last executing test programs: 1m18.979705592s ago: executing program 3 (id=176): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x400000000001, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m18.010892467s ago: executing program 3 (id=184): openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x20, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac1001de44fd33be959b2b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0xfffffffffffffffe, 0x2000000000001]}}) 1m17.283400546s ago: executing program 3 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x23, "12273a0500"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000800)={0xffffffffffffffc4, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xb3, @lang_id={0x0, 0x3, 0x860}}, 0x0, 0x0}, 0x0) 1m14.65221492s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 1m13.66848118s ago: executing program 3 (id=198): r0 = socket(0x2, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @empty, 0xfff}, {0xa, 0x4e22, 0x8, @private0, 0x40}, 0xffffffffffffffff, 0xffffff1d}}, 0x48) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x1, 0x4) write(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.020257864s ago: executing program 3 (id=215): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@fwd={0x1}, @struct={0xfffffffd, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x4}]}}, &(0x7f0000000300)=""/209, 0x4e, 0xd1, 0x2, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m8.008076207s ago: executing program 32 (id=215): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@fwd={0x1}, @struct={0xfffffffd, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x4}]}}, &(0x7f0000000300)=""/209, 0x4e, 0xd1, 0x2, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.247756357s ago: executing program 2 (id=435): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xade, &(0x7f0000000140)={0x0, 0xc748, 0x80, 0x0, 0x2b0}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 12.001152751s ago: executing program 4 (id=439): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x7, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) 11.389584789s ago: executing program 4 (id=440): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) creat(&(0x7f00000002c0)='./file0\x00', 0x60) close_range(r5, 0xffffffffffffffff, 0x0) 10.888668685s ago: executing program 4 (id=442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) unshare(0x2c020400) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 9.173907682s ago: executing program 2 (id=447): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x44, &(0x7f0000000c00)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.82762694s ago: executing program 4 (id=448): ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af26, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x403e, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x82\xefZn\xb1\xa2\xaa\xe6Z\xeaF\r\xc6\xe5w\x7f\xb8O\x106\x19yP\x8d\xc1\xce\xac\xa0\xc1\xa1\x800xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 8.1591884s ago: executing program 0 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002"], 0x2c}}, 0x0) 8.077518503s ago: executing program 5 (id=453): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r1 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 5.938787078s ago: executing program 0 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) 5.796038846s ago: executing program 4 (id=457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fffa) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r0, 0x4, r2}, 0x28) 4.933254506s ago: executing program 0 (id=459): munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) 4.931051032s ago: executing program 2 (id=460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.699647277s ago: executing program 1 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x228, 0x940c, 0x3002, 0x228, 0x2c0, 0x3b8, 0x3d8, 0x3d8, 0x3b8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x228, 0x4001, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x28}, [0xff000000, 0xff000000, 0xffffffff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x0, 0x5, 0x9e0, 0x80000001, 0x7}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0xd7b, 'fsm\x00', "9337de1e55a152eb2742da26b2b123dc1d9efd4200e60effea4433cc4afceaea7402180e04994dbe21ddb7faea6522b14aa7a7bcc49faa527d95eb7dffc5869db45e5683e3b2f1d0bae412587d6934c2d0ad081ed8b18c6e00a93bb26bd6e05751a3db1903d079a07c65320aecbe9de3f8450991171fd4ade31bc0089246610c", 0x27, 0x1, {0xfffffffffffffff3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xaf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 4.670349256s ago: executing program 0 (id=462): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000280)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000340)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.701720045s ago: executing program 5 (id=463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.613398605s ago: executing program 1 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 3.49147437s ago: executing program 1 (id=465): socket(0x840000000002, 0x3, 0xff) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, 0x0, 0x0) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYBLOB='8']) 3.403766688s ago: executing program 2 (id=466): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, 0x0, 0x1) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.207261653s ago: executing program 4 (id=467): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) socket(0x22, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2.656431286s ago: executing program 5 (id=468): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 2.488376862s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) 2.336883703s ago: executing program 5 (id=470): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.381080032s ago: executing program 1 (id=471): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 844.374043ms ago: executing program 5 (id=472): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) 535.596711ms ago: executing program 2 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 387.158049ms ago: executing program 2 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 269.384953ms ago: executing program 0 (id=475): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$tcp_mem(r3, &(0x7f0000000180)={0x5, 0x20, 0x544c, 0x20, 0x100000001}, 0x48) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file1/../file0'}, 0x14) 111.996161ms ago: executing program 5 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) epoll_create(0x1) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {0xffa6, 0xfff1}, {0xffe0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) 0s ago: executing program 1 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x8, 0xa5, 0xbd, 0x1, 0x29, 0x4, 0xfe, 0x0, 0x5}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x10000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 65.697678][ T5813] cgroup: Unknown subsys name 'net' [ 65.808022][ T5813] cgroup: Unknown subsys name 'cpuset' [ 65.816638][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.197312][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.669348][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.677715][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.695079][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.702989][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.711025][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.719501][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.728003][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.736012][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.743479][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.751774][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.760335][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.763316][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.769304][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.781925][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.790119][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.798292][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.806736][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.815765][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.816286][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.830026][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.839087][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.840598][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.865626][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.874907][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.882582][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.374744][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.542175][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 70.589499][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 70.602017][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.741341][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.750822][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.758813][ T5824] bridge_slave_0: entered allmulticast mode [ 70.766428][ T5824] bridge_slave_0: entered promiscuous mode [ 70.818483][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.826160][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.833513][ T5824] bridge_slave_1: entered allmulticast mode [ 70.840507][ T5824] bridge_slave_1: entered promiscuous mode [ 70.896885][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 71.000365][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.007778][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.015548][ T5827] bridge_slave_0: entered allmulticast mode [ 71.022511][ T5827] bridge_slave_0: entered promiscuous mode [ 71.049490][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.072018][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.080207][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.089688][ T5827] bridge_slave_1: entered allmulticast mode [ 71.096925][ T5827] bridge_slave_1: entered promiscuous mode [ 71.125136][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.132294][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.139755][ T5835] bridge_slave_0: entered allmulticast mode [ 71.147549][ T5835] bridge_slave_0: entered promiscuous mode [ 71.156497][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.164067][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.171289][ T5835] bridge_slave_1: entered allmulticast mode [ 71.178422][ T5835] bridge_slave_1: entered promiscuous mode [ 71.187939][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.207461][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.215816][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.224146][ T5832] bridge_slave_0: entered allmulticast mode [ 71.231083][ T5832] bridge_slave_0: entered promiscuous mode [ 71.277813][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.285185][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.292518][ T5832] bridge_slave_1: entered allmulticast mode [ 71.299782][ T5832] bridge_slave_1: entered promiscuous mode [ 71.319593][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.359006][ T5824] team0: Port device team_slave_0 added [ 