last executing test programs: 2m28.470761236s ago: executing program 32 (id=825): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 2m6.629018081s ago: executing program 33 (id=1137): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 1m45.412442759s ago: executing program 0 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m45.342683962s ago: executing program 0 (id=1453): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 1m45.275240777s ago: executing program 0 (id=1454): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1m45.120589754s ago: executing program 0 (id=1456): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') 1m44.906931444s ago: executing program 0 (id=1459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m44.446982904s ago: executing program 0 (id=1471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004cc0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="2f6718ee53d7077b94acbd5701efe28f1f1b5504429cf6aac1e8ee48f8c2e5324d0abd94979dc4469e4d317394eaf8d9b0f631d64f314d6476adc621a5efbe6bad2917f9a137a26116948077316d8b27d77a1c02ffb27f4d38fa3039418b3acc48b7aac447e336773f9e16cb5ba07b843ac48c3f04c6f47daafd16ac8e2ccf49d707ed9c6d8a332d076c956323a14e78c08a032da53104cb42437cf117c8fd0c9ab829d2ea7af98886b31b99", 0xac}, {&(0x7f0000000700)="4679754fb881850299c308cb6757327978b3a9d425276553334f1c29bd191066782c34903fa62e882f7db3cd2f3cd4ea9941215ad1e46b9ac68279af3d235c3e69ccecb62c899ef449ce29f0476fe48798abd0f9aa514d59da26f4bb4a8948ae0095e135455284dc0be0e9166f8964c27034e829b3f0db958179c866f81bda75", 0x80}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/198, 0xc6}, {&(0x7f0000001e80)=""/101, 0x65}], 0x2}}], 0x1, 0x0, 0x0) 1m44.27574084s ago: executing program 34 (id=1471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004cc0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="2f6718ee53d7077b94acbd5701efe28f1f1b5504429cf6aac1e8ee48f8c2e5324d0abd94979dc4469e4d317394eaf8d9b0f631d64f314d6476adc621a5efbe6bad2917f9a137a26116948077316d8b27d77a1c02ffb27f4d38fa3039418b3acc48b7aac447e336773f9e16cb5ba07b843ac48c3f04c6f47daafd16ac8e2ccf49d707ed9c6d8a332d076c956323a14e78c08a032da53104cb42437cf117c8fd0c9ab829d2ea7af98886b31b99", 0xac}, {&(0x7f0000000700)="4679754fb881850299c308cb6757327978b3a9d425276553334f1c29bd191066782c34903fa62e882f7db3cd2f3cd4ea9941215ad1e46b9ac68279af3d235c3e69ccecb62c899ef449ce29f0476fe48798abd0f9aa514d59da26f4bb4a8948ae0095e135455284dc0be0e9166f8964c27034e829b3f0db958179c866f81bda75", 0x80}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/198, 0xc6}, {&(0x7f0000001e80)=""/101, 0x65}], 0x2}}], 0x1, 0x0, 0x0) 1m43.325573124s ago: executing program 3 (id=1484): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m43.22243707s ago: executing program 3 (id=1485): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=@newtaction={0x850, 0x31, 0x3d, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}}, 0x0) 1m42.812657099s ago: executing program 3 (id=1491): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @random="cea0300a1672"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) 1m42.593815027s ago: executing program 3 (id=1497): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001100)='./file0/../file0/../file0\x00', &(0x7f00000010c0)='./file0/file0\x00', 0x0, 0x1a1904e, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m42.459578532s ago: executing program 3 (id=1499): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000340)={0x0, 0x15, 0x1, "e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m42.164537844s ago: executing program 3 (id=1505): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000011c40)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x100, 0x0) 1m42.054180009s ago: executing program 35 (id=1505): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000011c40)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x100, 0x0) 1m11.557129408s ago: executing program 7 (id=1958): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000480)={{0x80, 0x3}, 'port1\x00', 0x85, 0x0, 0x0, 0x67}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x40409}) 1m11.414992106s ago: executing program 7 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}}, 0x0) 1m11.233256145s ago: executing program 7 (id=1968): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) 1m10.965107572s ago: executing program 7 (id=1976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m10.900166577s ago: executing program 7 (id=1978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m10.76809812s ago: executing program 7 (id=1980): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 59.302832944s ago: executing program 6 (id=2126): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="f1451394a86d56b46c594b8edde95827d106f3b44634180f367dfd567851f1eac1ab2adcc78550c79f2e8c7e200818802cd8e948542a24721449ef80d6fbf935dbd8410af1ff462d56d480f02e85d96062388a90e345ac86040caf4febd7f05beb6db33030e614a1a9aa2738d643d9e9da8cc5f2ded7b01be366970ea3aecc374dee18c094bba66b9728dcc2d384d6e5d9c6511cca40c0e82b9bd3528f1be8ef408c9e32cdc176fd5905e4448a3bee3612356b30dba039a99caafde1ab687a563aceb827ef902e4361bd18754895d8bb4f834c6fb0961448b916fda2d511757988406875a128af807e3b500ad26b57730ea4e73ab3033a185c8b3afe35872cd9ddf92d81272e800e75ae86db4d913e227ef7f140ce2c98006a30ef2e7482f6af3a82824adbe8a1325aeb3a757330afe94f484e788ed70411c00e0846b48d2fc611c21c1240e5d3dbf6e332d1c03329939ab041d0376de8fed2a7783dfff3821949495dc92e15eaca5df4b13960732f16b008ef3698f10585b2bd2d290b108f27e71d4aa5004e8de88518b8124a68585419d9275c83f5f0e969501cf4784af52355cfb4bd067ff73d2fa966db9ba5204541d31f12e418c2b723361fe16e51d1b2a1cb9785121c0caf1bef2d1c746f4adf3e217b4141c82d7d8fbabf1e1d3e967b5643ba6b22acb365991f7e9577c1f889959cadd38ed92bfd7aad31a1a1b13d71ebf78d2af48f9e7717ed49d66ff866465c739905d44ea2997299969cb84b906da266c774d04ba17060f09b0bedb38feb8ae6850428dd59ea1eb0c20697a762e085917a85ac1e15376ce05a504022807a4e6b6fd9c45f0c77276e64f5b492101bd8ad44e93e8e2154581d365627571a531f3cfda4fe472421485a4b298b525ef0c2dae4b6bbe8b8a5b33e3b4e322391bbffd0669fcf25c0a23175988f0e449d342d5be3195bc92246bdea414b7a52aa585bdf5f9803b306fb49def852b38c010bb2f50450f8f9b96b614b6ff525483bab3f66bd755cc337f015b3fdd1cb40a698cd57e20ffce734c5a56b7d92a3f4247042a75f85abe395df016c710db15fb1391634cf7b9505d685025ef2bbdc8fe84fa6562769ca2e383a2115cef43fea4fa114159b8896039203568b0fde329106e0f0eed6770be4935b875d92701d632d182cf25b262cd85dd8266ebb9471ef1a71846dcb2d88e73672c3a6de8fd86dfb5e747ced9707456d8126ae4ab187f3b48f13caee1215d78f8c84474babd91d0755d6a287d98c9f797f0c82cfbe5a3a3bad381152728ec0f979b4bb84f0db61eaa27e1be3a785a301b685644759c338d738e46e2c1b8643c8f4ee3627403efc6bf4a1b9a98eadee7d63f0fb1858c5e2a2b113a22b9c41fe7e6c298f747a06b47022c8890cbec3eaacbd09cec548392495c071f5b36505edd09e15c260f5dd98177a3ff6656604a320c48868470cb2d1a4f20c3646b39358bcf9bb2140600dae42891b3ddb3a86d7dd542a4f32436489ca8ec29056dd50c38121be15aa2c1dc90d5c23ab5af924bf4a2d7b05f30a3216edc3b4d9c6ea0058d5d885570f5d46ae6006681298c0bc275f4d600c7d4e883eb358d20d82c1e5a9dedf1bbc4b02fd176157f6da3fbf5eb747ef7d2053395f6809913b5ca6b0b6e68a972fce886765bc1ac13fb396ff90a4f865590e0cc5125cdc390eedf4a706911b2825ea5afcecd453afe529576aaaa8972012258d4f9859508b319f5ea8d5d20fc5bd3b25a3aa24d3658bf859e684faa331ab65dda79e977070f32f29dce4838ddd32a25dd48cd759c21c550e0e2f27348e88570eda4887f073599e8f69190a9e6aa380bafa98b4dd57e710863fad4dc41e442a1765a9495981f0d8b338fdbec8f3072721fd840b2198e5a5a053c58589278d3ba84d2042394f04833006ddb99e4b99ec13a46ae34f03f783555befd6ddd7367713ecec2efe075c8f7b62eef56180632e01bc38d7dfc86d6e9518c477ad346b2a9b7d9403f85246cd514aa4f113ce4d1090719c8d8135839783d38814bfb105eb63fa56802e9e2e0ae01fe6c716bc0c379ee4320ebb50b5fb84fced731341d76f9ce1efa063667ad43c6d413a351c675ed0666ca0ae272eb879ea474e511c488dfa7fdde6d20b76de6ae7a77e7357ed3055b908883aef8bd6d6ae80e53a13427afc200c630f3e3048719551f71c22c5b0984cd7b37b922d032d3c57976e8e66bcd880dd3b65f1fa13acc73d2cbaedadb9a51d1a196b220bfd977623a97bd1c1cd705b2219cc928d980ba64096239fe9ed3185e638bc784669e935a9fd7e26b4e1f8c5760fd55c393e37e9b4abd098f977d8219a2fb8194438ca013acc498bd0957266450365a259c44be6dc46996b4a1557b946a1601cfda0c67509ee1e8ed4401bc2878a50360f4981832b5dec44091548a9a9b78796b0c7cb9d46451477c889852623e6668e5d37bd6aa6cb532ffd227299f951f75a40b9939a24892ab23cbb9730cf7631ea84d46830d0d2e581ebd1f4603cf8a711bf0ddefb8b9fe4cd66faf56816e4c148dc807edc3f9b0e5ffd9c76e8f46013f56788b31b3de9172e4752ff30a5283fad328bab020f675c2bca8c5f83a4b0a0f1e953f931c2e15e65538b6043b58b895f5134d97bfab087ae741fa2fd327bdbe8e89ca63acd7424acf6f7c7790cd6ab1617d5d30240476821a66edc91795467bd6cc07ee53678c914c310dd826af4b1a9f2f771c7c002bf50b3f193f671669b4a48fa18106b656d26a6f26378fb7ff0649f2ea6a42ea73ab87ae7e585a5d78d47ba64a5715a083523bc1c0235d8a7bee3262c29b993a8c678a6ca46befd03afd4fcf25082e25300bf59999f069df1a33e279104378c375777c3cd2c34bd50abb48107a7f0448f83eb6d4ecb4be16a96d61ba02cc4c3a25bf00404df2876d1347744617d6b5053dce5cf9a7e668858c68ecaa3f5f45673067f8d18b96cd1544f6d65ab75f3506183a5b9c40c3d6976bc17d0543ba1b035384b95a84469cbef7a153527e2596034c4c928703fae6142ba0c305931f832e997e95d8e449e2c8869d91a44122a99aed6cedd7feebaccdf4561d01988bb11f16677ce682ef79bd516bca6896e94713bd4811e244cb50f3df929e354a058a68f045613d77749b0b8f836ce88634fa1accdee9a73ad5c947b33c786f14d5a1c2aa12f9b953d9d6490c1021cf02e6486dc33960d18308bc162a6089848d92cc87bbf4bd4b152e6a7fd0ea0deee070d26aac62cb7de8fb3be0d87bafe038bd34e31d48c01b6f874026801479de73e730ad719247a8a2a020edd5f92af01cb2337a482da08413377b780b307475d3d197e8026433a254888e2023ed341cedb46c636e36e76ad25493511877b24ae50c74194029e468b115a4e8d385696b40422f56f94c2669f58340f74372194e4756fe14918de3c5cbfe9c66c359c64c5462191f6daa15a3d03926a6dd02eb5ca4b4a9c6f56b9022eabe482253568f180056845f8ea48a0c0217f31eb26e2c5898f6dcdcb3cfa4eda5184205ccf0f0ba18ba4970ace745c760527b0fb39a08804d784d2e63f65407817a7921639b3fa8db8ee66462de788a10ea2f25dadee02b158459135a1663d37294e659862adcf849235b5606340139d63358a4c55411fa474e5dc835591a904ebd01cc04b2774c7a0d11bd150bfefc0492706beb15c85ff83ae773863dc74a847d0695abeda994c95c951d6f7e910675a05d98eb7c0dbe9be20d6492251bd42f906b3cce7a31c5173136a9c8507a325b3872c82047db814205576d154635ce405e18dd50201c589d8cbe2e8c9a6f7f5c9903d16d99b48dab99783159c9365677a6d092784a083f16bfb7fd5bbec62479877d3fc3b6a90d3da669c09c213b9e06f82c1ebf7563bf782c15765b5998992797e0d8935e9531dcc25526dd8abf44b30d206f55d09b910c0e875395e0dcd6e6fb37da9d2df3c6821292a3bc74b0bd5561ddfec869042a30affd5968cb53eb581da075dcf313633d434e2834ffdb4c0f9f8b1be14dc336cfe910f7db3f027e7a15061ddc36818a22b27ad4f675ed71f4c0a8aacc64aa45e2b4c293683388dc68eefce77fb9dc9a059bc741702afc7a01b18136048b5c366bd0d52aad62407b6b6fb6eb514858a5ac47deb83c10092cd28c2658c15b47e843757f9f8ac5ca4905cbc6240dd4a5f03a3574b082b03cb3f7eab927cea1a6924207fce678312418ab0b07e90a3a94fd3b8ac908274017773a2e6050c53d11e94f6cfd530cc29b211157ef7f80d8b3bb066640b7044f2f6487c40ea432699ae9a3f5d1c2d0e33e9f7de9b3fd72413d4055a5c57cbf3603c7952f2d9b211c36042d166221483680c2d54880805ce4b1ad211d7cb1191da908f3aa137d66ddbd3c2d76b3eb0f8ac74b9e7aaf4ea5e9ce00af1d1784fe2f3693e8f33669a90bef5d090926dda37f0ffe6c13f68389bc9fcfda3bd81cb9cc170b715f4873025ca225bd50f1dd858154c2bd6a66569a26859384b9991a73c8028f286d3bcbadd884c2b2be04e3b43b0c0dcf52e8017e99ab30232af905cd42005ec61c617211b7696f5cdf42d43f23b6b25455839493cc6042844f6c9f0b841553a90647c6634bffac2e62249158a17262afbcf6909890ce53fea6ca12994280db7f3a254fafad215147c494cd4163be7bfd8ba57c3de6e746832c372b8c0749a6364e7c3c477a7044001da3213b755a8d4f126ef141da1973aa86e70e5273c487bb01573005c0a439c93683d80aa1a6d090d472b6cbfc1f89fe72ad9175cecf7a58bed9f51f418aca0f3660ad65cb062d9f20cdc397acd2716fabacd352643c55603a12ceec8de6d06fd78530d81da77f1921c5257615bfdf68fb8926cd60dd5462487647945d5d558ca5b1744986367ca43e8b07f22f52a7852d82fb6991bd00de67fda47628df8df4e5ce6149462e793db2f3e12bee416f0b1420c2ff2badc863e58b882ff002cc13597a1a014bff70b35ff1990ecbf19be40d2a60b161de54fec605b7ebe08901d96e3654d8638b96a7455e331455ad5b86bc75178d8e27a666a6b3641de489294e7002af6cb01ff4a13e378666dc77bbded915da6142fc94abbf63343e63c368e097d9f3c0eda4e5dfaa80e808b97bba9019ed98172a062e94af78a51066e5b38fd0457e84a45e3d641cbc4c465c81d07fd4a32fd37992ab5cbcbbfeefdda0ff87d1ccf509d32701ade0ca7fb39e3b07edec88ae5e8116ab192c9f3bf32351dd562ce698a194bc6bcf01871c21625e0c62942aafa3701a1f6fda983413e17c6bb0ac0b366a79901924d4fb876115e8b9c9dd02882d5051afc88636063dde03fec00ce1a65443fe5b22ca3c15bea5938785bc73fdd203db27edff1b9f61938ea449e8f0deabcd7f9da7d6d774418710ac2cc27403a6d8c241a308b76fea8dc4fa3ad980b44b34307bfbea4b57307e370d78bb0f1e238203b90af904aad25678962e036a7e8be3b59c5192400bc4fcc7b20fbaaa733651b9241ff4ea20953a1ab37f34d72f0bc5a5f3ba3a1bb69c07ad68dfb70bd185de5a948be048f3c6c6a081fe22f5dea53df6e1bdbbbdfdd909415b766ee01f78de5ae2130510c03057d8043e61b4934ff551b77f8bd36b2802bd405ff3be5c67711f152aa906a66dbc2c6d32d331807ab99db9403dae2fd0f652ec076d7f5d9aa6def0534793d80547e648815f1dea95d4df6ac19dabac2bfdbd7cfa4933bf1721a860a39901d0630c0b102d3720bd7418807f5669071dbec43b13d1dce46a7058de4e05a58b5d9d21151591fb23bd59c551f00496f9e35e2becc01e5bac7fdfe90c946187727b47334a5a66f2d5006a22f2c718fc821366c3e26ca348642bd05a38a462575a2bec4dfe9120460f82e6b1e860697e380e863295917ff45c64ad237c1caa7dae399b1520fbe8e256788195c30bd2c366afc03e827f5b03fd672191d2a29110ffec619c7231e35062b0fd1dc42a8c93ed2989bc02681e2c09cbcd5623f666f830f3c21dc63d2095723300c5ae7321d6f55cf2ef9cac31d60314fa0d54ea65fc2c9dfd81e5dacdd4528920c1b87cd12db74776304fc42519fd6c7bbc8fe88750c9aedf7ddb0399e0e1d543c39d67622ab53332c1086da457e6d43d9e37e059ee9d1aff2b3ffbbfed035ed40071f312f12cec6385eaeee2a473511dab651a763a9d27c1522aacdd0ff1f0c3de442f5e9dad2110eacac006dae0b704354ae0c6349bf3a6f5683c4594270fe94ff7e07b49dbabb2fcfa2b639449a66ba9039b6920ee128c4b3cc07af0a89798ddaf7806f5c4eeb7c222a9a6e7f089fa955eddf4d76e490648d4a072c582794ad73e2444d11cb4d9295e81ec9dc39902b631e42f66c47253947f819cf55b05917359ee3072beccfb6f86a5e42c66f8115b5a3a536adabc13a3718acf37b4a852f0ef02a613fa05974edd6c49adf3db678ba3cb71f1fdf79f4e448e35d9bd4d51cd640f646abbe1a18cbe2b07483d495652d8b81078d122ef6f3e3b40e5d8518ddb47782df81e7e01421747593f3aadf5b2f0c53ab6c9323459ce6c3df08f1935ed0636a821e6b9257edf24f600cf09226c3ee7c8507e103d2bfaf807379854cf84a49149cd424ac7e2094a0939fe9768b79dfd86069778dcd8129c269741a36bbda9082263143c3e791b5b1c17708870a57200ff79611c12021c999c7bf86aaced6c77da86fac50cf8a577f8e6f162d3738b908baf0cf902d7ca7ec7ec10ba5afb16ab6257754ab4e935ef75f959f8290d8ff45bdebc49e22c6b6f884a94f89dd4672cfdca1aaafa9612dc9ebc9ee64a3593802395f05b920970c0ccac5ef0e92bb6306f6f1b77a3a1a652ba3fa57a9385c3caf7a55e8e0f77b9dec0798b3e0ef4d5fa9f05c5d4027c0b6011440ad26ed2c5bd645a961c0ff72cd51bbbb86b7fae2fd1f2f1fe3f72841de3863b5d0ac5c5c59d8761c0b626f0826905e7e602dcbfd3a1128d93b0d14589af4fee0bd5f2f774fe8fe6d84175f7ddb9271c88d2a7dabab0feb2f2fafeb7b6f530a9f86f4ed0c82f42cf8ad59e6925e85b0e183456b4d4c0aeacaa81f6ecc223747d330caff7ce22ac667a91ca7524fb1c1ff6daa2cb53f6ea674abff60d032e1311827c535e868fcc4079f195f1a9a0d02e80f2d5c88586ea10bd741c14c6025788c48f9decb25c046c0310e3df4695a21135d9bd8869d851305ad974e08b6d5e804561a72b1fe5a723e17f1c23234358054536fded63f44da67249fd861dae0b37719c99693f296569c1e9778406caa7d5fc6dc34de56bd16e502d6aed6376731f872ff72379a1c3e0e99d7db71253cd3378bed839c53a0843537232e51b89b133213c65b577e419e3a073100f80da85284f99a14a7f92f6ae64e9938d4f26f861ba7e95a8aff567b7f52754cd23f4f5cfb33e4c550770413978a0446d8e2be91a173aa085ac9d211cbce7ade1d4c96b0cd1f291548917effea13283c3bf3e251ab75f9240c8ea0d71e01788189929c554b4fe29fc66b8e2d08cb87ab14cc5b850a7019857c985005b2cdf7638ae628e4fe3717cfa548ce30f21100999473f8c9374195d3918e5775e396da13f6f53496f4a906ccdd6724d1c7ea6685202a94cb20d6e448de1bfd309f0546658f595e890200f7100962cf38004cc8f8a50958736bc369366ce0901d1b9e236ebae2022d200705bad53d910df689d3f2419cc9362be1c449c04ccdf56c162e9fcc3dc034c7120313ba016f9efb7b2ff1b7f921e900aae7c6707e3ed9cba74d0c0526ae2a0dd2a2cc57a92e765f767ab72a0aa2052ca88f411f29ee211ffafa0c6d68403cf2cf3fa7426bf2ab4cd8e2d379124b776e2d4fa1643190ec840173a518ce64abded5f3a5cf1b7acf07cdedf4f0dd9c3cdc403cef22ba9787db62b119099a7d3d084fdb67d187821badd23cc386c12efb15c93694b2d00e35da0eb853e94634f737e26e4b130035cc21e3f6ab46d7264dbdb9dfef35da2b2b71e149811f2e2c7cda4e336ca14dbd0907e1c693c6b4d2ebd2fcdec236c9a890690f89bc62ff2b6bd1079befd3f2f496cab2ed2c2490cb07843a7ab6b82fb0cf25e74b0627761c1e899abf9a890526341a0cee8f79acf1374e91a9960651570bbd92f3705e627780afdcdfc51d2d9424dca25524436c57a69d0c44d96673e83d0f3752ebdc66deda901a2b2b94bfad245843284bc5087c7250b82a972684092db37ed9dae02265cf700842f69a949b763a1d39479887547f53c7307ea42597f9217c1abf33403a986fc0068d6726ce2f12dfa88afbc82c1fb0b2583630a4984de927b159101c72fc1b3ede7f2630d0f949024bf346cc97e06d31077ad9b4d753ce9a64803de32d729ca059a55bc30834f6f88c5d4d7bb337ecf4d3b004f25270d7fe45507aee99d123eacc840b04fa9ba16aa81e305ac963ac66db2d7e2b68d72ca5c6e3215826bfb08a07571ddd0078ba8b6c6b30bb413cf56ee39eb68635c63a61717ee9d836f33746a1b2f9d5895857858b9979b6d5e34419134ca5ae4aafc2ff101007469a77ada2c61a17f881dec6e32a9388a69d09bb5563ec7762b51a3a86e2f489853c448553cce598952205a8e36f91d4010b657957cfb274d96e671e88293e6d46b26152f5938727d39bf76f9c3344cad5456740ff0225b65547ed290cec15f33b051eeef05a9ba1234fe526ccfb2a6c5c93e02a6adf43b0b61c54fabca863c1aa7775b661d6d6965483de21bb8e555eda1f09b3d9907b60f24be396a81296f8cab8bb87c85ba437860d004213c1cb12a9eaae9a597f7e551939d4aa59bd9264655100461ab1ef2db3f88aba22500dba48a6e479907a3c3249087259030c8c995d381c8a28da84eb738f3ca801f53732bcc409f01608d87ca265f367e042ed99a522a7eadf09e73e99441462b02c34a0d24d1eb228587f49c8c8a6c611e9520aa4c426a47befecf19e97d02629165ca17abc8bd62ee9d236efa1df979c53cef44b82bb42581deddf09fd4a0973ac6dabc4ed4f6d97cffafa0f10ab2ec18810aba8b0d6816c2b97e4647aa0305258b11e6fae55d71887811fab50036300a7db4cd12b03e86c617ad84c2d5771340440eb162aca3de6df7afc2d4da55b3b7bc29598728fcab967f7a22f225dc23f320d5f24e9696edffe8c48d0d3f728f36cd2e784a505ed78d8a5af251283d7f64d045efb45bf314d958ba30507c6241ea38ef0e7ba4285d236d5003a7eff6ae6615a074c9524115ed9df763ee4663aed527026cc8de7f3bc9b14dc763d075d0fff72476208cf0dc60d8812a77170ba29934d8dc792fda9b97f765c4a408232337d1a0d4ce1b9958719a6722765d23297a70035d76ef4d178e0e3a7c047f9652335cd84ca2ec6d455a4c29c29b9c04a1984b3b3463c9bf134b2e6f27ceed78e595510b748b26b2be458a3f99a7fb4271347e1365bb433a9a3fe1f1742b1f8e6d3927bdd5836a55bb81ed55446b44bdf9b7371879d777dc0d16d074e9824bd418f804597daffb28eccde1e4de91c4c6aaf5425496542d759c97aa0af98b6f9c4231ed92e7b64cf70ccbb895bcb790d3f7f590faed571fb2008232bdf27e42882b374016910f16d1c154e97c84b1d14a87c7d5924c0081ced6c031166833e2779fcb86419107a2841723af02e164ae8601ba163d799634eeabfb63b3c0b312b930b364e9533ac0c8e24f5b1c065bc9a853ebf177846696ce2700b051a02630dd327cfdabcfae05e0ada505c850db3afdaa810cf72a67119a6dd3ce35ce03e1b70764e24860065eec34ab4fbafbb22b4e978ab5fb57b6f57e71bd14a41916aa5de3d70e85cf3e68a629275350fb82249953aa186c7601379fe78a6fddf5290bebe8b081f3674ece5158fcc68165f43537fc99f2bee48b1801fba63c382c78a4d9ec2607395f7ba19f0e04a9a4c009b19fa6bff6aaa5a7f4d3bd14793d68822eb4144c04425d9a0afe1ff8320592dcc3f63fe750999db9fbb26840df0c6eaa9e053da8adc7e0e2977fcebf94be1397b661ae6cfa0e8be1567a01a17e916409922deae1f005e1d58959b7f4b594043d2564a37992735507631dec4faf6ec3f652781e799c7640e6a7acabb4f8243fe699efa2598f5a64ae1d31ba5ee2cd3c31511bed91a58327a767fe0b4654f8acd51f94504c3dbec19fe0fa843c11045ef3d54e76693b9ac963505df01c14471a7639c3d863ea5bfcae7b70243751df557b1876ccb072650f626e8cea23b42279812dad7433fbb65730fde1ac776bfe40536d2acd4da5674a0b3dc65775d5d5d017cb160e6a496ce492b63bceeff61dcfdf882ec8ce6dcc2e1ffda0659a79bda8bd40286b5b547e29d5760804f06d1b87eea0ecee3430de4998e2e8805a25adae237138fa800d341c0e68241778ca9e497333f8938bffe1c4c8e85345ca473b58f4ed9a138bdced6cf18799dbfab2b81246b540abe38033727be93472c5bc24109530da4fe41bd876c2a57e7cdcdb5068125e39bb389b1052172234655961c421eab762d603cf2f295c9603e96efa15abbf9e5047b52590f98258c339ef48276028ac393a67e0cff15021875eb06db46d5b437c40d61fb9fa029f29153a0fa2ba9068b307d9a79cdc10fcdc60a86982265b483512667c6bbcb61d329cec2257a07b91f4b57348fd2e4f79bf836c29fefc7a75befd1ce008ab4d48df631230f1afe468ebc8e12ad3cd65afd53ac5786ee6a49938d8fd4ecbcce826cef4db81d30fcd16ad86e0f3155951aade8ebc824226430d6d6f01b95cbfcdad7628b11d8a980b12daa88a36a589b9aca577cf07afcd87b901d617de3a8767ffa7820e004584d64cf5280c8d2ded6e2e517541d21adeaeaa7e72edbbfccb1e42743e019afef81e840ca6a5471701b89133d5e3fac5ddb408a244c619b104b2b65df8af030e52c12441c9ea388a985ca04502d94e1c1db290baa2c6ee21a6a8fcdd3c46d4ad9b073af5c5c020845817444987f7f73be40bbc5654bd6cdf34341f0812c5a1065745ff988140154dfb9da0a16eade0814b75ca086df10e12508e9d69cb97a33465364e5e12d768ecb716bd7d06c4f1966cb86b259c3b462a463be29a08fee7e1e004520d6cd4a3a5fccad9c33660c9d2267cf7e3eb2c584d209727f25454925269f1591bc7a87e9dff66097c562edeed6a2029eb99165664c5876a023fe17ca05d0da0245d3a95f80ffd6ff4a7ff29883435c33b2968eac6c6d046aeab9aff704e4fe7a4fe7021c7fb233259ed089fe4623c172798a6870befea1be6fe1d1f53cabb4e1c3e21b376b28c4c8258bb5715550811c0355a1daaf68181131acf0d5eb15e8cd09ebeaf64f45c2779aa17a73ccff930f63e50d0729b7a5ba9a2e9cc1916ab6e826a13dc863bda3808671ceb5cc5f596375da6e10ec05450ea80b6d550a9f7af04704eb10f628205ec1a294c109fa8a29f24228162ef464fc2a70677ac36c57b630f43c8224b4308534272711e4d28497473e930505c19fd66bf68b86a5db871ad573419869caa46ab6e7e539edcdfb04628b7b119e", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 59.059848213s ago: executing program 6 (id=2129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58e04"]) 56.238838302s ago: executing program 6 (id=2142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = io_uring_setup(0xbab, &(0x7f00000000c0)={0x0, 0x3709, 0x400, 0x3, 0x7ffffffe, 0x0, r0}) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 55.793449489s ago: executing program 6 (id=2145): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x18e5811, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 55.605452368s ago: executing program 36 (id=1980): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 55.467148838s ago: executing program 6 (id=2149): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c00)={0x84, &(0x7f0000001cc0)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 54.728591304s ago: executing program 6 (id=2157): r0 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) listen(r1, 0x8) accept4$llc(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.673152417s ago: executing program 37 (id=2157): r0 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) listen(r1, 0x8) accept4$llc(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.142931888s ago: executing program 5 (id=2229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 47.98448117s ago: executing program 5 (id=2233): r0 = open(&(0x7f00000000c0)='.