last executing test programs: 47.551274884s ago: executing program 4 (id=4678): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x24) 47.364429739s ago: executing program 4 (id=4680): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c094}, 0x80) 47.256529017s ago: executing program 4 (id=4683): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2141) 46.991408127s ago: executing program 4 (id=4686): set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000780)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000340)={r3, 0x0, r4, 0x400, 0x1, 0x9, 0x6, 0x3, 0xfff, 0x1, 0x800003ff, 0x4}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f00000000c0)={'syzkaller1\x00', 0xd}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000002b40), 0x109040, 0x0) r9 = msgget(0x3, 0x2b9) msgrcv(r9, 0x0, 0x0, 0x0, 0x0) msgsnd(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000"], 0x8, 0x0) preadv2(r8, &(0x7f0000003d00)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/116, 0x74}], 0x2, 0x7, 0x1, 0x5) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x1, 0x0, 0xb98, 0x3}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000540)={r10, 0x7, 0x10}, &(0x7f0000000580)=0xc) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r11, 0x7a6, &(0x7f0000000740)={0x2000000003, 0xffffffffffff994e, 0x1, 0x203, 0x8, 0x6}) r12 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000000766c616e30000000000000010001000000000068307b746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba31300000000000000000008000000000001010000000000010c00636f6e6e6c6162656c0000000000000000000000000000000000000020000000080000000000000000000000000000004e46515445554500000000000000000000000000000000000000000000000000080000000000000000000000000000040000000000000000000000004b5d0000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e64300000000000006c73c387735cc18268315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d41524b0000000000827900000000000000000000000000000800"/560]}, 0x2a8) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0xfffdfffd}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) sched_setscheduler(r13, 0x0, &(0x7f0000000700)) 45.536956832s ago: executing program 4 (id=4696): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2141) 45.3542036s ago: executing program 4 (id=4698): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 10.259758383s ago: executing program 3 (id=4917): socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') lseek(r1, 0xae7e, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x18, &(0x7f00000000c0)={0x20, 0x10, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.658282903s ago: executing program 3 (id=4924): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000300)) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) fsopen(&(0x7f0000000400)='ceph\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="a7"], 0x20) 7.035952961s ago: executing program 3 (id=4931): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/92, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d400000c200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="9e685760794f93d5148a96de6f79285dad5de4da19e0a4d207b64f033a3f27c70bc955fd751f9e1f13a2c61d47163cd62da5d4028d64286690bb810329051eac173b0970dbfa8ecfff2a81d9662ee2", 0x4f}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x3f}], 0x18}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000180)={r4, 0x0, r4, 0xfffffffb, 0x2, 0x0, 0x9, 0x100, 0x6, 0x4, 0x1, 0x2}) syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') socket$packet(0x11, 0x2, 0x300) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 6.595938909s ago: executing program 3 (id=4936): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) 6.478783469s ago: executing program 3 (id=4938): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x89101) inotify_add_watch(r0, 0x0, 0x840) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a4}) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)='}', 0x1, r3) add_key$user(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="c8b312044077b835ac", 0x9, r3) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r2, r4}, &(0x7f0000001380)=""/4096, 0x1000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601"], 0x60}}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000003b00c9010000000000000000047c0000040000000c00018006000600800a0000040002"], 0x28}}, 0xc000) epoll_create1(0x0) epoll_create1(0x0) 6.062444674s ago: executing program 3 (id=4940): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2c8000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40100, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe}, 0x1c) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r3 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000001140)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405668, &(0x7f0000000040)={0x0, 0x0, 0x3, "bc14e90b67000077cbe19affffffffffec00"}) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6cc5dc4f094ee44001014184193d948ffbe42964efce53", 0x48}], 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) setpriority(0x0, 0x0, 0x3) ioctl$FBIO_WAITFORVSYNC(r0, 0x4605, 0x20000000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r6 = fanotify_init(0x200, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa0240, 0x0) fanotify_mark(r6, 0x61, 0x40001002, r8, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000580)={0x0}) 3.977544541s ago: executing program 2 (id=4954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) (fail_nth: 1) 3.591368177s ago: executing program 2 (id=4957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[], 0x44}}, 0x0) 3.529799534s ago: executing program 2 (id=4958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, 0x0, 0x0, 0x3c, 0x0) 3.299797431s ago: executing program 2 (id=4959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.221678403s ago: executing program 2 (id=4960): syz_open_dev$loop(&(0x7f0000000740), 0xc3b9, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3f, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000003600)=""/120) 2.507727102s ago: executing program 2 (id=4963): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c81, 0x700) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x14) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4089, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "638fd6", 0x8, 0x2b, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x64}]}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x60, "9eecb25ca16e4b79bb56da7d76fcbcf010fb0a37b2cdd2051042ba420a1f3e4844c589a750808b6b09c5c8aeb60fb392ff62911b6b97b14d3f994c80b19de3af0257caa993088734e7224118b9f8f790e935bb9ac7a6151fdd18f72003847f2d"}, &(0x7f0000000000)=0x68) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e22, 0x3, @private0, 0x1e000000}}}, &(0x7f0000000100)=0x84) 2.267764249s ago: executing program 0 (id=4966): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800290200000000000000000200000008000000000000000d00098008000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) preadv2(r4, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000014000000030a010800000000000000000100000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d657461000000000c0002800800024000000002140000001100010000000000000000000000000a847a048142021d6c11b1bcb84fbc6c0316cffb6418c49f9e6b261ec8dd8de9aa3da7c915f20bbe73558c"], 0xa4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.231450194s ago: executing program 0 (id=4967): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[], 0x44}}, 0x0) 2.170426135s ago: executing program 0 (id=4968): ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000000c0)={0x9, 0x2}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 2.044208514s ago: executing program 0 (id=4969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.919780425s ago: executing program 0 (id=4970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000371000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000094f000/0x4000)=nil, 0x4000) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000080)="4e8fc38e", 0x4}]) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mlock2(&(0x7f00001b3000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000010) 1.684694664s ago: executing program 0 (id=4973): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c81, 0x700) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ec"], 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4089, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "638fd6", 0x8, 0x2b, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x64}]}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x60, "9eecb25ca16e4b79bb56da7d76fcbcf010fb0a37b2cdd2051042ba420a1f3e4844c589a750808b6b09c5c8aeb60fb392ff62911b6b97b14d3f994c80b19de3af0257caa993088734e7224118b9f8f790e935bb9ac7a6151fdd18f72003847f2d"}, &(0x7f0000000000)=0x68) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000280)={r7, @in6={{0xa, 0x4e22, 0x3, @private0, 0x1e000000}}}, &(0x7f0000000100)=0x84) msgsnd(0x0, &(0x7f0000000480)={0x2}, 0x8, 0x0) 647.685064ms ago: executing program 1 (id=4976): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800290200000000000000000200000008000000000000000d00098008000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) preadv2(r4, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000014000000030a010800000000000000000100000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d657461000000000c0002800800024000000002140000001100010000000000000000000000000a847a048142021d6c11b1bcb84fbc6c0316cffb6418c49f9e6b261ec8dd8de9aa3da7c915f20bbe73558c"], 0xa4}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 511.927565ms ago: executing program 1 (id=4977): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001800010085000000000000000a000000000000000000000018001600140001000600000000000000000010000000000008000400", @ANYRES32=r1], 0x44}}, 0x0) 438.565299ms ago: executing program 1 (id=4978): ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000000c0)={0x9, 0x2}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 313.736008ms ago: executing program 1 (id=4979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 83.715574ms ago: executing program 1 (id=4980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x78, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xe0}}, 0x0) 0s ago: executing program 1 (id=4981): socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@delchain={0x630, 0x65, 0x400, 0x40, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_bpf={{0x8}, {0x584, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xffe0}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0x10}}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x5, 0x6, 0x1}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_ACT={0x528, 0x1, [@m_skbedit={0xc4, 0x10, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x6, 0x5, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2a4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x36, 0x6, "165a61d696c4c0aa76bff55b7d91c514b0fa67d1d66281486703bc75ce54a014b7e10f89dc3017792d050303f0373b0ba527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x148, 0x20, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7, 0xffffffffffffffff, 0x82723504, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}]}, {0xcb, 0x6, "84990340f8c18f2e7e16b77d31c5953a204181301477a1db3e088a43746cc1924b150719f4a47daca7b831bd9df277c4c4f155f374e08d6fd9393e5b37643ec54c046ea15f9b5fb066265224f4f8490ca34a23b6ceff1e23a9381e9335ca2b049294134d503474833c2ff9a5fbe30573800951aa9762461e1a7cf888f94ac3dca3db6c0cbfba3a532a900cd8dfd53712e681dd647410f70ecfff60d4a011b3f7214816b180ca8717668dec8f0a5fc442112c933bc6358bd06770c41d122869ef3235106e625f81"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x118, 0xa, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x0, 0x1fc000, 0x6da}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x8, 0x80, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x600000, 0x2, 0x9, 0x10}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x588f, 0x7, 0x13d2, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x8000, 0xffffffffffffffff, 0x4, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x7fff, 0x6}, 0x3}}]}, {0x40, 0x6, "db7104ce1b79df6b97ac8bf37a9339410311b0fac163ee6eeeaaf0a94415667f0b0d3ed1d315d243af28683de7622be66a7f2ad6d57c621ba5f4c920"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_gact={0xe4, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9b8, 0x2000000e}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x0, 0x0, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x641, 0x7fffffff, 0x6, 0x1, 0x9}}]}, {0x7b, 0x6, "39a7065bdd951456c2e6a3efae4178493e0b5ca75d6c4b77915989343bdc5dcc0e6e03ae3333e5defd30ecff453bc01f3190c8c018a0fd73175ce5df17b5dd9e11f6805f1d8ea983bbaeb24b91865db604cfa0d3359d4ba9b2eb095696a946a25c7322f43a7f8aab768d1512c73ddfd14993bf8edb8185"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x11c, 0x18, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x61f31}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf8}]}, {0xdf, 0x6, "871e846e62d75122e8ba5f429f3fcbc15c1c3153049193f106b838bc40191303bcd09b80115833e3390f4033f013a4592dfbbb3432c993c888ee6db7f8edd56ad412b08d07dd4fb85cbf95162aa1db59f3570cc4a32b3555f19f910f37b9e155f01cc226d4182080b630475bb4ed5a83dc4810107f45c0d71205581faa8653e737cdda08f7bbc27b96c52fea128951f44f37c7ef75c233b99b7aa417fef9dc35191a2be8e50fef553966ceb3fbc5e5cc873aabe9da829b8faceab587e8fc1dbb8646f06c7141bcbf991e3b25866f3093a99dfe50fac1f7a1ef7011"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x40, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x31}]}]}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x630}}, 0x0) semget$private(0x0, 0x1, 0x185) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f00000000c0)=0x58, 0x5) kernel console output (not intermixed with test programs): d from eth3 [ 1759.836586][T27246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1759.871084][T27246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1759.900210][T27246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1759.937634][T27246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1760.004439][T27242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.100765][T27242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.145134][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.152354][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.220025][T27273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.229774][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.236979][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.310872][T27273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.359324][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.366577][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.421678][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.428918][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.550039][T27246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.641057][T27246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.669778][T27242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.699653][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.706826][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1760.800424][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.807673][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.870121][T27273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.960790][T27410] input: syz1 as /devices/virtual/input/input55 [ 1761.053602][T27273] veth0_vlan: entered promiscuous mode [ 1761.081135][T27273] veth1_vlan: entered promiscuous mode [ 1761.120764][T27242] veth0_vlan: entered promiscuous mode [ 1761.159636][T27242] veth1_vlan: entered promiscuous mode [ 1761.307973][T10828] usb 4-1: USB disconnect, device number 76 [ 1761.332001][T27242] veth0_macvtap: entered promiscuous mode [ 1761.399410][T27273] veth0_macvtap: entered promiscuous mode [ 1761.450693][T27273] veth1_macvtap: entered promiscuous mode [ 1761.479987][T27242] veth1_macvtap: entered promiscuous mode [ 