71.372250][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.394859][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.407826][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.435013][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.447623][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.458664][ T5824] team0: Port device team_slave_1 added [ 71.468750][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.479716][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.549127][ T5827] team0: Port device team_slave_0 added [ 71.569032][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.576244][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.585525][ T5823] bridge_slave_0: entered allmulticast mode [ 71.592473][ T5823] bridge_slave_0: entered promiscuous mode [ 71.603836][ T5832] team0: Port device team_slave_0 added [ 71.612069][ T5832] team0: Port device team_slave_1 added [ 71.619157][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.632041][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.658783][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.686397][ T5827] team0: Port device team_slave_1 added [ 71.694855][ T5835] team0: Port device team_slave_0 added [ 71.701090][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.708529][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.716020][ T5823] bridge_slave_1: entered allmulticast mode [ 71.723046][ T5823] bridge_slave_1: entered promiscuous mode [ 71.741805][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.749227][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.776206][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.799835][ T5835] team0: Port device team_slave_1 added [ 71.830856][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.837951][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.864635][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.875703][ T5843] Bluetooth: hci1: command tx timeout [ 71.881404][ T5843] Bluetooth: hci0: command tx timeout [ 71.939337][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.946622][ T5141] Bluetooth: hci4: command tx timeout [ 71.946677][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.952303][ T5141] Bluetooth: hci3: command tx timeout [ 71.978744][ T5843] Bluetooth: hci2: command tx timeout [ 71.984546][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.002407][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.010162][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.036435][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.048196][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.055634][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.081948][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.094922][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.101883][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.128336][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.143553][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.155932][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.185467][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.192452][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.219031][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.282125][ T5824] hsr_slave_0: entered promiscuous mode [ 72.288565][ T5824] hsr_slave_1: entered promiscuous mode [ 72.315467][ T5823] team0: Port device team_slave_0 added [ 72.379521][ T5823] team0: Port device team_slave_1 added [ 72.390422][ T5832] hsr_slave_0: entered promiscuous mode [ 72.397301][ T5832] hsr_slave_1: entered promiscuous mode [ 72.404048][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.411751][ T5832] Cannot create hsr debugfs directory [ 72.441634][ T5835] hsr_slave_0: entered promiscuous mode [ 72.447954][ T5835] hsr_slave_1: entered promiscuous mode [ 72.454736][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.462313][ T5835] Cannot create hsr debugfs directory [ 72.544831][ T5827] hsr_slave_0: entered promiscuous mode [ 72.551171][ T5827] hsr_slave_1: entered promiscuous mode [ 72.557812][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.565501][ T5827] Cannot create hsr debugfs directory [ 72.572628][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.580101][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.606500][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.654578][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.661550][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.688539][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.812711][ T5823] hsr_slave_0: entered promiscuous mode [ 72.819586][ T5823] hsr_slave_1: entered promiscuous mode [ 72.825832][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.833683][ T5823] Cannot create hsr debugfs directory [ 73.181695][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.205968][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.231387][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.253996][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.310822][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.334587][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.345479][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.369274][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.433483][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.469658][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.483880][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.511379][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.565601][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.579097][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.609095][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.621386][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.715229][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.792130][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.799814][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.828989][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.836315][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.845600][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.868149][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.875317][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.885186][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.900802][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.936174][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.943175][ T5843] Bluetooth: hci0: command tx timeout [ 73.948601][ T5843] Bluetooth: hci1: command tx timeout [ 74.023957][ T5843] Bluetooth: hci2: command tx timeout [ 74.024014][ T5831] Bluetooth: hci4: command tx timeout [ 74.036393][ T5141] Bluetooth: hci3: command tx timeout [ 74.046182][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.067442][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.081289][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.088496][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.132171][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.142626][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.149831][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.219124][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.245049][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.264715][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.271808][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.350327][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.357481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.368002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.375169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.399884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.407070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.464973][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.480007][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.565504][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.608361][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.637720][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.655287][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.662461][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.674926][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.682107][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.792681][ T5824] veth0_vlan: entered promiscuous mode [ 74.829360][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.864269][ T5824] veth1_vlan: entered promiscuous mode [ 75.027846][ T5824] veth0_macvtap: entered promiscuous mode [ 75.057209][ T5824] veth1_macvtap: entered promiscuous mode [ 75.107413][ T5835] veth0_vlan: entered promiscuous mode [ 75.119391][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.140928][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.161867][ T5835] veth1_vlan: entered promiscuous mode [ 75.231945][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.252748][ T5835] veth0_macvtap: entered promiscuous mode [ 75.262554][ T5824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.274421][ T5824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.284074][ T5824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292750][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.312174][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.321775][ T5827] veth0_vlan: entered promiscuous mode [ 75.345553][ T5835] veth1_macvtap: entered promiscuous mode [ 75.358891][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.402200][ T5827] veth1_vlan: entered promiscuous mode [ 75.509442][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.521749][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.538045][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.556360][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.577513][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.588570][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.609360][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.621283][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.667763][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677450][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.687829][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697070][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.720324][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.738043][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.745707][ T5827] veth0_macvtap: entered promiscuous mode [ 75.750156][ T5827] veth1_macvtap: entered promiscuous mode [ 75.761056][ T5823] veth0_vlan: entered promiscuous mode [ 75.826891][ T5823] veth1_vlan: entered promiscuous mode [ 75.898732][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.914420][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.924762][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.925203][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.935690][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.962252][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.996245][ T5832] veth0_vlan: entered promiscuous mode [ 76.006595][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.017913][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.028469][ T5831] Bluetooth: hci0: command tx timeout [ 76.034862][ T5831] Bluetooth: hci1: command tx timeout [ 