\x00', 0x50000, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 47.844035693s ago: executing program 5 (id=2234): r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) r2 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x60002002}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x60000004}) 47.707394911s ago: executing program 5 (id=2236): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 47.617031895s ago: executing program 5 (id=2237): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty=0xe0000000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) 47.264378862s ago: executing program 5 (id=2239): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 47.095178162s ago: executing program 38 (id=2239): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 26.351966417s ago: executing program 8 (id=2440): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) 25.916444931s ago: executing program 8 (id=2446): r0 = io_uring_setup(0x4724, &(0x7f0000000140)) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0x1e40, 0x4) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000080)=@id, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="a4", 0x1}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x18) 25.732564285s ago: executing program 8 (id=2450): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) 25.71611685s ago: executing program 8 (id=2451): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 25.428276234s ago: executing program 8 (id=2456): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 25.327232652s ago: executing program 8 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.288628236s ago: executing program 39 (id=2458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 9.337222906s ago: executing program 9 (id=2636): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d00011c8500"/20, @ANYRES32=r3, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}}, 0x4804) 9.13845982s ago: executing program 9 (id=2638): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95b2}}]}]}}]}, 0x50}}, 0x4004010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.967910837s ago: executing program 9 (id=2641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x1}}}}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 8.710702122s ago: executing program 9 (id=2644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 8.548427364s ago: executing program 9 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7.683434254s ago: executing program 9 (id=2654): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 7.476890627s ago: executing program 40 (id=2654): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) 3.642282623s ago: executing program 2 (id=2679): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x7fffffff}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='&'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.550268128s ago: executing program 2 (id=2680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000000000000000004001feffff050000000f0100004a82ab46030000001500000000000000000000000000000007000000020000000700000000000080030000000a0000000900000000000000000000000000000001000040fcffffff0600000001000000feff00000e000000873600000000000000000000000000000a0000000500000000000000000000000200000006000000000000000000000000000000000000000b0000000f000000050000000008000004000000010000000900000000000000000000000000000019000080"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.18042307s ago: executing program 2 (id=2684): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x0, 0xd}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.612443229s ago: executing program 1 (id=2690): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 2.516559264s ago: executing program 1 (id=2691): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.454938571s ago: executing program 2 (id=2692): r0 = io_uring_setup(0x1fe6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x4) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4040001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.321453337s ago: executing program 2 (id=2693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 2.111533989s ago: executing program 2 (id=2695): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.66305217s ago: executing program 1 (id=2698): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x145842, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 728.124643ms ago: executing program 1 (id=2703): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000080)=""/119, 0x77, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000500)=""/182, 0xb6, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 663.145035ms ago: executing program 1 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f00000003c0)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x2) read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1}, 0x18) 551.041203ms ago: executing program 4 (id=2705): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsopen(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001440)={0x0, 0x87e, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000500)={0x80, 0xa44, 0x0, 0x0, 0xfffffffffffffe77, 0xffffffffffffff56}) 456.380533ms ago: executing program 1 (id=2706): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x8, 0x0, 0x0, 0x3}}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 387.21354ms ago: executing program 4 (id=2707): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65001000000c00028008000200e0"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7b6c}]}}]}, 0x38}}, 0x800) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a8170088a8", 0x33fe0}], 0x1}, 0x0) 275.119427ms ago: executing program 4 (id=2708): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x39) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x24, r2, 0x201, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}}, 0x0) 178.577224ms ago: executing program 4 (id=2709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 149.138999ms ago: executing program 4 (id=2710): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 0s ago: executing program 4 (id=2711): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x7, 0x6}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x6, 0xfff1}, {}, {0x0, 0x3}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): ing 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.665087][ T5879] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 186.674241][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.684142][ T5879] usb 6-1: config 0 descriptor?? [ 186.996130][ T9619] chnl_net:caif_netlink_parms(): no params data found [ 187.277989][ T5879] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 187.285462][ T5879] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 187.295165][ T5879] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.001C/input/input28 [ 187.312067][ T5879] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 187.480553][ T5877] usb 6-1: USB disconnect, device number 5 [ 187.516418][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.532813][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.540024][ T9619] bridge_slave_0: entered allmulticast mode [ 187.561794][ T9619] bridge_slave_0: entered promiscuous mode [ 187.591413][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.603196][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.610348][ T9619] bridge_slave_1: entered allmulticast mode [ 187.622325][ T9619] bridge_slave_1: entered promiscuous mode [ 187.640103][ T9544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 187.683948][ T9544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 187.711097][ T9544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 187.735291][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.762175][ T9544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.787209][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.887448][ T9619] team0: Port device team_slave_0 added [ 187.895702][ T9619] team0: Port device team_slave_1 added [ 187.970024][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.989903][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.023910][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.054221][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.061189][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.087344][ T5843] Bluetooth: hci3: command tx timeout [ 188.098075][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.207903][ T9619] hsr_slave_0: entered promiscuous mode [ 188.222239][ T9619] hsr_slave_1: entered promiscuous mode [ 188.227930][ T5843] Bluetooth: hci4: command tx timeout [ 188.249157][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.262645][ T9619] Cannot create hsr debugfs directory [ 188.329983][ T9734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.409792][ T9544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.533929][ T9544] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.569027][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.576184][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.605168][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.612309][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.728651][ T9619] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 188.751492][ T9619] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 188.768702][ T9619] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 188.778278][ T9619] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 188.785369][ T5877] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 188.942781][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 188.951344][ T5877] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 188.968225][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.985326][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.009101][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.018768][ T5877] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 189.031878][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.048562][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.055722][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.072724][ T5877] usb 7-1: Product: syz [ 189.076921][ T5877] usb 7-1: Manufacturer: syz [ 189.081533][ T5877] usb 7-1: SerialNumber: syz [ 189.113864][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.120995][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.144253][ T5877] usb 7-1: config 0 descriptor?? [ 189.172133][ T5877] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 189.196731][ T5877] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 189.211609][ T9544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.317632][ T9769] input: syz0 as /devices/virtual/input/input29 [ 189.421794][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1568'. [ 189.656465][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.775278][ T9544] veth0_vlan: entered promiscuous mode [ 189.782025][ T5877] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 189.790642][ T5877] em28xx 7-1:0.0: Config register raw data: 0x56 [ 189.815385][ T9544] veth1_vlan: entered promiscuous mode [ 189.892826][ T5878] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 189.910789][ T9544] veth0_macvtap: entered promiscuous mode [ 189.937549][ T9544] veth1_macvtap: entered promiscuous mode [ 189.996646][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.007620][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.019000][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.030042][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.040414][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.051250][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.065339][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.068183][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.082821][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.097387][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.109570][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.123407][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.131721][ T9800] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.159556][ T5843] Bluetooth: hci3: command tx timeout [ 190.164288][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.182671][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.182743][ T5878] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.200601][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.203952][ T5877] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 190.219162][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.229068][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.229863][ T5877] em28xx 7-1:0.0: No AC97 audio processor [ 190.252907][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.264453][ T5878] usb 2-1: config 0 descriptor?? [ 190.276967][ T5877] usb 7-1: USB disconnect, device number 6 [ 190.283932][ T5877] em28xx 7-1:0.0: Disconnecting em28xx [ 190.289518][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.306091][ T5877] em28xx 7-1:0.0: Freeing device [ 190.321300][ T5843] Bluetooth: hci4: command tx timeout [ 190.328028][ T9544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.342848][ T9544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.380069][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.421455][ T9544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.437953][ T9544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.451691][ T9544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.467981][ T9544] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.499754][ T9619] veth0_vlan: entered promiscuous mode [ 190.537898][ T9619] veth1_vlan: entered promiscuous mode [ 190.605155][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.609904][ T9619] veth0_macvtap: entered promiscuous mode [ 190.619358][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.637519][ T9619] veth1_macvtap: entered promiscuous mode [ 190.666648][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.676613][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.677527][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.698703][ T5878] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 190.712271][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.727647][ T5878] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 190.732635][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.752745][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.763250][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.773840][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.782953][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.784049][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.801896][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.812046][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.829734][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.843997][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.854646][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.865924][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.876145][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.886847][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.903288][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.919439][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.930819][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.942123][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.944311][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.952646][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.964036][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.990534][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.994626][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.002086][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.042022][ T9619] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.042769][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.057912][ T9619] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.073974][ T9619] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.089225][ T9619] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.092165][ T5918] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.114026][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.131411][ T5918] usb 6-1: config 0 descriptor?? [ 191.241853][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.251573][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.308327][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.328637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.547974][ T5907] usb 2-1: USB disconnect, device number 17 [ 191.563297][ T5918] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 191.579251][ T5918] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 191.782655][ T5878] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 