1761.503861][T27246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.603946][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.623414][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.639961][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.660465][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.679266][T27273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.688563][T27242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.706781][T27242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.719044][T27242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.740085][T27242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.770849][T27242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1761.789787][T27242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.811338][T27242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.848483][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.879618][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.900181][T27273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.920736][T27273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1761.951538][T27273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.966689][T27242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1761.990766][T27242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.004400][T27242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1762.017868][T27242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.039086][T27242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1762.056354][T27242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.075645][T27242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1762.101998][T27273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.129421][T27273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.140935][T27273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.150125][T27273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.177146][T27242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.206262][T27242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.229622][T27242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.240012][T27242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.465570][T27246] veth0_vlan: entered promiscuous mode [ 1762.519768][T27246] veth1_vlan: entered promiscuous mode [ 1762.574046][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.595763][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.685097][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.714360][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.742426][T27246] veth0_macvtap: entered promiscuous mode [ 1762.795432][T27246] veth1_macvtap: entered promiscuous mode [ 1762.817217][T22645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.835415][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.846093][T22645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.854710][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.864819][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.875426][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.885426][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.896048][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.906140][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.916777][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.928321][T27246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.018436][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.020293][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.026456][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.072185][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.082752][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.093651][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.103880][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.116669][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.129279][T27246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.140582][T27246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.154208][T27246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.207857][T27246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.216886][T27246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.227165][T27444] fuse: root generation should be zero [ 1763.234894][T27246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.248466][T27246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.468384][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1763.468408][ T29] audit: type=1326 audit(1729581019.327:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.516125][ T29] audit: type=1326 audit(1729581019.327:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.539327][ T29] audit: type=1326 audit(1729581019.337:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.602304][ T29] audit: type=1326 audit(1729581019.337:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.741991][ T29] audit: type=1326 audit(1729581019.337:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.870960][ T29] audit: type=1326 audit(1729581019.337:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.871000][ T29] audit: type=1326 audit(1729581019.337:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.871028][ T29] audit: type=1326 audit(1729581019.337:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27450 comm="syz.0.4222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27157dff9 code=0x7ffc0000 [ 1763.948219][T22645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1763.948249][T22645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.125398][T14332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.177281][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.177311][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.333716][T14332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.518856][ T29] audit: type=1326 audit(1729581020.387:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd7dff9 code=0x7ffc0000 [ 1764.519054][ T29] audit: type=1326 audit(1729581020.387:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd7dff9 code=0x7ffc0000 [ 1764.649509][T14332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.815170][T14332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.147438][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1765.159619][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1765.170181][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1765.201745][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1765.210634][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1765.222647][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1765.289208][T14332] bridge_slave_1: left allmulticast mode [ 1765.297002][T14332] bridge_slave_1: left promiscuous mode [ 1765.304345][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.459205][T14332] bridge_slave_0: left allmulticast mode [ 1765.472148][T14332] bridge_slave_0: left promiscuous mode [ 1765.479407][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.186904][T14332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.199644][T14332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.218216][T14332] bond0 (unregistering): Released all slaves [ 1767.340326][ T4623] Bluetooth: hci1: command tx timeout [ 1768.122585][T27495] chnl_net:caif_netlink_parms(): no params data found [ 1768.431602][T27549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4278'. [ 1768.502196][T27552] bridge_slave_1: left allmulticast mode [ 1768.543497][T27552] bridge_slave_1: left promiscuous mode [ 1768.572830][T27563] ip6t_rpfilter: unknown options [ 1768.576180][T27552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.707958][T27552] bridge1: port 1(bridge_slave_1) entered blocking state [ 1768.729211][T27552] bridge1: port 1(bridge_slave_1) entered disabled state [ 1768.776289][T27552] bridge_slave_1: entered allmulticast mode [ 1768.813502][T27552] bridge_slave_1: entered promiscuous mode [ 1769.075003][T14332] hsr_slave_0: left promiscuous mode [ 1769.135356][T14332] hsr_slave_1: left promiscuous mode [ 1769.153465][T14332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1769.161206][T14332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1769.194530][T14332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.206940][T14332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1769.231270][T27574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4282'. [ 1769.291875][T14332] veth1_macvtap: left promiscuous mode [ 1769.310913][T14332] veth0_macvtap: left promiscuous mode [ 1769.358668][T14332] veth1_vlan: left promiscuous mode [ 1769.372504][T14332] veth0_vlan: left promiscuous mode [ 1769.405185][ T4623] Bluetooth: hci1: command tx timeout [ 1771.094524][T18316] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1771.102008][T18316] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1771.121837][T18316] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1771.315868][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1771.315890][ T29] audit: type=1326 audit(1729581027.187:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27602 comm="syz.2.4293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84bcd7dff9 code=0x0 [ 1771.409919][T14332] team0 (unregistering): Port device team_slave_1 removed [ 1771.477844][T14332] team0 (unregistering): Port device team_slave_0 removed [ 1771.485153][ T4623] Bluetooth: hci1: command tx timeout [ 1772.514009][T27595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.521768][T27595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.884829][T27495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.893383][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.900672][T27495] bridge_slave_0: entered allmulticast mode [ 1772.943691][T27495] bridge_slave_0: entered promiscuous mode [ 1772.991122][T27495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.030737][T27495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.068870][T27495] bridge_slave_1: entered allmulticast mode [ 1773.102119][T27495] bridge_slave_1: entered promiscuous mode [ 1773.297417][T27495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.405512][T27495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.572132][ T4623] Bluetooth: hci1: command tx timeout [ 1773.619833][T27495] team0: Port device team_slave_0 added [ 1773.698775][T27495] team0: Port device team_slave_1 added [ 1773.814721][T27495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1773.855867][T27495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.950608][T27495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.987221][T27495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1774.012133][T27495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.099464][T27495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.287599][T27495] hsr_slave_0: entered promiscuous mode [ 1774.318188][T27495] hsr_slave_1: entered promiscuous mode [ 1774.324169][ T9] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1774.335620][ T9] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1774.346091][T27495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1774.359805][ T9] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1774.373021][T27495] Cannot create hsr debugfs directory [ 1775.407758][T27683] input: syz1 as /devices/virtual/input/input56 [ 1776.250676][T27495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1776.312373][T27495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1776.352767][T27495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1776.381398][T27495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1776.621241][T27495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.712807][T27495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.731004][T27717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4324'. [ 1776.794175][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.801406][T14332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.892971][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.900172][T14332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.959476][T27722] sch_tbf: burst 1399 is lower than device lo mtu (65550) ! [ 1777.156214][T27495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.324384][T27495] veth0_vlan: entered promiscuous mode [ 1777.394843][T27495] veth1_vlan: entered promiscuous mode [ 1777.497031][T27495] veth0_macvtap: entered promiscuous mode [ 1777.511907][T27495] veth1_macvtap: entered promiscuous mode [ 1777.530473][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.541504][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.551642][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.562164][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.572013][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.582648][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.592538][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1777.603508][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.615346][T27495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1777.630326][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.641006][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.651121][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.666666][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.676604][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.687105][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.697467][T27495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1777.708823][T27495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1777.720169][T27495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1777.796285][T27495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.812125][T27495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.822280][T27495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.831032][T27495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.240159][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.277738][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.352832][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.378666][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.551731][T27757] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1779.257564][T22711] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1779.644880][T22711] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1779.654100][T22711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.684484][T22711] usb 2-1: config 0 descriptor?? [ 1780.101001][T27756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.148732][T27756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.192016][T22711] playstation 0003:054C:0DF2.0050: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1780.556380][T27799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4338'. [ 1780.570905][T27756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.605781][T27756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.672548][T27756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.721024][T27756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.015325][T27756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.068486][T27756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.357972][T27822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.461390][T27822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.862582][T27837] IPv6: addrconf: prefix option has invalid lifetime [ 1782.370647][T22711] playstation 0003:054C:0DF2.0050: Failed to retrieve feature with reportID 32: -71 [ 1782.380410][T22711] playstation 0003:054C:0DF2.0050: Failed to retrieve DualSense firmware info: -71 [ 1782.390207][T22711] playstation 0003:054C:0DF2.0050: Failed to get firmware info from DualSense [ 1782.399828][T22711] playstation 0003:054C:0DF2.0050: Failed to create dualsense. [ 1782.410975][T22711] playstation 0003:054C:0DF2.0050: probe with driver playstation failed with error -71 [ 1782.428634][T22711] usb 2-1: USB disconnect, device number 78 [ 1783.366669][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1783.381712][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1783.390846][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1783.405488][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1783.416014][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1783.425938][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1783.716280][T27871] chnl_net:caif_netlink_parms(): no params data found [ 1783.829835][T27871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.837677][T27871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.850670][T27871] bridge_slave_0: entered allmulticast mode [ 1783.858337][T27871] bridge_slave_0: entered promiscuous mode [ 1783.907523][T27871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.942744][T27871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.984272][T27871] bridge_slave_1: entered allmulticast mode [ 1784.003558][T27871] bridge_slave_1: entered promiscuous mode [ 1784.094296][T27871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1784.143878][T27871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1784.256648][T27885] usb usb8: usbfs: process 27885 (syz.1.4356) did not claim interface 0 before use [ 