last executing test programs: 1m22.382649592s ago: executing program 1 (id=254): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) close(r2) 1m22.206616044s ago: executing program 1 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x13, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000800000000000000705b02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000440)="05", &(0x7f00000000c0)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f00000001c0), &(0x7f0000000380)=""/161}, 0x20) 1m22.061427605s ago: executing program 1 (id=258): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000240)=""/48, 0x30) getdents(r1, 0xfffffffffffffffd, 0x58) 1m21.830006765s ago: executing program 1 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1m21.648683791s ago: executing program 1 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m21.548407913s ago: executing program 1 (id=266): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 1m6.429011477s ago: executing program 32 (id=266): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 50.015663643s ago: executing program 3 (id=594): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 49.777630115s ago: executing program 3 (id=597): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="bc", 0x1}], 0x1}, 0x4) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 49.69405617s ago: executing program 3 (id=599): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) 46.63653s ago: executing program 3 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 46.445385376s ago: executing program 3 (id=622): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000003a8407a730bf85edacab3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc038480a, &(0x7f0000000400)={0x3, 0x200}) 46.150460161s ago: executing program 3 (id=627): recvmsg(0xffffffffffffffff, 0x0, 0x104) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820d00020000000905037663"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 46.029791348s ago: executing program 33 (id=627): recvmsg(0xffffffffffffffff, 0x0, 0x104) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820d00020000000905037663"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 32.982310068s ago: executing program 4 (id=780): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 31.524756521s ago: executing program 4 (id=800): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 31.362316328s ago: executing program 4 (id=802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000718000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="0faa66b9800000c00f326635001000000f30ba210066b8f800c0fe66ef670f01cb660fc732b8150a8ee00f070fc7180f01c90faef1", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.178436598s ago: executing program 4 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) 31.130527681s ago: executing program 4 (id=808): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x8002, 0x0) 30.746316303s ago: executing program 4 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@ipv6_newroute={0x20, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000000)="38000300010003", 0x7) read$FUSE(r1, 0x0, 0x0) 30.453285482s ago: executing program 34 (id=813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@ipv6_newroute={0x20, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000000)="38000300010003", 0x7) read$FUSE(r1, 0x0, 0x0) 23.238493109s ago: executing program 2 (id=873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000600)=ANY=[@ANYRES64], 0x8) 23.004861243s ago: executing program 2 (id=874): r0 = fanotify_init(0x0, 0x80000) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001039, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x8) pread64(r2, &(0x7f0000000040)=""/48, 0x30, 0x0) 22.909694682s ago: executing program 2 (id=875): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 22.716251012s ago: executing program 2 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000200)='.\x00', 0x277) 22.613351017s ago: executing program 2 (id=877): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 22.184814275s ago: executing program 2 (id=881): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 21.938144084s ago: executing program 35 (id=881): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 4.389103481s ago: executing program 6 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008504"]) 4.174647682s ago: executing program 6 (id=1121): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 3.474527379s ago: executing program 6 (id=1134): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) sendfile(r1, r0, 0x0, 0x23b) 3.39673042s ago: executing program 6 (id=1137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}}, 0x0) 3.271213752s ago: executing program 6 (id=1141): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.141492571s ago: executing program 5 (id=1167): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r1, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) 2.092071035s ago: executing program 5 (id=1169): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/112, 0xfffffce3, 0x100, 0x0, 0x21c42fc4) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) 1.980432509s ago: executing program 7 (id=1170): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x7e, 0x6) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sliced={0x957b, [0x3, 0x6, 0x5, 0x8, 0x2, 0x9, 0x0, 0x2, 0x0, 0x7, 0x0, 0x6, 0x0, 0x8, 0x8, 0x7, 0xe, 0xffff, 0x8, 0x6, 0x32, 0x762, 0x4, 0x1, 0x78c, 0x9a66, 0x0, 0xab03, 0xf677, 0x9, 0xff, 0x200, 0x8, 0x7, 0x3ff, 0xc, 0x7, 0x0, 0x5, 0x9d64, 0xbe79, 0x8, 0x5f4, 0x8000, 0x5, 0x686c, 0x1, 0x10], 0x99}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.892745769s ago: executing program 7 (id=1172): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x749bc, 0x2}) 1.790909079s ago: executing program 7 (id=1174): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.698350134s ago: executing program 0 (id=1175): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.626284743s ago: executing program 7 (id=1176): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000044d564b"]) 1.281178085s ago: executing program 8 (id=1177): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) mlockall(0x7) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) 1.174040456s ago: executing program 8 (id=1178): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={'\x00', 0x0, 0x5, 0x2, 0x8, 0x2, "00000e00", "0300", "0100", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "05000008e6a9fffd00", "cf6cce2296b3f853e224c4e0"]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={'\x00', 0x0, 0x5, 0x4, 0x0, 0x0, "f759ca14860e00", '\x00\x00\a\x00', "0300", "e859ad13", ["50d5c2a7c5ae5cace40000b6", "8089c8e2e9ffffff21ff2900", '\x00', "ff81000000008000"]}) 1.117119704s ago: executing program 5 (id=1179): read$FUSE(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.042553546s ago: executing program 5 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 1.035768321s ago: executing program 5 (id=1181): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) sched_setscheduler(0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) 800.15858ms ago: executing program 8 (id=1182): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x20}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18d700, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x9) 797.155936ms ago: executing program 0 (id=1183): r0 = io_uring_setup(0x30d8, &(0x7f00000000c0)={0x0, 0xf489, 0x400, 0x0, 0x238}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000180)=""/52, 0xfffffdef) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x890c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 709.421871ms ago: executing program 8 (id=1184): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 658.429036ms ago: executing program 8 (id=1185): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000002100)='numa_maps\x00') 581.153458ms ago: executing program 0 (id=1186): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 306.263638ms ago: executing program 7 (id=1187): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0}, 0x0, @in=@local}}, 0xe8) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 193.866942ms ago: executing program 8 (id=1188): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x4e496f8}) 158.908168ms ago: executing program 6 (id=1189): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000140)={0x0}) 158.207099ms ago: executing program 0 (id=1190): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) fanotify_init(0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d}) 123.752912ms ago: executing program 5 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp6=r1}, 0x20) dup3(r2, r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f00000001c0), &(0x7f0000000300)=@udp6=r0}, 0x20) 70.560055ms ago: executing program 7 (id=1192): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 42.921492ms ago: executing program 0 (id=1193): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000240)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x9f7, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x40, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3c}, {0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, {0x0, 0x0, 0xd, 0xfe, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x39, 0x4}, {0x1000, 0x3}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x0, 0xf801, 0x0, [0x0, 0x0, 0xfffffffffffffffd]}) kernel console output (not intermixed with test programs): sts on: batadv_slave_0 [ 79.856095][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.867080][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.907320][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.918917][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.930738][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.941399][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.951721][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.962716][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.974328][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.016065][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.026141][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.036192][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.045507][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.071949][ T5834] veth0_vlan: entered promiscuous mode [ 80.144665][ T5834] veth1_vlan: entered promiscuous mode [ 80.172119][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.181004][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.211831][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.233914][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.293724][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.308199][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.320368][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.324166][ T5834] veth0_macvtap: entered promiscuous mode [ 80.334843][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.357368][ T5834] veth1_macvtap: entered promiscuous mode [ 80.426621][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.430263][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.437372][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.437526][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.437544][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.437556][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.437569][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.437580][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.437592][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.439154][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.535075][ T5148] Bluetooth: hci2: command tx timeout [ 80.544425][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.552751][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.556723][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.572940][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.582863][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.583440][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.601620][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.612189][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.622628][ T5148] Bluetooth: hci4: command tx timeout [ 80.622985][ T5856] Bluetooth: hci1: command tx timeout [ 80.628044][ T5148] Bluetooth: hci0: command tx timeout [ 80.634140][ T54] Bluetooth: hci3: command tx timeout [ 80.639770][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.656644][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.669556][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.712266][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.721561][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725616][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.731626][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.747204][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.757845][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.861487][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.869595][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.961355][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.987862][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.153957][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.183853][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.367380][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.390975][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.430780][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.591533][ T29] audit: type=1326 audit(1732071816.105:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5940 comm="syz.3.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb04d7e759 code=0x0 [ 82.223327][ T5962] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 82.339469][ T29] audit: type=1326 audit(1732071816.845:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5965 comm="syz.4.