191.946042][ T5878] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 191.963345][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.971993][ T5878] usb 7-1: Product: syz [ 191.984375][ T5878] usb 7-1: Manufacturer: syz [ 191.989006][ T5878] usb 7-1: SerialNumber: syz [ 192.000145][ T5878] usb 7-1: config 0 descriptor?? [ 192.011510][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 192.022745][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 192.060500][ T9846] ceph: No mds server is up or the cluster is laggy [ 192.227949][ T9831] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 192.248180][ T5878] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 192.248774][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 192.267543][ T5878] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 192.285880][ T5878] usb 7-1: USB disconnect, device number 7 [ 192.383197][ T5843] Bluetooth: hci4: command tx timeout [ 192.442838][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 192.595545][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 192.615097][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 192.635404][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.654961][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.667471][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.678434][ T5876] usb 2-1: config 0 descriptor?? [ 192.690480][ T9851] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 192.727389][ T9866] netlink: 'syz.7.1601': attribute type 1 has an invalid length. [ 192.736361][ T9866] netlink: 'syz.7.1601': attribute type 1 has an invalid length. [ 192.745538][ T9866] netlink: 9340 bytes leftover after parsing attributes in process `syz.7.1601'. [ 192.756635][ T9866] netlink: 'syz.7.1601': attribute type 1 has an invalid length. [ 192.901460][ T9872] input: syz0 as /devices/virtual/input/input30 [ 192.975057][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1605'. [ 193.117682][ T5876] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 193.137708][ T5876] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 193.159363][ T5876] plantronics 0003:047F:FFFF.001F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 193.260098][ T9891] netlink: 'syz.6.1612': attribute type 10 has an invalid length. [ 193.292361][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.305477][ T9891] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 193.339594][ T9894] overlayfs: conflicting lowerdir path [ 193.375138][ T5876] usb 2-1: USB disconnect, device number 18 [ 193.694694][ T5879] usb 6-1: USB disconnect, device number 6 [ 193.972448][ T9925] batadv0: entered promiscuous mode [ 193.999158][ T9929] netlink: 'syz.7.1629': attribute type 9 has an invalid length. [ 194.008271][ T9929] netlink: 134660 bytes leftover after parsing attributes in process `syz.7.1629'. [ 194.019597][ T9925] batadv0: left promiscuous mode [ 194.029774][ T9927] input: syz1 as /devices/virtual/input/input31 [ 194.198702][ T9940] input: syz1 as /devices/virtual/input/input32 [ 194.408651][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.943012][ T5918] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 195.083788][ T9988] veth1_to_hsr: entered promiscuous mode [ 195.104418][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 195.104454][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1656'. [ 195.113571][ T5918] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 195.143617][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.158678][ T5918] usb 7-1: Product: syz [ 195.179369][ T5918] usb 7-1: Manufacturer: syz [ 195.184101][ T5918] usb 7-1: SerialNumber: syz [ 195.193864][ T5918] usb 7-1: config 0 descriptor?? [ 195.315456][ T9988] hsr_slave_1 (unregistering): left promiscuous mode [ 195.406576][ T5918] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.617845][ T5918] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 195.642060][ T5918] usb 7-1: USB disconnect, device number 8 [ 196.412869][T10041] hugetlbfs: syz.1.1675 (10041): Using mlock ulimits for SHM_HUGETLB is obsolete [ 196.463325][T10043] netlink: 'syz.7.1676': attribute type 3 has an invalid length. [ 196.482207][T10043] netlink: 130984 bytes leftover after parsing attributes in process `syz.7.1676'. [ 196.661237][T10050] netlink: 'syz.7.1680': attribute type 1 has an invalid length. [ 196.762733][T10050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.773624][T10050] bond1: (slave bond2): making interface the new active one [ 196.782052][T10050] bond1: (slave bond2): Enslaving as an active interface with an up link [ 196.873034][T10063] input: syz1 as /devices/virtual/input/input33 [ 197.292828][ T5876] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 197.483149][ T5876] usb 8-1: Using ep0 maxpacket: 16 [ 197.505886][ T5876] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 197.522757][ T5876] usb 8-1: config 0 has no interface number 0 [ 197.531763][ T5876] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.562656][ T5876] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.591368][ T5876] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 197.603556][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 197.611657][ T5876] usb 8-1: Product: syz [ 197.616379][ T5876] usb 8-1: SerialNumber: syz [ 197.623115][ T5876] usb 8-1: config 0 descriptor?? [ 197.630819][ T5876] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 197.643782][ T5876] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input34 [ 197.929445][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.938839][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.946036][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.953883][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.960957][ T5879] usb 8-1: USB disconnect, device number 2 [ 197.966866][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 197.966893][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 198.102380][ T5879] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 198.362688][ T5876] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 198.531407][ T5876] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.558213][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.586066][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.606777][ T5876] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.633510][ T5876] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.649084][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.665409][ T5876] usb 9-1: config 0 descriptor?? [ 198.722718][ T5907] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 198.785010][T10121] random: crng reseeded on system resumption [ 198.884704][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.884741][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.884805][ T5907] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 198.884830][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.887208][ T5907] usb 6-1: config 0 descriptor?? [ 198.983972][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 198.983994][ T29] audit: type=1326 audit(1731586459.596:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10118 comm="syz.7.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafc57e719 code=0x7fc00000 [ 199.090343][ T5876] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 199.131506][ T5876] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 199.318720][ T5907] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 199.329862][ T5907] hid-thrustmaster 0003:044F:B65D.0021: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 199.343613][ T5907] hid-thrustmaster 0003:044F:B65D.0021: Wrong number of endpoints? [ 199.552362][ C1] hid-thrustmaster 0003:044F:B65D.0021: URB to get model id failed with error -71 [ 199.569597][ T5907] usb 6-1: USB disconnect, device number 7 [ 199.575546][ T29] audit: type=1326 audit(1731586460.186:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10118 comm="syz.7.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faafc580637 code=0x7fc00000 [ 199.707682][ T5878] usb 9-1: USB disconnect, device number 2 [ 199.869178][T10146] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 200.394995][T10160] loop8: detected capacity change from 0 to 7 [ 200.426753][T10160] Dev loop8: unable to read RDB block 7 [ 200.443200][T10160] loop8: unable to read partition table [ 200.449021][T10160] loop8: partition table beyond EOD, truncated [ 200.538171][T10160] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 200.538171][T10160] ) failed (rc=-5) [ 200.747991][T10185] 9pnet: p9_errstr2errno: server reported unknown error ^P [ 200.832758][ T5907] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 200.962077][T10195] batadv0: entered promiscuous mode [ 200.980677][T10193] batadv0: left promiscuous mode [ 201.012143][ T5907] usb 8-1: Using ep0 maxpacket: 16 [ 201.039421][ T5907] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 201.051201][ T5907] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.110570][ T5907] usb 8-1: config 0 has no interface number 0 [ 201.183013][ T5907] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 201.192091][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.208497][ T5907] usb 8-1: Product: syz [ 201.222639][ T5907] usb 8-1: Manufacturer: syz [ 201.227266][ T5907] usb 8-1: SerialNumber: syz [ 201.235209][ T5907] usb 8-1: config 0 descriptor?? [ 201.264723][T10212] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 201.450069][ T5907] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 201.477735][ T5907] usb 8-1: No valid video chain found. [ 201.680065][ T5876] usb 8-1: USB disconnect, device number 3 [ 202.175204][T10253] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 202.402712][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 202.534842][T10276] netlink: 'syz.8.1772': attribute type 10 has an invalid length. [ 202.551784][T10276] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.560961][T10276] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.592909][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 202.606441][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.633856][ T5907] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 202.638183][T10277] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9c4e:18ff:fefd:fc85 error=-28 [ 202.650072][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 202.668928][ T5907] usb 6-1: SerialNumber: syz [ 202.689327][ T5907] usb 6-1: config 0 descriptor?? [ 202.712492][ T5907] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 202.736639][ T5907] uvcvideo 6-1:0.0: Entity type for entity Output 255 was not initialized! [ 202.771397][ T5907] usb 6-1: Failed to create links for entity 255 [ 202.790522][ T5907] usb 6-1: Failed to register entities (-22). [ 202.982963][ T51] usb 6-1: USB disconnect, device number 8 [ 203.018463][T10277] infiniband syz1: set active [ 203.040486][T10277] infiniband syz1: added team_slave_0 [ 203.238994][T10277] RDS/IB: syz1: added [ 203.246171][T10277] smc: adding ib device syz1 with port count 1 [ 203.252843][T10277] smc: ib device syz1 port 1 has pnetid [ 203.921548][T10299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.948706][T10300] input: syz0 as /devices/virtual/input/input36 [ 205.045494][T10349] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1803'. [ 205.827798][T10380] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 205.907501][T10382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.921021][T10382] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 205.972664][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 206.075293][T10378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.157031][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 206.176566][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.190921][T10396] netlink: 'syz.1.1823': attribute type 3 has an invalid length. [ 206.202219][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.230629][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.232630][T10396] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1823'. [ 206.254609][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.276275][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.286894][ T29] audit: type=1326 audit(1731586466.896:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10397 comm="syz.6.1824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f998557e719 code=0x0 [ 206.292922][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.586135][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 206.591673][ T8] usbtmc 6-1:16.0: can't read capabilities [ 206.799641][ T5876] usb 6-1: USB disconnect, device number 9 [ 206.822291][ T29] audit: type=1326 audit(1731586467.426:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 206.987557][ T8] kernel read not supported for file /vga_arbiter (pid: 8 comm: kworker/0:0) [ 207.328415][ T5142] Bluetooth: hci5: sending frame failed (-49) [ 207.342695][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 207.541878][ T29] audit: type=1326 audit(1731586468.146:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.602658][ T29] audit: type=1326 audit(1731586468.146:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.604459][T10436] input: syz0 as /devices/virtual/input/input37 [ 207.662103][ T29] audit: type=1326 audit(1731586468.146:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.719292][ T29] audit: type=1326 audit(1731586468.146:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.761209][ T29] audit: type=1326 audit(1731586468.146:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.790301][ T29] audit: type=1326 audit(1731586468.146:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.837674][T10447] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 207.868835][T10448] netlink: 4272 bytes leftover after parsing attributes in process `syz.8.1843'. [ 207.880887][ T29] audit: type=1326 audit(1731586468.176:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10411 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f227e37e719 code=0x7fc00000 [ 207.894966][T10448] netlink: 'syz.8.1843': attribute type 3 has an invalid length. [ 207.924864][T10448] netlink: 113 bytes leftover after parsing attributes in process `syz.8.1843'. [ 208.052869][T10456] 9pnet: p9_errstr2errno: server reported unknown error @hQ$I6}hEҌi) [ 208.160954][T10466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1851'. [ 208.171942][T10469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.342884][T10481] syz.7.1854 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.179376][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'. [ 209.332789][ T5876] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 209.522738][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 209.533702][ T5876] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 209.547900][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.560664][ T5876] usb 6-1: Product: syz [ 209.579728][ T5876] usb 6-1: Manufacturer: syz [ 209.593629][ T5876] usb 6-1: SerialNumber: syz [ 209.595489][T10524] hub 2-0:1.0: USB hub found [ 209.604752][ T5876] usb 6-1: config 0 descriptor?? [ 209.613806][T10524] hub 2-0:1.0: 1 port detected [ 209.659994][ T5876] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 209.922880][ T5907] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.062824][ T5878] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 210.085644][ T5907] usb 2-1: config 0 has no interfaces? [ 210.096929][ T5907] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.112618][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.122279][ T5907] usb 2-1: Product: syz [ 210.129563][ T5907] usb 2-1: Manufacturer: syz [ 210.134997][ T5907] usb 2-1: SerialNumber: syz [ 210.142135][ T5907] usb 2-1: config 0 descriptor?? [ 210.212682][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 210.234208][ T5878] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.252601][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 210.272614][ T5878] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 210.292881][ T5878] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 210.304333][ T5878] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 210.313578][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.327150][ T5878] hub 7-1:1.0: bad descriptor, ignoring hub [ 210.342652][ T5878] hub 7-1:1.0: probe with driver hub failed with error -5 [ 210.350321][ T5878] cdc_wdm 7-1:1.0: skipping garbage [ 210.360010][ T5878] cdc_wdm 7-1:1.0: skipping garbage [ 210.366913][ T5878] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 210.367657][ T51] usb 2-1: USB disconnect, device number 19 [ 210.373288][ T5878] cdc_wdm 7-1:1.0: Unknown control protocol [ 210.654298][ T5878] usb 7-1: USB disconnect, device number 9 [ 210.843334][ T5876] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 210.857956][ T5876] usb 6-1: USB disconnect, device number 10 [ 210.992898][ T5878] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 211.093177][ T5918] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 211.142908][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 211.152280][ T5878] usb 7-1: config index 0 descriptor too short (expected 92, got 18) [ 211.163050][ T5878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.181588][ T5878] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.199756][ T5878] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 211.209340][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.226328][ T5878] hub 7-1:1.0: bad descriptor, ignoring hub [ 211.232755][ T5878] hub 7-1:1.0: probe with driver hub failed with error -5 [ 211.240539][ T5878] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 211.257431][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.272630][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.283662][ T5918] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 211.295792][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.306819][ T5918] usb 8-1: config 0 descriptor?? [ 211.391714][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1898'. [ 211.429612][T10581] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.438925][T10581] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.447998][T10581] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.456818][T10581] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.485818][T10581] vxlan0: entered promiscuous mode [ 211.593050][ T972] usb 7-1: USB disconnect, device number 10 [ 211.734709][ T5918] lg-g15 0003:046D:C222.0022: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.7-1/input0 [ 211.944341][ T5876] usb 8-1: USB disconnect, device number 4 [ 213.191824][T10653] : renamed from pim6reg1 [ 213.288199][T10660] hsr0: entered promiscuous mode [ 213.319050][T10660] hsr_slave_0: left promiscuous mode [ 213.365510][T10660] hsr0 (unregistering): left promiscuous mode [ 213.450495][T10662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.463896][T10662] bond0: (slave bond3): Enslaving as an active interface with an up link [ 214.362899][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1963'. [ 214.387165][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1965'. [ 214.413761][ T972] kernel read not supported for file /usbmon0 (pid: 972 comm: kworker/0:2) [ 214.529853][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1969'. [ 214.641205][T10747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.649036][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 214.656360][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 214.663622][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 