1784.296793][T27871] team0: Port device team_slave_0 added [ 1784.340482][T27871] team0: Port device team_slave_1 added [ 1784.486181][T27871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1784.527469][T27871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.591898][T27871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.634516][T27871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.656230][T27871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.726721][T27871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.854058][T27871] hsr_slave_0: entered promiscuous mode [ 1784.876061][T27871] hsr_slave_1: entered promiscuous mode [ 1784.897069][T27871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1784.918308][T27871] Cannot create hsr debugfs directory [ 1785.332322][T27889] xt_bpf: check failed: parse error [ 1785.478703][T27871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.492799][ T54] Bluetooth: hci0: command tx timeout [ 1785.717031][T27871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.894819][T27871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.091788][T27871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.413340][T27871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1786.462413][T27871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1786.520064][T27871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1786.540340][T27871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1786.673022][T27914] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1786.765822][T27871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.808639][T27871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.832872][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.840149][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.935856][ T2899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.943131][ T2899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.108475][T27871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.254167][T27871] veth0_vlan: entered promiscuous mode [ 1787.300673][T27871] veth1_vlan: entered promiscuous mode [ 1787.370184][T27871] veth0_macvtap: entered promiscuous mode [ 1787.404864][T27871] veth1_macvtap: entered promiscuous mode [ 1787.454726][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.503071][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.532154][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.562458][ T54] Bluetooth: hci0: command tx timeout [ 1787.562502][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.619195][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.650956][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.681421][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.719130][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.742185][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.764580][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.786630][T27871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.818164][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.842364][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.042397][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.060858][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.102513][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.116816][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.142153][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.153317][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.163908][T27871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.177926][T27871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.191244][T27871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.201586][T27918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.221617][T27871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.252157][T27871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.260913][T27871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.270684][T27871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.374375][T27928] input: syz1 as /devices/virtual/input/input57 [ 1788.389496][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.416756][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.451524][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.467576][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.685626][T27940] sctp: [Deprecated]: syz.0.4371 (pid 27940) Use of int in max_burst socket option deprecated. [ 1788.685626][T27940] Use struct sctp_assoc_value instead [ 1788.919420][T27944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1789.357235][ T3856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.648113][ T54] Bluetooth: hci0: command tx timeout [ 1789.762654][ T3856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.982454][ T3856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.082030][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1790.103017][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1790.128995][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1790.141784][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1790.164099][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1790.173091][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1790.297247][ T3856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.479847][T27961] syzkaller0: entered promiscuous mode [ 1790.491454][T27961] syzkaller0: entered allmulticast mode [ 1791.732548][ T54] Bluetooth: hci0: command tx timeout [ 1791.967901][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.988635][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.287586][ T54] Bluetooth: hci4: command tx timeout [ 1793.531236][T27999] random: crng reseeded on system resumption [ 1794.362348][ T54] Bluetooth: hci4: command tx timeout [ 1796.186458][ T3856] bridge_slave_1: left allmulticast mode [ 1796.197596][ T3856] bridge_slave_1: left promiscuous mode [ 1796.220553][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.289995][ T3856] bridge_slave_0: left allmulticast mode [ 1796.314494][ T3856] bridge_slave_0: left promiscuous mode [ 1796.344897][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.443863][ T54] Bluetooth: hci4: command tx timeout [ 1797.120545][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1797.490068][T28040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1797.587722][ T3856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1797.630078][ T3856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1797.656162][ T3856] bond0 (unregistering): Released all slaves [ 1797.730122][T28038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4407'. [ 1797.810736][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4407'. [ 1798.303568][T27964] chnl_net:caif_netlink_parms(): no params data found [ 1798.522295][ T54] Bluetooth: hci4: command tx timeout [ 1798.636716][T22711] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1798.664038][ T3856] hsr_slave_0: left promiscuous mode [ 1798.680024][ T3856] hsr_slave_1: left promiscuous mode [ 1798.727430][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1798.754426][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.783730][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1798.802352][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.813036][T22711] usb 1-1: Using ep0 maxpacket: 8 [ 1798.839373][T22711] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1798.852226][T22711] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1798.882653][T22711] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1798.902020][T28071] binder: 28070:28071 ioctl c0306201 20000240 returned -22 [ 1798.910060][T22711] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1798.926548][T22711] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.947867][ T3856] veth1_macvtap: left promiscuous mode [ 1798.963568][T22711] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1798.987576][ T3856] veth0_macvtap: left promiscuous mode [ 1799.002943][ T3856] veth1_vlan: left promiscuous mode [ 1799.008454][ T3856] veth0_vlan: left promiscuous mode [ 1799.034765][T22711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.162254][ T29] audit: type=1326 audit(1729581055.007:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28070 comm="syz.3.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89857dff9 code=0x7ffc0000 [ 1799.209692][ T29] audit: type=1326 audit(1729581055.007:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28070 comm="syz.3.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89857dff9 code=0x7ffc0000 [ 1799.249390][ T29] audit: type=1326 audit(1729581055.117:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28070 comm="syz.3.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc89857ca3c code=0x7ffc0000 [ 1799.285018][T22711] usb 1-1: usb_control_msg returned -32 [ 1799.291942][T22711] usbtmc 1-1:16.0: can't read capabilities [ 1800.062228][T18316] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1800.212252][T18316] usb 2-1: Using ep0 maxpacket: 8 [ 1800.218753][T18316] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1800.242651][T18316] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1800.253489][T18316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.276861][T18316] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1800.286625][T18316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.310683][T18316] usb 2-1: Product: syz [ 1800.315137][T18316] usb 2-1: Manufacturer: syz [ 1800.319791][T18316] usb 2-1: SerialNumber: syz [ 1800.452660][ T3856] team0 (unregistering): Port device team_slave_1 removed [ 1800.542024][ T3856] team0 (unregistering): Port device team_slave_0 removed [ 1801.469549][ T5274] usb 1-1: USB disconnect, device number 70 [ 1801.675866][T27964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.721426][T27964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.751980][T27964] bridge_slave_0: entered allmulticast mode [ 1801.761538][T27964] bridge_slave_0: entered promiscuous mode [ 1801.797553][T27964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.827660][T27964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.845839][T27964] bridge_slave_1: entered allmulticast mode [ 1801.859263][T27964] bridge_slave_1: entered promiscuous mode [ 1801.998098][T27964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1802.046218][T27964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1802.228345][T27964] team0: Port device team_slave_0 added [ 1802.257607][T27964] team0: Port device team_slave_1 added [ 1802.621962][T27964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1802.643002][T27964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.738295][T27964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1802.770274][T18316] usb 2-1: 0:2 : does not exist [ 1802.802857][T27964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1802.825738][T18316] usb 2-1: USB disconnect, device number 79 [ 1802.829760][T27964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1802.876697][T26878] udevd[26878]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1802.909486][T27964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1803.056844][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1803.070564][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1803.080663][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1803.144896][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1803.163129][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1803.170630][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1803.197358][T27964] hsr_slave_0: entered promiscuous mode [ 1803.255462][T27964] hsr_slave_1: entered promiscuous mode [ 1803.668771][T22645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.867760][T28134] usb usb8: usbfs: process 28134 (syz.4.4428) did not claim interface 0 before use [ 1803.925562][T28133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1803.966693][T22645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.302902][T22645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.527181][T22645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.256306][ T4623] Bluetooth: hci3: command tx timeout [ 1805.370504][T28128] chnl_net:caif_netlink_parms(): no params data found [ 1805.664925][T22645] bridge_slave_0: left allmulticast mode [ 1805.670635][T22645] bridge_slave_0: left promiscuous mode [ 1805.676991][T22645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.696174][T22645] bridge_slave_1: left allmulticast mode [ 1805.702018][T22645] bridge_slave_1: left promiscuous mode [ 1805.707970][T22645] bridge1: port 1(bridge_slave_1) entered disabled state [ 1806.184791][T28181] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1806.712406][T28185] xt_hashlimit: size too large, truncated to 1048576 [ 1807.267546][T22645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.288048][T22645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.315233][T22645] bond0 (unregistering): Released all slaves [ 1807.324228][ T4623] Bluetooth: hci3: command tx timeout [ 1807.400283][T22645] Êü: left promiscuous mode [ 1807.550017][T28128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.616870][T28128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.640432][T28128] bridge_slave_0: entered allmulticast mode [ 1807.656287][T28128] bridge_slave_0: entered promiscuous mode [ 1807.693836][T28128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.712276][T28128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.719581][T28128] bridge_slave_1: entered allmulticast mode [ 1807.763412][T28128] bridge_slave_1: entered promiscuous mode [ 1809.411366][ T4623] Bluetooth: hci3: command tx timeout [ 1809.486529][T27964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1809.596328][T27964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1809.675950][T28128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.760720][T27964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1809.775653][T27964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1809.807807][T28128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.889579][T22645] hsr_slave_0: left promiscuous mode [ 1809.905047][T22645] hsr_slave_1: left promiscuous mode [ 1809.933509][T22645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.962323][T22645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.979947][T22645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.987719][T22645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.022942][T22645] veth1_macvtap: left promiscuous mode [ 1810.028532][T22645] veth0_macvtap: left promiscuous mode [ 1810.034386][T22645] veth1_vlan: left promiscuous mode [ 1810.039741][T22645] veth0_vlan: left promiscuous mode [ 1810.153859][T28216] usb usb8: usbfs: process 28216 (syz.4.4441) did not claim interface 0 before use [ 1810.312719][T22645] pimreg3 (unregistering): left allmulticast mode [ 1811.482331][ T4623] Bluetooth: hci3: command tx timeout [ 1811.974580][T22645] team0 (unregistering): Port device team_slave_1 removed [ 1812.051716][T22645] team0 (unregistering): Port device team_slave_0 removed [ 1813.023223][T28220] vlan2: entered allmulticast mode [ 1813.046391][T28220] bond0: entered allmulticast mode [ 1813.051619][T28220] bond_slave_0: entered allmulticast mode [ 1813.072415][T28220] bond_slave_1: entered allmulticast mode [ 1813.093592][T28220] bond0: left allmulticast mode [ 1813.098523][T28220] bond_slave_0: left allmulticast mode [ 1813.104511][T28220] bond_slave_1: left allmulticast mode [ 1813.147275][T28225] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1813.273859][T28128] team0: Port device team_slave_0 added [ 1813.284544][T28128] team0: Port device team_slave_1 added [ 1813.440047][T28128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.472200][T28128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.561057][T28128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.592896][T28128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.630320][T28128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.680473][T28128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1813.972338][T28128] hsr_slave_0: entered promiscuous mode [ 1813.993200][T28128] hsr_slave_1: entered promiscuous mode [ 1814.012542][T28128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1814.036003][T28128] Cannot create hsr debugfs directory [ 1814.203110][T27964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.220828][T27964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.233316][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.240441][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.335916][ T2899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.343135][ T2899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.621340][T27964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1814.874743][T28278] usb usb8: usbfs: process 28278 (syz.0.4451) did not claim interface 0 before use [ 1814.907310][T27964] veth0_vlan: entered promiscuous mode [ 1815.143453][T27964] veth1_vlan: entered promiscuous mode [ 1815.300922][T27964] veth0_macvtap: entered promiscuous mode [ 1815.348357][T27964] veth1_macvtap: entered promiscuous mode [ 1815.620182][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.661385][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.691866][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.749584][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.780080][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.802284][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.822204][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1815.842232][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.873746][T27964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.929227][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.952410][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1815.975970][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1815.997939][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.018389][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.063448][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.092154][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1816.127039][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1816.191869][T27964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.311199][T28128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1816.344054][T27964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.380043][T27964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.422136][T27964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.451491][T27964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.484359][T28128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1816.501919][T28128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1816.565208][T28128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1816.736008][T14332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.762469][T14332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.816883][T28316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1816.886284][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.894535][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.969975][T28316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1817.174276][T28128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.230995][T28128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.253517][T28335] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1817.288981][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.296211][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.343742][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.350916][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.463549][T28345] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1817.681376][T28128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.808441][T28360] usb usb8: usbfs: process 28360 (syz.0.4472) did not claim interface 0 before use [ 1817.843855][T28128] veth0_vlan: entered promiscuous mode [ 1817.888627][T28128] veth1_vlan: entered promiscuous mode [ 1817.966561][T28128] veth0_macvtap: entered promiscuous mode [ 1818.024077][T28128] veth1_macvtap: entered promiscuous mode [ 1818.101129][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1818.132983][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.174366][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1818.201445][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.224330][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1818.239843][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.264035][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1818.275248][T28382] random: crng reseeded on system resumption [ 1818.286471][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.303597][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1818.324544][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.342183][ T937] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1818.364034][T28128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1818.386209][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1818.427584][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.471573][T28389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1818.479717][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1818.506455][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.527727][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1818.539664][ T937] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1818.553582][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.561879][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1818.574488][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1818.574528][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.574550][T28128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1818.574568][T28128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1818.586882][T28128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1818.630437][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1818.646551][ T937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1818.667643][ T937] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1818.677416][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.725988][ T937] usb 2-1: config 0 descriptor?? [ 1818.743766][T28128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.792289][T28128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.801075][T28128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.862141][T28128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.112998][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.121218][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.191316][ T937] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 1819.208962][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.234718][ T937] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1819.255046][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.502686][T28415] usb usb8: usbfs: process 28415 (syz.4.4486) did not claim interface 0 before use [ 1819.542116][T18316] usb 2-1: USB disconnect, device number 80 [ 1819.798602][T28425] dccp_close: ABORT with 66 bytes unread [ 1819.985862][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1820.000326][T28430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1820.006925][T28430] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1820.059280][T28436] netlink: 'syz.0.4492': attribute type 4 has an invalid length. [ 1820.072377][T28430] vhci_hcd vhci_hcd.0: Device attached [ 1820.168592][T28444] netlink: 'syz.0.4492': attribute type 4 has an invalid length. [ 1820.292320][ T5275] vhci_hcd: vhci_device speed not set [ 1820.343396][T28458] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1820.377823][ T5275] usb 15-1: new full-speed USB device number 3 using vhci_hcd [ 1820.482148][T10828] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 1820.518841][T28465] usb usb8: usbfs: process 28465 (syz.1.4498) did not claim interface 0 before use [ 1820.531073][T28468] random: crng reseeded on system resumption [ 1820.681593][T10828] usb 4-1: config 0 has no interfaces? [ 1820.696272][T10828] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1820.738250][T10828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.769989][T10828] usb 4-1: config 0 descriptor?? [ 1820.994074][T28439] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1821.015724][T10034] usb 4-1: USB disconnect, device number 77 [ 1821.049366][ T2899] vhci_hcd: stop threads [ 1821.060303][ T2899] vhci_hcd: release socket [ 1821.094110][ T2899] vhci_hcd: disconnect device [ 1822.189478][T28509] netlink: 'syz.1.4516': attribute type 1 has an invalid length. [ 1822.219545][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1822.716637][T28525] syzkaller0: entered promiscuous mode [ 1822.749149][T28525] syzkaller0: entered allmulticast mode [ 1822.969711][T28505] dccp_close: ABORT with 67 bytes unread [ 1823.563430][ T4623] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1823.578236][ T4623] Bluetooth: hci3: Injecting HCI hardware error event [ 1823.588446][ T54] Bluetooth: hci3: hardware error 0x00 [ 1823.888090][T28563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4536'. [ 1825.477128][ T5275] vhci_hcd: vhci_device speed not set [ 1825.644596][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1826.798011][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1827.208785][T28612] veth1_macvtap: left promiscuous mode [ 1827.224529][T28612] macsec0: entered promiscuous mode [ 1827.574629][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1827.994295][T28646] netlink: 'syz.1.4568': attribute type 9 has an invalid length. [ 1828.022122][T28646] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1828.322688][T28661] : renamed from ipvlan1 [ 1828.495196][T28664] sit0: entered allmulticast mode [ 1828.512734][T28665] sit0: entered promiscuous mode [ 1828.958321][T28680] netlink: 'syz.2.4581': attribute type 9 has an invalid length. [ 1828.979114][T28680] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.4581'. [ 1829.727480][T28712] netlink: 'syz.3.4595': attribute type 9 has an invalid length. [ 1829.735479][T28712] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1830.487489][T28741] netlink: 'syz.1.4607': attribute type 9 has an invalid length. [ 1830.526642][T28741] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.4607'. [ 1830.557857][T28741] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 1831.242425][T28772] ALSA: mixer_oss: invalid OSS volume 'oŽ' [ 1833.032912][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1833.325081][T28873] pim6reg1: entered promiscuous mode [ 1833.340792][T28873] pim6reg1: entered allmulticast mode [ 1833.702813][ T5275] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1833.890196][T28896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1833.910105][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 1833.920976][ T5275] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1833.966265][ T5275] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1833.992237][ T937] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1834.001939][ T5275] usb 1-1: string descriptor 0 read error: -22 [ 1834.008646][ T5275] usb 1-1: New USB device found, idVendor=0625, idProduct=a4a8, bcdDevice= 0.40 [ 1834.022265][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.034152][T28882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1834.042285][T10034] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 1834.144377][ T937] usb 5-1: config 0 has no interfaces? [ 1834.154129][ T937] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1834.163850][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.171992][ T937] usb 5-1: Product: syz [ 1834.177729][ T937] usb 5-1: Manufacturer: syz [ 1834.182800][ T937] usb 5-1: SerialNumber: syz [ 1834.189775][ T937] usb 5-1: config 0 descriptor?? [ 1834.197874][T10034] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1834.208763][T10034] usb 4-1: config 0 has no interface number 0 [ 1834.235566][T10034] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1834.250990][T10034] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1834.261088][T10034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.279367][T10034] usb 4-1: config 0 descriptor?? [ 1834.287709][T10828] usb 1-1: USB disconnect, device number 71 [ 1834.293107][T10034] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1834.362360][ T5274] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1834.452681][T10034] usb 5-1: USB disconnect, device number 39 [ 1834.490203][T28894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.506059][T28894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.524347][ T5274] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1834.542454][ T5274] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1834.560278][ T5274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1834.570207][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1834.589395][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1834.611901][ T5274] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1834.621496][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1834.622258][ T51] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1834.638433][ T5274] usb 3-1: Product: syz [ 1834.654219][ T5274] usb 3-1: Manufacturer: syz [ 1834.663318][ T5274] cdc_wdm 3-1:1.0: skipping garbage [ 1834.668581][ T5274] cdc_wdm 3-1:1.0: skipping garbage [ 1834.676975][ T5274] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1834.689501][ T5274] cdc_wdm 3-1:1.0: Unknown control protocol [ 1834.724286][T28894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.744822][T28894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.773496][T10828] usb 4-1: USB disconnect, device number 78 [ 1834.783898][T10828] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 1834.882411][T28898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4677'. [ 1834.891752][T28898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4677'. [ 1835.085806][ T5274] usb 3-1: USB disconnect, device number 57 [ 1835.763895][T28927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1835.912517][T10828] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1836.084354][T10828] usb 4-1: config 0 has no interfaces? [ 1836.089964][T10828] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1836.122653][T10828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.135195][T10828] usb 4-1: config 0 descriptor?? [ 1836.161620][T28932] Invalid logical block size (65534) [ 1836.202860][T10034] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1836.390946][T10034] usb 1-1: config 0 has no interfaces? [ 1836.399494][T10034] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1836.410717][T10034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.424819][T28921] vlan2: entered promiscuous mode [ 1836.425632][T10034] usb 1-1: Product: syz [ 1836.429921][T28921] bridge0: entered promiscuous mode [ 1836.440373][T10034] usb 1-1: Manufacturer: syz [ 1836.454211][T10034] usb 1-1: SerialNumber: syz [ 1836.471632][T10034] usb 1-1: config 0 descriptor?? [ 1836.478516][T28921] bridge0: port 3(vlan2) entered blocking state [ 1836.512342][T28921] bridge0: port 3(vlan2) entered disabled state [ 1836.532600][T28921] vlan2: entered allmulticast mode [ 1836.537867][T28921] bridge0: entered allmulticast mode [ 1836.591131][T28921] vlan2: left allmulticast mode [ 1836.605746][T28921] bridge0: left allmulticast mode [ 1836.625890][T28921] bridge0: left promiscuous mode [ 1836.715841][T22711] usb 1-1: USB disconnect, device number 72 [ 1836.801346][T10828] usb 4-1: USB disconnect, device number 79 [ 1837.301658][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4699'. [ 1837.445406][T18316] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1837.613935][T18316] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1837.622896][T18316] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1837.633355][T18316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1837.644479][T18316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1837.655763][T18316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1837.669395][T18316] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1837.678786][T18316] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1837.687030][T18316] usb 3-1: Product: syz [ 1837.691288][T18316] usb 3-1: Manufacturer: syz [ 1837.703365][T18316] cdc_wdm 3-1:1.0: skipping garbage [ 1837.708665][T18316] cdc_wdm 3-1:1.0: skipping garbage [ 1837.716395][T18316] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1837.722443][T18316] cdc_wdm 3-1:1.0: Unknown control protocol [ 1837.772315][T10828] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1837.905187][T28951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1837.915480][T28951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1837.942159][T10828] usb 4-1: Using ep0 maxpacket: 16 [ 1837.947432][ T51] usb 2-1: device descriptor read/64, error -71 [ 1837.955693][T10828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.967767][T10828] usb 4-1: config 0 has no interfaces? [ 