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x0 [ 82.446398][ T5971] loop6: detected capacity change from 0 to 524287999 [ 82.565827][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.575369][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.613081][ T5856] Bluetooth: hci2: command tx timeout [ 82.642914][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.652151][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.662922][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.671128][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.680432][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.693116][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.693170][ T5856] Bluetooth: hci1: command tx timeout [ 82.702322][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.707775][ T5856] Bluetooth: hci3: command tx timeout [ 82.721101][ T5856] Bluetooth: hci4: command tx timeout [ 82.726643][ T5148] Bluetooth: hci0: command tx timeout [ 82.728892][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.741344][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.749962][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.759278][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.774000][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.783337][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.792906][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.802121][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.810071][ T5971] ldm_validate_partition_table(): Disk read failed. [ 82.841721][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.851152][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.873963][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.883289][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.905778][ T5971] Dev loop6: unable to read RDB block 0 [ 82.912673][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 82.940844][ T5891] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 82.958660][ T5971] loop6: unable to read partition table [ 82.967232][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.993906][ T5971] loop_reread_partitions: partition scan of loop6 (ǴCP'OQ=}m=@4r(Uk+Z 4>F1ԙ1) failed (rc=-5) [ 83.027137][ T5891] usb 1-1: config 0 descriptor?? [ 83.034670][ T5849] ldm_validate_partition_table(): Disk read failed. [ 83.058025][ T5849] Dev loop6: unable to read RDB block 0 [ 83.067426][ T5891] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 83.097878][ T5849] loop6: unable to read partition table [ 83.158481][ T5972] ldm_validate_partition_table(): Disk read failed. [ 83.204568][ T5972] Dev loop6: unable to read RDB block 0 [ 83.232832][ T5972] loop6: unable to read partition table [ 83.279782][ T5972] loop_reread_partitions: partition scan of loop6 (ǴCP'OQ=}m=@4r(Uk+Z 4>F1ԙ1) failed (rc=-5) [ 83.395851][ T5210] ldm_validate_partition_table(): Disk read failed. [ 83.435534][ T5210] Dev loop6: unable to read RDB block 0 [ 83.467242][ T5210] loop6: unable to read partition table [ 84.080212][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.136157][ T5891] gspca_nw80x: reg_w err -71 [ 84.140941][ T5891] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 84.220182][ T5891] usb 1-1: USB disconnect, device number 2 [ 84.259514][ T5846] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 84.273990][ T5846] usb 5-1: config 0 has no interface number 0 [ 84.280257][ T5846] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.291516][ T5846] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.308365][ T5846] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 84.317857][ T5846] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 84.326066][ T5846] usb 5-1: Manufacturer: syz [ 84.335024][ T5846] usb 5-1: config 0 descriptor?? [ 84.643457][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.789583][ T5846] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0001/input/input5 [ 84.809628][ T5889] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 84.821768][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.862711][ T5889] usb 2-1: config 0 descriptor?? [ 84.909385][ T5846] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 84.952625][ T5921] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.008739][ T8] usb 5-1: USB disconnect, device number 2 [ 85.118244][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.138592][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.159971][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.189847][ T5921] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.200523][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.220560][ T5921] usb 3-1: config 0 descriptor?? [ 85.323657][ T6029] input: syz0 as /devices/virtual/input/input6 [ 85.648283][ T5921] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 85.687572][ T5921] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 85.742862][ T6038] support for the xor transformation has been removed. [ 85.769948][ T5921] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.920950][ T5889] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 85.972890][ T5889] usb 2-1: USB disconnect, device number 2 [ 86.262554][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.440555][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 86.487793][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.497955][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.566861][ T5891] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 86.598330][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.614526][ T5891] usb 5-1: Product: syz [ 86.644300][ T5891] usb 5-1: Manufacturer: syz [ 86.653719][ T5891] usb 5-1: SerialNumber: syz [ 86.694179][ T5891] usb 5-1: config 0 descriptor?? [ 86.735820][ T6049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.022932][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.040823][ T5889] usb 5-1: USB disconnect, device number 3 [ 87.196708][ T5921] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 87.216575][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.235746][ T5921] usb 4-1: Product: syz [ 87.248117][ T5921] usb 4-1: Manufacturer: syz [ 87.269442][ T5921] usb 4-1: SerialNumber: syz [ 87.289073][ T5921] usb 4-1: config 0 descriptor?? [ 87.311203][ T5921] ch341 4-1:0.0: ch341-uart converter detected [ 87.320000][ T6091] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.60'. [ 87.518279][ T46] cfg80211: failed to load regulatory.db [ 87.551359][ T5921] usb 4-1: failed to receive control message: -71 [ 87.587223][ T5921] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 87.633697][ T5921] usb 4-1: USB disconnect, device number 2 [ 87.661858][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.682590][ T5920] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 87.689075][ T5920] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 87.699155][ T5921] ch341 4-1:0.0: device disconnected [ 87.825494][ T5891] usb 3-1: USB disconnect, device number 2 [ 89.291240][ T6162] random: crng reseeded on system resumption [ 89.892699][ T5920] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 89.901522][ T5920] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 89.910616][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.047008][ T29] audit: type=1326 audit(1732071825.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.132523][ T29] audit: type=1326 audit(1732071825.555:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.235242][ T29] audit: type=1326 audit(1732071825.555:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.360170][ T29] audit: type=1326 audit(1732071825.635:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.496769][ T29] audit: type=1326 audit(1732071825.635:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b443b0845 code=0x7ffc0000 [ 91.607516][ T29] audit: type=1326 audit(1732071825.695:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.699869][ T29] audit: type=1326 audit(1732071825.725:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.822545][ T29] audit: type=1326 audit(1732071825.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 91.918158][ T29] audit: type=1326 audit(1732071825.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4437e759 code=0x7ffc0000 [ 92.009440][ T29] audit: type=1326 audit(1732071825.745:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b4431a0f9 code=0x7ffc0000 [ 92.052590][ T5920] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 92.061518][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.073685][ T5920] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 92.750524][ T6257] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 92.785723][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 93.283845][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 93.326515][ T6273] 8021q: adding VLAN 0 to HW filter on device team1 [ 93.392623][ T5891] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.545013][ T6291] syzkaller1: entered promiscuous mode [ 93.550902][ T6291] syzkaller1: entered allmulticast mode [ 93.552599][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.572776][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 93.580605][ T5891] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 93.590130][ T5891] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 93.606751][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 93.636825][ T5891] usb 4-1: config 1 has no interface number 0 [ 93.668810][ T5891] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.707066][ T5891] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 93.727039][ T5891] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 93.780346][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.808982][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 93.835286][ T5891] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 93.854408][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.865628][ T5922] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.874780][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.903794][ T5922] usb 1-1: config 0 descriptor?? [ 93.939846][ T5922] hub 1-1:0.0: USB hub found [ 94.173008][ T5922] hub 1-1:0.0: 1 port detected [ 94.216052][ T5920] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 94.218086][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.261463][ T5920] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 94.520605][ T5891] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 94.637748][ T6308] loop7: detected capacity change from 0 to 1036 [ 94.743892][ T5891] usb 4-1: USB disconnect, device number 3 [ 94.751226][ T5891] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 95.075652][ T5922] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 95.086240][ T5922] usb 1-1: Failed to suspend device, error -71 [ 95.120296][ T5922] usb 1-1: USB disconnect, device number 3 [ 95.642512][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.880068][ T5891] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 95.894578][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.916784][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.948626][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.968834][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.991875][ T5891] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.008522][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.032741][ T5891] usb 4-1: config 0 descriptor?? [ 96.048330][ T6334] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.499929][ T5891] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 96.510530][ T5891] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 96.581477][ T5891] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 96.815304][ T5891] usb 4-1: USB disconnect, device number 4 [ 96.828418][ T6380] kvm: Disabled LAPIC found during irq injection [ 97.004574][ T6390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.468050][ T6427] hsr0: entered promiscuous mode [ 97.488164][ T6427] hsr_slave_0: left promiscuous mode [ 97.520703][ T6427] hsr_slave_1: left promiscuous mode [ 97.575260][ T5922] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.614744][ T6427] hsr0 (unregistering): left promiscuous mode [ 97.732848][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 97.756278][ T5922] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.774488][ T5922] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.802673][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.819691][ T5922] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 97.837155][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.849311][ T5922] usb 5-1: config 0 descriptor?? [ 97.935037][ T5891] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.124995][ T5891] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 98.142576][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.158667][ T5891] usb 3-1: Product: syz [ 98.167992][ T5891] usb 3-1: Manufacturer: syz [ 98.174575][ T5891] usb 3-1: SerialNumber: syz [ 98.186853][ T5891] usb 3-1: config 0 descriptor?? [ 98.280173][ T5922] hid (null): report_id 1944628200 is invalid [ 98.288670][ T5922] kye 0003:0458:5014.