215.758770][T10807] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 216.224962][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2004'. [ 216.447951][T10826] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 216.457128][T10824] syzkaller1: entered promiscuous mode [ 216.462487][T10826] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.463459][ T5879] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 216.481319][T10824] syzkaller1: entered allmulticast mode [ 216.647141][ T5879] usb 9-1: Using ep0 maxpacket: 32 [ 216.664337][ T5879] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 216.679160][ T5879] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 216.710474][ T5843] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 216.715633][ T5879] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 216.719189][ T5843] Bluetooth: hci0: Injecting HCI hardware error event [ 216.739932][ T5843] Bluetooth: hci0: hardware error 0x00 [ 216.766498][ T5879] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 216.779778][ T5879] usb 9-1: config 0 interface 0 has no altsetting 0 [ 216.871172][ T5879] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 216.888444][ T5879] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 216.931251][ T5879] usb 9-1: Product: syz [ 216.942734][ T5879] usb 9-1: Manufacturer: syz [ 216.947806][ T5879] usb 9-1: SerialNumber: syz [ 216.980777][ T5879] usb 9-1: config 0 descriptor?? [ 217.027949][ T5879] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 217.046845][ T5879] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 218.063999][ T5876] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 218.290040][ T5876] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 218.309086][ T5876] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 218.327285][ T5876] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 218.349554][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.378160][T10869] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 218.409197][ T5876] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.621394][ T972] usb 9-1: USB disconnect, device number 3 [ 218.643386][ T972] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 218.945723][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 219.061039][ T51] usb 6-1: USB disconnect, device number 11 [ 219.321879][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2035'. [ 219.538420][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2038'. [ 219.714906][T10909] 9pnet: p9_errstr2errno: server reported unknown error @hQI [ 219.724296][T10910] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 219.742037][T10910] macvtap1: entered promiscuous mode [ 219.763168][T10910] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 219.823003][ T5879] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 220.014419][ T5879] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 220.032608][ T5879] usb 7-1: config 0 has no interface number 0 [ 220.042654][ T5879] usb 7-1: config 0 interface 16 has no altsetting 0 [ 220.076956][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 220.095383][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.122694][ T5879] usb 7-1: Product: syz [ 220.126892][ T5879] usb 7-1: Manufacturer: syz [ 220.131502][ T5879] usb 7-1: SerialNumber: syz [ 220.163924][ T5879] usb 7-1: config 0 descriptor?? [ 220.383015][ T5879] usbtest 7-1:0.16: couldn't get endpoints, -71 [ 220.398220][ T5879] usbtest 7-1:0.16: probe with driver usbtest failed with error -71 [ 220.425445][ T5879] usb 7-1: USB disconnect, device number 11 [ 220.913792][ T5879] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 221.083619][ T5879] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 221.100905][ T5879] usb 7-1: config 0 has no interface number 0 [ 221.117239][ T5879] usb 7-1: config 0 interface 16 has no altsetting 0 [ 221.130572][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 221.142767][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.153014][ T5879] usb 7-1: Product: syz [ 221.157275][ T5879] usb 7-1: Manufacturer: syz [ 221.162178][ T5879] usb 7-1: SerialNumber: syz [ 221.169023][ T5879] usb 7-1: config 0 descriptor?? [ 221.908490][ T5879] usbtest 7-1:0.16: Linux gadget zero [ 221.919245][ T5879] usbtest 7-1:0.16: high-speed {control in/out int-out} tests (+alt) [ 221.957665][T10989] vlan2: entered promiscuous mode [ 221.973075][T10989] vlan2: entered allmulticast mode [ 221.979069][T10989] xfrm0: entered promiscuous mode [ 222.003308][T10989] xfrm0: entered allmulticast mode [ 222.010102][T10989] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 222.111669][ T5879] usb 7-1: USB disconnect, device number 12 [ 222.965859][T11023] netlink: 'syz.6.2091': attribute type 9 has an invalid length. [ 222.982069][T11023] netlink: 134660 bytes leftover after parsing attributes in process `syz.6.2091'. [ 224.222727][ T51] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 224.392111][T11050] loop2: detected capacity change from 0 to 7 [ 224.401862][ T51] usb 6-1: config 0 has no interfaces? [ 224.412149][ T51] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.429905][T11050] Dev loop2: unable to read RDB block 7 [ 224.441966][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.457092][T11050] loop2: unable to read partition table [ 224.469997][T11050] loop2: partition table beyond EOD, truncated [ 224.496104][T11050] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 224.567913][ T51] usb 6-1: config 0 descriptor?? [ 224.793637][ T51] usb 6-1: USB disconnect, device number 12 [ 224.932143][ T5879] kernel write not supported for file bpf-prog (pid: 5879 comm: kworker/1:6) [ 224.983629][ T5876] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 225.145981][ T5876] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 225.173342][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.213507][ T5876] usb 9-1: config 0 descriptor?? [ 225.222177][ T5876] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 225.434382][ T5876] gp8psk: usb in 128 operation failed. [ 225.652136][ T5876] gp8psk: usb in 146 operation failed. [ 225.665077][ T5876] gp8psk: failed to get FW version [ 225.679076][ T5876] gp8psk: usb in 149 operation failed. [ 225.691638][ T5876] gp8psk: failed to get FPGA version [ 225.901960][ T5876] gp8psk: usb out operation failed. [ 225.915260][ T5876] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 225.945206][ T5876] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 225.972970][ T5876] usb 9-1: USB disconnect, device number 4 [ 226.771343][T11119] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 226.798638][T11119] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 229.241368][T11131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 229.347293][T11131] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 230.825057][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.841337][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.851034][ T5879] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 230.862471][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.877782][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.888514][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.897463][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.030708][ T5879] usb 9-1: Using ep0 maxpacket: 16 [ 231.043274][ T5879] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 231.066279][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.092848][ T1091] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.110526][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.141388][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 231.220579][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.231355][ T5879] usb 9-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 231.243346][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.259862][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.268356][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.279842][ T5879] usb 9-1: config 0 descriptor?? [ 231.285848][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.296339][ T1091] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.315064][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.322452][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.416653][ T1091] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.550183][ T1091] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.753285][ T5879] input: HID 0458:501a as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:501A.0023/input/input40 [ 231.769557][ T5879] input: HID 0458:501a as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:501A.0023/input/input41 [ 231.798964][ T5879] kye 0003:0458:501A.0023: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:501a] on usb-dummy_hcd.8-1/input0 [ 231.908545][T11181] chnl_net:caif_netlink_parms(): no params data found [ 231.932923][ T5879] usb 9-1: USB disconnect, device number 5 [ 231.933628][ T1091] bridge_slave_1: left allmulticast mode [ 231.946787][ T1091] bridge_slave_1: left promiscuous mode [ 231.952440][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.966977][ T1091] bridge_slave_0: left allmulticast mode [ 231.977868][ T1091] bridge_slave_0: left promiscuous mode [ 231.987390][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.622048][T11232] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 232.692560][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.716203][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.732189][ T1091] bond0 (unregistering): (slave bond3): Releasing backup interface [ 232.741760][ T1091] bond0 (unregistering): Released all slaves [ 232.757309][ T1091] bond1 (unregistering): (slave bond2): Releasing backup interface [ 232.768696][ T1091] bond1 (unregistering): Released all slaves [ 232.917348][ T1091] bond2 (unregistering): Released all slaves [ 232.958571][ T5843] Bluetooth: hci1: command tx timeout [ 233.127377][ T1091] bond3 (unregistering): Released all slaves [ 233.434693][ T5142] Bluetooth: hci3: command tx timeout [ 233.504960][T11181] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.512090][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.533690][T11181] bridge_slave_0: entered allmulticast mode [ 233.540998][T11181] bridge_slave_0: entered promiscuous mode [ 233.646223][T11181] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.659291][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.677644][T11181] bridge_slave_1: entered allmulticast mode [ 233.686805][T11181] bridge_slave_1: entered promiscuous mode [ 233.693643][T11189] chnl_net:caif_netlink_parms(): no params data found [ 233.946967][ T1091] hsr_slave_0: left promiscuous mode [ 233.989439][ T1091] hsr_slave_1: left promiscuous mode [ 234.002052][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.032808][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.052739][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.063518][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.105994][ T1091] veth1_macvtap: left promiscuous mode [ 234.111526][ T1091] veth0_macvtap: left promiscuous mode [ 234.117880][T11286] Process accounting resumed [ 234.118177][ T1091] veth1_vlan: left promiscuous mode [ 234.127994][ T1091] veth0_vlan: left promiscuous mode [ 234.222918][T11288] kernel read not supported for file /file1 (pid: 11288 comm: syz.5.2194) [ 234.243956][ T29] audit: type=1800 audit(1731586750.856:51): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2194" name="file1" dev="mqueue" ino=36982 res=0 errno=0 [ 235.023913][ T5843] Bluetooth: hci1: command tx timeout [ 235.502957][ T5843] Bluetooth: hci3: command tx timeout [ 235.774137][T11323] UBIFS error (pid: 11323): cannot open "./file0", error -22 [ 235.793654][T11330] netlink: 'syz.5.2208': attribute type 9 has an invalid length. [ 235.809443][T11330] netlink: 134660 bytes leftover after parsing attributes in process `syz.5.2208'. [ 235.815457][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 235.923420][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 236.547611][T11181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.574161][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 236.675623][T11181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.770275][T11181] team0: Port device team_slave_0 added [ 236.861624][T11181] team0: Port device team_slave_1 added [ 236.871258][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.890004][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.912775][T11189] bridge_slave_0: entered allmulticast mode [ 236.942057][T11189] bridge_slave_0: entered promiscuous mode [ 236.972301][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.991561][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.011101][T11189] bridge_slave_1: entered allmulticast mode [ 237.033690][T11189] bridge_slave_1: entered promiscuous mode [ 237.056879][T11181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.070366][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.102942][ T5843] Bluetooth: hci1: command tx timeout [ 237.128593][T11181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.177731][T11181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.218515][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.245768][T11181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.298248][T11189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.342320][T11189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.455797][T11181] hsr_slave_0: entered promiscuous mode [ 237.490733][T11181] hsr_slave_1: entered promiscuous mode [ 237.507920][T11383] netlink: 'syz.8.2228': attribute type 9 has an invalid length. [ 237.516125][T11181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.523319][T11383] netlink: 134660 bytes leftover after parsing attributes in process `syz.8.2228'. [ 237.524092][T11181] Cannot create hsr debugfs directory [ 237.567062][T11189] team0: Port device team_slave_0 added [ 237.582784][ T5843] Bluetooth: hci3: command tx timeout [ 237.590910][T11189] team0: Port device team_slave_1 added [ 237.729961][T11189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.746992][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.781309][T11189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.831736][T11189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.849435][T11189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.879587][T11189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.984655][ T1091] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.186507][ T1091] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.259034][T11189] hsr_slave_0: entered promiscuous mode [ 238.276505][T11189] hsr_slave_1: entered promiscuous mode [ 238.282485][T11189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.295854][T11189] Cannot create hsr debugfs directory [ 238.315455][ T1091] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.426707][ T1091] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.468145][T11181] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.523587][T11181] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.533035][ T5879] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 238.554788][T11181] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 238.651612][T11181] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 238.714344][ T5879] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.728347][ C1] sd 0:0:1:0: [sda] tag#1347 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 238.738794][ C1] sd 0:0:1:0: [sda] tag#1347 CDB: Read(6) 08 00 00 00 85 f0 [ 238.748899][ T5879] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.767182][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.775997][ T5879] usb 9-1: Product: syz [ 238.786116][ T1091] bridge_slave_1: left allmulticast mode [ 238.791849][ T1091] bridge_slave_1: left promiscuous mode [ 238.797983][ T5879] usb 9-1: Manufacturer: syz [ 238.805745][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.821628][ T5879] usb 9-1: SerialNumber: syz [ 238.833823][ T1091] bridge_slave_0: left allmulticast mode [ 238.840224][ T5879] hub 9-1:1.0: bad descriptor, ignoring hub [ 238.854730][ T1091] bridge_slave_0: left promiscuous mode [ 238.860405][ T5879] hub 9-1:1.0: probe with driver hub failed with error -5 [ 238.872920][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.902468][T11408] block nbd1: not configured, cannot reconfigure [ 238.981431][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.993344][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.001690][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.011972][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.020836][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 239.030750][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.200165][ T5142] Bluetooth: hci1: command tx timeout [ 239.317235][T11416] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 239.667656][ T5142] Bluetooth: hci3: command tx timeout [ 239.683040][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.709466][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.730576][ T1091] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 239.751508][ T1091] bond0 (unregistering): Released all slaves [ 239.863670][ T5879] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 239.874207][ T5879] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 239.881624][ T5879] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 240.064616][ T5879] cdc_ncm 9-1:1.0: setting tx_max = 36 [ 240.099611][ T5879] cdc_ncm 9-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 240.150202][T11181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.187874][ T5879] usb 9-1: USB disconnect, device number 6 [ 240.195089][ T5879] cdc_ncm 9-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 240.320805][T11181] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.384512][T11189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.394230][T11189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.425776][T11189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.453003][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 240.480528][T11189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.496778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.503921][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.555053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.562186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.612897][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 240.633866][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 240.648264][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.648290][ T1091] hsr_slave_0: left promiscuous mode [ 240.663318][ T8] usb 2-1: config 0 descriptor?? [ 240.673915][ T1091] hsr_slave_1: left promiscuous mode [ 240.682738][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.690277][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.698800][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.706836][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.729440][ T1091] veth1_macvtap: left promiscuous mode [ 240.735176][ T1091] veth0_macvtap: left promiscuous mode [ 240.740715][ T1091] veth1_vlan: left promiscuous mode [ 240.746258][ T1091] veth0_vlan: left promiscuous mode [ 240.877716][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 240.913965][ T972] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 241.079753][ T972] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 241.099395][ T972] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 241.110184][ T972] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 