1837.973550][T10828] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1837.983211][T10828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.993974][T10828] usb 4-1: config 0 descriptor?? [ 1838.031578][T18316] usb 3-1: USB disconnect, device number 58 [ 1838.194119][ T51] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1838.217745][T28967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.228714][T28967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.245119][T28967] dummy0: entered promiscuous mode [ 1838.251263][T28967] batadv0: entered promiscuous mode [ 1838.263006][T18316] usb 4-1: USB disconnect, device number 80 [ 1838.364014][ T51] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1838.376074][ T51] usb 2-1: config 0 has no interface number 0 [ 1838.389261][ T51] usb 2-1: config 0 interface 188 altsetting 3 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1838.401153][ T51] usb 2-1: config 0 interface 188 has no altsetting 0 [ 1838.413470][ T51] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=d3.28 [ 1838.430071][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.439745][ T51] usb 2-1: Product: syz [ 1838.444942][ T51] usb 2-1: Manufacturer: syz [ 1838.449732][ T51] usb 2-1: SerialNumber: syz [ 1838.460782][ T51] usb 2-1: config 0 descriptor?? [ 1838.683949][T28965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.701715][T28965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.896788][T28988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1839.152193][T10034] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1839.290074][ T51] usb 2-1: USB disconnect, device number 82 [ 1839.325904][T10034] usb 3-1: config 0 has no interfaces? [ 1839.341052][T10034] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1839.365695][T10034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.387889][T10034] usb 3-1: Product: syz [ 1839.398681][T10034] usb 3-1: Manufacturer: syz [ 1839.418465][T10034] usb 3-1: SerialNumber: syz [ 1839.438996][T10034] usb 3-1: config 0 descriptor?? [ 1839.677760][T18316] usb 3-1: USB disconnect, device number 59 [ 1840.362607][T18316] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1840.544919][T18316] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1840.567023][T18316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1840.585252][T18316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1840.597176][T18316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1840.611583][T18316] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1840.621613][T18316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.641584][T18316] usb 2-1: config 0 descriptor?? [ 1840.802286][T10034] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1841.016359][T10034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.031898][T10034] usb 3-1: config 0 has no interfaces? [ 1841.056787][T18316] usbhid 2-1:0.0: can't add hid device: -71 [ 1841.070981][T18316] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1841.071589][T10034] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1841.096951][T18316] usb 2-1: USB disconnect, device number 83 [ 1841.115122][T10034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.137482][T10034] usb 3-1: Product: syz [ 1841.150098][T29038] random: crng reseeded on system resumption [ 1841.163496][T10034] usb 3-1: Manufacturer: syz [ 1841.168227][T10034] usb 3-1: SerialNumber: syz [ 1841.183215][T10034] usb 3-1: config 0 descriptor?? [ 1841.972310][ T937] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1842.142578][ T937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1842.165827][ T937] usb 1-1: config 0 has no interface number 0 [ 1842.176316][ T937] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1842.228027][ T937] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1842.258585][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.291278][ T937] usb 1-1: config 0 descriptor?? [ 1842.316173][ T937] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1842.517274][T29051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.574780][T29051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.604831][T29072] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1842.799789][T29051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.820760][T29051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.846599][T18316] usb 1-1: USB disconnect, device number 73 [ 1842.864670][T18316] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 1843.013665][ T937] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1843.174297][ T937] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1843.184114][ T937] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1843.195504][ T937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1843.205388][ T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1843.216959][ T937] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1843.234839][ T937] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1843.244385][ T5275] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1843.252080][ T937] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1843.260524][ T937] usb 2-1: Product: syz [ 1843.265308][ T937] usb 2-1: Manufacturer: syz [ 1843.276268][ T937] cdc_wdm 2-1:1.0: skipping garbage [ 1843.281599][ T937] cdc_wdm 2-1:1.0: skipping garbage [ 1843.288904][ T937] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1843.294974][ T937] cdc_wdm 2-1:1.0: Unknown control protocol [ 1843.412468][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 1843.430902][ T5275] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1843.472256][ T5275] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1843.496650][T10034] usb 3-1: USB disconnect, device number 60 [ 1843.515230][ T5275] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1843.528769][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1843.560131][T29077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1843.596063][ T5275] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1843.608377][T29088] random: crng reseeded on system resumption [ 1843.609880][ T5274] usb 2-1: USB disconnect, device number 84 [ 1843.625670][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.638585][ T5275] usb 4-1: Product: syz [ 1843.650987][ T5275] usb 4-1: Manufacturer: syz [ 1843.656655][ T5275] usb 4-1: SerialNumber: syz [ 1843.677952][ T5275] hso 4-1:6.0: Can't find BULK IN endpoint [ 1844.092190][ T5274] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1844.245279][ T5274] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1844.254736][ T5274] usb 3-1: can't read configurations, error -61 [ 1844.304276][T29104] fuse: Bad value for 'group_id' [ 1844.316137][T29104] fuse: Bad value for 'group_id' [ 1844.392165][ T5274] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1844.538858][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1844.564748][ T5274] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1844.588752][ T5274] usb 3-1: can't read configurations, error -61 [ 1844.600828][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1844.618691][ T5274] usb usb3-port1: attempt power cycle [ 1844.962393][ T5274] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1844.996656][ T5274] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1845.021555][ T5274] usb 3-1: can't read configurations, error -61 [ 1845.172542][ T5274] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1845.206598][ T5274] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1845.214530][ T5274] usb 3-1: can't read configurations, error -61 [ 1845.221336][ T5274] usb usb3-port1: unable to enumerate USB device [ 1845.672178][ T5274] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1845.835298][ T5274] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1845.846850][ T5274] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1845.857905][ T5274] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1845.868484][ T5274] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1845.879686][ T5274] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1845.898378][ T5274] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1845.909851][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1845.919241][ T5274] usb 1-1: Product: syz [ 1845.925080][ T5274] usb 1-1: Manufacturer: syz [ 1845.940908][ T5274] cdc_wdm 1-1:1.0: skipping garbage [ 1845.946935][ T5274] cdc_wdm 1-1:1.0: skipping garbage [ 1845.957981][ T5274] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1845.965020][ T5274] cdc_wdm 1-1:1.0: Unknown control protocol [ 1846.027798][ T5274] usb 4-1: USB disconnect, device number 81 [ 1846.161697][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4767'. [ 1846.168408][T29138] fuse: Bad value for 'group_id' [ 1846.181071][T29130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4767'. [ 1846.182108][T29138] fuse: Bad value for 'group_id' [ 1846.208017][T10034] usb 1-1: USB disconnect, device number 74 [ 1846.641723][T29157] openvswitch: netlink: Actions may not be safe on all matching packets [ 1846.659705][T29157] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1846.955839][T10034] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1847.164551][T10034] usb 4-1: config 0 has an invalid interface number: 40 but max is 0 [ 1847.183125][T10034] usb 4-1: config 0 has no interface number 0 [ 1847.198719][T10034] usb 4-1: too many endpoints for config 0 interface 40 altsetting 48: 120, using maximum allowed: 30 [ 1847.241961][T10034] usb 4-1: config 0 interface 40 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1847.282578][T10034] usb 4-1: config 0 interface 40 has no altsetting 0 [ 1847.289564][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4781'. [ 1847.306128][T10034] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1847.353517][T10034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.426895][T10034] usb 4-1: Product: syz [ 1847.445621][T10034] usb 4-1: Manufacturer: syz [ 1847.454044][T10034] usb 4-1: SerialNumber: syz [ 1847.469297][T10034] usb 4-1: config 0 descriptor?? [ 1847.498016][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4781'. [ 1847.974293][T10034] usb 4-1: USB disconnect, device number 82 [ 1848.011798][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1848.036047][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1848.079385][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1848.091476][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1848.142556][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1848.152175][T10828] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1848.159916][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1848.314984][T10828] usb 2-1: Using ep0 maxpacket: 8 [ 1848.346742][T10828] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1848.370769][T10828] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1848.382923][T22645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.461722][T10828] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1848.560479][T10828] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1848.571406][T10828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.579596][T10828] usb 2-1: Product: syz [ 1848.583891][T10828] usb 2-1: Manufacturer: syz [ 1848.588531][T10828] usb 2-1: SerialNumber: syz [ 1848.608354][T10828] hso 2-1:6.0: Can't find BULK IN endpoint [ 1848.685523][T22645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.772222][T10034] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1848.939292][T22645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.968018][T10034] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1848.994196][T10034] usb 3-1: can't read configurations, error -61 [ 1849.105618][T22645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.122476][T10034] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1849.296210][T10034] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1849.312343][T10034] usb 3-1: can't read configurations, error -61 [ 1849.312364][T10828] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1849.319264][T10034] usb usb3-port1: attempt power cycle [ 1849.423128][T29181] chnl_net:caif_netlink_parms(): no params data found [ 1849.508600][T22645] bridge_slave_1: left allmulticast mode [ 1849.519922][T22645] bridge_slave_1: left promiscuous mode [ 1849.528406][T22645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.532214][T10828] usb 1-1: Using ep0 maxpacket: 16 [ 1849.546759][T22645] bridge_slave_0: left allmulticast mode [ 1849.556282][T10828] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1849.573847][T22645] bridge_slave_0: left promiscuous mode [ 1849.573851][T10828] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1849.573883][T10828] usb 1-1: Product: syz [ 1849.601354][T10828] usb 1-1: Manufacturer: syz [ 1849.604463][T22645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.608179][T10828] usb 1-1: SerialNumber: syz [ 1849.624056][T10828] usb 1-1: config 0 descriptor?? [ 1849.674432][T10034] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1849.709030][T10034] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1849.737264][T10034] usb 3-1: can't read configurations, error -61 [ 1849.876483][T18316] usb 1-1: USB disconnect, device number 75 [ 1849.894857][T10034] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1849.926978][T10034] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1849.962190][T10034] usb 3-1: can't read configurations, error -61 [ 1849.976115][T10034] usb usb3-port1: unable to enumerate USB device [ 1850.206189][ T4623] Bluetooth: hci5: command tx timeout [ 1850.862716][ T9] usb 2-1: USB disconnect, device number 85 [ 1850.930915][T22645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.966359][T22645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.013488][T22645] bond0 (unregistering): Released all slaves [ 1851.113950][T18316] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1851.304245][T18316] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1851.329628][T18316] usb 1-1: config 0 has no interface number 0 [ 1851.349010][T18316] usb 1-1: config 0 interface 188 altsetting 3 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1851.353740][T29181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.368559][T18316] usb 1-1: config 0 interface 188 has no altsetting 0 [ 1851.383242][T29181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.400881][T29181] bridge_slave_0: entered allmulticast mode [ 1851.408886][T18316] usb 1-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=d3.28 [ 1851.409742][T29181] bridge_slave_0: entered promiscuous mode [ 1851.430043][T29181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.441490][T29181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.449087][T29181] bridge_slave_1: entered allmulticast mode [ 1851.454166][T18316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.457101][T29181] bridge_slave_1: entered promiscuous mode [ 1851.483904][T18316] usb 1-1: Product: syz [ 1851.500484][T18316] usb 1-1: Manufacturer: syz [ 1851.521527][T18316] usb 1-1: SerialNumber: syz [ 1851.548914][T18316] usb 1-1: config 0 descriptor?? [ 1851.778173][T29233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.851056][T22645] hsr_slave_0: left promiscuous mode [ 1851.862344][T29233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.939577][T22645] hsr_slave_1: left promiscuous mode [ 1851.965849][T22645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1851.981637][T22645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1852.055781][T22645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1852.117330][T22645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1852.282522][ T4623] Bluetooth: hci5: command tx timeout [ 1852.297633][T22645] veth1_macvtap: left promiscuous mode [ 1852.336961][T22645] veth0_macvtap: left promiscuous mode [ 1852.348773][T22645] veth1_vlan: left promiscuous mode [ 1852.354845][T22645] veth0_vlan: left promiscuous mode [ 1852.752202][ T5274] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1852.932175][ T5274] usb 2-1: Using ep0 maxpacket: 8 [ 1852.944594][ T5274] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1852.955294][ T5274] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1852.970679][ T5274] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1852.986472][ T5274] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1852.996299][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.026646][ T5274] usb 2-1: Product: syz [ 1853.034702][ T5274] usb 2-1: Manufacturer: syz [ 1853.039375][ T5274] usb 2-1: SerialNumber: syz [ 1853.060289][ T5274] hso 2-1:6.0: Can't find BULK IN endpoint [ 1853.132985][T29289] binder: 29288:29289 