76.041046][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.052799][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.064403][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.098690][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.108659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.116343][ T5141] Bluetooth: hci4: command tx timeout [ 76.116385][ T5141] Bluetooth: hci3: command tx timeout [ 76.123800][ T5831] Bluetooth: hci2: command tx timeout [ 76.140073][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.154813][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.164892][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.175777][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.200099][ T5832] veth1_vlan: entered promiscuous mode [ 76.380252][ T5913] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 76.385622][ T5823] veth0_macvtap: entered promiscuous mode [ 76.400688][ T5913] Error validating options; rc = [-22] [ 76.527836][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.560904][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.795678][ T5823] veth1_macvtap: entered promiscuous mode [ 77.299839][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.332699][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.362166][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.377089][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.394259][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.423150][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.469769][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.608815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.816491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.920332][ T5832] veth0_macvtap: entered promiscuous mode [ 77.938407][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.963656][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.985830][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.998836][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.009011][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.022589][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.059058][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.063386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.109430][ T5832] veth1_macvtap: entered promiscuous mode [ 78.115632][ T5831] Bluetooth: hci1: command tx timeout [ 78.115641][ T5141] Bluetooth: hci0: command tx timeout [ 78.183664][ T5141] Bluetooth: hci2: command tx timeout [ 78.183812][ T5831] Bluetooth: hci3: command tx timeout [ 78.189615][ T5843] Bluetooth: hci4: command tx timeout [ 78.357369][ T5923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 78.650634][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.663431][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.723268][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.740565][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.774024][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.789307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.806983][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.820410][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.833562][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.853449][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.864945][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.974504][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.987242][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.019582][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.063542][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.399487][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.412926][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.442928][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.458801][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.469200][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.480802][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.490948][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.503463][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.535732][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.582770][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.597036][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.615248][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.635353][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.648937][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657913][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.813992][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.821850][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.975379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.991009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.045841][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.082045][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.201048][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.216404][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.454852][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.781266][ T5952] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.974188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.133404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.543868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.643342][ T5965] Bluetooth: MGMT ver 1.23 [ 81.858719][ T5912] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 81.917984][ T5912] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 81.970550][ T5912] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 82.326593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 82.336001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.305453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 85.314919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.083295][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.202907][ T9] cfg80211: failed to load regulatory.db [ 87.444582][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 87.510434][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.523140][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.541658][ T5876] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.552294][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.562739][ T5876] usb 2-1: Product: syz [ 87.567310][ T5876] usb 2-1: Manufacturer: syz [ 87.572057][ T5876] usb 2-1: SerialNumber: syz [ 87.686986][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 87.868108][ T5876] usb 2-1: 0:2 : does not exist [ 87.886812][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 88.006131][ T6035] bridge_slave_0: left allmulticast mode [ 88.012721][ T5876] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 88.020305][ T6035] bridge_slave_0: left promiscuous mode [ 88.028602][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.071579][ T5876] usb 2-1: USB disconnect, device number 2 [ 88.679419][ T6035] bridge_slave_1: left allmulticast mode [ 88.705292][ T6035] bridge_slave_1: left promiscuous mode [ 88.726258][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.788825][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.910074][ T30] audit: type=1326 audit(1743832437.267:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6042 comm="syz.1.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f698e18d169 code=0x0 [ 88.931902][ T6035] bond0: (slave bond_slave_0): Releasing backup interface [ 89.015607][ T6049] TCP: out of memory -- consider tuning tcp_mem [ 89.422541][ T6035] bond0: (slave bond_slave_1): Releasing backup interface [ 90.380583][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.384439][ T6035] team0: Port device team_slave_0 removed [ 90.519251][ T6035] team0: Port device team_slave_1 removed [ 90.526440][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.526950][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 90.534415][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.656176][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 90.684977][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.706081][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.882268][ T6039] team0: Mode changed to "loadbalance" [ 91.130900][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.368499][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.813492][ T5908] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.983033][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 92.990165][ T5908] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 93.061740][ T6096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.072643][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.451551][ T5908] usb 5-1: config 0 descriptor?? [ 94.883005][ T30] audit: type=1326 audit(1743832443.237:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 95.192937][ T30] audit: type=1326 audit(1743832443.237:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 95.547477][ T30] audit: type=1326 audit(1743832443.237:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 95.595682][ T30] audit: type=1326 audit(1743832443.237:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 95.722159][ T30] audit: type=1326 audit(1743832443.237:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 95.755104][ T5908] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 95.784567][ T5908] asix 5-1:0.0: probe with driver asix failed with error -71 [ 95.837998][ T5908] usb 5-1: USB disconnect, device number 2 [ 95.848131][ T30] audit: type=1326 audit(1743832443.237:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 95.996557][ T30] audit: type=1326 audit(1743832443.387:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 96.018820][ T30] audit: type=1326 audit(1743832443.387:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 96.043019][ T30] audit: type=1326 audit(1743832443.387:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 96.708802][ T30] audit: type=1326 audit(1743832443.387:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6113 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd89d58d169 code=0x7ffc0000 [ 97.092110][ T6137] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 97.153012][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.334103][ T6146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.375964][ T9] usb 4-1: config 0 has no interfaces? [ 97.407257][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 97.425971][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.436097][ T6146] bond_slave_1: entered promiscuous mode [ 97.450168][ T9] usb 4-1: Product: syz [ 97.456492][ T9] usb 4-1: Manufacturer: syz [ 97.464010][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 97.497466][ T9] usb 4-1: SerialNumber: syz [ 97.562005][ T9] usb 4-1: config 0 descriptor?? [ 97.593726][ T6146] bond0: (slave bond_slave_1): Releasing backup interface [ 97.623423][ T6146] bond_slave_1 (unregistering): left promiscuous mode [ 99.073345][ T5141] Bluetooth: hci3: command tx timeout [ 99.212457][ T5879] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 99.500838][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249ef400: rx timeout, send abort [ 99.526113][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249ef400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.735695][ T5879] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.872994][ T5876] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.928697][ T5908] usb 4-1: USB disconnect, device number 2 [ 100.153432][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 100.272283][ T5876] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 100.355223][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.420808][ T5876] usb 5-1: Product: syz [ 100.467212][ T5876] usb 5-1: Manufacturer: syz [ 100.502147][ T5876] usb 5-1: SerialNumber: syz [ 100.631067][ T5876] usb 5-1: config 0 descriptor?? [ 100.669099][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249eec00: rx timeout, send abort [ 100.677952][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880249ec400: rx timeout, send abort [ 100.687090][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249eec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.702491][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249ec400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.788280][ T5876] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 101.377257][ T6176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.434759][ T5876] gspca_sunplus: reg_w_riv err -110 [ 101.440129][ T5876] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 101.590626][ T6176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.772114][ T6176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.822684][ T6190] 9pnet: Found fid 0 not clunked [ 101.835060][ T6179] cgroup: fork rejected by pids controller in /syz1 [ 102.021752][ T6176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.344378][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.443735][ T5908] usb 5-1: USB disconnect, device number 3 [ 102.523352][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 102.640874][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 102.666447][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.705491][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.743769][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.771284][ T5876] usb 2-1: Product: syz [ 102.786955][ T6176] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.800961][ T5876] usb 2-1: Manufacturer: syz [ 102.818786][ T5876] usb 2-1: SerialNumber: syz [ 102.886912][ T6176] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.899963][ T5876] usb 2-1: config 0 descriptor?? [ 102.929305][ T5876] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.949374][ T5876] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 102.958895][ T6176] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.985435][ T6176] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.239348][ T6250] Invalid logical block size (32) [ 103.558388][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.631320][ T5876] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 103.693174][ T5876] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 103.844728][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 103.871252][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 103.889791][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.904291][ T5908] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.915953][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.924460][ T5908] usb 4-1: Product: syz [ 103.930969][ T5908] usb 4-1: Manufacturer: syz [ 103.936463][ T5908] usb 4-1: SerialNumber: syz [ 103.952680][ T5908] usb 4-1: config 0 descriptor?? [ 104.056957][ T5908] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.070604][ T5908] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 104.156558][ T6261] overlayfs: upper fs does not support file handles, falling back to index=off. [ 104.309755][ T5876] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 104.574885][ T5876] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 104.963232][ T5876] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 104.971237][ T5908] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 104.984767][ T5908] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 105.022473][ T5876] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 105.031467][ T5876] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 105.043606][ T5876] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 105.093673][ T5876] usb 2-1: USB disconnect, device number 3 [ 105.737844][ T5908] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 105.905136][ T5908] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 106.235875][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 106.245318][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 106.254452][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 106.274530][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 106.286275][ T5908] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 106.301719][ T5908] usb 4-1: USB disconnect, device number 3 [ 107.025530][ T6301] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 107.246344][ T6302] ip6erspan0: entered promiscuous mode [ 107.506518][ T6306] capability: warning: `syz.1.110' uses 32-bit capabilities (legacy support in use) [ 109.722714][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 109.740703][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 109.782589][ T6335] ceph: No mds server is up or the cluster is laggy [ 111.048654][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 111.061923][ T6361] bridge_slave_1: left allmulticast mode [ 111.078475][ T6361] bridge_slave_1: left promiscuous mode [ 111.153527][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.302946][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 111.311384][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.321918][ T5879] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 111.331373][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.343422][ T5879] usb 4-1: config 0 descriptor?? [ 111.383571][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.579981][ T6361] bridge_slave_0: left allmulticast mode [ 111.589565][ T6361] bridge_slave_0: left promiscuous mode [ 111.610025][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.786505][ T5879] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 111.809089][ T5879] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 111.826930][ T5879] belkin 0003:050D:3201.0003: item fetching failed at offset 2/5 [ 111.897662][ T5879] belkin 0003:050D:3201.0003: parse failed [ 111.956112][ T5879] belkin 0003:050D:3201.0003: probe with driver belkin failed with error -22 [ 112.045402][ T5879] usb 4-1: USB disconnect, device number 4 [ 112.395954][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.454543][ T6382] bond0: (slave rose0): Enslaving as an active interface with an up link [ 112.834156][ T6394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.945218][ T6394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.127732][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.135603][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.145430][ T6394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.292951][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 113.298312][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 113.308039][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.317130][ T10] usb 1-1: config 0 has no interface number 0 [ 113.324247][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.337244][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.357087][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.367246][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.376293][ T5908] usb 5-1: Product: syz [ 113.380824][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.392625][ T5908] usb 5-1: Manufacturer: syz [ 113.399360][ T5908] usb 5-1: SerialNumber: syz [ 113.404652][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 113.416244][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.426367][ T5908] usb 5-1: config 0 descriptor?? [ 113.436752][ T5908] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.448883][ T5908] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 113.458114][ T10] usb 1-1: config 0 descriptor?? [ 113.855509][ T6425] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.883123][ T6425] warning: `syz.1.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.065596][ T5908] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 114.181030][ T10] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0004/input/input5 [ 114.329676][ T10] uclogic 0003:28BD:0094.0004: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 114.432986][ T10] usb 1-1: USB disconnect, device number 2 [ 114.455421][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.488644][ T5908] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.522676][ T5908] em28xx 5-1:0.0: board has no eeprom [ 114.643182][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 114.655752][ T5908] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.661308][ T5879] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.675693][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.697661][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.731615][ T5879] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.748112][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.780055][ T5879] usb 2-1: Product: syz [ 114.784293][ T5908] em28xx 5-1:0.0: dvb set to bulk mode. [ 114.784602][ T5877] em28xx 5-1:0.0: Binding DVB extension [ 114.827146][ T5879] usb 2-1: Manufacturer: syz [ 114.837555][ T5879] usb 2-1: SerialNumber: syz [ 114.873182][ T5908] usb 5-1: USB disconnect, device number 4 [ 114.880362][ T5908] em28xx 5-1:0.0: Disconnecting em28xx [ 114.984770][ T5877] em28xx 5-1:0.0: Registering input extension [ 115.039669][ T5908] em28xx 5-1:0.0: Closing input extension [ 115.123357][ T5908] em28xx 5-1:0.0: Freeing device [ 115.413235][ T5879] usb 2-1: 0:2 : does not exist [ 116.423587][ T5877] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.623014][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 116.658539][ T5877] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 116.684605][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.753532][ T5877] usb 1-1: config 0 descriptor?? [ 117.520292][ T5879] usb 2-1: 1:0: cannot get min/max values for control 6 (id 1) [ 117.774611][ T5879] usb 2-1: USB disconnect, device number 4 [ 117.981900][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.812947][ T5935] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.823368][ T5877] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 118.838927][ T5877] asix 1-1:0.0: probe with driver asix failed with error -71 [ 118.884185][ T5877] usb 1-1: USB disconnect, device number 3 [ 118.965471][ T6500] syz.2.150 (6500) used greatest stack depth: 19064 bytes left [ 119.000294][ T5935] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.015950][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.047560][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.067116][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.095944][ T5935] usb 2-1: Product: syz [ 119.109346][ T5935] usb 2-1: Manufacturer: syz [ 119.288094][ T6513] kernel read not supported for file /file1 (pid: 6513 comm: syz.2.155) [ 119.316810][ T5935] usb 2-1: SerialNumber: syz [ 119.347981][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 119.347996][ T30] audit: type=1800 