241.121606][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.142821][T11439] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 241.160716][ T972] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 241.182719][ T5142] Bluetooth: hci0: command tx timeout [ 241.315318][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 241.383358][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 241.412445][ T5879] usb 9-1: USB disconnect, device number 7 [ 241.901722][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.921199][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 241.931571][ T8] asix 2-1:0.0: probe with driver asix failed with error -71 [ 241.935031][T11181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.956660][ T8] usb 2-1: USB disconnect, device number 20 [ 241.965988][T11181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.019479][T11409] chnl_net:caif_netlink_parms(): no params data found [ 242.251831][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.262361][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.270017][T11409] bridge_slave_0: entered allmulticast mode [ 242.278253][T11409] bridge_slave_0: entered promiscuous mode [ 242.297937][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.312668][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.319959][T11409] bridge_slave_1: entered allmulticast mode [ 242.327023][T11409] bridge_slave_1: entered promiscuous mode [ 242.377734][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.423960][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.474160][T11181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.499569][T11189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.519015][T11409] team0: Port device team_slave_0 added [ 242.529878][T11409] team0: Port device team_slave_1 added [ 242.595638][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.607118][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.635592][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.690789][T11189] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.719436][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.736660][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.765686][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.821556][ T1091] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.824868][T11462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.899488][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.906647][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.928164][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.935305][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.972295][ T1091] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.037756][T11409] hsr_slave_0: entered promiscuous mode [ 243.044641][T11409] hsr_slave_1: entered promiscuous mode [ 243.050747][T11409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.072972][T11409] Cannot create hsr debugfs directory [ 243.081859][ T1091] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.159327][T11474] sctp: [Deprecated]: syz.1.2263 (pid 11474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.159327][T11474] Use struct sctp_sack_info instead [ 243.192359][ T1091] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.263005][ T5142] Bluetooth: hci0: command tx timeout [ 243.283263][T11181] veth0_vlan: entered promiscuous mode [ 243.312873][ T5876] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 243.413538][T11181] veth1_vlan: entered promiscuous mode [ 243.472727][ T5876] usb 9-1: Using ep0 maxpacket: 16 [ 243.490798][ T5876] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.497044][T11484] syz.1.2266[11484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.501149][T11484] syz.1.2266[11484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.513526][T11484] syz.1.2266[11484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.531392][ T5876] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.560431][ T1091] bridge_slave_1: left allmulticast mode [ 243.562743][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.568601][ T1091] bridge_slave_1: left promiscuous mode [ 243.582512][ T5876] usb 9-1: Product: syz [ 243.584882][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.597788][ T1091] bridge_slave_0: left allmulticast mode [ 243.604965][ T1091] bridge_slave_0: left promiscuous mode [ 243.605714][ T5876] usb 9-1: Manufacturer: syz [ 243.610678][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.620329][ T5876] usb 9-1: SerialNumber: syz [ 243.633119][ T5876] usb 9-1: config 0 descriptor?? [ 243.656250][ T1091] xfrm0: left allmulticast mode [ 243.763431][ T1091] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 244.008310][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.025128][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.036181][ T1091] bond0 (unregistering): Released all slaves [ 244.049831][ T1091] bond1 (unregistering): Released all slaves [ 244.081838][T11181] veth0_macvtap: entered promiscuous mode [ 244.107095][T11181] veth1_macvtap: entered promiscuous mode [ 244.150879][T11189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.191595][ T1091] tipc: Disabling bearer [ 244.198435][ T1091] tipc: Left network mode [ 244.223997][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.240022][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.254421][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.265550][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.275935][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.287113][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.299622][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.310929][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.322717][T11181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.353471][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.364551][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.377647][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.389988][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.400561][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.411835][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.422047][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.433411][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.445383][T11181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.533153][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 244.550561][T11189] veth0_vlan: entered promiscuous mode [ 244.572715][T11181] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.581489][T11181] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.592136][T11181] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.601203][T11181] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.620539][T11189] veth1_vlan: entered promiscuous mode [ 244.722688][T11409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.727651][ T5876] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 244.739299][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.756733][ T5876] usb 2-1: config 0 descriptor?? [ 244.758020][T11409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.824674][T11409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.851735][T11409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.885792][ T1091] hsr_slave_0: left promiscuous mode [ 244.899378][ T1091] hsr_slave_1: left promiscuous mode [ 244.906268][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.914545][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.922335][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.931021][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.956663][ T1091] veth1_macvtap: left promiscuous mode [ 244.962182][ T1091] veth0_macvtap: left promiscuous mode [ 244.968032][ T1091] veth1_vlan: left promiscuous mode [ 244.973658][ T1091] veth0_vlan: left promiscuous mode [ 245.344479][ T5142] Bluetooth: hci0: command tx timeout [ 245.499806][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 245.553084][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 245.588693][ T5876] usb 2-1: Cannot set autoneg [ 245.599281][ T5876] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 245.622417][ T5876] usb 2-1: USB disconnect, device number 21 [ 245.999837][T11189] veth0_macvtap: entered promiscuous mode [ 246.017013][T11189] veth1_macvtap: entered promiscuous mode [ 246.096888][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.116590][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.131904][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.142355][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.161678][ T8] usb 9-1: USB disconnect, device number 8 [ 246.163758][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.201661][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.213280][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.224420][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.234959][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.245626][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.257295][T11189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.326375][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.339556][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.349495][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.360213][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.370162][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.380757][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.390888][T11189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.401558][T11189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.412795][T11189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.432175][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.441423][T11189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.453319][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.458805][T11189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.470859][T11189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.479962][T11189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.512686][ T8] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 246.612221][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.624506][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.654063][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.661913][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.669897][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.702788][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 246.711761][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.724653][ T8] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 246.736928][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 246.754742][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.756549][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 246.761893][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.771652][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 246.809379][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.816567][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.839103][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 246.886259][ T8] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 246.894104][T11409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.902786][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.910406][T11503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.920686][ T8] usb 9-1: Product: syz [ 246.930706][ T8] usb 9-1: Manufacturer: syz [ 246.938571][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2271'. [ 246.945184][T11503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.948972][ T8] usb 9-1: SerialNumber: syz [ 246.968764][ T8] usb 9-1: config 0 descriptor?? [ 247.230629][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.363427][ T5877] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 247.419433][ T8] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 247.426511][ T5142] Bluetooth: hci0: command tx timeout [ 247.433648][ T8] input input42: Device does not respond to id packet M [ 247.441965][ T8] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 247.449500][ T8] input input42: Device does not respond to id packet P [ 247.457940][ T8] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 247.465657][ T8] input input42: Device does not respond to id packet B [ 247.473816][ T8] input input42: Device does not respond to id packet N [ 247.532739][ T5877] usb 10-1: Using ep0 maxpacket: 32 [ 247.544137][ T5877] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 247.562846][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.579276][T11409] veth0_vlan: entered promiscuous mode [ 247.594611][ T5877] usb 10-1: config 0 descriptor?? [ 247.605407][ T5877] gspca_main: sunplus-2.14.0 probing 041e:400b [ 247.629532][T11409] veth1_vlan: entered promiscuous mode [ 247.666172][T11409] veth0_macvtap: entered promiscuous mode [ 247.674999][ T8] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 247.681719][ T8] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 247.685511][T11409] veth1_macvtap: entered promiscuous mode [ 247.705017][ T8] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 247.727146][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.754003][ T8] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 247.760161][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.783205][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.790595][ T8] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input42 [ 247.800094][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.821607][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.833442][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.846126][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.855378][ T8] usb 9-1: USB disconnect, device number 9 [ 247.861886][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.882605][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.904695][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.923984][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.965422][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.989453][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.999849][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.010378][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.020276][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.030787][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.040664][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.051588][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.061536][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.072229][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.083923][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.094592][T11409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.103503][T11409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.112208][T11409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.121035][T11409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.205470][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.214717][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.317318][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.328254][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.415665][ T5877] gspca_sunplus: reg_r err -32 [ 248.420543][ T5877] sunplus 10-1:0.0: probe with driver sunplus failed with error -32 [ 248.450688][ T5877] usb 10-1: USB disconnect, device number 2 [ 248.488983][T11554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.749205][T11568] netlink: 'syz.4.2287': attribute type 4 has an invalid length. [ 248.855464][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 249.029613][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.042952][ T25] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 249.065496][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.100816][ T25] usb 9-1: config 0 descriptor?? [ 249.109228][ T25] option 9-1:0.0: GSM modem (1-port) converter detected [ 249.335028][ T5877] usb 9-1: USB disconnect, device number 10 [ 249.350770][ T5877] option 9-1:0.0: device disconnected [ 249.520424][T11606] wireguard0: entered promiscuous mode [ 249.532930][T11606] wireguard0: entered allmulticast mode [ 249.821669][T11613] tipc: Failed to remove unknown binding: 66,1,1/0:4046162071/4046162073 [ 249.873283][T11613] tipc: Failed to remove unknown binding: 66,1,1/0:4046162071/4046162073 [ 251.274505][T11650] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 251.382172][T11656] netlink: 'syz.8.2322': attribute type 9 has an invalid length. [ 251.390224][T11656] netlink: 90940 bytes leftover after parsing attributes in process `syz.8.2322'. [ 251.545043][T11662] netlink: 'syz.2.2324': attribute type 4 has an invalid length. [ 251.903716][ T5918] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 252.082164][ T5918] usb 9-1: Using ep0 maxpacket: 32 [ 252.094694][ T5918] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 252.112750][ T5918] usb 9-1: config 0 has no interface number 0 [ 252.118897][ T5918] usb 9-1: config 0 interface 12 has no altsetting 0 [ 252.133211][ T5876] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 252.143845][ T5918] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 252.164263][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.172308][ T5918] usb 9-1: Product: syz [ 252.199092][ T5918] usb 9-1: Manufacturer: syz [ 252.220285][ T5918] usb 9-1: SerialNumber: syz [ 252.226880][ T5918] usb 9-1: config 0 descriptor?? [ 252.312716][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 252.321177][ T5876] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 252.341380][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.354991][ T5876] usb 3-1: Product: syz [ 252.364245][ T5876] usb 3-1: Manufacturer: syz [ 252.379664][ T5876] usb 3-1: SerialNumber: syz [ 252.396726][ T5876] usb 3-1: config 0 descriptor?? [ 252.415758][ T5876] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 253.065361][ T29] audit: type=1326 audit(1731586769.676:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11691 comm="syz.1.2339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x0 [ 253.481384][ T5918] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 253.489191][ T5918] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 253.528942][ T5918] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 253.538913][ T5918] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 253.567328][ T5918] usb 9-1: USB disconnect, device number 11 [ 253.682386][ T5876] gspca_sonixj: reg_w1 err -71 [ 253.774356][ T5876] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 253.797288][ T5876] usb 3-1: USB disconnect, device number 10 [ 253.919132][T11718] batadv_slave_1: entered promiscuous mode [ 253.931529][T11717] batadv_slave_1: left promiscuous mode [ 254.857690][ T29] audit: type=1804 audit(1731586771.456:53): pid=11760 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.2364" name="/newroot/19/file0/bus" dev="ramfs" ino=40817 res=1 errno=0 [ 254.979307][ T29] audit: type=1800 audit(1731586771.586:54): pid=11760 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.2364" name="bus" dev="ramfs" ino=40817 res=0 errno=0 [ 255.742767][ T5142] Bluetooth: hci0: command tx timeout [ 255.838880][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.197571][T11823] input: syz0 as /devices/virtual/input/input43 [ 256.407737][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2392'. [ 257.056221][ T29] audit: type=1326 audit(1731586773.666:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11855 