ioctl c0306201 0 returned -14 [ 1853.404731][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.411382][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.899733][T22645] team0 (unregistering): Port device team_slave_1 removed [ 1853.961374][T22645] team0 (unregistering): Port device team_slave_0 removed [ 1854.362362][ T4623] Bluetooth: hci5: command tx timeout [ 1854.688532][T29181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.702786][T29181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.031283][T18316] usb 1-1: USB disconnect, device number 76 [ 1855.060894][T29181] team0: Port device team_slave_0 added [ 1855.069290][T29181] team0: Port device team_slave_1 added [ 1855.214271][T29181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.221282][T29181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.247696][T29181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.282879][T29181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.289988][T29181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.316311][T29181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.474973][T29181] hsr_slave_0: entered promiscuous mode [ 1855.481416][T29181] hsr_slave_1: entered promiscuous mode [ 1855.487634][T29181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1855.495418][T29181] Cannot create hsr debugfs directory [ 1855.754469][ T5274] usb 2-1: USB disconnect, device number 86 [ 1855.994602][T29321] binder: 29320:29321 ioctl c0306201 0 returned -14 [ 1856.420394][T29340] usb usb8: usbfs: process 29340 (syz.2.4816) did not claim interface 0 before use [ 1856.445711][ T4623] Bluetooth: hci5: command tx timeout [ 1857.285454][T29181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1857.322572][T29181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1857.351918][T29181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1857.392213][T18316] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1857.440454][T29181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1857.562364][T18316] usb 4-1: Using ep0 maxpacket: 8 [ 1857.571426][T18316] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1857.581510][T18316] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1857.594997][T18316] usb 4-1: Product: syz [ 1857.599229][T18316] usb 4-1: Manufacturer: syz [ 1857.605267][T18316] usb 4-1: SerialNumber: syz [ 1857.613340][T18316] usb 4-1: config 0 descriptor?? [ 1857.621684][T18316] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1857.730651][T10034] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1857.756250][T29181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.786986][T29181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.799346][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.806633][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.842708][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.850000][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.894396][T10034] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1857.903682][T10034] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1857.933861][T29181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1857.942285][ T5258] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1857.952304][T10034] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1857.968424][T10034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1858.014221][T10034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1858.046748][T29181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1858.064162][T10034] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1858.083851][T10034] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1858.111690][T10034] usb 3-1: Product: syz [ 1858.125283][ T5258] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1858.144523][ T5258] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1858.146978][T10034] usb 3-1: Manufacturer: syz [ 1858.185606][ T5258] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1858.191602][T10034] cdc_wdm 3-1:1.0: skipping garbage [ 1858.208106][ T5258] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1858.214489][T29181] veth0_vlan: entered promiscuous mode [ 1858.232170][T10034] cdc_wdm 3-1:1.0: skipping garbage [ 1858.248521][T18316] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 1858.249716][T10034] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1858.269469][ T5258] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1858.318627][ T5258] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1858.320235][T29181] veth1_vlan: entered promiscuous mode [ 1858.335098][T10034] cdc_wdm 3-1:1.0: Unknown control protocol [ 1858.344623][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1858.378160][ T5258] usb 2-1: Product: syz [ 1858.392833][ T5258] usb 2-1: Manufacturer: syz [ 1858.403595][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1858.432712][T29373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1858.444231][ T5258] cdc_wdm 2-1:1.0: skipping garbage [ 1858.449510][ T5258] cdc_wdm 2-1:1.0: skipping garbage [ 1858.469859][ T51] usb 4-1: USB disconnect, device number 83 [ 1858.495779][ T5258] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1858.501776][ T5258] cdc_wdm 2-1:1.0: Unknown control protocol [ 1858.518795][T10034] usb 3-1: USB disconnect, device number 69 [ 1858.600714][T29181] veth0_macvtap: entered promiscuous mode [ 1858.638840][T29181] veth1_macvtap: entered promiscuous mode [ 1858.688728][T29381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4840'. [ 1858.699589][T29381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4840'. [ 1858.716938][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.729794][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.740165][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.751529][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.771856][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.786491][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.806428][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.826638][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.845685][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.866609][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.888449][T29181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.920527][T10034] usb 2-1: USB disconnect, device number 87 [ 1858.945741][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1858.972181][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.989832][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1859.001305][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.021883][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1859.044246][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.064660][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1859.089108][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.109431][T29181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1859.149340][T29181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1859.215027][T29181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1859.258224][T29181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.280457][T29181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.298571][T29181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.352634][T29181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.615879][T22645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.634193][T22645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.695295][T29429] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1859.771548][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.800247][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.522822][ T4623] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1860.535498][ T4623] Bluetooth: hci1: Injecting HCI hardware error event [ 1860.546167][ T4623] Bluetooth: hci1: hardware error 0x00 [ 1860.902303][T10034] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1861.042157][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1861.065342][T10034] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1861.083764][T10034] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1861.104475][T10034] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1861.127391][T10034] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1861.160437][T10034] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1861.194288][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1861.207321][ T9] usb 1-1: config 0 has no interface number 0 [ 1861.216829][T10034] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1861.228685][ T9] usb 1-1: config 0 interface 188 altsetting 3 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1861.252213][T10034] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1861.267430][T10034] usb 2-1: Product: syz [ 1861.271925][ T9] usb 1-1: config 0 interface 188 has no altsetting 0 [ 1861.280174][T10034] usb 2-1: Manufacturer: syz [ 1861.294732][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=d3.28 [ 1861.310159][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.326748][T10034] cdc_wdm 2-1:1.0: skipping garbage [ 1861.337061][ T9] usb 1-1: Product: syz [ 1861.343518][T10034] cdc_wdm 2-1:1.0: skipping garbage [ 1861.348999][ T9] usb 1-1: Manufacturer: syz [ 1861.358066][ T9] usb 1-1: SerialNumber: syz [ 1861.363294][T10034] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1861.372231][ T9] usb 1-1: config 0 descriptor?? [ 1861.377367][T10034] cdc_wdm 2-1:1.0: Unknown control protocol [ 1861.432152][ T51] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1861.559944][ T5258] usb 2-1: USB disconnect, device number 88 [ 1861.594265][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.625161][T29473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.637293][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.651684][ T51] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1861.661417][T29473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.676621][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.691193][ T51] usb 3-1: config 0 descriptor?? [ 1862.101905][T29488] FAULT_INJECTION: forcing a failure. [ 1862.101905][T29488] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.144026][T29488] CPU: 1 UID: 0 PID: 29488 Comm: syz.2.4857 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1862.154912][T29488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1862.164992][T29488] Call Trace: [ 1862.168285][T29488] [ 1862.171230][T29488] dump_stack_lvl+0x241/0x360 [ 1862.175935][T29488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1862.181152][T29488] ? __pfx__printk+0x10/0x10 [ 1862.185774][T29488] ? __kmalloc_noprof+0xb0/0x400 [ 1862.190735][T29488] ? __pfx___might_resched+0x10/0x10 [ 1862.196048][T29488] should_fail_ex+0x3b0/0x4e0 [ 1862.200757][T29488] ? video_usercopy+0x1f0/0x1180 [ 1862.205720][T29488] should_failslab+0xac/0x100 [ 1862.210417][T29488] ? video_usercopy+0x1f0/0x1180 [ 1862.215407][T29488] __kmalloc_noprof+0xd8/0x400 [ 1862.220196][T29488] video_usercopy+0x1f0/0x1180 [ 1862.224993][T29488] ? __pfx___video_do_ioctl+0x10/0x10 [ 1862.230386][T29488] ? __pfx_video_usercopy+0x10/0x10 [ 1862.235614][T29488] ? __fget_files+0x29/0x470 [ 1862.240227][T29488] ? __fget_files+0x3f3/0x470 [ 1862.244928][T29488] v4l2_ioctl+0x189/0x1e0 [ 1862.249283][T29488] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1862.254161][T29488] __se_sys_ioctl+0xf9/0x170 [ 1862.258784][T29488] do_syscall_64+0xf3/0x230 [ 1862.263308][T29488] ? clear_bhb_loop+0x35/0x90 [ 1862.268008][T29488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.273930][T29488] RIP: 0033:0x7f457537dff9 [ 1862.278365][T29488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1862.297995][T29488] RSP: 002b:00007f4574dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1862.306705][T29488] RAX: ffffffffffffffda RBX: 00007f4575535f80 RCX: 00007f457537dff9 [ 1862.314698][T29488] RDX: 00000000200003c0 RSI: 00000000c0905664 RDI: 0000000000000004 [ 1862.322686][T29488] RBP: 00007f4574dff090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.330677][T29488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.338658][T29488] R13: 0000000000000000 R14: 00007f4575535f80 R15: 00007f457565fa28 [ 1862.346658][T29488] [ 1862.429874][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 1862.448939][ T9] usb 1-1: USB disconnect, device number 77 [ 1862.500921][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1862.512844][ T51] usb 3-1: USB disconnect, device number 70 [ 1862.685154][ T4623] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1862.932272][T10828] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1863.122269][T10828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1863.143192][T10828] usb 2-1: config 66 interface 0 has no altsetting 0 [ 1863.178923][T10828] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1863.205678][T10828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.224744][T10828] usb 2-1: Product: syz [ 1863.229005][T10828] usb 2-1: Manufacturer: syz [ 1863.244543][T10828] usb 2-1: SerialNumber: syz [ 1863.262765][ T5274] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1863.442125][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 1863.449200][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.474081][ T5274] usb 4-1: config 0 has no interfaces? [ 1863.490460][ T5274] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1863.527251][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.556510][ T5274] usb 4-1: config 0 descriptor?? [ 1863.574958][T10828] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1863.619624][T10828] usb 2-1: USB disconnect, device number 89 [ 1863.622176][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1863.792423][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1863.817431][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1863.834016][T29535] team0: entered promiscuous mode [ 1863.837140][ T9] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1863.855530][T29535] team_slave_0: entered promiscuous mode [ 1863.862251][ T9] usb 3-1: Product: syz [ 1863.866486][ T9] usb 3-1: Manufacturer: syz [ 1863.884173][ T9] usb 3-1: SerialNumber: syz [ 1863.895479][ T9] usb 3-1: config 0 descriptor?? [ 1863.912338][T29535] team_slave_1: entered promiscuous mode [ 1863.920600][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1863.952126][T29535] team0: left promiscuous mode [ 1863.957023][T29535] team_slave_0: left promiscuous mode [ 1864.012286][T29535] team_slave_1: left promiscuous mode [ 1864.504454][ T5258] usb 4-1: USB disconnect, device number 84 [ 1864.550622][ T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 1864.702313][T10828] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1864.775778][ T5274] usb 3-1: USB disconnect, device number 71 [ 1864.862111][T10828] usb 2-1: Using ep0 maxpacket: 16 [ 1864.869247][T10828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.887211][T10828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1864.915219][T10828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1864.942124][T10828] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1864.961778][T10828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.984002][T10828] usb 2-1: config 0 descriptor?? [ 1865.239531][T29562] netlink: 'syz.3.4882': attribute type 9 has an invalid length. [ 1865.292144][T29562] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.4882'. [ 1865.292277][ T5274] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1865.465738][T10828] ryos 0003:1E7D:31CE.0052: ignoring exceeding usage max [ 1865.486003][T10828] ryos 0003:1E7D:31CE.0052: ignoring exceeding usage max [ 1865.508740][T10828] ryos 0003:1E7D:31CE.0052: usage index exceeded [ 1865.518571][T29560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.542125][T10828] ryos 0003:1E7D:31CE.0052: item 0 0 2 2 parsing failed [ 1865.549967][T10828] ryos 0003:1E7D:31CE.0052: parse failed [ 1865.563517][T10828] ryos 0003:1E7D:31CE.0052: probe with driver ryos failed with error -22 [ 1865.584576][T29560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.591832][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4884'. [ 1865.672826][T18316] usb 2-1: USB disconnect, device number 90 [ 1865.727270][T29560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.775045][T29560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.802405][ T5274] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1865.849270][ T5274] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1865.857802][ T5274] usb 1-1: can't read configurations, error -71 [ 1866.192224][T18316] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1866.352141][ T5258] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1866.371918][T18316] usb 3-1: Using ep0 maxpacket: 16 [ 1866.395831][T18316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1866.419117][T18316] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1866.437560][T18316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.459181][T18316] usb 3-1: Product: syz [ 1866.477042][T18316] usb 3-1: Manufacturer: syz [ 1866.481723][T18316] usb 3-1: SerialNumber: syz [ 1866.504640][T18316] usb 3-1: config 0 descriptor?? [ 1866.544498][ T5258] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1866.553181][ T5258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.572086][ T5258] usb 4-1: config 0 has no interface number 0 [ 1866.579379][T18316] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1866.589305][ T5258] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1866.614408][ T5258] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1866.652253][ T5258] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1866.709380][ T5258] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1866.720652][ T5258] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1866.733646][T12458] usb 3-1: Failed to submit usb control message: -71 [ 1866.741130][T12458] usb 3-1: unable to send the bmi data to the device: -71 [ 1866.741495][T18316] usb 3-1: USB disconnect, device number 72 [ 1866.748382][T12458] usb 3-1: unable to get target info from device [ 1866.754641][ T5258] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1866.782175][ T5258] usb 4-1: Product: syz [ 1866.787114][ T5258] usb 4-1: Manufacturer: syz [ 1866.791761][ T5258] usb 4-1: SerialNumber: syz [ 1866.793767][T12458] usb 3-1: could not get target info (-71) [ 1866.813206][ T5258] usb 4-1: config 0 descriptor?? [ 1866.831272][T12458] usb 3-1: could not probe fw (-71) [ 1867.047866][ T5258] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1867.068888][ T5258] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1867.155241][T29594] bridge_slave_0: left allmulticast mode [ 1867.171403][T29594] bridge_slave_0: left promiscuous mode [ 1867.192378][T29594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.217976][T29594] bridge_slave_1: left allmulticast mode [ 1867.224060][T29594] bridge_slave_1: left promiscuous mode [ 1867.229859][T29594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.253386][ T5258] usb 4-1: USB disconnect, device number 85 [ 1867.299896][T29594] bond0: (slave bond_slave_0): Releasing backup interface [ 1867.344125][T29594] bond0: (slave bond_slave_1): Releasing backup interface [ 1867.442343][ T5274] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1867.448362][T29594] team0: Port device team_slave_0 removed [ 1867.493966][T29594] team0: Port device team_slave_1 removed [ 1867.521069][T29594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1867.532213][T29594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1867.560060][T29594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1867.570871][T29594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1867.600725][T29597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1867.617850][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 1867.639696][ T5274] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1867.649625][ T5274] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1867.670309][ T5274] usb 1-1: Product: syz [ 1867.674975][ T5274] usb 1-1: Manufacturer: syz [ 1867.679619][ T5274] usb 1-1: SerialNumber: syz [ 1867.699969][ T5274] usb 1-1: config 0 descriptor?? [ 1867.712297][T10034] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1867.725637][ T5274] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1867.898182][T10034] usb 2-1: Using ep0 maxpacket: 8 [ 1867.925617][T10034] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.939606][T10034] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1867.949644][T10034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1867.972222][T10034] usb 2-1: SerialNumber: syz [ 1867.991149][T10034] usb 2-1: config 0 descriptor?? [ 1868.007119][T10034] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1868.022329][T10034] usb 2-1: No valid video chain found. [ 1868.397548][ T5274] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63 [ 1868.463441][T29606] input: syz1 as /devices/virtual/input/input64 [ 1868.595644][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1868.627395][ T9] usb 1-1: USB disconnect, device number 80 [ 1868.854819][T29612] netlink: 'syz.2.4898': attribute type 10 has an invalid length. [ 1868.863061][T29612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.885089][T29612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1868.898250][T29612] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1870.174395][ T51] usb 2-1: USB disconnect, device number 91 [ 1870.394267][T29636] fuse: Unknown parameter 'group_i00000000000000000000' [ 1870.487938][T29643] input: syz1 as /devices/virtual/input/input65 [ 1870.522144][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1870.662163][ T9] usb 1-1: device descriptor read/64, error -71 [ 1870.832257][ T51] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1870.902210][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1870.992268][T18316] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 1871.002126][ T51] usb 4-1: config 0 has no interfaces? [ 1871.010504][ T51] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1871.020149][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.029258][ T51] usb 4-1: Product: syz [ 1871.034182][ T51] usb 4-1: Manufacturer: syz [ 1871.038838][ T51] usb 4-1: SerialNumber: syz [ 1871.042313][ T9] usb 1-1: device descriptor read/64, error -71 [ 1871.047187][ T51] usb 4-1: config 0 descriptor?? [ 1871.173891][T18316] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1871.212257][ T9] usb usb1-port1: attempt power cycle [ 1871.215959][T18316] usb 2-1: config 0 has no interface number 0 [ 1871.232555][T18316] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1871.259026][T18316] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1871.289636][T18316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.316844][T18316] usb 2-1: config 0 descriptor?? [ 1871.347857][T18316] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1871.527851][T29648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.544064][T29648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.602157][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1871.623160][ T9] usb 1-1: device descriptor read/8, error -71 [ 1871.667068][ T51] usb 4-1: USB disconnect, device number 86 [ 1871.768669][T29648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.788827][T29648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.809281][T18316] usb 2-1: USB disconnect, device number 92 [ 1871.826407][T18316] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1871.872206][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1871.912757][ T9] usb 1-1: device descriptor read/8, error -71 [ 1872.022360][ T9] usb usb1-port1: unable to enumerate USB device [ 1872.552176][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1872.591149][T29670] fuse: Unknown parameter 'group_i00000000000000000000' [ 1872.714123][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1872.728296][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.772441][ T9] usb 4-1: config 0 descriptor?? [ 1873.042223][ T51] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1873.218947][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1873.232302][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 1873.253634][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1873.265459][ T9] [drm] Initialized udl on minor 2 [ 1873.273048][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1873.297637][ T51] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1873.317336][ T51] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1873.347410][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1873.375440][ T51] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1873.387132][T10034] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1873.412209][T10034] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1873.415622][ T51] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1873.434066][ T9] usb 4-1: USB disconnect, device number 87 [ 1873.437117][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.478508][ T51] usb 2-1: Product: syz [ 1873.492220][ T51] usb 2-1: Manufacturer: syz [ 1873.505089][ T51] usb 2-1: SerialNumber: syz [ 1873.625234][ T51] hso 2-1:6.0: Can't find BULK IN endpoint [ 1873.646173][T29683] FAULT_INJECTION: forcing a failure. [ 1873.646173][T29683] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.666391][T29683] CPU: 1 UID: 0 PID: 29683 Comm: syz.0.4923 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1873.677242][T29683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1873.687348][T29683] Call Trace: [ 1873.690670][T29683] [ 1873.693634][T29683] dump_stack_lvl+0x241/0x360 [ 1873.698343][T29683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1873.703559][T29683] ? __pfx__printk+0x10/0x10 [ 1873.708168][T29683] ? fs_reclaim_acquire+0x93/0x130 [ 1873.713299][T29683] ? __pfx___might_resched+0x10/0x10 [ 1873.718609][T29683] should_fail_ex+0x3b0/0x4e0 [ 1873.723315][T29683] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1873.729060][T29683] should_failslab+0xac/0x100 [ 1873.733757][T29683] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1873.739494][T29683] __kmalloc_noprof+0xd8/0x400 [ 1873.744281][T29683] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1873.749854][T29683] tomoyo_path_number_perm+0x23a/0x880 [ 1873.755336][T29683] ? tomoyo_path_number_perm+0x208/0x880 [ 1873.760989][T29683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1873.767012][T29683] ? __fget_files+0x29/0x470 [ 1873.771622][T29683] ? __fget_files+0x3f3/0x470 [ 1873.776323][T29683] security_file_ioctl+0xc6/0x2a0 [ 1873.781394][T29683] __se_sys_ioctl+0x47/0x170 [ 1873.786014][T29683] do_syscall_64+0xf3/0x230 [ 1873.790535][T29683] ? clear_bhb_loop+0x35/0x90 [ 1873.795235][T29683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.801186][T29683] RIP: 0033:0x7f571037dff9 [ 1873.805616][T29683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1873.825240][T29683] RSP: 002b:00007f5711251038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.833676][T29683] RAX: ffffffffffffffda RBX: 00007f5710535f80 RCX: 00007f571037dff9 [ 1873.841661][T29683] RDX: 0000000020000000 RSI: 00000000c008551c RDI: 0000000000000003 [ 1873.849647][T29683] RBP: 00007f5711251090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.857629][T29683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.865616][T29683] R13: 0000000000000000 R14: 00007f5710535f80 R15: 00007f571065fa28 [ 1873.873621][T29683] [ 1873.876980][T29683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1874.262207][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1874.312327][ T5274] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1874.435465][ T9] usb 4-1: config 0 has no interfaces? [ 1874.455921][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1874.465782][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.474032][ T9] usb 4-1: Product: syz [ 1874.478492][ T9] usb 4-1: Manufacturer: syz [ 1874.483938][ T9] usb 4-1: SerialNumber: syz [ 1874.489350][ T5274] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1874.498417][ T5274] usb 3-1: config 0 has no interface number 0 [ 1874.505423][ T9] usb 4-1: config 0 descriptor?? [ 1874.510687][ T5274] usb 3-1: config 0 interface 188 altsetting 3 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1874.523926][ T5274] usb 3-1: config 0 interface 188 has no altsetting 0 [ 1874.534516][ T5274] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=d3.28 [ 1874.545087][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.555260][ T5274] usb 3-1: Product: syz [ 1874.559488][ T5274] usb 3-1: Manufacturer: syz [ 1874.567122][ T5274] usb 3-1: SerialNumber: syz [ 1874.576814][ T5274] usb 3-1: config 0 descriptor?? [ 1874.702252][T10034] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1874.788818][T29691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.814060][T29691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.872430][T10034] usb 1-1: Using ep0 maxpacket: 16 [ 1874.891752][T10034] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.903540][T10034] usb 1-1: config 0 has no interfaces? [ 1874.909101][T10034] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1874.919322][T10034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.944161][T10034] usb 1-1: config 0 descriptor?? [ 1875.004852][T18316] usb 4-1: USB disconnect, device number 88 [ 1875.181558][T29700] team0: entered promiscuous mode [ 1875.186889][T29700] team_slave_0: entered promiscuous mode [ 1875.193535][T29700] team_slave_1: entered promiscuous mode [ 1875.201375][T29700] team0: left promiscuous mode [ 1875.206704][T29700] team_slave_0: left promiscuous mode [ 1875.212608][T29700] team_slave_1: left promiscuous mode [ 1875.292544][T18316] usb 1-1: USB disconnect, device number 85 [ 1875.408330][ T5274] usb 3-1: USB disconnect, device number 73 [ 1875.544850][T29703] fuse: Unknown parameter 'group_id00000000000000000000' [ 1875.746297][ T5274] usb 2-1: USB disconnect, device number 93 [ 1876.759777][T29732] fuse: Unknown parameter 'group_id00000000000000000000' [ 1876.785793][ T51] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1876.964307][ T51] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1876.991541][ T51] usb 2-1: config 0 has no interface number 0 [ 1877.012279][ T51] usb 2-1: config 0 interface 188 altsetting 3 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 1877.049446][ T51] usb 2-1: config 0 interface 188 has no altsetting 0 [ 1877.064932][T29742] input: syz1 as /devices/virtual/input/input66 [ 1877.085457][ T51] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=d3.28 [ 1877.110261][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.149592][ T51] usb 2-1: Product: syz [ 1877.172189][ T51] usb 2-1: Manufacturer: syz [ 1877.176882][ T51] usb 2-1: SerialNumber: syz [ 1877.224234][ T51] usb 2-1: config 0 descriptor?? [ 1877.352789][T26851] udevd[26851]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 1877.572167][T18316] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1877.732122][T18316] usb 1-1: Using ep0 maxpacket: 8 [ 1877.742692][T18316] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1877.752566][T18316] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1877.827865][T18316] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1877.895416][T18316] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1877.938184][T18316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.980034][T18316] usb 1-1: Product: syz [ 1877.988120][T18316] usb 1-1: Manufacturer: syz [ 1877.996929][T18316] usb 1-1: SerialNumber: syz [ 1878.018508][T18316] hso 1-1:6.0: Can't find BULK IN endpoint [ 1878.163952][ T51] usb 2-1: USB disconnect, device number 94 [ 1878.725030][T29770] FAULT_INJECTION: forcing a failure. [ 1878.725030][T29770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1878.751607][T29770] CPU: 0 UID: 0 PID: 29770 Comm: syz.2.4954 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1878.762480][T29770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1878.772582][T29770] Call Trace: [ 1878.775905][T29770] [ 1878.778870][T29770] dump_stack_lvl+0x241/0x360 [ 1878.783612][T29770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1878.788868][T29770] ? __pfx__printk+0x10/0x10 [ 1878.793521][T29770] ? snprintf+0xda/0x120 [ 1878.797919][T29770] should_fail_ex+0x3b0/0x4e0 [ 1878.802667][T29770] _copy_to_user+0x2f/0xb0 [ 1878.807154][T29770] simple_read_from_buffer+0xca/0x150 [ 1878.812588][T29770] proc_fail_nth_read+0x1e9/0x250 [ 1878.817649][T29770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1878.823231][T29770] ? rw_verify_area+0x55e/0x6f0 [ 1878.828134][T29770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1878.833760][T29770] vfs_read+0x201/0xbc0 [ 1878.837971][T29770] ? __pfx_lock_release+0x10/0x10 [ 1878.843043][T29770] ? __pfx_vfs_read+0x10/0x10 [ 1878.847754][T29770] ? __fget_files+0x3f3/0x470 [ 1878.852470][T29770] ? fdget_pos+0x24e/0x320 [ 1878.856934][T29770] ksys_read+0x183/0x2b0 [ 1878.861206][T29770] ? __pfx_ksys_read+0x10/0x10 [ 1878.865991][T29770] ? do_syscall_64+0x100/0x230 [ 1878.870783][T29770] ? do_syscall_64+0xb6/0x230 [ 1878.875570][T29770] do_syscall_64+0xf3/0x230 [ 