last executing test programs: 29.62284519s ago: executing program 2 (id=489): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48201) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 29.349680438s ago: executing program 2 (id=491): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write$binfmt_script(r3, 0x0, 0xd9) write(r0, 0x0, 0x0) 29.009630849s ago: executing program 2 (id=495): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 28.741404071s ago: executing program 2 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 28.372936467s ago: executing program 2 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') setresuid(0x0, 0xee01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) 26.878620056s ago: executing program 2 (id=514): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 26.316459682s ago: executing program 32 (id=514): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 5.294355129s ago: executing program 3 (id=648): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1}, {&(0x7f00000003c0)="8e252f33", 0x4}], 0x2}}], 0x1, 0x24000054) 4.993153176s ago: executing program 3 (id=650): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x400, 0x452c}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 3.980117853s ago: executing program 3 (id=656): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r1, 0xaea2, &(0x7f00000004c0)={[{0x15c8, 0xc787, 0x2, 0x6, 0x0, 0xc6, 0x70, 0x0, 0x3, 0xc, 0xda, 0xf8, 0x3}, {0x0, 0xf3f, 0x0, 0x7d, 0x8, 0x7, 0x2, 0xc, 0x0, 0x85, 0xd, 0x4e, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x9, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 3.234677301s ago: executing program 3 (id=657): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 2.181901101s ago: executing program 0 (id=663): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r0}, &(0x7f0000001b00), &(0x7f0000001b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.977702014s ago: executing program 0 (id=664): unshare(0x28000600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x40000) fanotify_mark(r1, 0x1, 0x8000018, r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) 1.779985539s ago: executing program 0 (id=666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a40)=@updpolicy={0x164, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc, 0x4000000000000, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}, @algo_aead={0x66, 0x12, {{'generic-gcm-aesni\x00'}, 0xd0, 0x80, "2413920b19d4b3a1b8f598f4ba211e0c0c94442524e19890ae74"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r2, 0x0, 0x0, 0x4000040, &(0x7f0000000180)={0xa, 0x4e22, 0x4f51, @mcast2, 0xa}, 0x1c) 1.685674211s ago: executing program 1 (id=667): syz_open_dev$vim2m(0x0, 0x4000010001ff, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d520987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b45959b609a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07470936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 1.643607304s ago: executing program 3 (id=668): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) 1.481096906s ago: executing program 0 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0xc010) 1.413124577s ago: executing program 4 (id=671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) openat2(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x58) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000540)) 1.206190553s ago: executing program 4 (id=672): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 1.196068023s ago: executing program 0 (id=673): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x2a, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.123156982s ago: executing program 1 (id=674): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240), 0x2, r2, 0xcccccccc}) 990.545542ms ago: executing program 3 (id=675): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x7000, 0x800, 0x9, 0x3}, 0x20) 882.861593ms ago: executing program 4 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 857.618555ms ago: executing program 1 (id=677): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r1}) 598.75873ms ago: executing program 1 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) shutdown(r0, 0x1) 530.375631ms ago: executing program 4 (id=679): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008001f000600"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)="df4d2ce236a879ea1a91c5bf3444f5a4393f4d2adee23f3d9934d2a466cc97906710ccac50fb415ff7308b9bf286297199cda8507a988d131d211bc33bdae932db5665cc751471a715662c35045d7d8c207880e1ff1b92ed918ea29784f4bac349d6b1a24aa9b490ec2b0d29b3d234d7997bf7b7597d8689b3a5e12bebe07016bb2316c6e80772ee0f4b5aff43f08f88a928da7c9a563fb1ddb64bcd9d057fdd9d4ba584ad26d19aa2fa64b2a12ba5574751f9434e8ca59002590d37644b37793347ecaf2b3d1fecde095cf26a2bc06973978aef0f127acabdb37618f069df591c82feeb6073a7b0f25c28fcb0c8f50c8be0adcef1c7c00132cba1e2df29c451ab85e9b98a8f016d999cb6d1a695671952ad2780e4ab5612524dd472807dac4eae706dfec76cb3c0b8fc7ecc13e73e04350c442407afd9281239bde73f388237e20e9f66692af6395c4d2c4c93e32bc29a6959303b9b7a7a3b2099f9145d5896e60cbb96a7425a9a6e91dcc1ce202a47c0fe2f5c7d9c6cfd88423db4f6375b95d64e8fab22a435eba47660de90024d36c1a8118f5472a0b70cbbdc55a988904e0160aa72e441e8f382e7a0d1b9ef2a75038ea594754d6834246197c708838f32091eff58b10d79dd1285f5f0c4a6ba24822e44f913fa5f82da881d88f90f1262ce323945bad8f9a8aa283b4dfec9276490d63f64f018da5974535d39e45377d4b181f37a22a4981f21eae1149273b1d02449d8177f83b09d40a669dd69028158e0a94cdf99deee9d0b47c1240286e33afb1b894afa3143be492a941fb1e6ca7df3758a0709497369011172dc9c79f183c04a5d67c5f4a231fb9974469452c10a10c64b90d9b585950b00e0ce3d090292d534369a78e77ff4cf4136428e66b191578cab8058befb632e13dd2f3a20a8f4627e9e0a44b0b7520dbf3a9cb87a35298d267486a4c619b61d39f1e1b32614b0c68241a98d762f7a82247f25c673b3734cb531ef3e2add5560328a4a9a3d5b29ae01d559d637962c82f4b1e0d134bd764899f42d0085e86fcd358860798898bc8aa9afd49bf98ad75ef5f6d9537ea6c4b0365bec8bc2b27c54d805fe6589abbf26abc54107c8349a792e22465fc9ece41810f804559f6f8ea69d98d308296cf5f06a985bf114a9ab51815fb28de1e000bdfa06e9bea2e1351b722744e7a7f3565da1437cceca4aa635a3f3520661ca9c09a904e8f7c6613cceb16a1bdcfb6c13b83747303b2fc7d7e3df72604bea58b0024233fe072ba738f04d0d492acc6be69e9bb0b22f31e70d9debfb1d68bd588a0302e408343bea14a0390ccd7fe43ccf92e757b0211f4055d7b732053f0bbcfbbd8218e9ebe8119d0c5ee64e46f0ba73727b12ae8baa2865979de68081f5d231773dadf8fd0b223ba2e2d241e31e6b7e1e5928499fa13df52baa8b31e809d69a1d341b931584ec0cbfffc7afc97ef3aa5355cbd139f4f7d7ddeba00e82f5bcb5dd2603764f80a547206e1fe6ed1aee6f135d090cfeb4214a17c42592e31b8b3b272aaf5234ebbc53d48dcf5e7bb44571d7fc5ef70198fc568978ab0b985f7ba4d7501c662066ea6b9016b786c5b732eee6e1c1846ba764a1e2378fd31d5d544cbd0416e00e29cdd31fa40474e72f2553cb8c8d2e2f4aeaf162846cbf2ff5495e5b28a3bafba39ae91e0fc89897594018d56169aafcd76ce5ad1480a02040ef4c96dd773166a7b54c56b785700f419e9230f31d91d06bdde0df42a175b4f78212001dfc6a6d860e567975cc21a12aea34b01647f2a9b55e30fbdc7e8abb1847f9a593e0cd10b8575b2e1c8b3e58fdba9d1c5edea90a44ff6f313e258d227cf23f60844409fb1749570a68353a4bdd1e6ab7b37fdaade6ac283cd14ef01baa913609078a0a91e723ef809f249f1b7bd815e5d7fe4b4cbec31b49cb6623dc2279f6a832e9eabab415502e8f771095441ea14f9d91232f5501639ab25c174fb29c4bfedee61623db350b3f7b0b97fd8a5244b6556008f4b8d51f557f569155c830e24dd2754bd1108005638ac95466224ba7009fa571854649d08c1262cef961f649c2d94960705d133a97182f5c9c8c54a883dd0db2612e7e982cc818d15a67f1a1d464f124bd77a3cd2eec8bcc411fde20aeb0d02b9b5493ab42759334def9b4ee36951e7c2d94cafe6907aafe6ff8e8d9e0fd4401ec500d2e126022cb4a15f977203547ca921be20bcd188c6b7eddef64bb7232d0b3237de1f4f0e8b7301d0f95a764ac7de6d0214f0a0e13320f8628af8f315129abcfdd4e990bd10da8f116f54a006b14d039cb821a107a30a1d0cccc4b730322deb18bf23bcf9df90651f9fbc85313e1a3d59d21d1ba9849323d21afa808ebe5ca44264ccf650deeb288c57a6f66a894f4b00baaac24ded2469b3907dfacca77e4cd670a7e0f9561b3e2c723f71c05c6d76fb2d9e6449927862c50dd2b835db507d4fff67226ec4dbaf1d911ad99be1cdc2e019e3c303dff017fbbbd2d6292216fa76806529aacbbc28b7e3949516bcbce363db2bb0b0d2a8e1f118a4f9f3f1a539a797713e9a8ca3f5e447fb7572faaa9a19d63e597d0310ce8a72a6a3dc618356ffbc14d6f8d406301eff082b7dca056c27af656c1128ae11b51bfabee57563344011d2c8999cf4a567fce436fff61e2032a0b6a254a290b638f325328aa7558cfa8fcc0409e9dac930f2c51907cff3a2708955b710ae8d724bbb0af472dc1c750fdd9f31faab3f3c3742ab733127dcced34a7ecf404286a8b9eaa526db1f453b7cb55751347baf4bf91e13ac996842bf91d9599f51f2aa5d18316c1893f351bd8d24c8b435ce8d922774ebb119981903de03e717ebee9d70d3690670da2b2d4b24d571e93c293c831620890a2ad6431f0adcc911bef12de0d327ed9efc2f0121806cac51dd9078c8569d36498ffb07767d41190434645579306c75dc50a90d82839ca2cfd692b99fe897b8e5c62848fd93c2aaed93ccf5f41219da153e377f4ea6dbc6beaf6f08396098854c96b84eafd426a24d68809c733305fcc8771ebb2f0313c6c8df0943e04dbb0689bf23c913bda75144cab1c7a9cf8ca9e84603022b708fc8644283a06e6b963155cc51392e89f07e80751ba3a1c73045c095dbe4caa3ccdb2bd01ad1a8180e8abbd81822d1e39e665f043e98bc18cdd543dec7435b7ec596536ee257c9fcd4c69d56ae30ab8faa307248d8e26fbd22057a7f664c6b789afa37e6c71719d88a5f60fa29663e05cfa7bfc65082f013942b55a1a913199fa2bdb267ca2f4a5312a9adfb59a60c4f1ed0f", 0x929}, {0x0}], 0x3, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x91}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2}}}], 0x38}}], 0x2, 0x4040880) 314.549151ms ago: executing program 1 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x40810, 0x3}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3e90}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 231.221421ms ago: executing program 4 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 162.863713ms ago: executing program 0 (id=682): socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.009118ms ago: executing program 4 (id=683): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5100}}) io_uring_enter(r1, 0x75fa, 0xe478, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x9, 0x1) 0s ago: executing program 1 (id=684): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x5, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 80.734128][ T5822] cgroup: Unknown subsys name 'net' [ 80.988608][ T5822] cgroup: Unknown subsys name 'cpuset' [ 81.044711][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.820576][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.888186][ T44] cfg80211: failed to load regulatory.db [ 87.143455][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.153851][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.162588][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.164615][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.165474][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.170115][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.171231][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.173009][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.176346][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.177633][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.179200][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.179964][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.236400][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.238552][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.239291][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.240421][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.241155][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.297688][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.312507][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.313352][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.414652][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.418765][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.424570][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.425768][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.426809][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.137863][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.305294][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.352468][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.405103][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.876272][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.877819][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.878489][ T5843] bridge_slave_0: entered allmulticast mode [ 88.881531][ T5843] bridge_slave_0: entered promiscuous mode [ 88.890325][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 88.939331][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.939449][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.939637][ T5843] bridge_slave_1: entered allmulticast mode [ 88.942459][ T5843] bridge_slave_1: entered promiscuous mode [ 89.285468][ T5846] Bluetooth: hci1: command tx timeout [ 89.285476][ T5841] Bluetooth: hci2: command tx timeout [ 89.364324][ T5846] Bluetooth: hci0: command tx timeout [ 89.444258][ T5846] Bluetooth: hci3: command tx timeout [ 89.494886][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.495011][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.495121][ T5842] bridge_slave_0: entered allmulticast mode [ 89.496644][ T5842] bridge_slave_0: entered promiscuous mode [ 89.524198][ T5846] Bluetooth: hci4: command tx timeout [ 89.660605][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.672262][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.672395][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.672635][ T5842] bridge_slave_1: entered allmulticast mode [ 89.685528][ T5842] bridge_slave_1: entered promiscuous mode [ 89.689278][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.689448][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.689639][ T5836] bridge_slave_0: entered allmulticast mode [ 89.692183][ T5836] bridge_slave_0: entered promiscuous mode [ 89.769374][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.856334][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.856436][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.856572][ T5836] bridge_slave_1: entered allmulticast mode [ 89.858044][ T5836] bridge_slave_1: entered promiscuous mode [ 89.859087][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.859201][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.859326][ T5835] bridge_slave_0: entered allmulticast mode [ 89.860792][ T5835] bridge_slave_0: entered promiscuous mode [ 90.104973][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.105100][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.105216][ T5835] bridge_slave_1: entered allmulticast mode [ 90.106729][ T5835] bridge_slave_1: entered promiscuous mode [ 90.238516][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.480777][ T5843] team0: Port device team_slave_0 added [ 90.546251][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.552716][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.639175][ T5843] team0: Port device team_slave_1 added [ 90.639928][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.640065][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.640234][ T5851] bridge_slave_0: entered allmulticast mode [ 90.643254][ T5851] bridge_slave_0: entered promiscuous mode [ 90.767196][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.770176][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.855504][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.855714][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.855882][ T5851] bridge_slave_1: entered allmulticast mode [ 90.858654][ T5851] bridge_slave_1: entered promiscuous mode [ 91.002667][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.156227][ T5842] team0: Port device team_slave_0 added [ 91.276923][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.276940][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.276964][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.364833][ T5846] Bluetooth: hci1: command tx timeout [ 91.364844][ T5841] Bluetooth: hci2: command tx timeout [ 91.400558][ T5842] team0: Port device team_slave_1 added [ 91.403671][ T5836] team0: Port device team_slave_0 added [ 91.406928][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.406942][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.406964][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.444339][ T5846] Bluetooth: hci0: command tx timeout [ 91.524450][ T5846] Bluetooth: hci3: command tx timeout [ 91.614476][ T5846] Bluetooth: hci4: command tx timeout [ 91.708359][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.788510][ T5836] team0: Port device team_slave_1 added [ 91.806617][ T5835] team0: Port device team_slave_0 added [ 91.811446][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.979859][ T5835] team0: Port device team_slave_1 added [ 92.085437][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.085450][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.085463][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.398478][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.398488][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.398502][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.399373][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.399383][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.399396][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.498770][ T5851] team0: Port device team_slave_0 added [ 92.593797][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.593812][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.593825][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.597064][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.597078][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.597100][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.601285][ T5851] team0: Port device team_slave_1 added [ 92.703569][ T5843] hsr_slave_0: entered promiscuous mode [ 92.711017][ T5843] hsr_slave_1: entered promiscuous mode [ 92.720021][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.720032][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.720046][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.046944][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.046960][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.046975][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.199264][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.199280][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.199294][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.206717][ T5842] hsr_slave_0: entered promiscuous mode [ 93.208092][ T5842] hsr_slave_1: entered promiscuous mode [ 93.209240][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 93.209358][ T5842] Cannot create hsr debugfs directory [ 93.444389][ T5846] Bluetooth: hci2: command tx timeout [ 93.444422][ T5846] Bluetooth: hci1: command tx timeout [ 93.524337][ T5841] Bluetooth: hci0: command tx timeout [ 93.553032][ T5836] hsr_slave_0: entered promiscuous mode [ 93.553834][ T5836] hsr_slave_1: entered promiscuous mode [ 93.565007][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 93.565032][ T5836] Cannot create hsr debugfs directory [ 93.608026][ T5841] Bluetooth: hci3: command tx timeout [ 93.622671][ T5835] hsr_slave_0: entered promiscuous mode [ 93.634988][ T5835] hsr_slave_1: entered promiscuous mode [ 93.635956][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 93.635979][ T5835] Cannot create hsr debugfs directory [ 93.684209][ T5841] Bluetooth: hci4: command tx timeout [ 94.259966][ T5851] hsr_slave_0: entered promiscuous mode [ 94.260822][ T5851] hsr_slave_1: entered promiscuous mode [ 94.261331][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 94.261353][ T5851] Cannot create hsr debugfs directory [ 95.473412][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.521729][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.524903][ T5841] Bluetooth: hci1: command tx timeout [ 95.524933][ T5841] Bluetooth: hci2: command tx timeout [ 95.568332][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.603089][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.609385][ T5846] Bluetooth: hci0: command tx timeout [ 95.684903][ T5846] Bluetooth: hci3: command tx timeout [ 95.732403][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.766579][ T5846] Bluetooth: hci4: command tx timeout [ 95.776111][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.823505][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.877685][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.023373][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.068816][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.093769][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.150692][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.295803][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.343703][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.414827][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.478993][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.623689][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.667135][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.715547][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.757922][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.799093][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.899475][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.952768][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.954905][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.011794][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.011942][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.037057][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.160952][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.186721][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.222395][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.222571][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.277002][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.277519][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.342412][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.368543][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.418149][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.418301][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.472624][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.472831][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.607495][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.659815][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.681587][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.681741][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.741841][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.742021][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.818253][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.882345][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.884264][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.911500][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.999557][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.999706][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.316216][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.359602][ T5843] veth0_vlan: entered promiscuous mode [ 98.442479][ T5843] veth1_vlan: entered promiscuous mode [ 98.517556][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.701774][ T5843] veth0_macvtap: entered promiscuous mode [ 98.738536][ T5843] veth1_macvtap: entered promiscuous mode [ 98.758549][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.891785][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.906428][ T5836] veth0_vlan: entered promiscuous mode [ 98.958396][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.026546][ T5836] veth1_vlan: entered promiscuous mode [ 99.030393][ T82] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043604][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.061622][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.089716][ T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.261263][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.261914][ T5835] veth0_vlan: entered promiscuous mode [ 99.436420][ T5835] veth1_vlan: entered promiscuous mode [ 99.451945][ T5836] veth0_macvtap: entered promiscuous mode [ 99.471168][ T5842] veth0_vlan: entered promiscuous mode [ 99.489675][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.489700][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.499484][ T5836] veth1_macvtap: entered promiscuous mode [ 99.561471][ T5842] veth1_vlan: entered promiscuous mode [ 99.638948][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.638967][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.642207][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.730666][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.730940][ T5851] veth0_vlan: entered promiscuous mode [ 99.751484][ T5835] veth0_macvtap: entered promiscuous mode [ 99.775455][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.783044][ T5835] veth1_macvtap: entered promiscuous mode [ 99.803493][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.826718][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.827571][ T5851] veth1_vlan: entered promiscuous mode [ 99.833242][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.883304][ T5842] veth0_macvtap: entered promiscuous mode [ 99.973241][ T5842] veth1_macvtap: entered promiscuous mode [ 100.066134][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.197700][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.293852][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.295507][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.328513][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.352088][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.352768][ T5851] veth0_macvtap: entered promiscuous mode [ 100.371068][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.377734][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.385392][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.385412][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.414045][ T5851] veth1_macvtap: entered promiscuous mode [ 100.453473][ T3632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.508871][ T3632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.533242][ T3632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.556295][ T3632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.835327][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.835347][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.930020][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.059864][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.212552][ T3502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.212639][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.212652][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.257693][ T3502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.305402][ T3502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.307555][ T3502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.478620][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.478641][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.490535][ T5958] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 101.542807][ T5961] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 101.620281][ T5958] team0: Port device dummy0 added [ 101.680579][ T5961] team0: Port device dummy0 removed [ 101.686710][ T5961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.868365][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.868385][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.054938][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.054959][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.260135][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.260153][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.501404][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.501423][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.841812][ T5976] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.217516][ T5998] loop7: detected capacity change from 0 to 7 [ 104.265201][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.265312][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.266236][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.266272][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.266570][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.266592][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.266716][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.266737][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.268018][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.268045][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.268189][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.268211][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.268337][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.268358][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.269520][ T5998] ldm_validate_partition_table(): Disk read failed. [ 104.269578][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.269599][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.269721][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.269743][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.269859][ T5998] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.269880][ T5998] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.270074][ T5998] Dev loop7: unable to read RDB block 0 [ 104.270771][ T5998] loop7: unable to read partition table [ 104.271004][ T5998] loop7: partition table beyond EOD, truncated [ 104.271021][ T5998] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 104.801224][ T6007] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 106.368469][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 106.368506][ T6025] netlink: 'syz.2.27': attribute type 30 has an invalid length. [ 106.466062][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 106.466093][ T6025] netlink: 'syz.2.27': attribute type 30 has an invalid length. [ 106.472749][ T3502] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.737290][ T3502] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.786758][ T6025] Zero length message leads to an empty skb [ 106.798768][ T3502] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.807747][ T3502] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.644508][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.834545][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 107.853327][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.853350][ T5894] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.882493][ T5894] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 107.882521][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.882538][ T5894] usb 3-1: Product: syz [ 107.882550][ T5894] usb 3-1: Manufacturer: syz [ 107.882562][ T5894] usb 3-1: SerialNumber: syz [ 107.997560][ T5894] usb 3-1: config 0 descriptor?? [ 108.113573][ T6049] capability: warning: `syz.4.36' uses 32-bit capabilities (legacy support in use) [ 108.656048][ T5894] usb 3-1: USB disconnect, device number 2 [ 109.301961][ T6060] atomic_op ffff8880272c4218 conn xmit_atomic 0000000000000000 [ 109.640423][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 109.640455][ T6067] netlink: 'syz.0.42': attribute type 30 has an invalid length. [ 109.733141][ T3502] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.740322][ T3502] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.740365][ T3502] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.740397][ T3502] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.740659][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 109.740686][ T6067] netlink: 'syz.0.42': attribute type 30 has an invalid length. [ 111.778317][ T6106] Bluetooth: MGMT ver 1.23 [ 111.974266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.356806][ T5923] kernel write not supported for file bpf-prog (pid: 5923 comm: kworker/0:5) [ 113.984039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.534032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.184049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.601402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.745638][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.944136][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 115.958487][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 115.958516][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.958532][ T9] usb 2-1: Product: syz [ 115.958544][ T9] usb 2-1: Manufacturer: syz [ 115.958556][ T9] usb 2-1: SerialNumber: syz [ 116.016656][ T9] usb 2-1: config 0 descriptor?? [ 116.487264][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c7fb800: rx timeout, send abort [ 116.489063][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c7fb400: rx timeout, send abort [ 116.489206][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c7fb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.490195][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c7fb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.694386][ T9] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 116.855816][ T6160] netlink: 'syz.2.82': attribute type 13 has an invalid length. [ 117.015778][ T9] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 117.110837][ T9] usb 2-1: USB disconnect, device number 2 [ 117.834986][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.836358][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.983783][ T6185] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET) [ 118.841788][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.889914][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.811152][ T3632] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.811184][ T3632] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.912274][ T6224] process 'syz.0.105' launched './file1' with NULL argv: empty string added [ 121.084128][ T5922] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.162640][ T3632] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.162672][ T3632] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.183446][ T3632] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.183476][ T3632] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.184200][ T3632] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.184221][ T3632] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.248392][ T5922] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 121.248424][ T5922] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.248446][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.248480][ T5922] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 121.248499][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.276136][ T5922] usb 3-1: config 0 descriptor?? [ 121.288469][ T6222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.294141][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.484149][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 121.494943][ T5894] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 121.494966][ T5894] usb 4-1: config 0 has no interface number 0 [ 121.495017][ T5894] usb 4-1: config 0 interface 184 has no altsetting 0 [ 121.500791][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.500817][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.500834][ T5894] usb 4-1: Product: syz [ 121.500846][ T5894] usb 4-1: Manufacturer: syz [ 121.500858][ T5894] usb 4-1: SerialNumber: syz [ 121.562717][ T5894] usb 4-1: config 0 descriptor?? [ 121.613194][ T5894] smsc75xx v1.0.0 [ 121.872798][ T5922] kye 0003:0458:5015.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 121.903773][ T5922] kye 0003:0458:5015.0001: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 121.903803][ T5922] kye 0003:0458:5015.0001: tablet-enabling feature report not found [ 121.903816][ T5922] kye 0003:0458:5015.0001: tablet enabling failed [ 122.064506][ T5922] usb 3-1: USB disconnect, device number 3 [ 122.200334][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 122.200361][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.409557][ T6242] fido_id[6242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.638130][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 122.638170][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 122.638188][ T5894] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.638717][ T5894] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.692441][ T5894] usb 4-1: USB disconnect, device number 2 [ 122.991463][ T6251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.349780][ T5923] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 123.496338][ T5923] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 123.496363][ T5923] usb 5-1: config 0 has no interface number 0 [ 123.499388][ T5923] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 123.499412][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.499429][ T5923] usb 5-1: Product: syz [ 123.499441][ T5923] usb 5-1: Manufacturer: syz [ 123.499453][ T5923] usb 5-1: SerialNumber: syz [ 123.559166][ T5923] usb 5-1: config 0 descriptor?? [ 123.686489][ T6266] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.777462][ T5923] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 123.820956][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 123.835269][ T5923] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 123.835357][ T5923] usb 5-1: media controller created [ 123.843443][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.144366][ T5923] DVB: Unable to find symbol dib7000p_attach() [ 124.144380][ T5923] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 124.144393][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 124.153685][ T5923] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 124.153745][ T5923] usb 5-1: media controller created [ 124.201315][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.271374][ T5923] dib0700: the master dib7090 has to be initialized first [ 124.271389][ T5923] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 124.424065][ T5923] rc_core: IR keymap rc-dib0700-rc5 not found [ 124.424083][ T5923] Registered IR keymap rc-empty [ 124.425694][ T5923] dvb-usb: could not initialize remote control. [ 124.425706][ T5923] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 124.479720][ T5923] usb 5-1: USB disconnect, device number 2 [ 124.597309][ T5923] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 125.650376][ T6308] kvm: MONITOR instruction emulated as NOP! [ 126.297930][ T6326] unknown channel width for channel at 909000KHz? [ 126.297948][ T6326] unknown channel width for channel at 909000KHz? [ 126.314655][ T37] audit: type=1326 audit(1756567058.199:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6321 comm="syz.0.140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b37f3ebe9 code=0x0 [ 127.850518][ T6349] overlayfs: statfs failed on './file0' [ 128.135513][ T6374] wg2: entered promiscuous mode [ 128.135541][ T6374] wg2: entered allmulticast mode [ 128.419042][ T6389] netlink: 240 bytes leftover after parsing attributes in process `syz.0.165'. [ 129.184032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.210161][ T6446] syz.2.190 (6446): drop_caches: 4 [ 132.977886][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977987][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.718691][ T37] audit: type=1326 