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 98.300035][ T5922] kye 0003:0458:5014.0004: report_id 1944628200 is invalid [ 98.307388][ T5922] kye 0003:0458:5014.0004: item 0 4 1 8 parsing failed [ 98.315355][ T5922] kye 0003:0458:5014.0004: parse failed [ 98.321043][ T5922] kye 0003:0458:5014.0004: probe with driver kye failed with error -22 [ 98.472830][ T5846] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.489130][ T5920] usb 5-1: USB disconnect, device number 4 [ 98.604483][ T5891] mos7840 3-1:0.0: required endpoints missing [ 98.625552][ T5891] usb 3-1: USB disconnect, device number 3 [ 98.648739][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.667769][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.679830][ T5846] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.696665][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.710819][ T5846] usb 2-1: config 0 descriptor?? [ 99.131586][ T5846] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 99.151113][ T5846] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input8 [ 99.271250][ T5846] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 99.361264][ T5922] usb 2-1: USB disconnect, device number 3 [ 99.595239][ T6481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.806510][ T6490] capability: warning: `syz.3.193' uses 32-bit capabilities (legacy support in use) [ 100.423705][ T5891] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.440419][ T6524] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 100.582650][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 100.593409][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.616332][ T5891] usb 2-1: config 4 has an invalid interface number: 202 but max is 0 [ 100.632468][ T5891] usb 2-1: config 4 has no interface number 0 [ 100.648897][ T5891] usb 2-1: config 4 interface 202 has no altsetting 0 [ 100.665297][ T5891] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=c2.5d [ 100.684505][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.703537][ T5891] usb 2-1: Product: syz [ 100.707816][ T5891] usb 2-1: Manufacturer: syz [ 100.722563][ T5891] usb 2-1: SerialNumber: syz [ 100.948706][ T5891] usb 2-1: USB disconnect, device number 4 [ 101.121826][ T6546] netlink: 'syz.3.215': attribute type 9 has an invalid length. [ 101.135766][ T6546] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.215'. [ 101.502601][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.538700][ T6566] capability: warning: `syz.3.223' uses deprecated v2 capabilities in a way that may be insecure [ 101.672833][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 101.698178][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.728975][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.739931][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.754322][ T5889] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 101.763591][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.778489][ T5889] usb 5-1: config 0 descriptor?? [ 101.869997][ T6579] Illegal XDP return value 3041393151 on prog (id 26) dev N/A, expect packet loss! [ 102.238563][ T5889] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0006/input/input9 [ 102.341938][ T5889] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0006/input/input10 [ 102.379492][ T5889] kye 0003:0458:5011.0006: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 102.592590][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.698750][ T5922] usb 5-1: USB disconnect, device number 5 [ 102.772545][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 102.789666][ T5891] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.789711][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 102.799000][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.819824][ T5891] usb 4-1: config 0 descriptor?? [ 102.885000][ T6617] hsr_slave_1 (unregistering): left promiscuous mode [ 103.032348][ T5891] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.483946][ T6637] : renamed from pim6reg1 [ 103.716258][ T6643] Bluetooth: MGMT ver 1.23 [ 104.045373][ T5891] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.097722][ T5891] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 104.151059][ T5891] asix 4-1:0.0: probe with driver asix failed with error -71 [ 104.202010][ T5891] usb 4-1: USB disconnect, device number 5 [ 105.002732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.510143][ T6688] dccp_xmit_packet: Payload too large (65475) for featneg. [ 106.923246][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.042557][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.092537][ T5889] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.100153][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 107.109107][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.120229][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.130034][ T5890] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.145133][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.154531][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.162677][ T5890] usb 4-1: Product: syz [ 107.166922][ T5890] usb 4-1: Manufacturer: syz [ 107.171556][ T5890] usb 4-1: SerialNumber: syz [ 107.213383][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 107.225033][ T5846] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 107.243384][ T5846] usb 5-1: config 0 has no interface number 0 [ 107.249553][ T5846] usb 5-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 107.261354][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.262429][ T5846] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 107.290603][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.292782][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.301518][ T5846] usb 5-1: Product: syz [ 107.319848][ T5846] usb 5-1: Manufacturer: syz [ 107.324764][ T5846] usb 5-1: SerialNumber: syz [ 107.329640][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.341008][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.364045][ T5846] usb 5-1: config 0 descriptor?? [ 107.370171][ T5889] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.373488][ T6709] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 107.395553][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.406090][ T5889] usb 1-1: config 0 descriptor?? [ 107.406172][ T5846] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 107.430212][ T5846] em28xx 5-1:0.132: Video interface 132 found: bulk [ 107.596999][ T5890] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 107.842897][ T5846] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 107.869953][ T5889] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 107.885469][ T5889] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 107.911084][ T5889] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.251890][ T5846] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 108.265140][ T5846] em28xx 5-1:0.132: board has no eeprom [ 108.422944][ T5890] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 108.488425][ T5890] usb 4-1: USB disconnect, device number 6 [ 108.522673][ T5846] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 108.530564][ T5846] em28xx 5-1:0.132: analog set to bulk mode. [ 108.546079][ T5922] em28xx 5-1:0.132: Registering V4L2 extension [ 108.557190][ T5846] usb 5-1: USB disconnect, device number 6 [ 108.564325][ T5846] em28xx 5-1:0.132: Disconnecting em28xx [ 108.781329][ T5922] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 108.792434][ T5922] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 108.799655][ T5922] em28xx 5-1:0.132: No AC97 audio processor [ 108.828574][ T5922] usb 5-1: Decoder not found [ 108.833787][ T5922] em28xx 5-1:0.132: failed to create media graph [ 108.840207][ T5922] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 108.857541][ T5922] em28xx 5-1:0.132: Remote control support is not available for this card. [ 108.871407][ T5846] em28xx 5-1:0.132: Closing input extension [ 108.902003][ T5846] em28xx 5-1:0.132: Freeing device [ 109.222177][ T6724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.679224][ T6734] macvlan1: entered promiscuous mode [ 109.691611][ T6733] macvlan1: left promiscuous mode [ 110.179035][ T5922] usb 1-1: USB disconnect, device number 4 [ 110.289318][ T6747] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.501055][ T6753] input: syz0 as /devices/virtual/input/input11 [ 110.637618][ T6757] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 111.231558][ T6772] Zero length message leads to an empty skb [ 112.382257][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 113.155064][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 113.205494][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 113.216365][ T6819] loop2: detected capacity change from 0 to 7 [ 113.233702][ T6819] Dev loop2: unable to read RDB block 7 [ 113.239714][ T6819] loop2: AHDI p1 p2 [ 113.241681][ T6813] ceph: No mds server is up or the cluster is laggy [ 113.244664][ T6819] loop2: partition table partially beyond EOD, truncated [ 113.253705][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 113.258113][ T6819] loop2: p1 start 1126384675 is beyond EOD, truncated [ 113.325832][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 113.767589][ T6836] input: syz0 as /devices/virtual/input/input12 [ 114.132971][ T5890] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.320568][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.332498][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.342185][ T5890] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.373247][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.402578][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.429032][ T6839] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.449787][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.494496][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 114.518882][ T5922] usb 3-1: config 0 has no interfaces? [ 114.524657][ T5922] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 114.545505][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.562339][ T5922] usb 3-1: config 0 descriptor?? [ 114.723331][ T5922] usb 4-1: USB disconnect, device number 7 [ 115.383035][ T5891] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 115.556312][ T5891] usb 1-1: not running at top speed; connect to a high speed hub [ 115.566672][ T5891] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.592478][ T5891] usb 1-1: config 1 interface 0 has no altsetting 0 [ 115.601628][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 115.611080][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.631385][ T5891] usb 1-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴믰ꮘ睢 [ 115.642546][ T5891] usb 1-1: Manufacturer: Ь [ 115.651637][ T5891] usb 1-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧ欍㜶ꢒ䡔駌࠭놶昄㳐笑㏉濋筞䲵呻萷橴烗际鑦␵ꏯ੊퓰稏췭⦛炈霢⇢摸 [ 115.832696][ T5920] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 115.971789][ T6860] kernel read not supported for file /  (pid: 6860 comm: syz.0.335) [ 115.992625][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 115.992645][ T29] audit: type=1800 audit(1732071850.505:80): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.335" name=2001 dev="mqueue" ino=12674 res=0 errno=0 [ 116.003278][ T5891] usbhid 1-1:1.0: can't add hid device: -71 [ 116.033093][ T5891] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 116.062042][ T5891] usb 1-1: USB disconnect, device number 5 [ 116.206462][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.217999][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.243208][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.272480][ T5920] usb 4-1: New USB device found, idVendor=045e, idProduct=83da, bcdDevice= 0.2c [ 116.281650][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.307383][ T5920] usb 4-1: config 0 descriptor?? [ 116.735218][ T5920] hid-generic 0003:045E:83DA.0008: unknown main item tag 0x0 [ 116.752540][ T5920] hid-generic 0003:045E:83DA.0008: unknown main item tag 0x0 [ 116.760239][ T5920] hid-generic 0003:045E:83DA.0008: unknown main item tag 0x0 [ 116.767866][ T5920] hid-generic 0003:045E:83DA.0008: unbalanced collection at end of report description [ 116.778029][ T5920] hid-generic 0003:045E:83DA.0008: probe with driver hid-generic failed with error -22 [ 116.798535][ T6874] delete_channel: no stack [ 116.969197][ T5920] usb 4-1: USB disconnect, device number 8 [ 117.058694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.067303][ T5922] usb 3-1: USB disconnect, device number 4 [ 117.122707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.131505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.140117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.148670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.157629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.166303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.175176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.183767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.702538][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.867706][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.908695][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.945206][ T5890] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.972510][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.001311][ T5890] usb 1-1: config 0 descriptor?? [ 118.437140][ T5890] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 118.483531][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input13 [ 118.591839][ T5890] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 118.665958][ T5890] usb 1-1: USB disconnect, device number 6 [ 118.755851][ T6916] input: syz0 as /devices/virtual/input/input14 [ 119.051916][ T6930] overlay: filesystem on ./bus not supported [ 119.612611][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.802635][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 119.816214][ T5920] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 119.832063][ T5920] usb 3-1: config 0 has no interface number 0 [ 119.844456][ T5920] usb 3-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 119.860424][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.891546][ T5920] usb 3-1: Product: syz [ 119.900650][ T5920] usb 3-1: Manufacturer: syz [ 119.916496][ T5920] usb 3-1: SerialNumber: syz [ 119.967644][ T5920] usb 3-1: config 0 descriptor?? [ 119.985381][ T5920] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 120.046570][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.059432][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.073748][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.094352][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.104467][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.117373][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.244618][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.366654][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.580381][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.661894][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.691818][ T6977] Process accounting resumed [ 120.818430][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 120.920367][ T81] bridge_slave_1: left allmulticast mode [ 120.933086][ T81] bridge_slave_1: left promiscuous mode [ 120.941200][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.974182][ T81] bridge_slave_0: left allmulticast mode [ 120.980950][ T81] bridge_slave_0: left promiscuous mode [ 120.988111][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.167663][ T6994] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 121.209263][ T5920] gspca_sunplus: reg_w_riv err -71 [ 121.214813][ T5920] sunplus 3-1:0.250: probe with driver sunplus failed with error -71 [ 121.246028][ T5920] usb 3-1: USB disconnect, device number 5 [ 121.972522][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.996158][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.025538][ T81] bond0 (unregistering): Released all slaves [ 122.170716][ T5148] Bluetooth: hci3: command tx timeout [ 122.286343][ T7026] 9pnet: p9_errstr2errno: server reported unknown error @hQ$I6}hEҌi) [ 122.413973][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.421565][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.442059][ T6958] bridge_slave_0: entered allmulticast mode [ 122.469899][ T6958] bridge_slave_0: entered promiscuous mode [ 122.479620][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.487771][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.495702][ T6958] bridge_slave_1: entered allmulticast mode [ 122.508889][ T6958] bridge_slave_1: entered promiscuous mode [ 122.574452][ T7046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.695877][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.697561][ T7051] usb usb9: usbfs: process 7051 (syz.0.411) did not claim interface 0 before use [ 122.745724][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.806381][ T81] hsr_slave_0: left promiscuous mode [ 122.822966][ T81] hsr_slave_1: left promiscuous mode [ 122.833957][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.841644][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.874165][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.883501][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.910296][ T29] audit: type=1326 audit(1732071857.425:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.3.414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb04d7e759 code=0x0 [ 122.924269][ T81] veth1_macvtap: left promiscuous mode [ 122.949821][ T81] veth0_macvtap: left promiscuous mode [ 122.955977][ T81] veth1_vlan: left promiscuous mode [ 122.963415][ T81] veth0_vlan: left promiscuous mode [ 124.214776][ T5148] Bluetooth: hci3: command tx timeout [ 124.488394][ T81] team0 (unregistering): Port device team_slave_1 removed [ 124.545331][ T81] team0 (unregistering): Port device team_slave_0 removed [ 124.698816][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.896202][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.919389][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.930773][ T5891] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.941083][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.951737][ T5891] usb 5-1: config 0 descriptor?? [ 125.268895][ T6958] team0: Port device team_slave_0 added [ 125.288990][ T6958] team0: Port device team_slave_1 added [ 125.333621][ T29] audit: type=1326 audit(1732071859.845:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.382451][ T29] audit: type=1326 audit(1732071859.845:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.442457][ T29] audit: type=1326 audit(1732071859.855:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.499259][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.537720][ T29] audit: type=1326 audit(1732071859.855:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.539416][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.580590][ T29] audit: type=1326 audit(1732071859.855:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.607736][ T29] audit: type=1326 audit(1732071859.855:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.628598][ T5891] usb 5-1: language id specifier not provided by device, defaulting to English [ 125.662639][ T29] audit: type=1326 audit(1732071859.855:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.684630][ T29] audit: type=1326 audit(1732071859.855:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.707708][ T29] audit: type=1326 audit(1732071859.855:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7121 comm="syz.0.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 125.728030][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.822888][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.822912][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.822935][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.079702][ T6958] hsr_slave_0: entered promiscuous mode [ 126.104847][ T6958] hsr_slave_1: entered promiscuous mode [ 126.206380][ T5891] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 126.216073][ T5891] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 126.232532][ T5891] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 126.256363][ T5891] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 126.277054][ T5891] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 126.289542][ T5891] usb 5-1: USB disconnect, device number 7 [ 126.306903][ T5148] Bluetooth: hci3: command tx timeout [ 126.583465][ T6958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.600685][ T6958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.625135][ T6958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.634271][ T7164] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.652170][ T6958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.835627][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.855940][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.889633][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.896917][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.932422][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.939674][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.308792][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.442739][ T3070] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 127.492649][ T5891] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.516544][ T6958] veth0_vlan: entered promiscuous mode [ 127.531941][ T6958] veth1_vlan: entered promiscuous mode [ 127.560825][ T6958] veth0_macvtap: entered promiscuous mode [ 127.571358][ T6958] veth1_macvtap: entered promiscuous mode [ 127.590722][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.603511][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.619403][ T3070] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 127.629209][ T3070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.637848][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.642579][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 127.652416][ T3070] usb 5-1: Product: syz [ 127.657857][ T3070] usb 5-1: Manufacturer: syz [ 127.658357][ T5891] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 127.668585][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.673762][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.682303][ T3070] usb 5-1: SerialNumber: syz [ 127.696346][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.698798][ T5891] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.713137][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.715349][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.734984][ T5891] usb 1-1: Product: syz [ 127.739358][ T5891] usb 1-1: Manufacturer: syz [ 127.748658][ T5891] usb 1-1: SerialNumber: syz [ 127.751681][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.771946][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.785900][ T3070] usb 5-1: config 0 descriptor?? [ 127.792637][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.807287][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.821469][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.834021][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.845379][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.862542][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.879590][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.890373][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.901303][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.912024][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.924992][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.946180][ T6958] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.956019][ T6958] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.966582][ T6958] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.976838][ T6958] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.014476][ T3070] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 128.033715][ T3070] usb 5-1: USB disconnect, device number 8 [ 128.145684][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.154441][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.182226][ T5891] usb 1-1: 0:2 : does not exist [ 128.204673][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.223058][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.373274][ T5148] Bluetooth: hci3: command tx timeout [ 128.382721][ T8] IPVS: starting estimator thread 0... [ 128.402598][ T7216] tipc: Started in network mode [ 128.407706][ T7216] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.429987][ T7216] tipc: Enabled bearer , priority 10 [ 128.472825][ T7219] IPVS: using max 25 ests per chain, 60000 per kthread [ 128.532891][ T7222] loop7: detected capacity change from 1036 to 0 [ 128.542508][ T3070] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.692576][ T3070] usb 5-1: Using ep0 maxpacket: 16 [ 128.701772][ T3070] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 128.711589][ T3070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.720288][ T3070] usb 5-1: Product: syz [ 128.726936][ T3070] usb 5-1: Manufacturer: syz [ 128.731695][ T3070] usb 5-1: SerialNumber: syz [ 128.739832][ T3070] usb 5-1: config 0 descriptor?? [ 129.017895][ T5891] usb 1-1: USB disconnect, device number 7 [ 129.152635][ T3070] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 129.185424][ T3070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.203376][ T3070] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 129.218062][ T3070] usb 5-1: media controller created [ 129.250644][ T3070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.354221][ T3070] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 129.372513][ T3070] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 129.418548][ T3070] tipc: Node number set to 2886997162 [ 129.585055][ T5922] usb 5-1: USB disconnect, device number 9 [ 129.609704][ T5922] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 129.772516][ T3070] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.946525][ T3070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.967595][ T3070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.980005][ T3070] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.995650][ T3070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.009628][ T3070] usb 6-1: config 0 descriptor?? [ 130.259996][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 130.290226][ T3444] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.311383][ T7286] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.440003][ T3070] hid (null): bogus close delimiter [ 130.589425][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 130.700107][ T5889] kernel write not supported for file /snd/seq (pid: 5889 comm: kworker/0:4) [ 130.859681][ T3070] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 130.868671][ T3070] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 130.878986][ T3070] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 130.894195][ T3070] usb 6-1: USB disconnect, device number 2 [ 130.962495][ T5920] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.112580][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 131.119481][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 131.133696][ T5920] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 131.143221][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.151282][ T5920] usb 4-1: Product: syz [ 131.155739][ T5920] usb 4-1: Manufacturer: syz [ 131.160369][ T5920] usb 4-1: SerialNumber: syz [ 131.166642][ T5920] usb 4-1: config 0 descriptor?? [ 131.476754][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.522'. [ 131.581268][ T5920] ath6kl: Failed to read usb control message: -71 [ 131.589737][ T5920] ath6kl: Unable to read the bmi data from the device: -71 [ 131.597814][ T5920] ath6kl: Unable to recv target info: -71 [ 131.612340][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 131.630960][ T5920] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 131.653975][ T7330] vivid-007: disconnect [ 131.657222][ T5920] usb 4-1: USB disconnect, device number 9 [ 131.659456][ T7329] vivid-007: reconnect [ 131.992587][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.033401][ T7343] process 'syz.5.530' launched './file0' with NULL argv: empty string added [ 132.157219][ T8] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.169577][ T8] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.185569][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.192294][ T8] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 132.221804][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.233439][ T8] usb 3-1: config 0 descriptor?? [ 132.294657][ T5148] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 132.294954][ T5856] Bluetooth: hci5: command 0xfc11 tx timeout [ 132.669737][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 132.692907][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 132.702986][ T8] usb 3-1: USB disconnect, device number 6 [ 133.353792][ T8] libceph: connect (1)[c::]:6789 error -101 [ 133.359922][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 133.392584][ T7407] ceph: No mds server is up or the cluster is laggy [ 133.580904][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.588241][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.716521][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 133.716542][ T29] audit: type=1400 audit(1732071868.235:98): lsm=SMACK fn=smack_post_notification action=denied