1878.880095][T29770] ? clear_bhb_loop+0x35/0x90 [ 1878.884790][T29770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.890706][T29770] RIP: 0033:0x7f457537ca3c [ 1878.895136][T29770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1878.914758][T29770] RSP: 002b:00007f4574dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1878.923195][T29770] RAX: ffffffffffffffda RBX: 00007f4575535f80 RCX: 00007f457537ca3c [ 1878.931181][T29770] RDX: 000000000000000f RSI: 00007f4574dff0a0 RDI: 0000000000000004 [ 1878.939167][T29770] RBP: 00007f4574dff090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.947160][T29770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.955144][T29770] R13: 0000000000000000 R14: 00007f4575535f80 R15: 00007f457565fa28 [ 1878.963142][T29770] [ 1879.721479][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1879.748375][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1880.004995][ T5274] usb 1-1: USB disconnect, device number 86 [ 1882.092940][T29828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'. [ 1882.808337][T29836] ================================================================== [ 1882.816440][T29836] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x231/0x1330 [ 1882.824441][T29836] Read of size 8 at addr ffff888024d50b50 by task syz.1.4981/29836 [ 1882.832334][T29836] [ 1882.834657][T29836] CPU: 1 UID: 0 PID: 29836 Comm: syz.1.4981 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1882.845674][T29836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1882.855750][T29836] Call Trace: [ 1882.859048][T29836] [ 1882.861984][T29836] dump_stack_lvl+0x241/0x360 [ 1882.866767][T29836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1882.872120][T29836] ? __pfx__printk+0x10/0x10 [ 1882.876766][T29836] ? _printk+0xd5/0x120 [ 1882.880985][T29836] ? __virt_addr_valid+0x183/0x530 [ 1882.886157][T29836] ? __virt_addr_valid+0x183/0x530 [ 1882.891355][T29836] print_report+0x169/0x550 [ 1882.895927][T29836] ? __virt_addr_valid+0x183/0x530 [ 1882.901096][T29836] ? __virt_addr_valid+0x183/0x530 [ 1882.906267][T29836] ? __virt_addr_valid+0x45f/0x530 [ 1882.911435][T29836] ? __phys_addr+0xba/0x170 [ 1882.915991][T29836] ? move_to_new_folio+0x231/0x1330 [ 1882.921250][T29836] kasan_report+0x143/0x180 [ 1882.925817][T29836] ? move_to_new_folio+0x231/0x1330 [ 1882.931078][T29836] kasan_check_range+0x282/0x290 [ 1882.936073][T29836] move_to_new_folio+0x231/0x1330 [ 1882.941158][T29836] ? page_ext_get+0x1d6/0x2a0 [ 1882.945896][T29836] ? __pfx_move_to_new_folio+0x10/0x10 [ 1882.951419][T29836] ? post_alloc_hook+0x206/0x230 [ 1882.956419][T29836] ? compaction_alloc+0x3381/0x3960 [ 1882.961693][T29836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1882.968096][T29836] ? __pfx___might_resched+0x10/0x10 [ 1882.973449][T29836] ? mark_lock+0x9a/0x360 [ 1882.977853][T29836] migrate_pages_batch+0x266b/0x36d0 [ 1882.983389][T29836] ? __pfx_compaction_free+0x10/0x10 [ 1882.988732][T29836] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1882.994429][T29836] ? __pfx_lock_acquire+0x10/0x10 [ 1882.999521][T29836] ? isolate_movable_page+0x2a/0xbf0 [ 1883.004868][T29836] ? __pfx_compaction_free+0x10/0x10 [ 1883.010216][T29836] migrate_pages+0x2062/0x3560 [ 1883.015053][T29836] ? __pfx_compaction_free+0x10/0x10 [ 1883.020392][T29836] ? __pfx_compaction_alloc+0x10/0x10 [ 1883.025829][T29836] ? __pfx_migrate_pages+0x10/0x10 [ 1883.031025][T29836] ? isolate_migratepages_block+0x2371/0x67a0 [ 1883.037157][T29836] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 1883.042768][T29836] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 1883.048381][T29836] compact_zone+0x3404/0x4af0 [ 1883.053135][T29836] ? __pfx_compact_zone+0x10/0x10 [ 1883.058222][T29836] ? __lock_acquire+0x1384/0x2050 [ 1883.063324][T29836] sysctl_compaction_handler+0x496/0x990 [ 1883.069023][T29836] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1883.075252][T29836] ? __virt_addr_valid+0x183/0x530 [ 1883.080417][T29836] ? __virt_addr_valid+0x183/0x530 [ 1883.085667][T29836] ? __virt_addr_valid+0x45f/0x530 [ 1883.090834][T29836] ? __check_object_size+0x48e/0x900 [ 1883.096183][T29836] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1883.102398][T29836] proc_sys_call_handler+0x550/0x8b0 [ 1883.107743][T29836] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1883.113614][T29836] iter_file_splice_write+0xbfa/0x1510 [ 1883.119154][T29836] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1883.125123][T29836] ? rcu_read_lock_any_held+0xb7/0x160 [ 1883.130650][T29836] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1883.136608][T29836] direct_splice_actor+0x11b/0x220 [ 1883.141789][T29836] splice_direct_to_actor+0x586/0xc80 [ 1883.147243][T29836] ? __pfx_direct_splice_actor+0x10/0x10 [ 1883.152942][T29836] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1883.158899][T29836] ? __fget_files+0x29/0x470 [ 1883.163539][T29836] ? __pfx_lock_release+0x10/0x10 [ 1883.168633][T29836] do_splice_direct+0x289/0x3e0 [ 1883.173591][T29836] ? __pfx_do_splice_direct+0x10/0x10 [ 1883.179036][T29836] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1883.185068][T29836] ? rw_verify_area+0x1c3/0x6f0 [ 1883.189982][T29836] do_sendfile+0x561/0xe10 [ 1883.194455][T29836] ? __might_fault+0xaa/0x120 [ 1883.199196][T29836] ? __pfx_do_sendfile+0x10/0x10 [ 1883.204195][T29836] ? __might_fault+0xc6/0x120 [ 1883.208933][T29836] __se_sys_sendfile64+0x100/0x1e0 [ 1883.214101][T29836] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1883.219790][T29836] ? do_syscall_64+0x100/0x230 [ 1883.224606][T29836] ? do_syscall_64+0xb6/0x230 [ 1883.229336][T29836] do_syscall_64+0xf3/0x230 [ 1883.233887][T29836] ? clear_bhb_loop+0x35/0x90 [ 1883.238613][T29836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.244576][T29836] RIP: 0033:0x7fae28b7dff9 [ 1883.249036][T29836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1883.268697][T29836] RSP: 002b:00007fae29993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1883.277166][T29836] RAX: ffffffffffffffda RBX: 00007fae28d35f80 RCX: 00007fae28b7dff9 [ 1883.285188][T29836] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000006 [ 1883.293214][T29836] RBP: 00007fae28bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 1883.301242][T29836] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1883.309262][T29836] R13: 0000000000000000 R14: 00007fae28d35f80 R15: 00007fae28e5fa28 [ 1883.317294][T29836] [ 1883.320381][T29836] [ 1883.322732][T29836] Allocated by task 27: [ 1883.326922][T29836] kasan_save_track+0x3f/0x80 [ 1883.331639][T29836] __kasan_slab_alloc+0x66/0x80 [ 1883.336533][T29836] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 1883.342389][T29836] shmem_alloc_inode+0x28/0x40 [ 1883.347206][T29836] alloc_inode+0x65/0x1a0 [ 1883.351755][T29836] new_inode+0x22/0x1d0 [ 1883.355950][T29836] shmem_get_inode+0x34a/0xd70 [ 1883.360760][T29836] shmem_mknod+0x5f/0x1e0 [ 1883.365137][T29836] vfs_mknod+0x36d/0x3b0 [ 1883.369418][T29836] devtmpfs_work_loop+0x963/0x1040 [ 1883.374605][T29836] devtmpfsd+0x4c/0x50 [ 1883.378720][T29836] kthread+0x2f0/0x390 [ 1883.382830][T29836] ret_from_fork+0x4b/0x80 [ 1883.387299][T29836] ret_from_fork_asm+0x1a/0x30 [ 1883.392110][T29836] [ 1883.394464][T29836] Freed by task 28128: [ 1883.398555][T29836] kasan_save_track+0x3f/0x80 [ 1883.403274][T29836] kasan_save_free_info+0x40/0x50 [ 1883.408345][T29836] __kasan_slab_free+0x59/0x70 [ 1883.413164][T29836] kmem_cache_free+0x1a2/0x420 [ 1883.417985][T29836] rcu_core+0xaaa/0x17a0 [ 1883.422266][T29836] handle_softirqs+0x2c5/0x980 [ 1883.427077][T29836] __irq_exit_rcu+0xf4/0x1c0 [ 1883.431714][T29836] irq_exit_rcu+0x9/0x30 [ 1883.436004][T29836] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1883.441689][T29836] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1883.447716][T29836] [ 1883.450159][T29836] Last potentially related work creation: [ 1883.455899][T29836] kasan_save_stack+0x3f/0x60 [ 1883.460643][T29836] __kasan_record_aux_stack+0xac/0xc0 [ 1883.466067][T29836] call_rcu+0x167/0xa70 [ 1883.470267][T29836] evict+0x83c/0x9b0 [ 1883.474224][T29836] do_unlinkat+0x512/0x830 [ 1883.478681][T29836] __x64_sys_unlink+0x47/0x50 [ 1883.483401][T29836] do_syscall_64+0xf3/0x230 [ 1883.487953][T29836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.493898][T29836] [ 1883.496254][T29836] The buggy address belongs to the object at ffff888024d50688 [ 1883.496254][T29836] which belongs to the cache shmem_inode_cache of size 1544 [ 1883.510957][T29836] The buggy address is located 1224 bytes inside of [ 1883.510957][T29836] freed 1544-byte region [ffff888024d50688, ffff888024d50c90) [ 1883.524977][T29836] [ 1883.527335][T29836] The buggy address belongs to the physical page: [ 1883.533790][T29836] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d50 [ 1883.542692][T29836] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1883.551233][T29836] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1883.558814][T29836] page_type: f5(slab) [ 1883.562842][T29836] raw: 00fff00000000040 ffff88801c6e5140 dead000000000122 0000000000000000 [ 1883.571472][T29836] raw: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 1883.580540][T29836] head: 00fff00000000040 ffff88801c6e5140 dead000000000122 0000000000000000 [ 1883.589436][T29836] head: 0000000000000000 0000000000130013 00000001f5000000 0000000000000000 [ 1883.598158][T29836] head: 00fff00000000003 ffffea0000935401 ffffffffffffffff 0000000000000000 [ 1883.606875][T29836] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1883.615584][T29836] page dumped because: kasan: bad access detected [ 1883.622033][T29836] page_owner tracks the page as allocated [ 1883.627778][T29836] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27, tgid 27 (kdevtmpfs), ts 8771129661, free_ts 0 [ 1883.647626][T29836] post_alloc_hook+0x1f3/0x230 [ 1883.652459][T29836] get_page_from_freelist+0x3045/0x3190 [ 1883.658055][T29836] __alloc_pages_noprof+0x292/0x710 [ 1883.663299][T29836] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1883.668813][T29836] alloc_slab_page+0x6a/0x120 [ 1883.673535][T29836] allocate_slab+0x5a/0x2f0 [ 1883.678074][T29836] ___slab_alloc+0xcd1/0x14b0 [ 1883.682802][T29836] __slab_alloc+0x58/0xa0 [ 1883.687181][T29836] kmem_cache_alloc_lru_noprof+0x1c5/0x2b0 [ 1883.693037][T29836] shmem_alloc_inode+0x28/0x40 [ 1883.697855][T29836] alloc_inode+0x65/0x1a0 [ 1883.702228][T29836] new_inode+0x22/0x1d0 [ 1883.706440][T29836] shmem_get_inode+0x34a/0xd70 [ 1883.711254][T29836] shmem_mknod+0x5f/0x1e0 [ 1883.715636][T29836] vfs_mknod+0x36d/0x3b0 [ 1883.719917][T29836] devtmpfs_work_loop+0x963/0x1040 [ 1883.725068][T29836] page_owner free stack trace missing [ 1883.730466][T29836] [ 1883.732819][T29836] Memory state around the buggy address: [ 1883.738478][T29836] ffff888024d50a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1883.746590][T29836] ffff888024d50a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1883.754693][T29836] >ffff888024d50b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1883.762793][T29836] ^ [ 1883.769513][T29836] ffff888024d50b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1883.777625][T29836] ffff888024d50c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1883.785724][T29836] ================================================================== [ 1883.882927][T29836] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1883.890280][T29836] CPU: 1 UID: 0 PID: 29836 Comm: syz.1.4981 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1883.901095][T29836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1883.911216][T29836] Call Trace: [ 1883.914540][T29836] [ 1883.917510][T29836] dump_stack_lvl+0x241/0x360 [ 1883.922237][T29836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1883.927486][T29836] ? __pfx__printk+0x10/0x10 [ 1883.932116][T29836] ? preempt_schedule+0xe1/0xf0 [ 1883.937015][T29836] ? vscnprintf+0x5d/0x90 [ 1883.941393][T29836] panic+0x349/0x880 [ 1883.945327][T29836] ? check_panic_on_warn+0x21/0xb0 [ 1883.950478][T29836] ? __pfx_panic+0x10/0x10 [ 1883.954937][T29836] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1883.960969][T29836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1883.967353][T29836] ? print_report+0x502/0x550 [ 1883.972080][T29836] check_panic_on_warn+0x86/0xb0 [ 1883.977062][T29836] ? move_to_new_folio+0x231/0x1330 [ 1883.982320][T29836] end_report+0x77/0x160 [ 1883.986611][T29836] kasan_report+0x154/0x180 [ 1883.991164][T29836] ? move_to_new_folio+0x231/0x1330 [ 1883.996425][T29836] kasan_check_range+0x282/0x290 [ 1884.001419][T29836] move_to_new_folio+0x231/0x1330 [ 1884.006501][T29836] ? page_ext_get+0x1d6/0x2a0 [ 1884.011233][T29836] ? __pfx_move_to_new_folio+0x10/0x10 [ 1884.016749][T29836] ? post_alloc_hook+0x206/0x230 [ 1884.021752][T29836] ? compaction_alloc+0x3381/0x3960 [ 1884.027015][T29836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1884.033410][T29836] ? __pfx___might_resched+0x10/0x10 [ 1884.038753][T29836] ? mark_lock+0x9a/0x360 [ 1884.043137][T29836] migrate_pages_batch+0x266b/0x36d0 [ 1884.048495][T29836] ? __pfx_compaction_free+0x10/0x10 [ 1884.053837][T29836] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1884.059542][T29836] ? __pfx_lock_acquire+0x10/0x10 [ 1884.064630][T29836] ? isolate_movable_page+0x2a/0xbf0 [ 1884.069968][T29836] ? __pfx_compaction_free+0x10/0x10 [ 1884.075308][T29836] migrate_pages+0x2062/0x3560 [ 1884.080167][T29836] ? __pfx_compaction_free+0x10/0x10 [ 1884.085530][T29836] ? __pfx_compaction_alloc+0x10/0x10 [ 1884.090957][T29836] ? __pfx_migrate_pages+0x10/0x10 [ 1884.096127][T29836] ? isolate_migratepages_block+0x2371/0x67a0 [ 1884.102263][T29836] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 1884.107876][T29836] ? __pageblock_pfn_to_page+0xd3/0x3c0 [ 1884.113486][T29836] compact_zone+0x3404/0x4af0 [ 1884.118247][T29836] ? __pfx_compact_zone+0x10/0x10 [ 1884.123325][T29836] ? __lock_acquire+0x1384/0x2050 [ 1884.128425][T29836] sysctl_compaction_handler+0x496/0x990 [ 1884.134139][T29836] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1884.140359][T29836] ? __virt_addr_valid+0x183/0x530 [ 1884.145520][T29836] ? __virt_addr_valid+0x183/0x530 [ 1884.150758][T29836] ? __virt_addr_valid+0x45f/0x530 [ 1884.155917][T29836] ? __check_object_size+0x48e/0x900 [ 1884.161256][T29836] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1884.167471][T29836] proc_sys_call_handler+0x550/0x8b0 [ 1884.172823][T29836] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1884.178690][T29836] iter_file_splice_write+0xbfa/0x1510 [ 1884.184231][T29836] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1884.190208][T29836] ? rcu_read_lock_any_held+0xb7/0x160 [ 1884.195731][T29836] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1884.201684][T29836] direct_splice_actor+0x11b/0x220 [ 1884.206860][T29836] splice_direct_to_actor+0x586/0xc80 [ 1884.212300][T29836] ? __pfx_direct_splice_actor+0x10/0x10 [ 1884.217996][T29836] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1884.223949][T29836] ? __fget_files+0x29/0x470 [ 1884.228589][T29836] ? __pfx_lock_release+0x10/0x10 [ 1884.233673][T29836] do_splice_direct+0x289/0x3e0 [ 1884.238591][T29836] ? __pfx_do_splice_direct+0x10/0x10 [ 1884.244107][T29836] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1884.250056][T29836] ? rw_verify_area+0x1c3/0x6f0 [ 1884.254967][T29836] do_sendfile+0x561/0xe10 [ 1884.259435][T29836] ? __might_fault+0xaa/0x120 [ 1884.264180][T29836] ? __pfx_do_sendfile+0x10/0x10 [ 1884.269178][T29836] ? __might_fault+0xc6/0x120 [ 1884.273915][T29836] __se_sys_sendfile64+0x100/0x1e0 [ 1884.279076][T29836] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1884.285027][T29836] ? do_syscall_64+0x100/0x230 [ 1884.289842][T29836] ? do_syscall_64+0xb6/0x230 [ 1884.294567][T29836] do_syscall_64+0xf3/0x230 [ 1884.299242][T29836] ? clear_bhb_loop+0x35/0x90 [ 1884.303988][T29836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.309940][T29836] RIP: 0033:0x7fae28b7dff9 [ 1884.314394][T29836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.334044][T29836] RSP: 002b:00007fae29993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1884.342539][T29836] RAX: ffffffffffffffda RBX: 00007fae28d35f80 RCX: 00007fae28b7dff9 [ 1884.350648][T29836] RDX: 00000000200000c0 RSI: 0000000000000004 RDI: 0000000000000006 [ 1884.358663][T29836] RBP: 00007fae28bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 1884.366681][T29836] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1884.374694][T29836] R13: 0000000000000000 R14: 00007fae28d35f80 R15: 00007fae28e5fa28 [ 1884.382718][T29836] [ 1884.385923][T29836] Kernel Offset: disabled [ 1884.390343][T29836] Rebooting in 86400 seconds..