audit(1756567065.609:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6484 comm="syz.3.206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44bf2ebe9 code=0x0 [ 134.286007][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.444222][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 134.455640][ T44] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 134.455667][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.455684][ T44] usb 2-1: Product: syz [ 134.455696][ T44] usb 2-1: Manufacturer: syz [ 134.455708][ T44] usb 2-1: SerialNumber: syz [ 134.490752][ T44] usb 2-1: config 0 descriptor?? [ 134.762636][ T44] as10x_usb: device has been detected [ 134.776978][ T44] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 134.923761][ T44] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 135.112494][ T44] as10x_usb: error during firmware upload part1 [ 135.113260][ T44] Registered device Abilis Systems DVB-Titan [ 135.224076][ T44] usb 2-1: USB disconnect, device number 3 [ 135.482169][ T44] Unregistered device Abilis Systems DVB-Titan [ 135.570393][ T44] as10x_usb: device has been disconnected [ 136.259459][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.223'. [ 137.124240][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.275239][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 137.277570][ T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.277596][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.311320][ T44] usb 3-1: config 0 descriptor?? [ 137.535461][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 137.577756][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.583046][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 137.583115][ T44] usb 3-1: media controller created [ 137.808030][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.304226][ T5909] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.480108][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 138.480135][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.510113][ T44] az6027: usb out operation failed. (-71) [ 138.510588][ T44] az6027: usb out operation failed. (-71) [ 138.510599][ T44] stb0899_attach: Driver disabled by Kconfig [ 138.510608][ T44] az6027: no front-end attached [ 138.510608][ T44] [ 138.512901][ T44] az6027: usb out operation failed. (-71) [ 138.512918][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 138.527755][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 138.585842][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 138.585863][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.652976][ T5909] usb 4-1: config 0 descriptor?? [ 138.664159][ T44] usb 3-1: USB disconnect, device number 4 [ 139.250956][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 139.362994][ T5909] usb 4-1: USB disconnect, device number 3 [ 141.486038][ T6617] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 141.804909][ T6623] vlan2: entered allmulticast mode [ 141.804933][ T6623] dummy0: entered allmulticast mode [ 142.594346][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.746454][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 142.778267][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.778297][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.778317][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.778357][ T5894] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 142.778376][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.856585][ T5894] usb 5-1: config 0 descriptor?? [ 143.360966][ T5894] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 143.361004][ T5894] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 143.361027][ T5894] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 143.361050][ T5894] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 143.361074][ T5894] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 143.561615][ T6631] random: crng reseeded on system resumption [ 143.578335][ T5894] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 143.859051][ T5894] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 143.859867][ T5894] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 144.161614][ T5923] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 144.161979][ T5923] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 144.162892][ T5923] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 144.204756][ T9] usb 5-1: USB disconnect, device number 3 [ 144.969386][ T6681] bridge0: entered allmulticast mode [ 145.011079][ T6681] pim6reg: entered allmulticast mode [ 145.040277][ T6681] pim6reg: left allmulticast mode [ 145.040422][ T6681] bridge0: left allmulticast mode [ 145.214290][ T5922] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 145.378917][ T5922] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 145.378941][ T5922] usb 2-1: config 0 has no interface number 0 [ 145.382054][ T5922] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 145.382079][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.382096][ T5922] usb 2-1: Product: syz [ 145.382108][ T5922] usb 2-1: Manufacturer: syz [ 145.382120][ T5922] usb 2-1: SerialNumber: syz [ 145.400236][ T5922] usb 2-1: config 0 descriptor?? [ 145.653043][ T5922] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 145.669922][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 145.673588][ T5922] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 145.673644][ T5922] usb 2-1: media controller created [ 145.689241][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.790803][ T5922] DVB: Unable to find symbol dib7000p_attach() [ 145.790817][ T5922] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 145.790829][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 145.791641][ T5922] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 145.791693][ T5922] usb 2-1: media controller created [ 145.822013][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.890147][ T5922] dib0700: the master dib7090 has to be initialized first [ 145.890160][ T5922] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 145.959108][ T5922] rc_core: IR keymap rc-dib0700-rc5 not found [ 145.959130][ T5922] Registered IR keymap rc-empty [ 145.959437][ T5922] dvb-usb: could not initialize remote control. [ 145.959446][ T5922] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 145.971722][ T5922] usb 2-1: USB disconnect, device number 4 [ 146.078245][ T5922] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 147.966502][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 148.043522][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 148.043545][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 148.043569][ T6733] netlink: 'syz.0.305': attribute type 20 has an invalid length. [ 148.054952][ T6720] block nbd2: shutting down sockets [ 148.612315][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 148.612339][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 148.612362][ T6733] netlink: 'syz.0.305': attribute type 20 has an invalid length. [ 148.792665][ T6747] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 150.073785][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 150.078537][ T6795] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 150.078557][ T6795] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 150.165335][ T6797] tls_set_device_offload_rx: netdev not found [ 150.696122][ T6812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.803039][ T6815] netlink: 'syz.3.336': attribute type 22 has an invalid length. [ 150.803059][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 150.833780][ T6817] capability: warning: `syz.4.337' uses deprecated v2 capabilities in a way that may be insecure [ 150.843882][ T6817] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 150.843906][ T6817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.853286][ T82] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.853559][ T82] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.853608][ T82] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.853639][ T82] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.853888][ T6815] netlink: 'syz.3.336': attribute type 22 has an invalid length. [ 150.853902][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 150.906305][ T37] audit: type=1326 audit(1756567082.799:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.1.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba3ae2ebe9 code=0x0 [ 151.194183][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.346731][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.346769][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.346804][ T44] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 151.346823][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.375802][ T44] usb 1-1: config 0 descriptor?? [ 151.848350][ T44] hkems 0003:2006:0118.0004: unbalanced delimiter at end of report description [ 151.849135][ T44] hkems 0003:2006:0118.0004: parse failed [ 151.849196][ T44] hkems 0003:2006:0118.0004: probe with driver hkems failed with error -22 [ 152.104718][ T5922] usb 1-1: USB disconnect, device number 2 [ 152.504237][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.667326][ T44] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.667351][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.679590][ T44] usb 4-1: config 0 descriptor?? [ 152.710439][ T6872] Invalid ELF header magic: != ELF [ 152.711229][ T44] cp210x 4-1:0.0: cp210x converter detected [ 152.926785][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.933070][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.167651][ T44] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 153.200718][ T44] usb 4-1: cp210x converter now attached to ttyUSB0 [ 153.386031][ T9] usb 4-1: USB disconnect, device number 4 [ 153.415172][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.535193][ T9] cp210x 