audit(1743832467.707:18): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.155" name="file1" dev="mqueue" ino=9753 res=0 errno=0 [ 119.426546][ T5935] usb 2-1: config 0 descriptor?? [ 119.463995][ T5935] usb 2-1: selecting invalid altsetting 0 [ 119.714692][ T5876] usb 2-1: USB disconnect, device number 5 [ 119.807634][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.135252][ T6524] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 120.146774][ T5877] IPVS: starting estimator thread 0... [ 120.253159][ T6526] IPVS: using max 30 ests per chain, 72000 per kthread [ 121.310194][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 121.696508][ T6539] syz.1.164 uses obsolete (PF_INET,SOCK_PACKET) [ 123.145383][ T6560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.693186][ T5876] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.873111][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 123.887712][ T5876] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 123.909780][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.923531][ T5876] usb 5-1: config 0 has no interface number 0 [ 123.939918][ T5876] usb 5-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 123.967906][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.999234][ T5876] usb 5-1: Product: syz [ 124.003913][ T5876] usb 5-1: Manufacturer: syz [ 124.008762][ T5876] usb 5-1: SerialNumber: syz [ 124.018982][ T5876] usb 5-1: config 0 descriptor?? [ 124.330021][ T5935] usb 5-1: USB disconnect, device number 5 [ 124.760123][ T6601] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 124.828752][ T6601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.140501][ T6604] bond1: (slave veth3): Enslaving as an active interface with a down link [ 125.158839][ T6601] ip6erspan0: entered allmulticast mode [ 125.191987][ T6601] bond1: (slave ip6erspan0): making interface the new active one [ 125.232990][ T6601] ip6erspan0: entered promiscuous mode [ 125.274112][ T6615] Invalid logical block size (32) [ 125.606188][ T6601] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 125.745702][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.213233][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.693202][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 126.725068][ T5877] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.733173][ T5877] usb 4-1: config 0 has no interface number 0 [ 126.759100][ T5877] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.796162][ T5877] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.852960][ T5877] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 126.882934][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.965582][ T5877] usb 4-1: config 0 descriptor?? [ 127.598255][ T5877] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0005/input/input7 [ 127.744941][ T5877] uclogic 0003:28BD:0094.0005: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 127.883204][ T5877] usb 4-1: USB disconnect, device number 5 [ 128.034469][ T6642] syzkaller0: entered promiscuous mode [ 128.055313][ T6642] syzkaller0: entered allmulticast mode [ 128.512940][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 128.614282][ T6655] ======================================================= [ 128.614282][ T6655] WARNING: The mand mount option has been deprecated and [ 128.614282][ T6655] and is ignored by this kernel. Remove the mand [ 128.614282][ T6655] option from the mount to silence this warning. [ 128.614282][ T6655] ======================================================= [ 128.723913][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 128.763004][ T5901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 128.795311][ T5901] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 128.826088][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.869990][ T5901] usb 3-1: Product: syz [ 129.022997][ T5901] usb 3-1: Manufacturer: syz [ 129.031088][ T5901] usb 3-1: SerialNumber: syz [ 129.038752][ T5901] usb 3-1: config 0 descriptor?? [ 129.044850][ T6649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.053298][ T6649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.355671][ T6649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.372824][ T6649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.905732][ T5901] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 130.137409][ T5901] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 130.164591][ T5901] usb 3-1: USB disconnect, device number 2 [ 132.912110][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 132.922166][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928568][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.744175][ T5901] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.772363][ T6698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.943967][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 133.950928][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.961459][ T5901] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 134.060736][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.103688][ T5901] usb 2-1: config 0 descriptor?? [ 134.556734][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.609704][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.734149][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.771425][ T5901] belkin 0003:050D:3201.0006: unknown main item tag 0x0 [ 134.787124][ T5901] belkin 0003:050D:3201.0006: unknown main item tag 0x0 [ 134.808617][ T6715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.814995][ T5901] belkin 0003:050D:3201.0006: item fetching failed at offset 2/5 [ 134.857473][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.873984][ T5901] belkin 0003:050D:3201.0006: parse failed [ 134.879890][ T5901] belkin 0003:050D:3201.0006: probe with driver belkin failed with error -22 [ 134.953475][ T5901] usb 2-1: USB disconnect, device number 6 [ 135.084582][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.289035][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.607905][ T6729] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 135.785976][ T63] bridge_slave_1: left allmulticast mode [ 135.824730][ T63] bridge_slave_1: left promiscuous mode [ 135.846357][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.899221][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.925644][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.935696][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.947140][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.956097][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.978955][ T63] bridge_slave_0: left allmulticast mode [ 135.989567][ T63] bridge_slave_0: left promiscuous mode [ 136.033294][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.029155][ T5831] Bluetooth: hci2: command tx timeout [ 138.402180][ T6785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.511601][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.635861][ T6785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.649813][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.669515][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.687955][ T63] bond0 (unregistering): Released all slaves [ 138.786778][ T6784] bridge_slave_0: left allmulticast mode [ 138.810876][ T6784] bridge_slave_0: left promiscuous mode [ 138.828128][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.876503][ T6784] bridge_slave_1: left allmulticast mode [ 138.882371][ T6784] bridge_slave_1: left promiscuous mode [ 138.936684][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.957096][ T6784] bond0: (slave bond_slave_0): Releasing backup interface [ 139.018833][ T6784] bond0: (slave bond_slave_1): Releasing backup interface [ 139.108274][ T6784] team0: Failed to send options change via netlink (err -105) [ 139.148652][ T6784] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 139.182990][ T6784] team0: Port device team_slave_0 removed [ 139.204519][ T6784] team0: Failed to send options change via netlink (err -105) [ 139.321456][ T6784] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 139.331470][ T6784] team0: Port device team_slave_1 removed [ 139.358434][ T6784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.371624][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.385248][ T6784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.392813][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.113616][ T5831] Bluetooth: hci2: command tx timeout [ 140.218434][ T735] ip6erspan0: left promiscuous mode [ 140.718878][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'. [ 140.821639][ T63] hsr_slave_0: left promiscuous mode [ 140.836733][ T63] hsr_slave_1: left promiscuous mode [ 140.842803][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.864336][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.880420][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.891078][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.958000][ T63] veth1_macvtap: left promiscuous mode [ 140.986945][ T63] veth0_macvtap: left promiscuous mode [ 141.004009][ T63] veth1_vlan: left promiscuous mode [ 141.029910][ T63] veth0_vlan: left promiscuous mode [ 142.186354][ T5831] Bluetooth: hci2: command tx timeout [ 144.263114][ T5831] Bluetooth: hci2: command tx timeout [ 144.284673][ T63] team0 (unregistering): Port device team_slave_1 removed [ 144.349351][ T63] team0 (unregistering): Port device team_slave_0 removed [ 144.811948][ T6826] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 144.910034][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 145.001235][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 145.842599][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.855388][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.863597][ T6739] bridge_slave_0: entered allmulticast mode [ 145.871325][ T6739] bridge_slave_0: entered promiscuous mode [ 145.881152][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.888951][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.896455][ T6739] bridge_slave_1: entered allmulticast mode [ 145.904425][ T6739] bridge_slave_1: entered promiscuous mode [ 145.909681][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.998469][ T6901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.078038][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.083714][ T6901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.108997][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.344254][ T5831] Bluetooth: hci2: command tx timeout [ 146.449898][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 146.473571][ T6739] team0: Port device team_slave_0 added [ 146.477268][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 146.483949][ T6739] team0: Port device team_slave_1 added [ 146.590099][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.597288][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.641338][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.818297][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.852181][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.191353][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.515752][ T6739] hsr_slave_0: entered promiscuous mode [ 147.553136][ T6739] hsr_slave_1: entered promiscuous mode [ 147.580420][ T6739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.605812][ T6739] Cannot create hsr debugfs directory [ 147.953684][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.167692][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.211082][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.254618][ T5879] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.289876][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.331288][ T5879] usb 2-1: SerialNumber: syz [ 148.551181][ T6739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.610330][ T5879] usb 2-1: 0:2 : does not exist [ 148.637496][ T6739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.638065][ T5879] usb 2-1: unit 255 not found! [ 148.677584][ T5879] usb 2-1: 5:0: cannot get min/max values for control 9 (id 5) [ 148.708353][ T5879] usb 2-1: USB disconnect, device number 7 [ 148.778605][ T6739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.902089][ T6739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.933004][ T6467] udevd[6467]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.882202][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.985268][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.012007][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.019253][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.093372][ T5935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.147990][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.155226][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.273075][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 150.281075][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.323873][ T5935] usb 2-1: config 4 has an invalid interface number: 52 but max is 2 [ 150.351599][ T5935] usb 2-1: config 4 has an invalid interface number: 104 but max is 2 [ 150.388883][ T5935] usb 2-1: config 4 has an invalid interface number: 252 but max is 2 [ 150.449008][ T5935] usb 2-1: config 4 has no interface number 0 [ 150.471038][ T5935] usb 2-1: config 4 has no interface number 1 [ 150.506831][ T5935] usb 2-1: config 4 has no interface number 2 [ 150.532553][ T5935] usb 2-1: config 4 interface 52 altsetting 0 endpoint 0xC has invalid maxpacket 32865, setting to 1024 [ 150.545609][ T5935] usb 2-1: config 4 interface 52 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 16 [ 150.557023][ T5935] usb 2-1: config 4 interface 252 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 150.569606][ T5935] usb 2-1: config 4 interface 104 has no altsetting 0 [ 150.581127][ T5935] usb 2-1: config 4 interface 252 has no altsetting 0 [ 150.692526][ T5935] usb 2-1: language id specifier not provided by device, defaulting to English [ 150.712034][ T5935] usb 2-1: New USB device found, idVendor=0499, idProduct=2003, bcdDevice=d9.68 [ 150.731119][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.749807][ T5935] usb 2-1: Product: syz [ 150.763286][ T5935] usb 2-1: Manufacturer: syz [ 150.767935][ T5935] usb 2-1: SerialNumber: syz [ 150.798101][ T6979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.805611][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.007161][ T5908] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.378274][ T5908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.390708][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.403185][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.481583][ T5908] usb 1-1: Product: syz [ 151.498983][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.507168][ T5908] usb 1-1: Manufacturer: syz [ 151.513277][ T5908] usb 1-1: SerialNumber: syz [ 151.519607][ T5935] snd-usb-audio 2-1:4.104: probe with driver snd-usb-audio failed with error -2 [ 151.539580][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.670907][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.708218][ T5935] snd-usb-audio 2-1:4.252: probe with driver snd-usb-audio failed with error -2 [ 151.812147][ T5935] usb 2-1: USB disconnect, device number 8 [ 152.277190][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.52/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.440444][ T5908] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 153.450697][ T5908] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 153.530675][ T5908] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 156.870961][ T5908] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 156.898028][ T5908] usb 1-1: USB disconnect, device number 4 [ 156.915706][ T5908] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 157.909040][ T6739] veth0_vlan: entered promiscuous mode [ 157.992098][ T6739] veth1_vlan: entered promiscuous mode [ 158.080418][ T6739] veth0_macvtap: entered promiscuous mode [ 158.125584][ T6739] veth1_macvtap: entered promiscuous mode [ 158.178905][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.191227][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.232407][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.262310][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.275982][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.291923][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.310163][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.361175][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.399701][ T6739] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.413511][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.430698][ T6739] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.440276][ T6739] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.449596][ T6739] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.586103][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 158.611916][ T5908] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.627331][ T5908] usb 3-1: config 179 has no interface number 0 [ 158.647504][ T5908] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.651363][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.686301][ T5908] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.708664][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.722792][ T5908] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.752874][ T5908] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.782709][ T5908] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.814226][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.823973][ T5908] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.832927][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.837036][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.893641][ T7093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.181632][ T5908] usb 3-1: USB disconnect, device number 3 [ 159.181689][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 159.195859][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 159.811379][ T7140] xt_bpf: check failed: parse error [ 160.603310][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.788757][ T5879] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 160.798683][ T5879] usb 3-1: config 0 has no interface number 0 [ 160.807815][ T5879] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 160.857938][ T5879] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 160.888534][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.942550][ T5879] usb 3-1: Product: syz [ 160.968873][ T5879] usb 3-1: Manufacturer: syz [ 160.997489][ T30] audit: type=1326 audit(1743832509.357:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 160.999763][ T5879] usb 3-1: SerialNumber: syz [ 161.043865][ T30] audit: type=1326 audit(1743832509.357:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.065602][ T30] audit: type=1326 audit(1743832509.357:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.089450][ T30] audit: type=1326 audit(1743832509.397:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.150171][ T30] audit: type=1326 audit(1743832509.407:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.209161][ T30] audit: type=1326 audit(1743832509.407:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.258212][ T30] audit: type=1326 audit(1743832509.407:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.259834][ T5879] usb 3-1: config 0 descriptor?? [ 161.292926][ T7141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.350896][ T30] audit: type=1326 audit(1743832509.407:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.376998][ T30] audit: type=1326 audit(1743832509.447:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.401917][ T30] audit: type=1326 audit(1743832509.447:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7165 comm="syz.4.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009838d169 code=0x7ffc0000 [ 161.507716][ T5879] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.516794][ T5879] usb 3-1: MIDIStreaming interface descriptor not found [ 161.550060][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.319'. [ 161.580965][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 161.584952][ T5879] usb 3-1: USB disconnect, device number 4 [ 161.616079][ T7169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.319'. [ 161.671067][ T5831] block nbd0: Receive control failed (result -107) [ 161.880864][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.421297][ T7187] netlink: 'syz.2.323': attribute type 4 has an invalid length. [ 162.971428][ T7192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.979044][ T7192] IPv6: NLM_F_CREATE should be set when creating new route [ 163.044225][ T7192] lo: entered allmulticast mode [ 163.075884][ T7192] tunl0: entered allmulticast mode [ 163.128720][ T7192] gre0: entered allmulticast mode [ 163.194468][ T7192] gretap0: entered allmulticast mode [ 163.209695][ T7192] erspan0: entered allmulticast mode [ 163.222288][ T7192] ip_vti0: entered allmulticast mode [ 163.292157][ T7192] ip6_vti0: entered allmulticast mode [ 163.302377][ T7192] sit0: entered allmulticast mode [ 163.314159][ T7192] ip6tnl0: entered allmulticast mode [ 163.326517][ T7192] ip6gre0: entered allmulticast mode [ 163.357299][ T7192] syz_tun: entered allmulticast mode [ 163.451375][ T7192] ip6gretap0: entered allmulticast mode [ 163.460461][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.516864][ T7192] bridge0: entered allmulticast mode [ 164.129495][ T7192] vcan0: entered allmulticast mode [ 164.179756][ T7192] bond0: entered allmulticast mode [ 164.213977][ T7192] bond_slave_0: entered allmulticast mode [ 164.219769][ T7192] bond_slave_1: entered allmulticast mode [ 164.247629][ T7192] team0: entered allmulticast mode [ 164.264337][ T7192] team_slave_0: entered allmulticast mode [ 164.284219][ T7192] team_slave_1: entered allmulticast mode [ 164.309625][ T7192] dummy0: entered allmulticast mode [ 164.357737][ T7192] nlmon0: entered allmulticast mode [ 164.371159][ T7192] caif0: entered allmulticast mode [ 164.388269][ T7192] batadv0: entered allmulticast mode [ 164.398761][ T7192] vxcan0: entered allmulticast mode [ 164.739044][ T7192] vxcan1: entered allmulticast mode [ 164.749166][ T7192] veth0: entered allmulticast mode [ 164.761015][ T7192] veth1: entered allmulticast mode [ 164.786725][ T7192] wg0: entered allmulticast mode [ 164.802555][ T7192] wg1: entered allmulticast mode [ 164.835413][ T7192] wg2: entered allmulticast mode [ 164.861868][ T7192] veth0_to_bridge: entered allmulticast mode [ 164.881313][ T7192] veth1_to_bridge: entered allmulticast mode [ 164.907351][ T7192] veth0_to_bond: entered allmulticast mode [ 164.944078][ T7192] veth1_to_bond: entered allmulticast mode [ 164.974455][ T7192] veth0_to_team: entered allmulticast mode [ 164.996332][ T7192] veth1_to_team: entered allmulticast mode [ 165.025744][ T7192] veth0_to_batadv: entered allmulticast mode [ 165.038740][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.061737][ T7192] batadv_slave_0: entered allmulticast mode [ 165.167705][ T7192] xfrm0: entered allmulticast mode [ 165.205785][ T7192] veth0_to_hsr: entered allmulticast mode [ 165.244216][ T7192] hsr_slave_0: entered allmulticast mode [ 165.344867][ T7192] veth1_to_hsr: entered allmulticast mode [ 165.459634][ T7192] hsr_slave_1: entered allmulticast mode [ 165.485900][ T7192] hsr0: entered allmulticast mode [ 165.503536][ T7192] veth1_virt_wifi: entered allmulticast mode [ 165.514716][ T7192] veth0_virt_wifi: entered allmulticast mode [ 165.526742][ T7192] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 165.537853][ T7192] veth1_vlan: entered allmulticast mode [ 165.548720][ T7192] veth0_vlan: entered allmulticast mode [ 165.567119][ T7192] vlan0: entered allmulticast mode [ 165.575170][ T7192] vlan1: entered allmulticast mode [ 165.589115][ T7192] macvlan0: entered allmulticast mode [ 165.602689][ T7192] macvlan1: entered allmulticast mode [ 165.614769][ T7192] ipvlan0: entered allmulticast mode [ 165.621083][ T7192] ipvlan1: entered allmulticast mode [ 165.649303][ T7192] veth1_macvtap: entered allmulticast mode [ 165.691512][ T7192] veth0_macvtap: entered allmulticast mode [ 165.742459][ T7192] macvtap0: entered allmulticast mode [ 165.753599][ T7192] macsec0: entered allmulticast mode [ 165.898720][ T7192] geneve0: entered allmulticast mode [ 165.946899][ T7192] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.959116][ T7192] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.970283][ T7192] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.009182][ T7192] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.129268][ T7192] geneve1: entered allmulticast mode [ 166.165977][ T7192] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 166.252976][ T7192] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 166.294084][ T7192] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 166.325746][ T7192] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 166.344009][ T7264] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 166.372293][ T7192] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 166.401242][ T7267] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 166.470280][ T7192] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 166.549646][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 166.853265][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 166.875390][ T7280] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.102782][ T7280] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.300096][ T7280] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.612296][ T7280] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.951842][ T7280] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.997175][ T7280] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.220302][ T7280] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.352327][ T7280] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.253140][ T5935] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.446964][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 169.476067][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.521652][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.538575][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.550534][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 169.571080][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.597204][ T7358] netlink: 'syz.1.370': attribute type 3 has an invalid length. [ 169.605027][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 169.628097][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.637599][ T5935] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.672901][ T5935] usb 3-1: Manufacturer: syz [ 169.720927][ T5935] usb 3-1: config 0 descriptor?? [ 170.123072][ T5935] rc_core: IR keymap rc-hauppauge not found [ 170.129267][ T5935] Registered IR keymap rc-empty [ 170.140556][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.162977][ T5901] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.177767][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.238637][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 170.436999][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 170.452995][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 170.461749][ T5901] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 170.470111][ T5901] usb 1-1: config 0 has no interface number 0 [ 170.493095][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.500616][ T5901] usb 1-1: config 0 interface 12 has no altsetting 0 [ 170.531961][ T5901] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 170.545788][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.581881][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.584898][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.598727][ T5831] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 170.607611][ T5831] Bluetooth: hci4: Injecting HCI hardware error event [ 170.617074][ T5831] Bluetooth: hci4: hardware error 0x00 [ 170.645924][ T5901] usb 1-1: Product: syz [ 170.663566][ T5901] usb 1-1: Manufacturer: syz [ 170.668438][ T5901] usb 1-1: SerialNumber: syz [ 170.679191][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.694889][ T5901] usb 1-1: config 0 descriptor?? [ 170.723184][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.843154][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 170.923204][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.003274][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.043689][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.082997][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 171.126349][ T5935] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 171.151826][ T5935] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 171.189810][ T5935] usb 3-1: USB disconnect, device number 5 [ 172.663421][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 173.353790][ T5901] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 173.443099][ T5901] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 173.450460][ T5901] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 173.530975][ T5901] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 173.570431][ T5901] usb 1-1: USB disconnect, device number 5 [ 174.242740][ T7414] syzkaller0: entered promiscuous mode [ 174.303080][ T7414] syzkaller0: entered allmulticast mode [ 174.665992][ T7435] tipc: Started in network mode [ 174.682401][ T7435] tipc: Node identity ba76334bdd79, cluster identity 4711 [ 174.710408][ T7435] tipc: Enabled bearer , priority 0 [ 174.959381][ T7424] syzkaller0: entered promiscuous mode [ 174.967807][ T7424] syzkaller0: entered allmulticast mode [ 174.976791][ T7424] tipc: Resetting bearer [ 175.225038][ T7450] netlink: 56 bytes leftover after parsing attributes in process `syz.4.394'. [ 175.824802][ T5908] tipc: Node number set to 1729049419 [ 177.977523][ T7470] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 178.041593][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 178.682292][ T7423] tipc: Resetting bearer [ 180.589004][ T7498] input: syz0 as /devices/virtual/input/input9 [ 181.214500][ T7423] tipc: Disabling bearer [ 181.232755][ T7470] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 183.540287][ T6235] Bluetooth: hci5: Frame reassembly failed (-84) [ 183.754036][ T7552] Bluetooth: hci5: Frame reassembly failed (-90) [ 185.544491][ T5141] Bluetooth: hci5: command 0x1003 tx timeout [ 185.550890][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 185.854472][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.035609][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 186.043436][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.078127][ T5879] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 186.090878][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.157756][ T5879] usb 5-1: Product: syz [ 186.202543][ T5879] usb 5-1: Manufacturer: syz [ 186.247058][ T5879] usb 5-1: SerialNumber: syz [ 186.331509][ T5879] usb 5-1: config 0 descriptor?? [ 186.382453][ T5879] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 186.714652][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.733139][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.386128][ T13] usb 5-1: Failed to submit usb control message: -110 [ 187.452037][ T5879] usb 5-1: USB disconnect, device number 6 [ 187.953216][ T13] usb 5-1: unable to send the bmi data to the device: -110 [ 187.960498][ T13] usb 5-1: unable to get target info from device [ 188.149162][ T13] usb 5-1: could not get target info (-110) [ 188.155938][ T13] usb 5-1: could not probe fw (-110) [ 193.303060][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.512965][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 193.603516][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.645583][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 193.728084][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.766190][ T10] usb 2-1: Product: syz [ 193.770400][ T10] usb 2-1: Manufacturer: syz [ 193.798643][ T10] usb 2-1: SerialNumber: syz [ 193.824927][ T10] usb 2-1: config 0 descriptor?? [ 193.930146][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 194.160399][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 194.173075][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 194.251701][ T54] usb 2-1: Failed to submit usb control message: -71 [ 194.253432][ T48] usb 2-1: USB disconnect, device number 9 [ 194.314177][ T54] usb 2-1: unable to send the bmi data to the device: -71 [ 194.338459][ T54] usb 2-1: unable to get target info from device [ 194.358856][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.364139][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 194.368290][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379153][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389975][ T5879] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.419657][ T54] usb 2-1: could not get target info (-71) [ 194.422918][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.447296][ T5879] usb 3-1: Product: syz [ 194.449566][ T54] usb 2-1: could not probe fw (-71) [ 194.468059][ T5879] usb 3-1: Manufacturer: syz [ 194.491299][ T5879] usb 3-1: SerialNumber: syz [ 194.574765][ T5879] usb 3-1: config 0 descriptor?? [ 194.799966][ T5879] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.157150][ T7723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 195.973294][ T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 196.169845][ T48] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.194107][ T48] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.541907][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 196.544436][ T48] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.550311][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 196.557525][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 