T5151] gp8psk: usb in 138 operation failed. [ 163.719835][ T5151] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 163.743841][ T5151] dvb_usb_gp8psk 4-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 163.782407][ T5151] usb 4-1: USB disconnect, device number 9 [ 163.871959][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 163.879265][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.901495][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.934721][ T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=c9.61 [ 163.963277][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.971447][ T8] usb 5-1: Product: syz [ 163.998360][ T8] usb 5-1: Manufacturer: syz [ 164.007711][ T8] usb 5-1: SerialNumber: syz [ 164.032868][ T8] usb 5-1: config 0 descriptor?? [ 164.046164][ T8] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 164.271742][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.399147][ T8] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 164.417742][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.517186][ T6927] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000193: 0000 [#1] PREEMPT SMP KASAN PTI [ 165.517224][ T6927] KASAN: null-ptr-deref in range [0x0000000000000c98-0x0000000000000c9f] [ 165.517246][ T6927] CPU: 1 UID: 0 PID: 6927 Comm: syz.2.539 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0 [ 165.517271][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.517284][ T6927] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 165.517328][ T6927] Code: e8 b9 b2 ef f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 83 7b 56 f8 bb 98 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 65 7b 56 f8 48 8b 03 48 89 44 24 [ 165.517351][ T6927] RSP: 0018:ffffc900098aeee0 EFLAGS: 00010206 [ 165.517373][ T6927] RAX: 0000000000000193 RBX: 0000000000000c98 RCX: 0000000000040000 [ 165.517389][ T6927] RDX: ffffc90009bea000 RSI: 0000000000006eef RDI: 0000000000006ef0 [ 165.517405][ T6927] RBP: ffffc900098af118 R08: ffffffff89a283d7 R09: 006e75745f7a7973 [ 165.517423][ T6927] R10: dffffc0000000000 R11: ffffffff89a3cb00 R12: ffffffff89a3cb00 [ 165.517440][ T6927] R13: dffffc0000000000 R14: ffff888028fba5c0 R15: ffff88801e7878c0 [ 165.517457][ T6927] FS: 00007f534cb3a6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 165.517478][ T6927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.517494][ T6927] CR2: 0000000020000900 CR3: 0000000064304000 CR4: 00000000003506f0 [ 165.517513][ T6927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.517526][ T6927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.517541][ T6927] Call Trace: [ 165.517550][ T6927] [ 165.517559][ T6927] ? __die_body+0x88/0xe0 [ 165.517592][ T6927] ? die_addr+0x108/0x140 [ 165.517633][ T6927] ? exc_general_protection+0x3dd/0x5d0 [ 165.517677][ T6927] ? asm_exc_general_protection+0x26/0x30 [ 165.517708][ T6927] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 165.517742][ T6927] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 165.517776][ T6927] ? ethnl_default_dumpit+0x517/0xb30 [ 165.517804][ T6927] ? coalesce_fill_reply+0xcc/0x1b70 [ 165.517839][ T6927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.517871][ T6927] ? synchronize_rcu+0x11b/0x360 [ 165.517905][ T6927] ? __pfx_synchronize_rcu+0x10/0x10 [ 165.517940][ T6927] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 165.517975][ T6927] ? rcu_is_watching+0x15/0xb0 [ 165.518009][ T6927] ? nla_put+0x131/0x1e0 [ 165.518042][ T6927] ? __asan_memcpy+0x40/0x70 [ 165.518065][ T6927] ? nla_put+0x131/0x1e0 [ 165.518099][ T6927] ? ethnl_fill_reply_header+0x295/0x3c0 [ 165.518124][ T6927] ? __pfx_netdev_run_todo+0x10/0x10 [ 165.518158][ T6927] ? __pfx_ethnl_fill_reply_header+0x10/0x10 [ 165.518184][ T6927] ? ethnl_ops_complete+0xba/0xd0 [ 165.518217][ T6927] ? coalesce_prepare_data+0x175/0x1e0 [ 165.518250][ T6927] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 165.518284][ T6927] ? ethnl_default_dumpit+0x83/0xb30 [ 165.518310][ T6927] ethnl_default_dumpit+0x5ac/0xb30 [ 165.518338][ T6927] ? ethnl_default_dumpit+0x83/0xb30 [ 165.518371][ T6927] genl_dumpit+0x107/0x1a0 [ 165.518405][ T6927] netlink_dump+0x647/0xd80 [ 165.518436][ T6927] ? __pfx_netlink_dump+0x10/0x10 [ 165.518470][ T6927] ? genl_start+0x597/0x6d0 [ 165.518506][ T6927] __netlink_dump_start+0x59f/0x780 [ 165.518536][ T6927] genl_rcv_msg+0x88c/0xec0 [ 165.518567][ T6927] ? mark_lock+0x9a/0x360 [ 165.518604][ T6927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.518639][ T6927] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 165.518667][ T6927] ? __pfx_genl_start+0x10/0x10 [ 165.518696][ T6927] ? __pfx_genl_dumpit+0x10/0x10 [ 165.518726][ T6927] ? __pfx_genl_done+0x10/0x10 [ 165.518765][ T6927] ? __pfx_lock_acquire+0x10/0x10 [ 165.518792][ T6927] ? __pfx_ethnl_default_start+0x10/0x10 [ 165.518817][ T6927] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 165.518842][ T6927] ? __pfx_ethnl_default_done+0x10/0x10 [ 165.518869][ T6927] ? __pfx___might_resched+0x10/0x10 [ 165.518902][ T6927] netlink_rcv_skb+0x1e3/0x430 [ 165.518928][ T6927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 165.518961][ T6927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.518994][ T6927] ? __netlink_deliver_tap+0x77e/0x7c0 [ 165.519029][ T6927] genl_rcv+0x28/0x40 [ 165.519058][ T6927] netlink_unicast+0x7f0/0x990 [ 165.519086][ T6927] ? __pfx_netlink_unicast+0x10/0x10 [ 165.519106][ T6927] ? __virt_addr_valid+0x183/0x530 [ 165.519141][ T6927] ? __check_object_size+0x49c/0x900 [ 165.519168][ T6927] ? bpf_lsm_netlink_send+0x9/0x10 [ 165.519207][ T6927] netlink_sendmsg+0x8e4/0xcb0 [ 165.519253][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.519281][ T6927] ? __import_iovec+0x536/0x820 [ 165.519301][ T6927] ? aa_sock_msg_perm+0x91/0x160 [ 165.519334][ T6927] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 165.519364][ T6927] ? security_socket_sendmsg+0x87/0xb0 [ 165.519391][ T6927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.519415][ T6927] __sock_sendmsg+0x221/0x270 [ 165.519441][ T6927] ____sys_sendmsg+0x525/0x7d0 [ 165.519479][ T6927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.519520][ T6927] __sys_sendmsg+0x2b0/0x3a0 [ 165.519553][ T6927] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.519610][ T6927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.519640][ T6927] ? do_syscall_64+0x100/0x230 [ 165.519664][ T6927] ? do_syscall_64+0xb6/0x230 [ 165.519687][ T6927] do_syscall_64+0xf3/0x230 [ 165.519708][ T6927] ? clear_bhb_loop+0x35/0x90 [ 165.519737][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.519767][ T6927] RIP: 0033:0x7f534bd75b29 [ 165.519786][ T6927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.519804][ T6927] RSP: 002b:00007f534cb3a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.519828][ T6927] RAX: ffffffffffffffda RBX: 00007f534bf03fa0 RCX: 00007f534bd75b29 [ 165.519845][ T6927] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 165.519859][ T6927] RBP: 00007f534bdf6756 R08: 0000000000000000 R09: 0000000000000000 [ 165.519873][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.519887][ T6927] R13: 000000000000000b R14: 00007f534bf03fa0 R15: 00007fff4a673ac8 [ 165.519912][ T6927] [ 165.519920][ T6927] Modules linked in: [ 165.519977][ T6927] ---[ end trace 0000000000000000 ]--- [ 165.681136][ T29] audit: type=1326 audit(1719539104.630:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40b3d75b29 code=0x0 [ 166.161971][ T6927] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 166.178478][ T6927] Code: e8 b9 b2 ef f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 83 7b 56 f8 bb 98 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 65 7b 56 f8 48 8b 03 48 89 44 24 [ 166.198215][ T6927] RSP: 0018:ffffc900098aeee0 EFLAGS: 00010206 [ 166.212899][ T6927] RAX: 0000000000000193 RBX: 0000000000000c98 RCX: 0000000000040000 [ 166.236795][ T6927] RDX: ffffc90009bea000 RSI: 0000000000006eef RDI: 0000000000006ef0 [ 166.245163][ T6927] RBP: ffffc900098af118 R08: ffffffff89a283d7 R09: 006e75745f7a7973 [ 166.255273][ T6927] R10: dffffc0000000000 R11: ffffffff89a3cb00 R12: ffffffff89a3cb00 [ 166.264971][ T6927] R13: dffffc0000000000 R14: ffff888028fba5c0 R15: ffff88801e7878c0 [ 166.273485][ T6927] FS: 00007f534cb3a6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 166.286639][ T6927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.300256][ T6927] CR2: 00007f40b37fefa8 CR3: 0000000064304000 CR4: 00000000003506f0 [ 166.319929][ T6927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.328743][ T6927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.337139][ T6927] Kernel panic - not syncing: Fatal exception [ 166.343609][ T6927] Kernel Offset: disabled [ 166.347934][ T6927] Rebooting in 86400 seconds..