4-1:0.0: device disconnected [ 154.494220][ T5922] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.579239][ T6899] block nbd1: shutting down sockets [ 154.676766][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.676791][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.678434][ T5922] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.678464][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.678482][ T5922] usb 3-1: SerialNumber: syz [ 155.127078][ T5922] usb 3-1: 0:2 : does not exist [ 155.323625][ T5922] usb 3-1: USB disconnect, device number 5 [ 157.244116][ T5922] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 157.347417][ T6984] kvm: emulating exchange as write [ 157.404737][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 157.409279][ T5922] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.409303][ T5922] usb 5-1: config 0 has no interface number 0 [ 157.409349][ T5922] usb 5-1: config 0 interface 184 has no altsetting 0 [ 157.418042][ T5922] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.418069][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.418086][ T5922] usb 5-1: Product: syz [ 157.418098][ T5922] usb 5-1: Manufacturer: syz [ 157.418110][ T5922] usb 5-1: SerialNumber: syz [ 157.437031][ T5922] usb 5-1: config 0 descriptor?? [ 157.452678][ T5922] smsc75xx v1.0.0 [ 157.559170][ T6989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.144375][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.144404][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.321880][ T7008] loop8: detected capacity change from 0 to 7 [ 158.347793][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 158.347820][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 158.347836][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 158.348129][ T5922] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.384319][ T5922] usb 5-1: USB disconnect, device number 4 [ 158.407809][ T7008] Dev loop8: unable to read RDB block 7 [ 158.407863][ T7008] loop8: unable to read partition table [ 158.408097][ T7008] loop8: partition table beyond EOD, truncated [ 158.408133][ T7008] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 158.515965][ T7008] Dev loop8: unable to read RDB block 7 [ 158.516011][ T7008] loop8: unable to read partition table [ 158.516249][ T7008] loop8: partition table beyond EOD, truncated [ 158.516266][ T7008] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 158.572816][ T7014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.854260][ T7021] Illegal XDP return value 256 on prog (id 72) dev N/A, expect packet loss! [ 160.184194][ T5982] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 160.356712][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.356742][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.356777][ T5982] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 160.356797][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.362528][ T5982] usb 3-1: config 0 descriptor?? [ 160.917395][ T5982] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 161.160303][ T5923] usb 3-1: USB disconnect, device number 6 [ 161.584646][ T7080] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 161.584646][ T7080] Q [ 161.769511][ T6649] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.914369][ T6649] usb 1-1: Using ep0 maxpacket: 32 [ 161.920954][ T6649] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 161.920979][ T6649] usb 1-1: config 0 has no interface number 0 [ 161.921026][ T6649] usb 1-1: config 0 interface 12 has no altsetting 0 [ 161.968649][ T6649] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 161.968676][ T6649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.968694][ T6649] usb 1-1: Product: syz [ 161.968706][ T6649] usb 1-1: Manufacturer: syz [ 161.968718][ T6649] usb 1-1: SerialNumber: syz [ 162.025391][ T6649] usb 1-1: config 0 descriptor?? [ 162.974129][ T5922] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.038252][ T7110] syzkaller1: entered promiscuous mode [ 163.038279][ T7110] syzkaller1: entered allmulticast mode [ 163.074175][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.125630][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 163.134148][ T5922] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 163.134173][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.149670][ T5922] usb 4-1: config 0 descriptor?? [ 163.178582][ T5922] gspca_main: sunplus-2.14.0 probing 041e:400b [ 163.245153][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 163.253914][ T5894] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.266502][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.266544][ T5894] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 163.266564][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.304317][ T6649] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 163.304367][ T6649] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 163.304382][ T6649] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 163.304484][ T6649] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 163.350910][ T6649] usb 1-1: USB disconnect, device number 3 [ 163.379814][ T5894] usb 2-1: config 0 descriptor?? [ 163.844228][ T5894] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 163.844702][ T5894] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 163.844730][ T5894] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 163.844751][ T5894] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 163.844770][ T5894] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 163.854953][ T7114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.932200][ T5894] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 164.075136][ T5894] usb 2-1: USB disconnect, device number 5 [ 164.188919][ T7121] netlink: 68 bytes leftover after parsing attributes in process `syz.0.458'. [ 164.426461][ T5922] gspca_sunplus: reg_w_riv err -71 [ 164.426577][ T5922] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 164.442675][ T5922] usb 4-1: USB disconnect, device number 5 [ 164.884155][ T5922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.934603][ T7141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.037438][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 165.047328][ T5922] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 165.047356][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.047373][ T5922] usb 1-1: Product: syz [ 165.047385][ T5922] usb 1-1: Manufacturer: syz [ 165.047397][ T5922] usb 1-1: SerialNumber: syz [ 165.096250][ T5922] usb 1-1: config 0 descriptor?? [ 165.530787][ T7132] No source specified [ 165.532013][ T5922] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 165.549249][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.554546][ T5922] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 165.554597][ T5922] usb 1-1: media controller created [ 165.601643][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.680537][ T7156] block nbd4: NBD_DISCONNECT [ 165.732315][ T7156] block nbd4: Send disconnect failed -22 [ 165.732385][ T7155] block nbd4: Disconnected due to user request. [ 165.732398][ T7155] block nbd4: shutting down sockets [ 166.166024][ T7132] dtv5100: wlen = 0, aborting. [ 166.166080][ T5922] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.166214][ T5922] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 166.166260][ T5922] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 166.208344][ T5922] usb 1-1: USB disconnect, device number 4 [ 166.267372][ T5922] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 166.674028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.694044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.694113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.694231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.945470][ T7171] mmap: syz.3.481 (7171) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.011324][ T7190] block nbd2: NBD_DISCONNECT [ 168.011383][ T7190] block nbd2: Send disconnect failed -22 [ 168.011764][ T7190] block nbd2: Disconnected due to user request. [ 168.011779][ T7190] block nbd2: shutting down sockets [ 168.344489][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 168.547302][ T7201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.974726][ T7213] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 169.023868][ T7221] netlink: 'syz.3.500': attribute type 1 has an invalid length. [ 169.341916][ T7224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.366212][ T7224] bond1: (slave bond2): making interface the new active one [ 169.367529][ T7224] bond1: (slave bond2): Enslaving as an active interface with an up link [ 169.409407][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 169.424286][ T7228] veth0: entered promiscuous mode [ 170.084857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.844500][ T6649] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 171.944406][ T6649] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.259402][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.273068][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.276999][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.292302][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.302621][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.721796][ T7276] uprobe: syz.0.525:7276 failed to unregister, leaking uprobe [ 173.131526][ T57] bridge_slave_1: left allmulticast mode [ 173.131630][ T57] bridge_slave_1: left promiscuous mode [ 173.135003][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.235496][ T57] bridge_slave_0: left allmulticast mode [ 173.235527][ T57] bridge_slave_0: left promiscuous mode [ 173.235799][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.589265][ T7315] input: syz1 as /devices/virtual/input/input9 [ 174.004824][ T37] audit: type=1326 audit(1756567362.905:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7325 comm="syz.0.