subject="w" object="_" requested=w pid=7423 comm="syz.3.562" [ 134.022562][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.176098][ T5889] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 134.187009][ T5889] usb 5-1: config 0 has no interface number 0 [ 134.213972][ T5889] usb 5-1: config 0 interface 16 has no altsetting 0 [ 134.234063][ T5889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 134.252509][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.260575][ T5889] usb 5-1: Product: syz [ 134.282680][ T5889] usb 5-1: Manufacturer: syz [ 134.287365][ T5889] usb 5-1: SerialNumber: syz [ 134.298235][ T5889] usb 5-1: config 0 descriptor?? [ 134.534141][ T5889] usbtest 5-1:0.16: couldn't get endpoints, -71 [ 134.540519][ T5889] usbtest 5-1:0.16: probe with driver usbtest failed with error -71 [ 134.564361][ T5889] usb 5-1: USB disconnect, device number 10 [ 134.980043][ T7461] warning: `syz.5.576' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.003596][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.164407][ T5889] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 135.183086][ T5889] usb 5-1: config 0 has no interface number 0 [ 135.204343][ T5889] usb 5-1: config 0 interface 16 has no altsetting 0 [ 135.228768][ T5889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 135.233399][ T7467] netlink: 'syz.5.579': attribute type 9 has an invalid length. [ 135.255276][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.258177][ T7467] netlink: 134660 bytes leftover after parsing attributes in process `syz.5.579'. [ 135.282734][ T5889] usb 5-1: Product: syz [ 135.286990][ T5889] usb 5-1: Manufacturer: syz [ 135.291631][ T5889] usb 5-1: SerialNumber: syz [ 135.314929][ T5889] usb 5-1: config 0 descriptor?? [ 135.405735][ T7473] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.606376][ T7484] mmap: syz.2.586 (7484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.879860][ T7497] ip6gretap0: entered promiscuous mode [ 135.895108][ T7497] ip6gretap0: left promiscuous mode [ 135.933089][ T5889] usbtest 5-1:0.16: Linux gadget zero [ 135.941340][ T5889] usbtest 5-1:0.16: high-speed {control in/out int-out} tests (+alt) [ 136.058366][ T7505] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 136.105328][ T7505] team0: Port device netdevsim0 added [ 136.126368][ T7505] netlink: 'syz.3.594': attribute type 10 has an invalid length. [ 136.152119][ T5889] usb 5-1: USB disconnect, device number 11 [ 136.163932][ T7505] team0: Port device netdevsim0 removed [ 136.171985][ T7505] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.365485][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.569699][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.592465][ T5920] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 136.601570][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.624358][ T5920] usb 6-1: config 0 descriptor?? [ 136.626637][ T5889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.631426][ T5920] option 6-1:0.0: GSM modem (1-port) converter detected [ 136.692627][ T5891] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.805183][ T5889] usb 4-1: config 0 has no interfaces? [ 136.811660][ T5889] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 136.824068][ T5889] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 136.832326][ T5889] usb 4-1: Manufacturer: syz [ 136.839015][ T5889] usb 4-1: config 0 descriptor?? [ 136.860730][ T5891] usb 3-1: config 0 has no interfaces? [ 136.860782][ T5920] usb 6-1: USB disconnect, device number 3 [ 136.873307][ T5920] option 6-1:0.0: device disconnected [ 136.879708][ T5891] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 136.892552][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.900640][ T5891] usb 3-1: Product: syz [ 136.905416][ T5891] usb 3-1: Manufacturer: syz [ 136.910053][ T5891] usb 3-1: SerialNumber: syz [ 136.916169][ T5891] usb 3-1: config 0 descriptor?? [ 136.972620][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.072553][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.122508][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 137.131279][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 137.132133][ T5920] usb 3-1: USB disconnect, device number 7 [ 137.148180][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.162126][ T5890] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.171847][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.180014][ T5890] usb 5-1: Product: syz [ 137.184303][ T5890] usb 5-1: Manufacturer: syz [ 137.188897][ T5890] usb 5-1: SerialNumber: syz [ 137.195546][ T5890] usb 5-1: config 0 descriptor?? [ 137.204295][ T5890] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.214127][ T5890] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 137.232585][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 137.239477][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 137.250680][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 137.261113][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 137.270562][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.280194][ T8] usb 1-1: config 0 descriptor?? [ 137.500751][ T7532] binder: 7531:7532 ioctl c0306201 200001c0 returned -22 [ 137.701515][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.712301][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.730991][ T8] hid (null): bogus close delimiter [ 137.740776][ T8] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 137.752129][ T8] hid-generic 0003:0158:0100.000C: unexpected long global item [ 137.761284][ T8] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 137.811042][ T5890] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 137.818342][ T5890] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 137.938788][ T5920] usb 1-1: USB disconnect, device number 8 [ 137.972756][ T3070] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.027653][ T5890] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 138.035005][ T5890] em28xx 5-1:0.0: No AC97 audio processor [ 138.043877][ T5890] usb 5-1: USB disconnect, device number 12 [ 138.050463][ T5890] em28xx 5-1:0.0: Disconnecting em28xx [ 138.059224][ T5890] em28xx 5-1:0.0: Freeing device [ 138.132662][ T3070] usb 3-1: Using ep0 maxpacket: 8 [ 138.151892][ T3070] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 138.164452][ T3070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.173265][ T3070] usb 3-1: Product: syz [ 138.177443][ T3070] usb 3-1: Manufacturer: syz [ 138.182037][ T3070] usb 3-1: SerialNumber: syz [ 138.191019][ T3070] usb 3-1: config 0 descriptor?? [ 138.199651][ T3070] gspca_main: se401-2.14.0 probing 047d:5003 [ 138.642691][ T3070] gspca_se401: Too many frame sizes [ 138.681885][ T7552] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 138.698895][ T7552] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 138.848923][ T3070] usb 3-1: USB disconnect, device number 8 [ 138.912637][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.098188][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.110492][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.123834][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.133893][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.146998][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.156270][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.166563][ T8] usb 5-1: config 0 descriptor?? [ 139.369202][ T5889] usb 4-1: USB disconnect, device number 10 [ 139.487760][ T7562] ======================================================= [ 139.487760][ T7562] WARNING: The mand mount option has been deprecated and [ 139.487760][ T7562] and is ignored by this kernel. Remove the mand [ 139.487760][ T7562] option from the mount to silence this warning. [ 139.487760][ T7562] ======================================================= [ 139.609937][ T8] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 139.621624][ T7567] kvm: kvm [7564]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x20000100 [ 139.630609][ T8] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 139.779939][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.624'. [ 140.001161][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.194632][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.242948][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.261656][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.276185][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.289837][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.301640][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.341148][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.404921][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.490266][ T5890] usb 5-1: USB disconnect, device number 13 [ 140.505748][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 140.516987][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.721743][ T12] bridge_slave_1: left allmulticast mode [ 140.749253][ T12] bridge_slave_1: left promiscuous mode [ 140.755889][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.760170][ T7612] input: syz1 as /devices/virtual/input/input19 [ 140.784028][ T12] bridge_slave_0: left allmulticast mode [ 140.789983][ T12] bridge_slave_0: left promiscuous mode [ 140.797781][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.839867][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.858678][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.880033][ T12] bond0 (unregistering): Released all slaves [ 141.963736][ T7590] chnl_net:caif_netlink_parms(): no params data found [ 142.162940][ T3070] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.355995][ T3070] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.372304][ T3070] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.386682][ T3070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.395348][ T3070] usb 3-1: SerialNumber: syz [ 142.414247][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.422060][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.436643][ T7590] bridge_slave_0: entered allmulticast mode [ 142.446679][ T7590] bridge_slave_0: entered promiscuous mode [ 142.453144][ T5856] Bluetooth: hci0: command tx timeout [ 142.464639][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.471813][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.486359][ T7590] bridge_slave_1: entered allmulticast mode [ 142.494398][ T7590] bridge_slave_1: entered promiscuous mode [ 142.723938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.740343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.764878][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.785464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.850447][ T12] veth1_macvtap: left promiscuous mode [ 142.872533][ T12] veth0_macvtap: left promiscuous mode [ 142.881827][ T12] veth1_vlan: left promiscuous mode [ 142.898411][ T12] veth0_vlan: left promiscuous mode [ 143.243331][ T3070] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 143.255236][ T3070] usb 3-1: USB disconnect, device number 9 [ 143.719928][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.791046][ T12] team0 (unregistering): Port device team_slave_0 removed [ 144.538074][ T5856] Bluetooth: hci0: command tx timeout [ 144.695676][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.708685][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.895011][ T7590] team0: Port device team_slave_0 added [ 144.910893][ T7590] team0: Port device team_slave_1 added [ 145.017287][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.059535][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.086142][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.100620][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.107730][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.162580][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.333569][ T7590] hsr_slave_0: entered promiscuous mode [ 145.357192][ T7590] hsr_slave_1: entered promiscuous mode [ 145.382463][ T7590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.390136][ T7590] Cannot create hsr debugfs directory [ 146.096858][ T7735] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.130615][ T7737] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 146.295447][ T7735] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.424482][ T7735] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.451416][ T7590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.462578][ T7590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.486856][ T7590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.521197][ T7590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.600044][ T7735] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.615703][ T5856] Bluetooth: hci0: command tx timeout [ 146.915850][ T7735] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.983473][ T7735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.008983][ T7735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.055388][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.102135][ T7735] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.149885][ T7590] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.218512][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.225742][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.271056][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.278347][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.658653][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.110476][ T7590] veth0_vlan: entered promiscuous mode [ 148.125293][ T7590] veth1_vlan: entered promiscuous mode [ 148.182161][ T7590] veth0_macvtap: entered promiscuous mode [ 148.198526][ T7590] veth1_macvtap: entered promiscuous mode [ 