comm="syz.2.2401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bc5f7e719 code=0x0 [ 257.552696][ T5876] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.722690][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 257.743808][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.762440][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.778739][ T5876] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 257.789196][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.807872][ T5876] usb 5-1: config 0 descriptor?? [ 257.861794][T11896] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 258.016401][T11900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.069736][T11904] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 258.237700][ T5876] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 258.436164][ T5876] ft260 0003:0403:6030.0024: chip code: 5e81 abf2 [ 258.636696][ T5876] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 258.848022][ T5876] ft260 0003:0403:6030.0024: failed to retrieve status: -32, no wakeup [ 258.865652][ T5876] ft260 0003:0403:6030.0024: i2c bus error: 0x8a [ 259.066202][ T5876] ft260 0003:0403:6030.0024: failed to reset I2C controller: -71 [ 259.106252][ T5876] usb 5-1: USB disconnect, device number 14 [ 259.302015][ T29] audit: type=1326 audit(1731586775.906:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.350122][ T29] audit: type=1326 audit(1731586775.906:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.391837][ T29] audit: type=1326 audit(1731586775.946:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.434002][ T29] audit: type=1326 audit(1731586775.946:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.486230][ T29] audit: type=1326 audit(1731586775.946:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.528048][ T29] audit: type=1326 audit(1731586775.946:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.551881][ T29] audit: type=1326 audit(1731586775.946:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.617834][ T29] audit: type=1326 audit(1731586775.946:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.661135][ T29] audit: type=1326 audit(1731586775.956:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 259.685187][ T29] audit: type=1326 audit(1731586775.956:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11947 comm="syz.1.2439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x7ffc0000 [ 260.112647][ T5918] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 260.265381][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 260.272190][ T5918] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 260.290147][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.312679][ T5918] usb 5-1: config 0 has no interface number 0 [ 260.323121][ T5918] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.338083][ T5918] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 260.347951][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 260.356540][ T5918] usb 5-1: Product: syz [ 260.361207][ T5918] usb 5-1: SerialNumber: syz [ 260.373522][ T5918] usb 5-1: config 0 descriptor?? [ 260.614001][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.636079][ T5918] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 260.653805][ T5918] usb 5-1: USB disconnect, device number 15 [ 260.690882][T12005] input: syz1 as /devices/virtual/input/input44 [ 260.807246][T12011] loop9: detected capacity change from 0 to 7 [ 260.814722][T12011] Dev loop9: unable to read RDB block 7 [ 260.820338][T12011] loop9: unable to read partition table [ 260.826384][T12011] loop9: partition table beyond EOD, truncated [ 260.834997][T12011] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 260.834997][T12011] ) failed (rc=-5) [ 261.699414][T12050] syz_tun: entered allmulticast mode [ 261.709335][T12049] syz_tun: left allmulticast mode [ 261.892666][ T5876] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 261.982825][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 262.053824][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 262.063521][ T5876] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 262.072713][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.080707][ T5876] usb 2-1: Product: syz [ 262.085003][ T5876] usb 2-1: Manufacturer: syz [ 262.089616][ T5876] usb 2-1: SerialNumber: syz [ 262.096252][ T5876] usb 2-1: config 0 descriptor?? [ 262.142786][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 262.149600][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.159928][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.171200][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.180931][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.190661][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.205023][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.215286][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.225149][ T25] usb 5-1: Manufacturer: syz [ 262.231233][ T25] usb 5-1: config 0 descriptor?? [ 262.497180][ T25] rc_core: IR keymap rc-hauppauge not found [ 262.504328][ T25] Registered IR keymap rc-empty [ 262.509323][ T5876] airspy 2-1:0.0: Board ID: 00 [ 262.514766][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.522910][ T5876] airspy 2-1:0.0: Firmware version: [ 262.542987][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.563598][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 262.576744][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 262.605731][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.645671][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.672868][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.692695][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.712871][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.742773][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.762772][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.792649][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.812794][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.842809][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.863393][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 262.894275][ T25] mceusb 5-1:0.0: Registered И with mce emulator interface version 90 [ 262.902602][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.913723][ T25] usb 5-1: USB disconnect, device number 16 [ 263.514987][ T5876] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 263.526368][ T5876] airspy 2-1:0.0: Registered as swradio24 [ 263.532132][ T5876] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 263.552124][ T5876] usb 2-1: USB disconnect, device number 22 [ 263.706333][T12073] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 263.721217][T12073] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 263.732096][T12073] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.741744][T12073] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.757639][T12073] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.764811][T12073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.773004][T12073] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.780132][T12073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.791345][T12073] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 263.817597][ T1091] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 264.098886][T12087] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2499'. [ 264.118910][T12087] gretap0: entered promiscuous mode [ 265.292641][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 265.332788][ T5876] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 265.443882][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.458029][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.467510][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.475592][ T8] usb 5-1: SerialNumber: syz [ 265.502757][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 265.509680][ T5876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.521268][ T5876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.531338][ T5876] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.544504][ T5876] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.554011][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.564234][ T5876] usb 10-1: config 0 descriptor?? [ 265.987748][ T5876] HID 045e:07da: Invalid code 65791 type 1 [ 266.001509][T12135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.011174][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0025/input/input46 [ 266.012778][T12135] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.031247][ T5876] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 266.049325][T12135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.056510][T12135] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 266.065667][T12135] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 266.074932][T12135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.081011][T12135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.092162][T12135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.120824][T12135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.127275][T12135] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.135520][T12135] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 266.142966][T12135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.152817][T12135] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.170716][T12135] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.189354][ T5918] usb 10-1: USB disconnect, device number 3 [ 266.313884][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 266.337133][ T8] usb 5-1: USB disconnect, device number 17 [ 266.359641][T12155] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2527'. [ 267.162754][ T5918] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 267.262659][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 267.302706][ T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 267.304942][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'. [ 267.317727][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 267.326248][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.338961][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.349476][ T5918] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 267.358762][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.368764][ T5918] usb 5-1: config 0 descriptor?? [ 267.453986][ T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.464860][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.476188][ T8] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.485765][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.494186][ T8] usb 10-1: SerialNumber: syz [ 267.604417][T12187] x_tables: duplicate underflow at hook 4 [ 267.724519][ T8] usb 10-1: 0:2 : does not exist [ 267.755235][ T8] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 267.787081][ T5918] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 267.821077][ T8] usb 10-1: 5:0: cannot get min/max values for control 5 (id 5) [ 267.832807][ T8] usb 10-1: USB disconnect, device number 4 [ 267.873755][T12195] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 267.986999][ T5918] ft260 0003:0403:6030.0026: chip code: 5e81 abf2 [ 268.062712][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.142925][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.149944][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.202718][ T5918] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 268.222792][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.405125][ T5918] ft260 0003:0403:6030.0026: failed to retrieve status: -32, no wakeup [ 268.618000][ T5918] ft260 0003:0403:6030.0026: failed to reset I2C controller: -71 [ 268.650469][ T5918] usb 5-1: USB disconnect, device number 18 [ 268.658298][T12222] loop9: detected capacity change from 0 to 6 [ 268.666675][T12222] loop9: [POWERTEC] p1 [ 268.670933][T12222] loop9: p1 size 46 extends beyond EOD, truncated [ 268.715575][T12222] loop9: [POWERTEC] p1 [ 268.722222][T12222] loop9: p1 size 46 extends beyond EOD, truncated [ 268.882819][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 269.032770][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 269.039770][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.062603][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.090824][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.100406][T12229] ipip0: entered promiscuous mode [ 269.111493][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.134758][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.149308][ T8] usb 3-1: Product: syz [ 269.157711][ T8] usb 3-1: Manufacturer: syz [ 269.162336][ T8] usb 3-1: SerialNumber: syz [ 269.172706][ T8] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 269.179724][ T8] cdc_ncm 3-1:1.0: bind() failure [ 269.352641][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 269.402847][ T25] usb 3-1: USB disconnect, device number 11 [ 269.525063][T12241] fuse: root generation should be zero [ 269.740736][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 269.740754][ T29] audit: type=1326 audit(1731586786.346:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12245 comm="syz.9.2566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31a817e719 code=0x0 [ 270.142642][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.222770][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.228871][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.302680][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.367276][ T29] audit: type=1326 audit(1731586786.976:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12266 comm="syz.1.2575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31397e719 code=0x0 [ 270.802822][ T25] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 270.958683][ T25] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.970045][ T25] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.980771][ T25] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.990071][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.000606][T12272] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 271.009831][ T25] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.386212][ T25] usb 10-1: USB disconnect, device number 5 [ 272.225617][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 272.303026][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.309108][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.382641][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.562933][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 272.566811][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.732675][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 272.733495][ T8] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 272.749928][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.761822][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 272.771284][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.777449][ T25] usb 10-1: config 0 has no interfaces? [ 272.795318][ T25] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 272.823775][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.844004][ T25] usb 10-1: config 0 descriptor?? [ 273.206904][ T8] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 273.218671][ T8] usb 3-1: No valid video chain found. [ 273.292976][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 273.312361][T12334] hub 9-0:1.0: USB hub found [ 273.317700][T12334] hub 9-0:1.0: 1 port detected [ 273.377926][T12336] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 273.443069][ T8] usb 3-1: USB disconnect, device number 12 [ 273.454617][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.467803][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.480678][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.490781][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.517700][T12327] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 273.528936][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.788472][ T25] usb 2-1: USB disconnect, device number 23 [ 274.451280][T12380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2617'. [ 274.813422][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.972763][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 274.979400][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.991204][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.002286][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 275.017172][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 275.028496][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.040754][ T8] usb 2-1: config 0 descriptor?? [ 275.046518][T12387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.055754][ T8] hub 2-1:0.0: USB hub found [ 275.267851][ T8] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 275.336367][ T5878] usb 10-1: USB disconnect, device number 6 [ 275.443138][T12393] ip6gretap1: entered allmulticast mode [ 275.779633][ T8] hid-generic 0003:046D:C314.0027: unknown main item tag 0x0 [ 275.800725][ T8] hid-generic 0003:046D:C314.0027: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 275.800791][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.823994][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.836038][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.846730][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.863383][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.874026][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.149051][ T81] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.173087][ T81] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.191643][ T5879] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 276.333619][ T81] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.345626][ T81] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.358772][T12387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.458272][ T81] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.469595][ T81] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.564727][ T81] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.580874][ T5879] usbhid 2-1:0.0: reset_resume error -1 [ 276.602039][ T81] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.623445][T12402] chnl_net:caif_netlink_parms(): no params data found [ 276.801153][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.809031][T12402] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.816720][T12402] bridge_slave_0: entered allmulticast mode [ 276.823710][T12402] bridge_slave_0: entered promiscuous mode [ 276.834072][T12402] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.841171][T12402] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.848597][T12402] bridge_slave_1: entered allmulticast mode [ 276.856555][T12402] bridge_slave_1: entered promiscuous mode [ 276.885326][ T25] usb 2-1: USB disconnect, device number 24 [ 277.001350][ T5879] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 277.016391][T12402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.043765][ T81] bridge_slave_1: left allmulticast mode [ 277.050856][ T81] bridge_slave_1: left promiscuous mode [ 277.058527][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.074853][ T81] bridge_slave_0: left allmulticast mode [ 277.088023][ T81] bridge_slave_0: left promiscuous mode [ 277.094153][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.172933][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 277.199402][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.218941][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 277.248512][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.269314][ T5879] usb 5-1: config 0 