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b37f3ebe9 code=0x0 [ 174.151730][ T7330] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.544'. [ 174.404187][ T5841] Bluetooth: hci0: command tx timeout [ 174.579185][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.874221][ T7340] Bluetooth: MGMT ver 1.23 [ 174.914296][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.094188][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 175.096441][ T5923] usb 2-1: too many configurations: 120, using maximum allowed: 8 [ 175.140333][ T5923] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 175.140360][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 175.140378][ T5923] usb 2-1: Product: syz [ 175.140390][ T5923] usb 2-1: Manufacturer: syz [ 175.140402][ T5923] usb 2-1: SerialNumber: syz [ 175.178937][ T5923] usb 2-1: config 0 descriptor?? [ 175.207869][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 175.207933][ T5923] usb 2-1: setting power ON [ 175.208481][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 175.213296][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.213881][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 175.213914][ T5923] usb 2-1: media controller created [ 175.279381][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.335056][ T5923] usb 2-1: selecting invalid altsetting 6 [ 175.335077][ T5923] usb 2-1: digital interface selection failed (-22) [ 175.335090][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 175.339617][ T5923] usb 2-1: setting power OFF [ 175.339867][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 175.339877][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 175.339883][ T5923] (NULL device *): no alternate interface [ 175.379936][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 175.441133][ T5922] usb 2-1: USB disconnect, device number 6 [ 175.755074][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.828844][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.883761][ T57] bond0 (unregistering): Released all slaves [ 176.399689][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.495063][ T5841] Bluetooth: hci0: command tx timeout [ 176.549502][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.549533][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.549552][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.549590][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.549611][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.567173][ T44] usb 2-1: config 0 descriptor?? [ 176.805909][ T7280] chnl_net:caif_netlink_parms(): no params data found [ 176.936639][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 176.936670][ T7366] bridge: RTM_NEWNEIGH with invalid ether address [ 177.044863][ T44] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 177.298930][ T5922] usb 2-1: USB disconnect, device number 7 [ 177.763660][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 178.038746][ T7400] ======================================================= [ 178.038746][ T7400] WARNING: The mand mount option has been deprecated and [ 178.038746][ T7400] and is ignored by this kernel. Remove the mand [ 178.038746][ T7400] option from the mount to silence this warning. [ 178.038746][ T7400] ======================================================= [ 178.278860][ T57] hsr_slave_0: left promiscuous mode [ 178.306873][ T57] hsr_slave_1: left promiscuous mode [ 178.309705][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.337632][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.565722][ T5841] Bluetooth: hci0: command tx timeout [ 180.028808][ T5922] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.189228][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.189257][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 180.189281][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.189304][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.189341][ T5922] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.189362][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.195050][ T5922] usb 1-1: config 0 descriptor?? [ 180.196159][ T7430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.638082][ T5922] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 180.645464][ T5841] Bluetooth: hci0: command tx timeout [ 180.651645][ T5922] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 180.964860][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.965283][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.993760][ T5922] usb 1-1: USB disconnect, device number 5 [ 181.164096][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.313054][ T7442] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 181.313068][ T7442] netlink: 68 bytes leftover after parsing attributes in process `syz.4.588'. [ 181.338406][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.338435][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.338454][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.338493][ T5923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.338513][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.343926][ T5923] usb 4-1: config 0 descriptor?? [ 181.843606][ T5923] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 182.174668][ T57] team0 (unregistering): Port device team_slave_1 removed [ 182.376585][ T57] team0 (unregistering): Port device team_slave_0 removed [ 182.469888][ C1] plantronics 0003:047F:FFFF.000A: hid_field_extract() called with n (132) > 32! (ktimers/1) [ 182.692029][ T31] usb 4-1: USB disconnect, device number 6 [ 184.710999][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.711194][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.711427][ T7280] bridge_slave_0: entered allmulticast mode [ 184.743096][ T7280] bridge_slave_0: entered promiscuous mode [ 184.765183][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.765320][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.765544][ T7280] bridge_slave_1: entered allmulticast mode [ 184.771212][ T7280] bridge_slave_1: entered promiscuous mode [ 185.396442][ T7280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.420606][ T7280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.058115][ T7280] team0: Port device team_slave_0 added [ 186.066301][ T7280] team0: Port device team_slave_1 added [ 186.547257][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.547272][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.547296][ T7280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.610209][ T7280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.610230][ T7280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.610254][ T7280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.053908][ T7280] hsr_slave_0: entered promiscuous mode [ 187.066774][ T7280] hsr_slave_1: entered promiscuous mode [ 187.069068][ T7280] debugfs: 'hsr0' already exists in 'hsr' [ 187.069093][ T7280] Cannot create hsr debugfs directory [ 188.553059][ T7280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.623386][ T7280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.694336][ T7280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.828507][ T7280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.944282][ T5922] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.094139][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 189.114193][ T5922] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.114218][ T5922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.114233][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.117292][ T5922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.117317][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.117334][ T5922] usb 2-1: Product: syz [ 189.117346][ T5922] usb 2-1: Manufacturer: syz [ 189.117356][ T5922] usb 2-1: SerialNumber: syz [ 189.226127][ T7280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.323265][ T7280] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.360616][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.360758][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.440826][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.440954][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.574702][ T5922] usb 2-1: 0:2 : does not exist [ 190.183293][ T7551] 9pnet: p9_errstr2errno: server reported unknown error l [ 190.278713][ T7553] input: syz0 as /devices/virtual/input/input12 [ 190.452666][ T5923] usb 2-1: USB disconnect, device number 8 [ 191.282131][ T7280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.662410][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 191.914184][ T7596] vxlan1: entered promiscuous mode [ 192.489349][ T5846] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 192.489478][ T5846] Bluetooth: hci1: Injecting HCI hardware error event [ 192.491704][ T5846] Bluetooth: hci1: hardware error 0x00 [ 192.647107][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 192.686896][ T7626] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 192.857823][ T7626] bond3: entered promiscuous mode [ 192.863589][ T7626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.944138][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.105697][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 193.108342][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.108401][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.108425][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.108444][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.108464][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.110098][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.110121][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.110138][ T31] usb 5-1: Manufacturer: syz [ 193.128404][ T31] usb 5-1: config 0 descriptor?? [ 