last executing test programs: 2m36.432179637s ago: executing program 2 (id=773): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 2m36.281128534s ago: executing program 2 (id=777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100124}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)={0x0, 0x8000000}) 2m36.148110451s ago: executing program 2 (id=780): pipe(0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m36.064027848s ago: executing program 2 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) preadv(r4, &(0x7f0000000040), 0x1000000000000100, 0xfffffffc, 0x0) 2m35.769479084s ago: executing program 2 (id=785): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 2m35.695016373s ago: executing program 2 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20d40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m33.738126519s ago: executing program 0 (id=810): r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0xdca6, 0x0, 0x0, 0x0, "fc9e3c1e2fa36bbbb80305c37098baf96cb67e"}) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m33.61497633s ago: executing program 0 (id=811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t'], 0x1000f) 2m32.785960048s ago: executing program 0 (id=817): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x40000}], 0x1}, 0x4c2103a0) 2m32.737731278s ago: executing program 0 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000440)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 2m32.736904721s ago: executing program 0 (id=819): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) read(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m32.65902188s ago: executing program 0 (id=820): syz_create_resource$binfmt(0x0) execve(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000040)={[&(0x7f0000000080)='#! ']}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000040), 0x0}, 0x20) 2m32.605642369s ago: executing program 32 (id=820): syz_create_resource$binfmt(0x0) execve(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000040)={[&(0x7f0000000080)='#! ']}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000040), 0x0}, 0x20) 2m20.654109656s ago: executing program 33 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20d40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.202482911s ago: executing program 5 (id=1331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x8}]}}]}, 0x38}}, 0x0) 1m47.587406795s ago: executing program 5 (id=1335): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x7f) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) close(0x3) 1m47.493722585s ago: executing program 5 (id=1336): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) setrlimit(0x7, &(0x7f0000000000)={0x0, 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m47.353068659s ago: executing program 5 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001300)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 1m47.28094827s ago: executing program 5 (id=1340): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='\n8', 0x2}, {&(0x7f0000000140)='\x00', 0x1}], 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m46.995081173s ago: executing program 5 (id=1341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) 1m46.921315382s ago: executing program 34 (id=1341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) 48.972783695s ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 40.850685463s ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 32.420405971s ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 17.151428235s ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 14.707236428s ago: executing program 4 (id=2097): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x2, "b7dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0xb, 0x2, "0bec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f00000006c0)={0x0, 0x9, 0x2, "421e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.866056204s ago: executing program 4 (id=2108): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045515, 0x0) syz_open_dev$evdev(0x0, 0x5fd, 0x426402) timer_delete(0x0) 11.768953648s ago: executing program 4 (id=2111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open(&(0x7f0000000180)='./file0\x00', 0x80, 0xc2) 11.676026011s ago: executing program 4 (id=2112): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 11.347258324s ago: executing program 4 (id=2115): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000180)='./bus\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) 10.902193797s ago: executing program 4 (id=2117): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x40000000) gettid() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1000006, &(0x7f0000000200), 0x2, 0x6}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$dri(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.707224924s ago: executing program 35 (id=2117): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x40000000) gettid() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1000006, &(0x7f0000000200), 0x2, 0x6}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_dev$dri(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.002260534s ago: executing program 7 (id=2140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc05c5340, &(0x7f0000000040)) tkill(r1, 0x7) 7.665093937s ago: executing program 7 (id=2141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000280)="66b827008ec0b8010000000f01c1f3f08237069a26000000d80065f20f126c70260f6134d266baa00066b80d0066efd26504c4c15f58e8c4e26db89a0001c0fe", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.516958176s ago: executing program 7 (id=2142): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f00000001c0)={0x0, 0x13, 0x3, "0eafc9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.307858908s ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 2.780545334s ago: executing program 7 (id=2154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.779570772s ago: executing program 6 (id=2155): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.915416351s ago: executing program 6 (id=2160): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x922, 0x20000001) 1.501395941s ago: executing program 6 (id=2166): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 1.390379737s ago: executing program 8 (id=2167): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x8, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0xbf00000000000000) 1.309119748s ago: executing program 6 (id=2168): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x2111, &(0x7f0000000000)={0x0, 0x0, 0x40}) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.085826578s ago: executing program 8 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 1.056885722s ago: executing program 6 (id=2170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "3b772b5c38e2870b4e77"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x4, @string={0x4, 0x3, 'hp'}}, 0x0, 0x0}, 0x0) 875.129439ms ago: executing program 8 (id=2171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, 0x0, &(0x7f0000000380)=""/74}, 0x20) 873.653455ms ago: executing program 7 (id=2172): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x20, 0x1, 0xd, "86ac48803386b1c324e2df8350"}, 0x0}) 814.880777ms ago: executing program 3 (id=2174): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x0, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0xea}, 0x0, 0x0, 0x0) 777.267479ms ago: executing program 8 (id=2175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$binfmt_script(r0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 776.360311ms ago: executing program 3 (id=2176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mount_setattr(r2, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) 601.563097ms ago: executing program 3 (id=2177): open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x4}], 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 600.229844ms ago: executing program 8 (id=2178): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) r1 = io_uring_setup(0x3e76, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000}) dup2(r0, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 563.908223ms ago: executing program 3 (id=2179): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) 420.504385ms ago: executing program 1 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 104.265046ms ago: executing program 7 (id=2180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0xceb3) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000082c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000012400)={0x2020}, 0x2020) 103.863175ms ago: executing program 6 (id=2181): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 102.038319ms ago: executing program 3 (id=2182): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xf, @private1}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000640)=""/140, 0x8c}, {&(0x7f0000000340)=""/39, 0x27}], 0x2, 0xa0, 0x0) 101.713756ms ago: executing program 8 (id=2183): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) read(r2, 0x0, 0x2006) 101.570248ms ago: executing program 36 (id=2183): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) read(r2, 0x0, 0x2006) 0s ago: executing program 3 (id=2184): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): Interval 0, changing to 7 [ 205.141175][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.162783][ T5883] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 205.182964][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.192661][ T5883] usb 4-1: config 0 descriptor?? [ 205.393531][ T12] team0 (unregistering): Port device team_slave_1 removed [ 205.452887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 205.619610][ T5883] kone 0003:1E7D:2CED.