148.217728][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.229291][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.240141][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.251112][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.261399][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.272621][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.290256][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.301616][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.316895][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.340371][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.351446][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.361619][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.373590][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.383529][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.402415][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.414211][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.425583][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.438031][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.459695][ T7590] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.468700][ T7590] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.491452][ T7590] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.506594][ T7590] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.637092][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.648421][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.692984][ T5856] Bluetooth: hci0: command tx timeout [ 148.824047][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.832857][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.282708][ T5890] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.452637][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 149.464088][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.493191][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.540079][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.552598][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.561073][ T5890] usb 5-1: Product: syz [ 149.592872][ T5890] usb 5-1: Manufacturer: syz [ 149.597560][ T5890] usb 5-1: SerialNumber: syz [ 149.597791][ T5922] kernel read not supported for file /usbmon0 (pid: 5922 comm: kworker/1:8) [ 149.710224][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.727'. [ 149.762716][ T7860] b: renamed from lo (while UP) [ 149.780208][ T7860] b: entered allmulticast mode [ 149.848976][ T7862] netlink: 'syz.2.729': attribute type 9 has an invalid length. [ 149.862714][ T7862] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.729'. [ 149.932505][ T5922] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.114082][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 150.122681][ T5922] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 150.131220][ T5922] usb 1-1: config 0 has no interface number 0 [ 150.138933][ T5922] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 150.167415][ T5922] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 150.220255][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.242938][ T5922] usb 1-1: Product: syz [ 150.247200][ T5922] usb 1-1: Manufacturer: syz [ 150.251829][ T5922] usb 1-1: SerialNumber: syz [ 150.286623][ T5922] usb 1-1: config 0 descriptor?? [ 150.298329][ T7859] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.299645][ T7876] loop5: detected capacity change from 0 to 9 [ 150.315714][ T5922] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 150.349340][ T5922] em28xx 1-1:0.132: Video interface 132 found: bulk [ 150.359971][ T7876] buffer_io_error: 186 callbacks suppressed [ 150.360023][ T7876] Buffer I/O error on dev loop5, logical block 1, async page read [ 150.402131][ T7876] Dev loop5: unable to read RDB block 8 [ 150.414926][ T7880] Buffer I/O error on dev loop5, logical block 1, async page read [ 150.415268][ T7876] loop5: unable to read partition table [ 150.431048][ T7879] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 150.448359][ T5890] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 150.456683][ T7880] Buffer I/O error on dev loop5, logical block 1, async page read [ 150.469744][ T7876] loop5: partition table beyond EOD, truncated [ 150.482858][ T5890] cdc_ncm 5-1:1.0: bind() failure [ 150.490700][ T5890] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 150.497546][ T7876] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 150.497546][ T7876] ) failed (rc=-5) [ 150.546877][ T5890] cdc_ncm 5-1:1.1: bind() failure [ 150.561786][ T5890] usb 5-1: USB disconnect, device number 14 [ 150.576983][ T7883] overlayfs: failed to clone upperpath [ 150.744152][ T5922] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 150.992510][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.174845][ T5890] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.208656][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.226263][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.242594][ T5890] usb 3-1: Product: syz [ 151.248904][ T5890] usb 3-1: Manufacturer: syz [ 151.254081][ T5890] usb 3-1: SerialNumber: syz [ 151.359702][ T5148] Bluetooth: hci5: sending frame failed (-49) [ 151.368428][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 151.389555][ T5922] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 151.398591][ T5922] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 151.410807][ T5922] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 151.433139][ T7920] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 151.452636][ T5920] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 151.486612][ T5922] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 151.510838][ T5922] em28xx 1-1:0.132: analog set to bulk mode. [ 151.529618][ T5920] em28xx 1-1:0.132: Registering V4L2 extension [ 151.547668][ T5922] usb 1-1: USB disconnect, device number 9 [ 151.571340][ T5922] em28xx 1-1:0.132: Disconnecting em28xx [ 151.575467][ T7925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input21 [ 151.618499][ T7928] ALSA: mixer_oss: invalid OSS volume '0' [ 151.625143][ T7928] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 151.632065][ T7928] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 151.639465][ T7928] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 151.649559][ T7928] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 151.683277][ T7928] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 151.701541][ T7928] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 151.761689][ T5920] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 151.771054][ T5920] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 151.789775][ T5920] em28xx 1-1:0.132: No AC97 audio processor [ 151.812096][ T5920] usb 1-1: Decoder not found [ 151.821075][ T5920] em28xx 1-1:0.132: failed to create media graph [ 151.835709][ T5920] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 151.847388][ T5920] em28xx 1-1:0.132: Remote control support is not available for this card. [ 151.857529][ T5922] em28xx 1-1:0.132: Closing input extension [ 151.871797][ T5922] em28xx 1-1:0.132: Freeing device [ 151.911505][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 152.053340][ T5889] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 152.213244][ T5922] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 152.252884][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 152.271690][ T5889] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 152.280833][ T5889] usb 5-1: config 0 has no interface number 0 [ 152.287315][ T5889] usb 5-1: config 0 interface 12 has no altsetting 0 [ 152.297461][ T5890] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.304158][ T5890] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 152.310243][ T5889] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 152.319511][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.327939][ T5889] usb 5-1: Product: syz [ 152.332446][ T5889] usb 5-1: Manufacturer: syz [ 152.337141][ T5889] usb 5-1: SerialNumber: syz [ 152.339567][ T7952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.344457][ T5889] usb 5-1: config 0 descriptor?? [ 152.367844][ T5889] usb 5-1: can't set config #0, error -71 [ 152.376802][ T5889] usb 5-1: USB disconnect, device number 15 [ 152.377875][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 152.520720][ T5890] cdc_ncm 3-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 152.549051][ T5890] usb 3-1: USB disconnect, device number 10 [ 152.560198][ T5890] cdc_ncm 3-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 152.873634][ T7980] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 152.881478][ T7980] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 152.892281][ T7980] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 152.900202][ T7980] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 153.282547][ T5889] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 153.444507][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 153.455392][ T5889] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.469670][ T5889] usb 5-1: config 179 has no interface number 0 [ 153.483238][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.508208][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.528869][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.540684][ T5889] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.575754][ T5889] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.593447][ T5889] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.603120][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.692267][ T7988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.948683][ T5889] usb 5-1: USB disconnect, device number 16 [ 153.948757][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.948813][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.173859][ T8031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.188415][ T8031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 154.732644][ T969] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.899727][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.911797][ T969] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 154.921627][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.936713][ T969] usb 3-1: config 0 descriptor?? [ 155.377493][ T969] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 155.400263][ T969] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input22 [ 155.406822][ T1136] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.575500][ T969] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 155.606421][ T1136] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.829723][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.852292][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.859330][ T5920] usb 3-1: USB disconnect, device number 11 [ 155.872750][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.875708][ T1136] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.912029][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.932260][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.939884][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.100296][ T1136] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.253212][ T8079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.262762][ T8079] bond0: (slave bond1): Enslaving as an active interface with an up link [ 156.397069][ T8070] chnl_net:caif_netlink_parms(): no params data found [ 156.425952][ T1136] bridge_slave_1: left allmulticast mode [ 156.431678][ T1136] bridge_slave_1: left promiscuous mode [ 156.444746][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.461112][ T1136] bridge_slave_0: left allmulticast mode [ 156.500102][ T1136] bridge_slave_0: left promiscuous mode [ 156.506756][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.562180][ T8096] block nbd2: shutting down sockets [ 157.705003][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.730774][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.765566][ T1136] bond0 (unregistering): Released all slaves [ 158.053270][ T5856] Bluetooth: hci2: command tx timeout [ 158.240291][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.256570][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.276931][ T8070] bridge_slave_0: entered allmulticast mode [ 158.298884][ T8070] bridge_slave_0: entered promiscuous mode [ 158.360478][ T1136] hsr_slave_0: left promiscuous mode [ 158.371396][ T1136] hsr_slave_1: left promiscuous mode [ 158.380364][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.390645][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.409002][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.423888][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.429279][ T29] audit: type=1326 audit(1732071892.945:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8162 comm="syz.0.848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x0 [ 158.533239][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 158.543637][ T1136] veth1_macvtap: left promiscuous mode [ 158.549254][ T1136] veth0_macvtap: left promiscuous mode [ 158.554978][ T1136] veth1_vlan: left promiscuous mode [ 158.560333][ T1136] veth0_vlan: left promiscuous mode [ 158.722747][ T969] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.877120][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 158.922732][ T969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 158.936566][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 158.973285][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 158.993304][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 159.022836][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 159.046702][ T969] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 159.056652][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.066385][ T969] usb 3-1: Product: syz [ 159.070627][ T969] usb 3-1: Manufacturer: syz [ 159.092208][ T969] usb 3-1: SerialNumber: syz [ 159.134193][ T969] usb 3-1: config 0 descriptor?? [ 159.559112][ T969] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 159.571266][ T969] input input23: Device does not respond to id packet M [ 159.580516][ T969] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 159.593693][ T969] input input23: Device does not respond to id packet P [ 159.615056][ T969] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 159.621529][ T969] input input23: Device does not respond to id packet B [ 159.643405][ T969] input input23: Device does not respond to id packet N [ 159.863637][ T969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 