descriptor?? [ 277.279059][ T5879] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 277.489878][T12438] input: syz0 as /devices/virtual/input/input48 [ 277.508637][ T5189] bcm5974 5-1:0.0: could not read from device [ 277.508827][ T5879] usb 5-1: USB disconnect, device number 19 [ 277.751469][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.762511][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.776968][ T81] bond0 (unregistering): (slave team0): Releasing backup interface [ 277.787342][ T81] bond0 (unregistering): Released all slaves [ 277.805212][T12402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.902734][ T5142] Bluetooth: hci5: command tx timeout [ 277.930428][T12402] team0: Port device team_slave_0 added [ 277.966178][T12402] team0: Port device team_slave_1 added [ 278.054610][T12402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.089044][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.116096][T12402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.167602][T12402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.175956][T12402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.206445][T12402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.389659][T12478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.480872][T12402] hsr_slave_0: entered promiscuous mode [ 278.498284][T12402] hsr_slave_1: entered promiscuous mode [ 278.631010][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.639075][ T81] hsr_slave_0: left promiscuous mode [ 278.648615][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.660247][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.668246][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.676236][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.685481][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.685877][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.703976][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.711264][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.720709][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.750500][ T81] veth1_macvtap: left promiscuous mode [ 278.756149][ T81] veth0_macvtap: left promiscuous mode [ 278.788189][ T81] infiniband syz1: set down [ 278.873453][ T5878] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 279.042875][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 279.055132][ T5878] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 279.066752][ T5878] usb 2-1: config 0 has no interface number 0 [ 279.073172][ T5878] usb 2-1: config 0 interface 12 has no altsetting 0 [ 279.082462][ T5878] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 279.092423][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.100482][ T5878] usb 2-1: Product: syz [ 279.120137][ T5878] usb 2-1: Manufacturer: syz [ 279.120867][ T81] team0 (unregistering): Port device team_slave_1 removed [ 279.126990][ T5878] usb 2-1: SerialNumber: syz [ 279.139172][ T5878] usb 2-1: config 0 descriptor?? [ 279.183796][ T81] team0 (unregistering): Port device team_slave_0 removed [ 279.214991][ T3534] smc: removing ib device syz1 [ 279.708542][T12487] ipip0: entered promiscuous mode [ 279.982794][ T5843] Bluetooth: hci5: command tx timeout [ 280.072900][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.196722][T12501] geneve0: entered promiscuous mode [ 280.246891][T12501] geneve0 (unregistering): left promiscuous mode [ 280.283204][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 280.329437][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.373097][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 280.404254][T12504] openvswitch: netlink: Missing key (keys=40, expected=100) [ 280.423468][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 280.471852][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 280.511007][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.577973][ T8] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 280.614342][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 280.624408][ T5878] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 280.642756][ T5878] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 280.650081][ T5878] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 280.658005][ T8] usb 5-1: Product: syz [ 280.662193][ T8] usb 5-1: Manufacturer: syz [ 280.673771][ T8] usb 5-1: SerialNumber: syz [ 280.692828][ T5878] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 280.710696][ T8] usb 5-1: config 0 descriptor?? [ 280.729405][ T5878] usb 2-1: USB disconnect, device number 25 [ 280.793177][ T5843] Bluetooth: hci1: command tx timeout [ 280.853656][T12488] chnl_net:caif_netlink_parms(): no params data found [ 280.940800][ T8] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 280.952206][ T8] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 281.078469][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.085867][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.093231][T12488] bridge_slave_0: entered allmulticast mode [ 281.104551][T12488] bridge_slave_0: entered promiscuous mode [ 281.147994][ T8] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 281.173966][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.189018][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.196137][ T8] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 281.196163][ T8] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 281.234983][T12488] bridge_slave_1: entered allmulticast mode [ 281.242266][T12488] bridge_slave_1: entered promiscuous mode [ 281.312251][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.327228][T12402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.336637][T12402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.344046][ T8] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 281.375188][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.398031][T12402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.439146][T12402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.449198][T12523] syz.1.2674[12523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.449287][T12523] syz.1.2674[12523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.467912][T12523] syz.1.2674[12523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.472388][T12488] team0: Port device team_slave_0 added [ 281.525278][T12488] team0: Port device team_slave_1 added [ 281.590081][ T81] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.649176][T12488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.657280][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.684329][T12488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.698484][T12488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.706387][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.733903][T12488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.760069][ T81] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.823192][T12488] hsr_slave_0: entered promiscuous mode [ 281.829579][T12488] hsr_slave_1: entered promiscuous mode [ 281.863927][T12488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.871918][T12488] Cannot create hsr debugfs directory [ 281.935118][ T81] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.051980][ T81] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.063545][ T5843] Bluetooth: hci5: command tx timeout [ 282.087438][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 282.157778][ T8] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 282.180555][ T8] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 282.233592][ T8] usb 5-1: USB disconnect, device number 20 [ 282.358053][T12542] Process accounting resumed [ 282.429148][T12488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.484980][T12402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.495748][ T81] bridge_slave_1: left allmulticast mode [ 282.501426][ T81] bridge_slave_1: left promiscuous mode [ 282.509335][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.521438][ T81] bridge_slave_0: left allmulticast mode [ 282.528927][ T81] bridge_slave_0: left promiscuous mode [ 282.534957][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.862908][ T5843] Bluetooth: hci1: command tx timeout [ 283.038971][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.053034][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.065254][ T81] bond0 (unregistering): Released all slaves [ 283.136239][T12488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.218354][T12402] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.260051][T12488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.317465][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.324630][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.337769][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.344876][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.387639][T12402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.402622][T12402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.471201][T12488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.704222][T12578] netlink: 'syz.2.2695': attribute type 27 has an invalid length. [ 283.760683][ T29] audit: type=1326 audit(1731586800.366:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.4.2697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff03477e719 code=0x0 [ 283.802128][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.809412][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.887842][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.901912][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.967353][T12578] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.976517][T12578] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.988206][T12578] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.998066][T12578] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.089157][T12578] ip6gretap1: left allmulticast mode [ 284.116936][ T81] hsr_slave_0: left promiscuous mode [ 284.129383][ T81] hsr_slave_1: left promiscuous mode [ 284.139872][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.143531][ T5843] Bluetooth: hci5: command tx timeout [ 284.158818][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.174807][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.193279][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.230424][ T81] veth1_macvtap: left promiscuous mode [ 284.237636][ T81] veth0_macvtap: left promiscuous mode [ 284.243484][ T81] veth1_vlan: left promiscuous mode [ 284.248862][ T81] veth0_vlan: left promiscuous mode [ 284.943572][ T5843] Bluetooth: hci1: command tx timeout [ 285.203421][ T81] team0 (unregistering): Port device team_slave_1 removed [ 285.263557][ T81] team0 (unregistering): Port device team_slave_0 removed [ 285.341012][T12626] netlink: 'syz.4.2707': attribute type 9 has an invalid length. [ 285.355221][T12626] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.2707'. [ 285.928636][ T1091] [ 285.931382][ T1091] ============================= [ 285.931882][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.936397][ T1091] WARNING: suspicious RCU usage [ 285.947989][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.954645][ T1091] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Not tainted [ 285.954661][ T1091] ----------------------------- [ 285.954670][ T1091] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 285.954684][ T1091] [ 285.954684][ T1091] other info that might help us debug this: [ 285.954684][ T1091] [ 285.954693][ T1091] [ 285.954693][ T1091] rcu_scheduler_active = 2, debug_locks = 1 [ 285.976313][ T1091] 3 locks held by kworker/u8:6/1091: [ 286.000163][ T1091] #0: ffff8880119de948 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.011494][ T1091] #1: ffffc90003adfd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.024565][ T1091] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 286.034350][ T1091] [ 286.034350][ T1091] stack backtrace: [ 286.040249][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 286.051111][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.061163][ T1091] Workqueue: bond0 bond_mii_monitor [ 286.066374][ T1091] Call Trace: [ 286.069647][ T1091] [ 286.072577][ T1091] dump_stack_lvl+0x241/0x360 [ 286.077277][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.082493][ T1091] ? __pfx__printk+0x10/0x10 [ 286.087096][ T1091] lockdep_rcu_suspicious+0x226/0x340 [ 286.092464][ T1091] dev_deactivate_queue+0x8f/0x160 [ 286.097582][ T1091] dev_deactivate_many+0xc8/0xb10 [ 286.102614][ T1091] dev_deactivate+0x184/0x280 [ 286.107290][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 286.112487][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 286.117338][ T1091] linkwatch_do_dev+0x10a/0x170 [ 286.122186][ T1091] ethtool_op_get_link+0x15/0x60 [ 286.127123][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 286.132753][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 286.137867][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 286.143511][ T1091] bond_mii_monitor+0x49a/0x3170 [ 286.148475][ T1091] ? __lock_acquire+0x1384/0x2050 [ 286.153500][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 286.158616][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 286.163996][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 286.169019][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.175000][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.181333][ T1091] ? process_scheduled_works+0x976/0x1850 [ 286.187052][ T1091] process_scheduled_works+0xa63/0x1850 [ 286.192633][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.198618][ T1091] ? assign_work+0x364/0x3d0 [ 286.203209][ T1091] worker_thread+0x870/0xd30 [ 286.207804][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 286.212829][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 286.217936][ T1091] kthread+0x2f0/0x390 [ 286.221998][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 286.227106][ T1091] ? __pfx_kthread+0x10/0x10 [ 286.231688][ T1091] ret_from_fork+0x4b/0x80 [ 286.236102][ T1091] ? __pfx_kthread+0x10/0x10 [ 286.240683][ T1091] ret_from_fork_asm+0x1a/0x30 [ 286.245455][ T1091] [ 286.258499][ T1091] [ 286.260867][ T1091] ============================= [ 286.265799][ T1091] WARNING: suspicious RCU usage [ 286.270676][ T1091] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Not tainted [ 286.278177][ T1091] ----------------------------- [ 286.283396][ T1091] include/linux/rtnetlink.h:100 suspicious rcu_dereference_protected() usage! [ 286.292261][ T1091] [ 286.292261][ T1091] other info that might help us debug this: [ 286.292261][ T1091] [ 286.305387][ T1091] [ 286.305387][ T1091] rcu_scheduler_active = 2, debug_locks = 1 [ 286.313533][ T1091] 3 locks held by kworker/u8:6/1091: [ 286.318831][ T1091] #0: ffff8880119de948 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.330142][ T1091] #1: ffffc90003adfd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.343141][ T1091] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 286.353014][ T1091] [ 286.353014][ T1091] stack backtrace: [ 286.358930][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 286.369783][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.379828][ T1091] Workqueue: bond0 bond_mii_monitor [ 286.385032][ T1091] Call Trace: [ 286.388317][ T1091] [ 286.391240][ T1091] dump_stack_lvl+0x241/0x360 [ 286.395924][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.401135][ T1091] ? __pfx__printk+0x10/0x10 [ 286.405724][ T1091] lockdep_rcu_suspicious+0x226/0x340 [ 286.411087][ T1091] dev_deactivate_many+0x18f/0xb10 [ 286.416209][ T1091] dev_deactivate+0x184/0x280 [ 286.420912][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 286.426137][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 286.430987][ T1091] linkwatch_do_dev+0x10a/0x170 [ 286.435833][ T1091] ethtool_op_get_link+0x15/0x60 [ 286.440767][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 286.446395][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 286.451507][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 286.457148][ T1091] bond_mii_monitor+0x49a/0x3170 [ 286.462088][ T1091] ? __lock_acquire+0x1384/0x2050 [ 286.467111][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 286.472232][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 286.477614][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 286.482648][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.488635][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.495068][ T1091] ? process_scheduled_works+0x976/0x1850 [ 286.500788][ T1091] process_scheduled_works+0xa63/0x1850 [ 286.506350][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.512336][ T1091] ? assign_work+0x364/0x3d0 [ 286.516928][ T1091] worker_thread+0x870/0xd30 [ 286.521531][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 286.526555][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 286.531664][ T1091] kthread+0x2f0/0x390 [ 286.535730][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 286.540837][ T1091] ? __pfx_kthread+0x10/0x10 [ 286.545422][ T1091] ret_from_fork+0x4b/0x80 [ 286.549836][ T1091] ? __pfx_kthread+0x10/0x10 [ 286.554433][ T1091] ret_from_fork_asm+0x1a/0x30 [ 286.559214][ T1091] [ 286.569920][ T1091] BUG: sleeping function called from invalid context at net/core/dev.c:11284 [ 286.578943][ T1091] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 1091, name: kworker/u8:6 [ 286.588742][ T1091] preempt_count: 0, expected: 0 [ 286.593843][ T1091] RCU nest depth: 1, expected: 0 [ 286.598903][ T1091] 3 locks held by kworker/u8:6/1091: [ 286.604326][ T1091] #0: ffff8880119de948 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.615650][ T1091] #1: ffffc90003adfd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.628803][ T1091] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 286.638672][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 286.649531][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 286.659574][ T1091] Workqueue: bond0 bond_mii_monitor [ 286.664772][ T1091] Call Trace: [ 286.668039][ T1091] [ 286.670958][ T1091] dump_stack_lvl+0x241/0x360 [ 286.675635][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.680822][ T1091] ? __pfx__printk+0x10/0x10 [ 286.685422][ T1091] __might_resched+0x5d4/0x780 [ 286.690190][ T1091] ? dev_deactivate_many+0x25f/0xb10 [ 286.695495][ T1091] ? __pfx___might_resched+0x10/0x10 [ 286.700792][ T1091] ? __local_bh_enable_ip+0x168/0x200 [ 286.706166][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 286.711461][ T1091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 286.717172][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 286.722363][ T1091] synchronize_net+0x1b/0x50 [ 286.726946][ T1091] dev_deactivate_many+0x4a7/0xb10 [ 286.732067][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 286.737365][ T1091] dev_deactivate+0x184/0x280 [ 286.742050][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 286.747264][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 286.752122][ T1091] linkwatch_do_dev+0x10a/0x170 [ 286.756961][ T1091] ethtool_op_get_link+0x15/0x60 [ 286.761886][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 286.767504][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 286.772619][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 286.778264][ T1091] bond_mii_monitor+0x49a/0x3170 [ 286.783203][ T1091] ? __lock_acquire+0x1384/0x2050 [ 286.788220][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 286.793355][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 286.798761][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 286.803794][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 286.809764][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.816083][ T1091] ? process_scheduled_works+0x976/0x1850 [ 286.821788][ T1091] process_scheduled_works+0xa63/0x1850 [ 286.827334][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.833305][ T1091] ? assign_work+0x364/0x3d0 [ 286.837888][ T1091] worker_thread+0x870/0xd30 [ 286.842477][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 286.847510][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 286.852636][ T1091] kthread+0x2f0/0x390 [ 286.856704][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 286.861819][ T1091] ? __pfx_kthread+0x10/0x10 [ 286.866393][ T1091] ret_from_fork+0x4b/0x80 [ 286.870794][ T1091] ? __pfx_kthread+0x10/0x10 [ 286.875370][ T1091] ret_from_fork_asm+0x1a/0x30 [ 286.880129][ T1091] [ 286.885008][ T1091] [ 286.887680][ T1091] ============================= [ 286.892863][ T1091] WARNING: suspicious RCU usage [ 286.897786][ T1091] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Tainted: G W [ 286.906487][ T1091] ----------------------------- [ 286.911344][ T1091] kernel/rcu/tree_exp.h:949 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 286.922068][ T1091] [ 286.922068][ T1091] other info that might help us debug this: [ 286.922068][ T1091] [ 286.932345][ T1091] [ 286.932345][ T1091] rcu_scheduler_active = 2, debug_locks = 1 [ 286.940465][ T1091] 3 locks held by kworker/u8:6/1091: [ 286.946011][ T1091] #0: ffff8880119de948 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 286.957289][ T1091] #1: ffffc90003adfd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 286.970252][ T1091] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 286.979971][ T1091] [ 286.979971][ T1091] stack backtrace: [ 286.985929][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 286.998253][ T1091] Tainted: [W]=WARN [ 287.002045][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 287.012088][ T1091] Workqueue: bond0 bond_mii_monitor [ 287.017286][ T1091] Call Trace: [ 287.020558][ T1091] [ 287.023499][ T1091] dump_stack_lvl+0x241/0x360 [ 287.028174][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.033373][ T1091] ? __pfx__printk+0x10/0x10 [ 287.037958][ T1091] lockdep_rcu_suspicious+0x226/0x340 [ 287.043340][ T1091] synchronize_rcu_expedited+0x12e/0x830 [ 287.048991][ T1091] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 287.055156][ T1091] ? add_taint+0x99/0xe0 [ 287.059395][ T1091] ? __might_resched+0x5e0/0x780 [ 287.064337][ T1091] ? __local_bh_enable_ip+0x168/0x200 [ 287.069709][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 287.074996][ T1091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.080712][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.085914][ T1091] dev_deactivate_many+0x4a7/0xb10 [ 287.091023][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 287.096315][ T1091] dev_deactivate+0x184/0x280 [ 287.100995][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 287.106197][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 287.111051][ T1091] linkwatch_do_dev+0x10a/0x170 [ 287.115899][ T1091] ethtool_op_get_link+0x15/0x60 [ 287.120832][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 287.126460][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 287.131576][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 287.137223][ T1091] bond_mii_monitor+0x49a/0x3170 [ 287.142168][ T1091] ? __lock_acquire+0x1384/0x2050 [ 287.147195][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 287.152320][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 287.157702][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 287.162736][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.168805][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.175167][ T1091] ? process_scheduled_works+0x976/0x1850 [ 287.180891][ T1091] process_scheduled_works+0xa63/0x1850 [ 287.186454][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.192443][ T1091] ? assign_work+0x364/0x3d0 [ 287.197047][ T1091] worker_thread+0x870/0xd30 [ 287.201652][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 287.206680][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 287.211793][ T1091] kthread+0x2f0/0x390 [ 287.215855][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 287.220969][ T1091] ? __pfx_kthread+0x10/0x10 [ 287.225555][ T1091] ret_from_fork+0x4b/0x80 [ 287.229973][ T1091] ? __pfx_kthread+0x10/0x10 [ 287.234555][ T1091] ret_from_fork_asm+0x1a/0x30 [ 287.239327][ T1091] [ 287.250755][ T5843] Bluetooth: hci1: command tx timeout [ 287.259297][ T1091] [ 287.261623][ T1091] ============================= [ 287.266453][ T1091] [ BUG: Invalid wait context ] [ 287.271281][ T1091] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Tainted: G W [ 287.279841][ T1091] ----------------------------- [ 287.284668][ T1091] kworker/u8:6/1091 is trying to lock: [ 287.290104][ T1091] ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 287.300523][ T1091] other info that might help us debug this: [ 287.306423][ T1091] context-{4:4} [ 287.309867][ T1091] 3 locks held by kworker/u8:6/1091: [ 287.315135][ T1091] #0: ffff8880119de948 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 287.326267][ T1091] #1: ffffc90003adfd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 287.339145][ T1091] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 287.348799][ T1091] stack backtrace: [ 287.352501][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 287.364823][ T1091] Tainted: [W]=WARN [ 287.368617][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 287.378655][ T1091] Workqueue: bond0 bond_mii_monitor [ 287.383848][ T1091] Call Trace: [ 287.387113][ T1091] [ 287.390030][ T1091] dump_stack_lvl+0x241/0x360 [ 287.394694][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.399879][ T1091] ? __pfx__printk+0x10/0x10 [ 287.404459][ T1091] __lock_acquire+0x154a/0x2050 [ 287.409302][ T1091] lock_acquire+0x1ed/0x550 [ 287.413801][ T1091] ? synchronize_rcu_expedited+0x451/0x830 [ 287.419596][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 287.424608][ T1091] ? __pfx___might_resched+0x10/0x10 [ 287.429886][ T1091] __mutex_lock+0x136/0xd70 [ 287.434380][ T1091] ? synchronize_rcu_expedited+0x451/0x830 [ 287.440172][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 287.445200][ T1091] ? synchronize_rcu_expedited+0x414/0x830 [ 287.451006][ T1091] ? synchronize_rcu_expedited+0x451/0x830 [ 287.456797][ T1091] ? __pfx_lock_release+0x10/0x10 [ 287.461807][ T1091] ? __pfx___mutex_lock+0x10/0x10 [ 287.466822][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.472012][ T1091] synchronize_rcu_expedited+0x451/0x830 [ 287.477629][ T1091] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 287.483766][ T1091] ? add_taint+0x99/0xe0 [ 287.487993][ T1091] ? __might_resched+0x5e0/0x780 [ 287.492921][ T1091] ? __local_bh_enable_ip+0x168/0x200 [ 287.498283][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 287.503563][ T1091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.509283][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.514489][ T1091] dev_deactivate_many+0x4a7/0xb10 [ 287.519595][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 287.524871][ T1091] dev_deactivate+0x184/0x280 [ 287.529532][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 287.534717][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 287.539558][ T1091] linkwatch_do_dev+0x10a/0x170 [ 287.544410][ T1091] ethtool_op_get_link+0x15/0x60 [ 287.549331][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 287.554958][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 287.560064][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 287.565692][ T1091] bond_mii_monitor+0x49a/0x3170 [ 287.570622][ T1091] ? __lock_acquire+0x1384/0x2050 [ 287.575637][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 287.580741][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 287.586104][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 287.591116][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 287.597087][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.603410][ T1091] ? process_scheduled_works+0x976/0x1850 [ 287.609135][ T1091] process_scheduled_works+0xa63/0x1850 [ 287.614682][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.620669][ T1091] ? assign_work+0x364/0x3d0 [ 287.625247][ T1091] worker_thread+0x870/0xd30 [ 287.629826][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 287.634838][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 287.639936][ T1091] kthread+0x2f0/0x390 [ 287.643997][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 287.649096][ T1091] ? __pfx_kthread+0x10/0x10 [ 287.653667][ T1091] ret_from_fork+0x4b/0x80 [ 287.658077][ T1091] ? __pfx_kthread+0x10/0x10 [ 287.662659][ T1091] ret_from_fork_asm+0x1a/0x30 [ 287.667435][ T1091] [ 287.671287][ T1091] ------------[ cut here ]------------ [ 287.676749][ T1091] Voluntary context switch within RCU read-side critical section! [ 287.676804][ T1091] WARNING: CPU: 1 PID: 1091 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xcf4/0xff0 [ 287.694980][ T1091] Modules linked in: [ 287.698858][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 287.711164][ T1091] Tainted: [W]=WARN [ 287.714958][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 287.725013][ T1091] Workqueue: bond0 bond_mii_monitor [ 287.730205][ T1091] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 287.736436][ T1091] Code: 00 ba 02 00 00 00 e8 7b f8 fd ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 9d eb 89 0e 01 90 48 c7 c7 80 28 0c 8c e8 ad 29 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 287.756033][ T1091] RSP: 0018:ffffc90003adefa0 EFLAGS: 00010046 [ 287.762091][ T1091] RAX: 4430a07f735c6900 RBX: ffff888027314044 RCX: ffff888027313c00 [ 287.770051][ T1091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.778012][ T1091] RBP: ffffc90003adf0f0 R08: ffffffff8155e222 R09: fffffbfff1cf9fd0 [ 287.785971][ T1091] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888027313c00 [ 287.793927][ T1091] R13: 0000000000000000 R14: 1ffff9200075be0c R15: dffffc0000000000 [ 287.801881][ T1091] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 287.810806][ T1091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.817379][ T1091] CR2: 00007ff0355a5f98 CR3: 00000000245ec000 CR4: 00000000003526f0 [ 287.825345][ T1091] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.833309][ T1091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.841270][ T1091] Call Trace: [ 287.844539][ T1091] [ 287.847460][ T1091] ? __warn+0x168/0x4e0 [ 287.851608][ T1091] ? rcu_note_context_switch+0xcf4/0xff0 [ 287.857236][ T1091] ? report_bug+0x2b3/0x500 [ 287.861730][ T1091] ? rcu_note_context_switch+0xcf4/0xff0 [ 287.867357][ T1091] ? handle_bug+0x60/0x90 [ 287.871682][ T1091] ? exc_invalid_op+0x1a/0x50 [ 287.876350][ T1091] ? asm_exc_invalid_op+0x1a/0x20 [ 287.881365][ T1091] ? __warn_printk+0x292/0x360 [ 287.886121][ T1091] ? rcu_note_context_switch+0xcf4/0xff0 [ 287.891747][ T1091] ? ret_from_fork_asm+0x1a/0x30 [ 287.896678][ T1091] ? __printk_cpu_sync_put+0x67/0x80 [ 287.901957][ T1091] ? dump_stack_lvl+0x301/0x360 [ 287.906814][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.912015][ T1091] ? __pfx__printk+0x10/0x10 [ 287.916605][ T1091] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 287.922585][ T1091] ? rcu_is_watching+0x15/0xb0 [ 287.927342][ T1091] __schedule+0x34b/0x4bd0 [ 287.931749][ T1091] ? rcu_is_watching+0x15/0xb0 [ 287.936510][ T1091] ? lock_acquire+0x264/0x550 [ 287.941187][ T1091] ? __pfx___schedule+0x10/0x10 [ 287.946056][ T1091] ? __mutex_trylock_common+0x92/0x2e0 [ 287.951510][ T1091] ? __pfx___mutex_trylock_common+0x10/0x10 [ 287.957395][ T1091] schedule+0x14b/0x320 [ 287.961544][ T1091] schedule_preempt_disabled+0x13/0x30 [ 287.966998][ T1091] __mutex_lock+0x391/0xd70 [ 287.971503][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 287.976525][ T1091] ? synchronize_rcu_expedited+0x451/0x830 [ 287.982324][ T1091] ? __pfx_lock_release+0x10/0x10 [ 287.987345][ T1091] ? __pfx___mutex_lock+0x10/0x10 [ 287.992365][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 287.997574][ T1091] synchronize_rcu_expedited+0x451/0x830 [ 288.003216][ T1091] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 288.009362][ T1091] ? add_taint+0x99/0xe0 [ 288.013599][ T1091] ? __might_resched+0x5e0/0x780 [ 288.018533][ T1091] ? __local_bh_enable_ip+0x168/0x200 [ 288.023915][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 288.029194][ T1091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 288.034912][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 288.040108][ T1091] dev_deactivate_many+0x4a7/0xb10 [ 288.045213][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 288.050489][ T1091] dev_deactivate+0x184/0x280 [ 288.055161][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 288.060352][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 288.065200][ T1091] linkwatch_do_dev+0x10a/0x170 [ 288.070043][ T1091] ethtool_op_get_link+0x15/0x60 [ 288.074976][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 288.080599][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 288.085705][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 288.091333][ T1091] bond_mii_monitor+0x49a/0x3170 [ 288.096265][ T1091] ? __lock_acquire+0x1384/0x2050 [ 288.101284][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 288.106391][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 288.111762][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 288.116785][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.122764][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.129087][ T1091] ? process_scheduled_works+0x976/0x1850 [ 288.134800][ T1091] process_scheduled_works+0xa63/0x1850 [ 288.140345][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.146321][ T1091] ? assign_work+0x364/0x3d0 [ 288.150906][ T1091] worker_thread+0x870/0xd30 [ 288.155496][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 288.160514][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 288.165619][ T1091] kthread+0x2f0/0x390 [ 288.169674][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 288.174778][ T1091] ? __pfx_kthread+0x10/0x10 [ 288.179356][ T1091] ret_from_fork+0x4b/0x80 [ 288.183767][ T1091] ? __pfx_kthread+0x10/0x10 [ 288.188344][ T1091] ret_from_fork_asm+0x1a/0x30 [ 288.193106][ T1091] [ 288.196118][ T1091] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.203389][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u8:6 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 288.215704][ T1091] Tainted: [W]=WARN [ 288.219495][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 288.229538][ T1091] Workqueue: bond0 bond_mii_monitor [ 288.234742][ T1091] Call Trace: [ 288.238008][ T1091] [ 288.240930][ T1091] dump_stack_lvl+0x241/0x360 [ 288.245601][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.250788][ T1091] ? __pfx__printk+0x10/0x10 [ 288.255373][ T1091] ? vscnprintf+0x5d/0x90 [ 288.259696][ T1091] panic+0x349/0x880 [ 288.263605][ T1091] ? __warn+0x177/0x4e0 [ 288.267752][ T1091] ? __pfx_panic+0x10/0x10 [ 288.272162][ T1091] ? ret_from_fork_asm+0x1a/0x30 [ 288.277096][ T1091] __warn+0x34b/0x4e0 [ 288.281071][ T1091] ? rcu_note_context_switch+0xcf4/0xff0 [ 288.286699][ T1091] report_bug+0x2b3/0x500 [ 288.291023][ T1091] ? rcu_note_context_switch+0xcf4/0xff0 [ 288.296649][ T1091] handle_bug+0x60/0x90 [ 288.300797][ T1091] exc_invalid_op+0x1a/0x50 [ 288.305298][ T1091] asm_exc_invalid_op+0x1a/0x20 [ 288.310138][ T1091] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 288.316376][ T1091] Code: 00 ba 02 00 00 00 e8 7b f8 fd ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 9d eb 89 0e 01 90 48 c7 c7 80 28 0c 8c e8 ad 29 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 288.335986][ T1091] RSP: 0018:ffffc90003adefa0 EFLAGS: 00010046 [ 288.342054][ T1091] RAX: 4430a07f735c6900 RBX: ffff888027314044 RCX: ffff888027313c00 [ 288.350024][ T1091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.357985][ T1091] RBP: ffffc90003adf0f0 R08: ffffffff8155e222 R09: fffffbfff1cf9fd0 [ 288.365952][ T1091] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888027313c00 [ 288.373916][ T1091] R13: 0000000000000000 R14: 1ffff9200075be0c R15: dffffc0000000000 [ 288.381884][ T1091] ? __warn_printk+0x292/0x360 [ 288.386651][ T1091] ? ret_from_fork_asm+0x1a/0x30 [ 288.391590][ T1091] ? __printk_cpu_sync_put+0x67/0x80 [ 288.396880][ T1091] ? dump_stack_lvl+0x301/0x360 [ 288.401750][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.406951][ T1091] ? __pfx__printk+0x10/0x10 [ 288.411532][ T1091] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 288.417512][ T1091] ? rcu_is_watching+0x15/0xb0 [ 288.422270][ T1091] __schedule+0x34b/0x4bd0 [ 288.426693][ T1091] ? rcu_is_watching+0x15/0xb0 [ 288.431458][ T1091] ? lock_acquire+0x264/0x550 [ 288.436133][ T1091] ? __pfx___schedule+0x10/0x10 [ 288.440976][ T1091] ? __mutex_trylock_common+0x92/0x2e0 [ 288.446429][ T1091] ? __pfx___mutex_trylock_common+0x10/0x10 [ 288.452325][ T1091] schedule+0x14b/0x320 [ 288.456478][ T1091] schedule_preempt_disabled+0x13/0x30 [ 288.461929][ T1091] __mutex_lock+0x391/0xd70 [ 288.466429][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 288.471449][ T1091] ? synchronize_rcu_expedited+0x451/0x830 [ 288.477252][ T1091] ? __pfx_lock_release+0x10/0x10 [ 288.482277][ T1091] ? __pfx___mutex_lock+0x10/0x10 [ 288.487302][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 288.492510][ T1091] synchronize_rcu_expedited+0x451/0x830 [ 288.498145][ T1091] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 288.504298][ T1091] ? add_taint+0x99/0xe0 [ 288.508536][ T1091] ? __might_resched+0x5e0/0x780 [ 288.513474][ T1091] ? __local_bh_enable_ip+0x168/0x200 [ 288.518845][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 288.524137][ T1091] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 288.529857][ T1091] ? do_raw_spin_unlock+0x13c/0x8b0 [ 288.535055][ T1091] dev_deactivate_many+0x4a7/0xb10 [ 288.540163][ T1091] ? dev_deactivate_many+0x250/0xb10 [ 288.545441][ T1091] dev_deactivate+0x184/0x280 [ 288.550226][ T1091] ? __pfx_dev_deactivate+0x10/0x10 [ 288.555423][ T1091] ? rfc2863_policy+0x1d7/0x300 [ 288.560288][ T1091] linkwatch_do_dev+0x10a/0x170 [ 288.565136][ T1091] ethtool_op_get_link+0x15/0x60 [ 288.570071][ T1091] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 288.575699][ T1091] bond_check_dev_link+0x1f1/0x3f0 [ 288.580836][ T1091] ? __pfx_bond_check_dev_link+0x10/0x10 [ 288.586471][ T1091] bond_mii_monitor+0x49a/0x3170 [ 288.591406][ T1091] ? __lock_acquire+0x1384/0x2050 [ 288.596428][ T1091] ? bond_mii_monitor+0x174/0x3170 [ 288.601538][ T1091] ? __pfx_bond_mii_monitor+0x10/0x10 [ 288.606911][ T1091] ? __pfx_lock_acquire+0x10/0x10 [ 288.611931][ T1091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.617916][ T1091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.624245][ T1091] ? process_scheduled_works+0x976/0x1850 [ 288.629959][ T1091] process_scheduled_works+0xa63/0x1850 [ 288.635507][ T1091] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.641480][ T1091] ? assign_work+0x364/0x3d0 [ 288.646065][ T1091] worker_thread+0x870/0xd30 [ 288.650656][ T1091] ? __kthread_parkme+0x169/0x1d0 [ 288.655676][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 288.660779][ T1091] kthread+0x2f0/0x390 [ 288.664845][ T1091] ? __pfx_worker_thread+0x10/0x10 [ 288.669950][ T1091] ? __pfx_kthread+0x10/0x10 [ 288.674531][ T1091] ret_from_fork+0x4b/0x80 [ 288.678945][ T1091] ? __pfx_kthread+0x10/0x10 [ 288.683525][ T1091] ret_from_fork_asm+0x1a/0x30 [ 288.688285][ T1091] [ 288.691523][ T1091] Kernel Offset: disabled [ 288.695865][ T1091] Rebooting in 86400 seconds..