196.571995][ T5879] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 197.112712][ T48] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.136031][ T5879] usb 3-1: USB disconnect, device number 6 [ 197.159358][ T48] usb 6-1: Product: syz [ 197.199575][ T48] usb 6-1: Manufacturer: syz [ 197.228216][ T48] usb 6-1: SerialNumber: syz [ 197.283891][ T48] usb 6-1: config 0 descriptor?? [ 197.364878][ T48] usb 6-1: selecting invalid altsetting 0 [ 198.123572][ T48] usb 6-1: USB disconnect, device number 2 [ 198.427851][ T7758] kvm: pic: non byte write [ 198.445983][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.291238][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.443066][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 199.479236][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 199.530003][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 199.603801][ T5935] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 199.648599][ T7783] kvm: pic: non byte write [ 199.657988][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.692022][ T5935] usb 1-1: Product: syz [ 199.705076][ T5935] usb 1-1: Manufacturer: syz [ 199.709726][ T5935] usb 1-1: SerialNumber: syz [ 199.737431][ T5935] usb 1-1: config 0 descriptor?? [ 199.759676][ T5935] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 199.770706][ T5935] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 200.482111][ T5935] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 200.489521][ T5935] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 201.583772][ T5935] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 201.591739][ T5935] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 202.019337][ T5935] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 202.083236][ T5935] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 202.101457][ T5935] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 202.157099][ T5935] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 202.230494][ T5935] usb 1-1: USB disconnect, device number 6 [ 203.500895][ T7843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.977350][ T3001] ================================================================== [ 203.985492][ T3001] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x1c1/0x5a0 [ 203.993189][ T3001] Read of size 4 at addr ffff888031b9d718 by task kworker/u8:8/3001 [ 204.001197][ T3001] [ 204.003567][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 204.003589][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.003600][ T3001] Workqueue: events_unbound netfs_write_collection_worker [ 204.003639][ T3001] Call Trace: [ 204.003648][ T3001] [ 204.003656][ T3001] dump_stack_lvl+0x241/0x360 [ 204.003679][ T3001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.003697][ T3001] ? rcu_is_watching+0x15/0xb0 [ 204.003714][ T3001] ? __virt_addr_valid+0x183/0x530 [ 204.003731][ T3001] ? lock_release+0x4e/0x3e0 [ 204.003747][ T3001] ? __virt_addr_valid+0x183/0x530 [ 204.003764][ T3001] ? __virt_addr_valid+0x183/0x530 [ 204.003782][ T3001] print_report+0x16e/0x5b0 [ 204.003803][ T3001] ? __virt_addr_valid+0x183/0x530 [ 204.003820][ T3001] ? __virt_addr_valid+0x183/0x530 [ 204.003837][ T3001] ? __virt_addr_valid+0x45f/0x530 [ 204.003854][ T3001] ? __phys_addr+0xba/0x170 [ 204.003873][ T3001] ? iov_iter_revert+0x1c1/0x5a0 [ 204.003892][ T3001] kasan_report+0x143/0x180 [ 204.003906][ T3001] ? iov_iter_revert+0x1c1/0x5a0 [ 204.003928][ T3001] iov_iter_revert+0x1c1/0x5a0 [ 204.003950][ T3001] netfs_retry_writes+0x17f2/0x19d0 [ 204.003969][ T3001] ? do_raw_spin_unlock+0x13c/0x8b0 [ 204.003993][ T3001] ? do_raw_spin_lock+0x151/0x370 [ 204.004012][ T3001] ? __pfx_netfs_retry_writes+0x10/0x10 [ 204.004034][ T3001] ? do_raw_spin_lock+0x151/0x370 [ 204.004059][ T3001] netfs_write_collection_worker+0x2fc0/0x3bf0 [ 204.004104][ T3001] ? process_scheduled_works+0x9cb/0x18e0 [ 204.004120][ T3001] process_scheduled_works+0xac3/0x18e0 [ 204.004149][ T3001] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.004175][ T3001] ? assign_work+0x367/0x3d0 [ 204.004193][ T3001] worker_thread+0x870/0xd50 [ 204.004216][ T3001] ? __kthread_parkme+0x1a8/0x200 [ 204.004234][ T3001] ? __pfx_worker_thread+0x10/0x10 [ 204.004250][ T3001] kthread+0x7b7/0x940 [ 204.004269][ T3001] ? __pfx_worker_thread+0x10/0x10 [ 204.004285][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.004302][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.004319][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.004336][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.004352][ T3001] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.004367][ T3001] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.004383][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.004401][ T3001] ret_from_fork+0x4b/0x80 [ 204.004415][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.004431][ T3001] ret_from_fork_asm+0x1a/0x30 [ 204.004458][ T3001] [ 204.004463][ T3001] [ 204.246788][ T3001] Allocated by task 7833: [ 204.251186][ T3001] kasan_save_track+0x3f/0x80 [ 204.255853][ T3001] __kasan_kmalloc+0x9d/0xb0 [ 204.260451][ T3001] __kmalloc_noprof+0x28e/0x4d0 [ 204.265282][ T3001] security_task_alloc+0x4a/0x340 [ 204.270294][ T3001] copy_process+0x1605/0x3d10 [ 204.274948][ T3001] kernel_clone+0x227/0x880 [ 204.279434][ T3001] __se_sys_clone3+0x348/0x380 [ 204.284183][ T3001] do_syscall_64+0xf3/0x230 [ 204.288679][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.294555][ T3001] [ 204.296859][ T3001] The buggy address belongs to the object at ffff888031b9d700 [ 204.296859][ T3001] which belongs to the cache kmalloc-16 of size 16 [ 204.310717][ T3001] The buggy address is located 8 bytes to the right of [ 204.310717][ T3001] allocated 16-byte region [ffff888031b9d700, ffff888031b9d710) [ 204.325124][ T3001] [ 204.327428][ T3001] The buggy address belongs to the physical page: [ 204.333820][ T3001] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31b9d [ 204.342568][ T3001] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 204.349675][ T3001] page_type: f5(slab) [ 204.353643][ T3001] raw: 00fff00000000000 ffff88801b041640 dead000000000100 dead000000000122 [ 204.362220][ T3001] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 204.370785][ T3001] page dumped because: kasan: bad access detected [ 204.377191][ T3001] page_owner tracks the page as allocated [ 204.382900][ T3001] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 54, tgid 54 (kworker/u8:3), ts 172384026325, free_ts 172224542265 [ 204.401830][ T3001] post_alloc_hook+0x1f4/0x240 [ 204.406590][ T3001] get_page_from_freelist+0x351d/0x36b0 [ 204.412127][ T3001] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 204.417921][ T3001] alloc_pages_mpol+0x339/0x690 [ 204.422758][ T3001] allocate_slab+0x8f/0x3a0 [ 204.427249][ T3001] ___slab_alloc+0xc3b/0x1500 [ 204.431910][ T3001] __slab_alloc+0x58/0xa0 [ 204.436226][ T3001] __kmalloc_cache_noprof+0x26a/0x370 [ 204.441583][ T3001] fuse_writepage_args_setup+0x165/0x9f0 [ 204.447212][ T3001] fuse_writepages_fill+0x310/0x1210 [ 204.452486][ T3001] write_cache_pages+0xd2/0x240 [ 204.457329][ T3001] fuse_writepages+0x2b7/0x4a0 [ 204.462081][ T3001] do_writepages+0x364/0x890 [ 204.466661][ T3001] __writeback_single_inode+0x14f/0x10d0 [ 204.472284][ T3001] writeback_sb_inodes+0x822/0x1360 [ 204.477505][ T3001] __writeback_inodes_wb+0x11b/0x260 [ 204.482781][ T3001] page last free pid 15 tgid 15 stack trace: [ 204.488747][ T3001] __free_frozen_pages+0xddf/0x10a0 [ 204.493948][ T3001] __tlb_remove_table+0x36b/0x460 [ 204.498974][ T3001] tlb_remove_table_rcu+0x79/0xf0 [ 204.503991][ T3001] rcu_core+0xaac/0x17a0 [ 204.508221][ T3001] handle_softirqs+0x2d6/0x9b0 [ 204.512970][ T3001] run_ksoftirqd+0xcf/0x130 [ 204.517463][ T3001] smpboot_thread_fn+0x576/0xaa0 [ 204.522393][ T3001] kthread+0x7b7/0x940 [ 204.526451][ T3001] ret_from_fork+0x4b/0x80 [ 204.530860][ T3001] ret_from_fork_asm+0x1a/0x30 [ 204.535616][ T3001] [ 204.537928][ T3001] Memory state around the buggy address: [ 204.543543][ T3001] ffff888031b9d600: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 204.551616][ T3001] ffff888031b9d680: 00 00 fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 204.559683][ T3001] >ffff888031b9d700: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 204.567745][ T3001] ^ [ 204.572582][ T3001] ffff888031b9d780: 00 00 fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 204.580631][ T3001] ffff888031b9d800: 00 06 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 204.588685][ T3001] ================================================================== [ 204.745489][ T3001] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 204.752730][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 204.764547][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.774644][ T3001] Workqueue: events_unbound netfs_write_collection_worker [ 204.781771][ T3001] Call Trace: [ 204.785051][ T3001] [ 204.787980][ T3001] dump_stack_lvl+0x241/0x360 [ 204.792668][ T3001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.797873][ T3001] ? __pfx__printk+0x10/0x10 [ 204.802467][ T3001] ? vscnprintf+0x5d/0x90 [ 204.806804][ T3001] panic+0x349/0x880 [ 204.810701][ T3001] ? check_panic_on_warn+0x21/0xb0 [ 204.815817][ T3001] ? __pfx_panic+0x10/0x10 [ 204.820237][ T3001] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 204.826221][ T3001] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.832548][ T3001] ? print_report+0x519/0x5b0 [ 204.837235][ T3001] check_panic_on_warn+0x86/0xb0 [ 204.842177][ T3001] ? iov_iter_revert+0x1c1/0x5a0 [ 204.847120][ T3001] end_report+0x77/0x160 [ 204.851365][ T3001] kasan_report+0x154/0x180 [ 204.855869][ T3001] ? iov_iter_revert+0x1c1/0x5a0 [ 204.860813][ T3001] iov_iter_revert+0x1c1/0x5a0 [ 204.865585][ T3001] netfs_retry_writes+0x17f2/0x19d0 [ 204.870787][ T3001] ? do_raw_spin_unlock+0x13c/0x8b0 [ 204.875992][ T3001] ? do_raw_spin_lock+0x151/0x370 [ 204.881020][ T3001] ? __pfx_netfs_retry_writes+0x10/0x10 [ 204.886571][ T3001] ? do_raw_spin_lock+0x151/0x370 [ 204.891607][ T3001] netfs_write_collection_worker+0x2fc0/0x3bf0 [ 204.897808][ T3001] ? process_scheduled_works+0x9cb/0x18e0 [ 204.903543][ T3001] process_scheduled_works+0xac3/0x18e0 [ 204.909094][ T3001] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.915069][ T3001] ? assign_work+0x367/0x3d0 [ 204.919651][ T3001] worker_thread+0x870/0xd50 [ 204.924235][ T3001] ? __kthread_parkme+0x1a8/0x200 [ 204.929249][ T3001] ? __pfx_worker_thread+0x10/0x10 [ 204.934352][ T3001] kthread+0x7b7/0x940 [ 204.938410][ T3001] ? __pfx_worker_thread+0x10/0x10 [ 204.943518][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.948097][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.952675][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.957256][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.961837][ T3001] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.967028][ T3001] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.972215][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.976837][ T3001] ret_from_fork+0x4b/0x80 [ 204.981620][ T3001] ? __pfx_kthread+0x10/0x10 [ 204.986202][ T3001] ret_from_fork_asm+0x1a/0x30 [ 204.990962][ T3001] [ 204.994247][ T3001] Kernel Offset: disabled [ 204.998561][ T3001] Rebooting in 86400 seconds..