193.192891][ T7628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.197567][ T7628] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.197591][ T7628] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 193.209384][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.213667][ T5922] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 193.216511][ T5922] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 193.287819][ T7628] bond3: (slave vxcan3): making interface the new active one [ 193.287841][ T7628] vxcan3: entered promiscuous mode [ 193.316153][ T7628] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 193.349880][ T5982] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.466195][ T31] rc_core: IR keymap rc-hauppauge not found [ 193.466214][ T31] Registered IR keymap rc-empty [ 193.466911][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.491290][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.509216][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 193.512350][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 193.556601][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.563796][ T5982] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 193.563819][ T5982] usb 1-1: config 0 has no interface number 0 [ 193.564185][ T5982] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 193.564224][ T5982] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 193.564244][ T5982] usb 1-1: config 0 interface 255 has no altsetting 0 [ 193.564391][ T5982] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 193.564410][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.574708][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.595137][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.624364][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.644340][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.667232][ T5982] usb 1-1: config 0 descriptor?? [ 193.674417][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.704573][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.724357][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.736663][ T5982] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 193.744321][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.774573][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.871043][ T31] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 193.871068][ T31] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 193.909810][ T7280] veth0_vlan: entered promiscuous mode [ 193.955244][ T31] usb 5-1: USB disconnect, device number 5 [ 193.963168][ T7280] veth1_vlan: entered promiscuous mode [ 194.129336][ T5982] usb 1-1: USB disconnect, device number 6 [ 194.176762][ T7280] veth0_macvtap: entered promiscuous mode [ 194.192535][ T7280] veth1_macvtap: entered promiscuous mode [ 194.322070][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.373390][ T7280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.417010][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.417095][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.443534][ T3502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.443819][ T3502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.451587][ T3502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.452951][ T3502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.542534][ T37] audit: type=1326 audit(1756567384.425:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aad87ebe9 code=0x7fc00000 [ 195.798517][ T7687] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.665'. [ 195.844373][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.864139][ T5922] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 195.864164][ T5922] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 198.164365][ T5922] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 198.164388][ T5922] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 198.165873][ C0] ------------[ cut here ]------------ [ 198.165885][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 198.165966][ C0] WARNING: CPU: 0 PID: 16 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 198.165995][ C0] Modules linked in: [ 198.166026][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.166044][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.166056][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 198.166076][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 198.166090][ C0] RSP: 0018:ffffc90000157828 EFLAGS: 00010046 [ 198.166104][ C0] RAX: 4a9ba417988d3c00 RBX: 0000000000000000 RCX: ffff88801c2a5940 [ 198.166117][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 198.166128][ C0] RBP: ffff8880580b4998 R08: 0000000000000000 R09: 0000000000000100 [ 198.166140][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 198.166152][ C0] R13: dffffc0000000000 R14: ffff8880293de168 R15: ffff88801c2a644c [ 198.166166][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 198.166182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.166194][ C0] CR2: 00005578894dc950 CR3: 00000000520e6000 CR4: 00000000003526f0 [ 198.166211][ C0] Call Trace: [ 198.166219][ C0] [ 198.166244][ C0] call_timer_fn+0x17b/0x5f0 [ 198.166264][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 198.166281][ C0] ? call_timer_fn+0xbe/0x5f0 [ 198.166298][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 198.166324][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 198.166341][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 198.166361][ C0] __run_timer_base+0x709/0x970 [ 198.166393][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 198.166426][ C0] run_timer_softirq+0xb7/0x180 [ 198.166452][ C0] handle_softirqs+0x22c/0x710 [ 198.166481][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 198.166511][ C0] run_ktimerd+0xcf/0x190 [ 198.166533][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 198.166550][ C0] ? schedule+0x91/0x360 [ 198.166574][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 198.166590][ C0] smpboot_thread_fn+0x542/0xa60 [ 198.166609][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 198.166634][ C0] kthread+0x711/0x8a0 [ 198.166659][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 198.166678][ C0] ? __pfx_kthread+0x10/0x10 [ 198.166707][ C0] ? __pfx_kthread+0x10/0x10 [ 198.166731][ C0] ret_from_fork+0x3f9/0x770 [ 198.166755][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 198.166782][ C0] ? __switch_to_asm+0x39/0x70 [ 198.166797][ C0] ? __switch_to_asm+0x33/0x70 [ 198.166810][ C0] ? __pfx_kthread+0x10/0x10 [ 198.166833][ C0] ret_from_fork_asm+0x1a/0x30 [ 198.166872][ C0] [ 198.166882][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.166896][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.166917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.166926][ C0] Call Trace: [ 198.166932][ C0] [ 198.166939][ C0] dump_stack_lvl+0x99/0x250 [ 198.166962][ C0] ? __asan_memcpy+0x40/0x70 [ 198.166981][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.167004][ C0] ? __pfx__printk+0x10/0x10 [ 198.167035][ C0] vpanic+0x281/0x750 [ 198.167056][ C0] ? __pfx__printk+0x10/0x10 [ 198.167075][ C0] ? __pfx_vpanic+0x10/0x10 [ 198.167101][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 198.167137][ C0] panic+0xb9/0xc0 [ 198.167162][ C0] ? __pfx_panic+0x10/0x10 [ 198.167201][ C0] __warn+0x31b/0x4b0 [ 198.167225][ C0] ? __queue_work+0x2e5/0x1010 [ 198.167251][ C0] ? __queue_work+0x2e5/0x1010 [ 198.167274][ C0] report_bug+0x2be/0x4f0 [ 198.167299][ C0] ? __queue_work+0x2e5/0x1010 [ 198.167326][ C0] ? __queue_work+0x2e5/0x1010 [ 198.167351][ C0] ? __queue_work+0x2e7/0x1010 [ 198.167375][ C0] handle_bug+0x84/0x160 [ 198.167406][ C0] exc_invalid_op+0x1a/0x50 [ 198.167437][ C0] asm_exc_invalid_op+0x1a/0x20 [ 198.167467][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 198.167494][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 198.167511][ C0] RSP: 0018:ffffc90000157828 EFLAGS: 00010046 [ 198.167530][ C0] RAX: 4a9ba417988d3c00 RBX: 0000000000000000 RCX: ffff88801c2a5940 [ 198.167546][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 198.167559][ C0] RBP: ffff8880580b4998 R08: 0000000000000000 R09: 0000000000000100 [ 198.167574][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 198.167590][ C0] R13: dffffc0000000000 R14: ffff8880293de168 R15: ffff88801c2a644c [ 198.167628][ C0] ? __queue_work+0x2e4/0x1010 [ 198.167670][ C0] call_timer_fn+0x17b/0x5f0 [ 198.167697][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 198.167724][ C0] ? call_timer_fn+0xbe/0x5f0 [ 198.167750][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 198.167790][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 198.167815][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 198.167846][ C0] __run_timer_base+0x709/0x970 [ 198.167891][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 198.167938][ C0] run_timer_softirq+0xb7/0x180 [ 198.167965][ C0] handle_softirqs+0x22c/0x710 [ 198.168004][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 198.168044][ C0] run_ktimerd+0xcf/0x190 [ 198.168072][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 198.168098][ C0] ? schedule+0x91/0x360 [ 198.168133][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 198.168158][ C0] smpboot_thread_fn+0x542/0xa60 [ 198.168186][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 198.168222][ C0] kthread+0x711/0x8a0 [ 198.168254][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 198.168278][ C0] ? __pfx_kthread+0x10/0x10 [ 198.168310][ C0] ? __pfx_kthread+0x10/0x10 [ 198.168337][ C0] ret_from_fork+0x3f9/0x770 [ 198.168367][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 198.168402][ C0] ? __switch_to_asm+0x39/0x70 [ 198.168421][ C0] ? __switch_to_asm+0x33/0x70 [ 198.168446][ C0] ? __pfx_kthread+0x10/0x10 [ 198.168478][ C0] ret_from_fork_asm+0x1a/0x30 [ 198.168519][ C0] [ 198.168780][ C0] Kernel Offset: disabled