159.871189][ T969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 159.891868][ T969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 159.900252][ T969] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 159.911818][ T969] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 159.934632][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 159.950799][ T969] usb 3-1: USB disconnect, device number 12 [ 160.057821][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 160.136059][ T5856] Bluetooth: hci2: command tx timeout [ 160.845593][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.853315][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.860745][ T8070] bridge_slave_1: entered allmulticast mode [ 160.869060][ T8070] bridge_slave_1: entered promiscuous mode [ 160.881219][ T8169] pim6reg: entered allmulticast mode [ 160.898595][ T8169] pim6reg: left allmulticast mode [ 161.145042][ T8188] team_slave_0: entered promiscuous mode [ 161.151198][ T8188] team_slave_1: entered promiscuous mode [ 161.182565][ T8188] macvlan2: entered promiscuous mode [ 161.187942][ T8188] team0: entered promiscuous mode [ 161.214159][ T8188] macvlan2: entered allmulticast mode [ 161.226771][ T8188] team0: entered allmulticast mode [ 161.237725][ T8188] team_slave_0: entered allmulticast mode [ 161.248192][ T8188] team_slave_1: entered allmulticast mode [ 161.258170][ T8188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.275307][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.318540][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.376471][ T8191] macvlan3: entered promiscuous mode [ 161.403582][ T8191] macvlan3: entered allmulticast mode [ 161.550951][ T8070] team0: Port device team_slave_0 added [ 161.600418][ T8070] team0: Port device team_slave_1 added [ 161.895385][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.913985][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.972385][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.053016][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.060040][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.106023][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.142759][ T969] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.213062][ T5856] Bluetooth: hci2: command tx timeout [ 162.229439][ T8070] hsr_slave_0: entered promiscuous mode [ 162.260168][ T8070] hsr_slave_1: entered promiscuous mode [ 162.266619][ T8070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.306664][ T8070] Cannot create hsr debugfs directory [ 162.332606][ T969] usb 6-1: Using ep0 maxpacket: 16 [ 162.358628][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.389829][ T969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.430376][ T969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.460049][ T969] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.471934][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.526548][ T969] usb 6-1: config 0 descriptor?? [ 162.843168][ T8070] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 162.853887][ T8070] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 162.864968][ T8070] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 162.876773][ T8070] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 162.966723][ T969] HID 045e:07da: Invalid code 65791 type 1 [ 162.988908][ T969] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input24 [ 163.033125][ T969] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 163.070554][ T8070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.118793][ T8070] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.145414][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.152627][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.191527][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.198791][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.207625][ T969] usb 6-1: USB disconnect, device number 4 [ 163.713620][ T8070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.930744][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.944159][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 164.108270][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.231920][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.293475][ T5856] Bluetooth: hci2: command tx timeout [ 164.394895][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.469858][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.484117][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.493542][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.512214][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.530430][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.541344][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.674432][ T8070] veth0_vlan: entered promiscuous mode [ 164.692543][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.709403][ T8070] veth1_vlan: entered promiscuous mode [ 165.047128][ T12] bridge_slave_1: left allmulticast mode [ 165.055094][ T12] bridge_slave_1: left promiscuous mode [ 165.060887][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.115373][ T12] bridge_slave_0: left allmulticast mode [ 165.121673][ T12] bridge_slave_0: left promiscuous mode [ 165.127716][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.732586][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.808459][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.819758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.830778][ T12] bond0 (unregistering): Released all slaves [ 165.851108][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.899'. [ 165.876521][ T8300] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.885608][ T8300] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.894097][ T8300] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.902301][ T8300] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.914108][ T8300] vxlan0: entered promiscuous mode [ 165.943459][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 165.979158][ T8070] veth0_macvtap: entered promiscuous mode [ 166.026369][ T12] tipc: Disabling bearer [ 166.039650][ T12] tipc: Left network mode [ 166.048209][ T8070] veth1_macvtap: entered promiscuous mode [ 166.272222][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.280994][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.290235][ T8268] bridge_slave_0: entered allmulticast mode [ 166.307352][ T8268] bridge_slave_0: entered promiscuous mode [ 166.357898][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.359581][ T8330] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 166.369093][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.385776][ T8330] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 166.388231][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.407800][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.418238][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.434773][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.445221][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.456458][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.468588][ T8070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.561821][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.600322][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.611936][ T8268] bridge_slave_1: entered allmulticast mode [ 166.620626][ T8268] bridge_slave_1: entered promiscuous mode [ 166.622712][ T5148] Bluetooth: hci1: command tx timeout [ 166.763386][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.786488][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.802229][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.814674][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.826614][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.851786][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.871152][ T8070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.881801][ T8070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.900196][ T8070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.911722][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.925659][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.969572][ T12] hsr_slave_0: left promiscuous mode [ 166.978342][ T12] hsr_slave_1: left promiscuous mode [ 166.987117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.995045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.003836][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.013454][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.050451][ T12] veth1_macvtap: left promiscuous mode [ 167.070786][ T12] veth0_macvtap: left promiscuous mode [ 167.083597][ T12] veth1_vlan: left promiscuous mode [ 167.095869][ T12] veth0_vlan: left promiscuous mode [ 167.758879][ T8368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.866411][ T8370] netlink: 'syz.5.924': attribute type 9 has an invalid length. [ 167.874818][ T8370] netlink: 134660 bytes leftover after parsing attributes in process `syz.5.924'. [ 168.206033][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.313371][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.693069][ T5148] Bluetooth: hci1: command tx timeout [ 169.314485][ T8070] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.342517][ T8070] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.351290][ T8070] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.360131][ T8070] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.407265][ T8268] team0: Port device team_slave_0 added [ 169.418626][ T8268] team0: Port device team_slave_1 added [ 169.633208][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.653101][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.734371][ T8268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.771570][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.785372][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.812691][ T8268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.890681][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.906599][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.923377][ T8268] hsr_slave_0: entered promiscuous mode [ 169.930293][ T8268] hsr_slave_1: entered promiscuous mode [ 169.940470][ T8268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.953542][ T8268] Cannot create hsr debugfs directory [ 169.990014][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.002051][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.002499][ T5920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 170.050941][ T12] IPVS: stop unused estimator thread 0... [ 170.162585][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 170.173915][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 170.183341][ T3070] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 170.189976][ T8268] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 170.194996][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.209214][ T8268] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 170.222452][ T5920] usb 1-1: Product: syz [ 170.226949][ T5920] usb 1-1: Manufacturer: syz [ 170.237155][ T5920] usb 1-1: SerialNumber: syz [ 170.243802][ T8268] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 170.255430][ T8268] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 170.264890][ T5920] usb 1-1: config 0 descriptor?? [ 170.283265][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 170.342548][ T3070] usb 6-1: Using ep0 maxpacket: 8 [ 170.350966][ T3070] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 170.359778][ T3070] usb 6-1: config 0 has no interface number 0 [ 170.370674][ T3070] usb 6-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice= 1.b6 [ 170.386071][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.392994][ T3070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.401093][ T3070] usb 6-1: Product: syz [ 170.405842][ T3070] usb 6-1: Manufacturer: syz [ 170.413357][ T3070] usb 6-1: SerialNumber: syz [ 170.420812][ T3070] usb 6-1: config 0 descriptor?? [ 170.431400][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.450799][ T3070] gspca_main: spca501-2.14.0 probing 0506:00df [ 170.461632][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.468900][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.481745][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.489027][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.773129][ T5148] Bluetooth: hci1: command tx timeout [ 170.983227][ T3070] gspca_spca501: reg write: error -110 [ 170.992045][ T8268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.002759][ T3070] spca501 6-1:0.96: Reg write failed for 0x00,0xaa,0x00 [ 171.021808][ T3070] spca501 6-1:0.96: probe with driver spca501 failed with error -22 [ 171.045070][ T3070] usb 6-1: USB disconnect, device number 5 [ 171.338738][ T8268] veth0_vlan: entered promiscuous mode [ 171.353237][ T8268] veth1_vlan: entered promiscuous mode [ 171.384866][ T8268] veth0_macvtap: entered promiscuous mode [ 171.402718][ T8268] veth1_macvtap: entered promiscuous mode [ 171.422510][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.433307][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.443714][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.454498][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.466072][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.478205][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.492238][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.505835][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.512727][ T5920] gspca_vc032x: reg_w err -71 [ 171.517864][ T8268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.522585][ T5920] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 171.539369][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.549105][ T5920] usb 1-1: USB disconnect, device number 10 [ 171.582515][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.595550][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.606307][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.631147][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.652631][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.667452][ T8268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.691153][ T8268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.719921][ T8268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.755119][ T8268] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.775611][ T8268] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.785504][ T8268] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.794443][ T8268] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.941014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.970493][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.021663][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.041050][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.261921][ T29] audit: type=1400 audit(1732071906.775:100): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=8446 comm="syz.7.949" name="map_files" dev="proc" ino=22787 [ 172.395631][ T8457] binder_alloc: binder_alloc_mmap_handler: 8456 20ffc000-20ffd000 already mapped failed -16 [ 172.403747][ T8453] netlink: 112 bytes leftover after parsing attributes in process `syz.7.952'. [ 172.852587][ T5148] Bluetooth: hci1: command tx timeout [ 172.952846][ T5920] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.122513][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 173.131768][ T5920] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 173.144257][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.157052][ T5920] usb 6-1: config 0 descriptor?? [ 173.164263][ T5920] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 173.318112][ T8492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.615642][ T8506] input: syz0 as /devices/virtual/input/input25 [ 174.063540][ T8527] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 174.387302][ T5920] gspca_sonixj: reg_w1 err -71 [ 174.412606][ T5920] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 174.424854][ T5920] usb 6-1: USB disconnect, device number 6 [ 174.869241][ T8555] netlink: 132 bytes leftover after parsing attributes in process `syz.7.994'. [ 174.880099][ T8555] netlink: 'syz.7.994': attribute type 10 has an invalid length. [ 174.914217][ T8555] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.206274][ T8572] netlink: 'syz.5.1001': attribute type 9 has an invalid length. [ 175.214532][ T8572] netlink: 134660 bytes leftover after parsing attributes in process `syz.5.1001'. [ 175.904796][ T969] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 176.131924][ T969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.172418][ T969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.207048][ T969] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.222403][ T969] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.231541][ T969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.244376][ T969] usb 8-1: config 0 descriptor?? [ 176.664580][ T969] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 176.673063][ T969] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 176.688253][ T969] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 176.705959][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 176.715082][ T8632] bridge_slave_1: left allmulticast mode [ 176.720761][ T8632] bridge_slave_1: left promiscuous mode [ 176.728679][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.741068][ T8632] bridge_slave_0: left allmulticast mode [ 176.747195][ T8632] bridge_slave_0: left promiscuous mode [ 176.753722][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.822516][ T5890] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 176.985877][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 177.001975][ T5890] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 177.034406][ T5890] usb 6-1: config 0 has no interface number 0 [ 177.058296][ T5890] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.076478][ T5890] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.090556][ T5890] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 177.101269][ T5148] Bluetooth: hci1: command tx timeout [ 177.115888][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 177.127362][ T5890] usb 6-1: Product: syz [ 177.131607][ T5890] usb 6-1: SerialNumber: syz [ 177.149731][ T5890] usb 6-1: config 0 descriptor?? [ 177.161858][ T5890] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 177.176491][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input26 [ 177.312162][ T8649] bridge0: entered allmulticast mode [ 177.332315][ T8649] pim6reg: entered allmulticast mode [ 177.448823][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 177.449484][ T5920] usb 6-1: USB disconnect, device number 7 [ 177.456188][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 177.500781][ T8658] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 177.512151][ T5920] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 178.002268][ T8673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27 [ 178.097042][ T8675] netlink: 'syz.5.1044': attribute type 1 has an invalid length. [ 178.206731][ T8684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.236010][ T8684] bond1: (slave bond2): making interface the new active one [ 178.258584][ T8684] bond1: (slave bond2): Enslaving as an active interface with an up link [ 178.365478][ T8700] xt_bpf: check failed: parse error [ 178.747389][ T5890] usb 8-1: USB disconnect, device number 2 [ 178.818247][ T8722] kAFS: unable to lookup cell '.yz1' [ 178.989609][ T8730] batadv_slave_1: entered promiscuous mode [ 179.015906][ T8730] batadv_slave_1: left promiscuous mode [ 179.114147][ T8735] block nbd6: not configured, cannot reconfigure [ 179.257601][ T8739] evm: overlay not supported [ 179.542555][ T5890] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 179.704257][ T5890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.728035][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.748975][ T5890] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.762494][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.779078][ T5890] usb 6-1: SerialNumber: syz [ 179.993151][ T5890] usb 6-1: 0:2 : does not exist [ 180.083915][ T5890] usb 6-1: USB disconnect, device number 8 [ 180.158537][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 180.445404][ T29] audit: type=1326 audit(1732071914.965:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.478673][ T29] audit: type=1326 audit(1732071914.965:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.507550][ T29] audit: type=1326 audit(1732071914.965:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.541814][ T29] audit: type=1326 audit(1732071914.965:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.586299][ T29] audit: type=1326 audit(1732071914.965:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.608557][ T29] audit: type=1326 audit(1732071914.965:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.652740][ T29] audit: type=1326 audit(1732071914.965:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.692290][ T29] audit: type=1326 audit(1732071914.965:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.734337][ T29] audit: type=1326 audit(1732071914.965:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.782485][ T29] audit: type=1326 audit(1732071914.965:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8798 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a077e759 code=0x7ffc0000 [ 180.782642][ T969] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 180.962762][ T969] usb 8-1: Using ep0 maxpacket: 16 [ 180.971375][ T969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.991011][ T969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.049113][ T969] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 181.071167][ T969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.091624][ T969] usb 8-1: config 0 descriptor?? [ 181.423363][ T8837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.525594][ T969] samsung 0003:0419:0001.0011: item fetching failed at offset 3/5 [ 181.541631][ T969] samsung 0003:0419:0001.0011: parse failed [ 181.548154][ T969] samsung 0003:0419:0001.0011: probe with driver samsung failed with error -22 [ 181.768994][ T969] usb 8-1: USB disconnect, device number 3 [ 182.029394][ T8870] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 182.419613][ T8888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1131'. [ 182.605108][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1132'. [ 183.091313][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 183.102626][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 183.366040][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 183.374554][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 183.892922][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 183.898956][ T8928] ceph: No mds server is up or the cluster is laggy [ 183.910594][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 184.137216][ T8983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.622544][ T5921] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 184.773497][ T5921] usb 8-1: Using ep0 maxpacket: 16 [ 184.787855][ T5921] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 184.804252][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.817973][ T5921] usb 8-1: Product: syz [ 184.822506][ T5921] usb 8-1: Manufacturer: syz [ 184.830610][ T5921] usb 8-1: SerialNumber: syz [ 184.857978][ T5921] usb 8-1: config 0 descriptor?? [ 184.867818][ T5921] appledisplay 8-1:0.0: Could not find int-in endpoint [ 184.880593][ T5921] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 185.158213][ T5890] usb 8-1: USB disconnect, device number 4 [ 185.972288][ T9036] [ 185.974703][ T9036] ============================= [ 185.979571][ T9036] [ BUG: Invalid wait context ] [ 185.984442][ T9036] 6.12.0-syzkaller-01518-ga5c93bfec0be #0 Not tainted [ 185.991228][ T9036] ----------------------------- [ 185.996102][ T9036] syz.5.1191/9036 is trying to lock: [ 186.001417][ T9036] ffffffff8e9b7fd8 (map_idr_lock){+...}-{3:3}, at: bpf_map_put+0x9a/0x380 [ 186.009994][ T9036] other info that might help us debug this: [ 186.015906][ T9036] context-{5:5} [ 186.019393][ T9036] 2 locks held by syz.5.1191/9036: [ 186.024526][ T9036] #0: ffffffff8e93a5a0 (rcu_read_lock){....}-{1:3}, at: bpf_fd_htab_map_update_elem+0x134/0x390 [ 186.035104][ T9036] #1: ffff8880630ea0f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x1a4/0x370 [ 186.045168][ T9036] stack backtrace: [ 186.048928][ T9036] CPU: 0 UID: 0 PID: 9036 Comm: syz.5.1191 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 186.059301][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 186.069410][ T9036] Call Trace: [ 186.072722][ T9036] [ 186.075687][ T9036] dump_stack_lvl+0x241/0x360 [ 186.080408][ T9036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.085646][ T9036] ? __pfx__printk+0x10/0x10 [ 186.090273][ T9036] __lock_acquire+0x15a8/0x2100 [ 186.095133][ T9036] lock_acquire+0x1ed/0x550 [ 186.099645][ T9036] ? bpf_map_put+0x9a/0x380 [ 186.104174][ T9036] ? __pfx_lock_acquire+0x10/0x10 [ 186.109215][ T9036] ? __pfx_lock_acquire+0x10/0x10 [ 186.114251][ T9036] ? __lock_acquire+0x1397/0x2100 [ 186.119280][ T9036] ? do_raw_spin_lock+0x14f/0x370 [ 186.124338][ T9036] _raw_spin_lock_irqsave+0xd5/0x120 [ 186.129655][ T9036] ? bpf_map_put+0x9a/0x380 [ 186.134173][ T9036] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 186.140074][ T9036] bpf_map_put+0x9a/0x380 [ 186.144410][ T9036] ? __pfx_bpf_map_fd_put_ptr+0x10/0x10 [ 186.149952][ T9036] alloc_htab_elem+0x1f5/0xa80 [ 186.154728][ T9036] htab_map_update_elem+0x448/0xe00 [ 186.159961][ T9036] ? __pfx_htab_map_update_elem+0x10/0x10 [ 186.165684][ T9036] ? bpf_map_meta_equal+0x137/0x2a0 [ 186.170892][ T9036] ? fput+0x21b/0x290 [ 186.174880][ T9036] bpf_fd_htab_map_update_elem+0x1fb/0x390 [ 186.180694][ T9036] ? bpf_fd_htab_map_update_elem+0x134/0x390 [ 186.186682][ T9036] ? __pfx_bpf_fd_htab_map_update_elem+0x10/0x10 [ 186.193012][ T9036] bpf_map_update_value+0x2e8/0x540 [ 186.198213][ T9036] map_update_elem+0x51a/0x6f0 [ 186.202980][ T9036] __sys_bpf+0x76f/0x810 [ 186.207219][ T9036] ? __pfx___sys_bpf+0x10/0x10 [ 186.212001][ T9036] ? kmem_cache_free+0x2fc/0x420 [ 186.216947][ T9036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.222942][ T9036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.229289][ T9036] ? do_syscall_64+0x100/0x230 [ 186.234073][ T9036] __x64_sys_bpf+0x7c/0x90 [ 186.238518][ T9036] do_syscall_64+0xf3/0x230 [ 186.243061][ T9036] ? clear_bhb_loop+0x35/0x90 [ 186.247736][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.253662][ T9036] RIP: 0033:0x7f114e17e759 [ 186.258104][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.277721][ T9036] RSP: 002b:00007f114f02b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.286136][ T9036] RAX: ffffffffffffffda RBX: 00007f114e335f80 RCX: 00007f114e17e759 [ 186.294121][ T9036] RDX: 0000000000000020 RSI: 00000000200002c0 RDI: 0000000000000002 [ 186.302122][ T9036] RBP: 00007f114e1f175e R08: 0000000000000000 R09: 0000000000000000 [ 186.310086][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.318065][ T9036] R13: 0000000000000000 R14: 00007f114e335f80 R15: 00007ffecea3ed28 [ 186.326059][ T9036] [ 186.462497][ T5890] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 186.624111][ T5890] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.635944][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.647040][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.656896][ T5890] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.669832][ T5890] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.678959][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.688350][ T5890] usb 9-1: config 0 descriptor?? [ 187.099024][ T5890] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 187.107131][ T5890] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 187.116080][ T5890] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 187.363639][ T5890] usb 9-1: USB disconnect, device number 2 [ 193.093064][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 195.016658][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.023347][ T1291] ieee802154 phy1 wpan1: encryption failed: -22