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 205.817539][ T5883] kone 0003:1E7D:2CED.002A: couldn't init struct kone_device [ 205.825723][ T5883] kone 0003:1E7D:2CED.002A: couldn't install mouse [ 205.836504][ T5883] kone 0003:1E7D:2CED.002A: probe with driver kone failed with error -5 [ 205.846988][ T5883] usb 4-1: USB disconnect, device number 21 [ 205.975672][T10275] team0: entered promiscuous mode [ 205.980816][T10275] team_slave_0: entered promiscuous mode [ 205.987026][T10275] team0: left promiscuous mode [ 205.999274][T10275] team_slave_0: left promiscuous mode [ 206.012799][T10276] team0: Port device vlan2 added [ 206.102957][ T54] Bluetooth: hci2: command tx timeout [ 206.174420][T10197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.183444][T10197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.194049][T10197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.210662][T10197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.360811][T10197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.394576][T10297] netlink: 'syz.3.1658': attribute type 4 has an invalid length. [ 206.407581][ T29] audit: type=1400 audit(1731649224.760:576): avc: denied { read } for pid=10298 comm="syz.7.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.431897][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 206.446967][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.581527][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.588779][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.614519][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.621680][ T8526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.651048][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 206.678373][ T51] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 206.709860][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.765172][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.809920][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.841026][ T51] usb 5-1: SerialNumber: syz [ 206.871245][T10291] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.005719][T10197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.031243][T10328] netlink: 'syz.7.1670': attribute type 9 has an invalid length. [ 207.040875][T10328] netlink: 90940 bytes leftover after parsing attributes in process `syz.7.1670'. [ 207.071642][T10197] veth0_vlan: entered promiscuous mode [ 207.089243][T10197] veth1_vlan: entered promiscuous mode [ 207.116671][T10291] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.132630][T10197] veth0_macvtap: entered promiscuous mode [ 207.140769][T10197] veth1_macvtap: entered promiscuous mode [ 207.165675][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.176829][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.198389][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.212029][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.222302][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.233172][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.244201][T10197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.254247][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.265622][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.275636][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.288410][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.305312][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.316144][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.330091][T10197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.343326][T10197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.355042][T10197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.366968][T10197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.382917][T10197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.522794][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.530678][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.539172][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.556646][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.564680][ T51] cdc_ether 5-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.4-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 207.661167][ T5926] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 207.802038][ T5924] usb 5-1: USB disconnect, device number 29 [ 207.808467][ T5924] cdc_ether 5-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.4-1, Mobile Broadband Network Device [ 207.822947][ T5926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.834132][ T5926] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.844779][ T5926] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 207.856275][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.866927][ T5926] usb 7-1: config 0 descriptor?? [ 207.879814][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 207.889421][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 207.904588][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 207.914951][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 207.924656][ T5926] usb 7-1: media controller created [ 207.950122][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.975229][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 207.991265][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 208.007037][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 208.023937][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 208.031335][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 208.100646][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.111359][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.123566][ T5924] usb 7-1: USB disconnect, device number 11 [ 208.136463][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 208.457432][T10380] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÀ [ 208.489288][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1692'. [ 208.791186][ T5926] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 208.834950][T10400] input: syz0 as /devices/virtual/input/input42 [ 208.934600][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.956985][ T5926] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 208.966749][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.976240][ T5926] usb 8-1: config 0 descriptor?? [ 208.983857][ T5926] gspca_main: spca508-2.14.0 probing 8086:0110 [ 209.021134][ T51] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 209.172747][ T51] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.182646][ T51] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 209.188100][ T5926] gspca_spca508: reg_read err -32 [ 209.195612][ T51] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 209.211075][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.211816][ T5926] gspca_spca508: reg_read err -32 [ 209.221540][ T51] usb 7-1: config 0 descriptor?? [ 209.227324][ T5926] gspca_spca508: reg_read err -32 [ 209.238470][ T5926] gspca_spca508: reg_read err -32 [ 209.244267][ T5926] gspca_spca508: reg_read err -32 [ 209.451006][ T5926] gspca_spca508: reg write: error -71 [ 209.457525][ T5926] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 209.469125][ T5926] usb 8-1: USB disconnect, device number 6 [ 209.642222][ T51] kovaplus 0003:1E7D:2D50.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 209.847868][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.959123][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.969672][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.979792][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.994208][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.013554][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.022026][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.180223][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.197124][T10412] chnl_net:caif_netlink_parms(): no params data found [ 210.253840][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.311270][ T5927] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 210.357111][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.375065][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.382507][ T29] audit: type=1400 audit(1731649228.730:577): avc: denied { create } for pid=10431 comm="syz.4.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.412047][T10412] bridge_slave_0: entered allmulticast mode [ 210.421888][T10412] bridge_slave_0: entered promiscuous mode [ 210.430535][ T29] audit: type=1400 audit(1731649228.730:578): avc: denied { ioctl } for pid=10431 comm="syz.4.1711" path="socket:[38407]" dev="sockfs" ino=38407 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.455460][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.463739][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.470913][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.479109][T10412] bridge_slave_1: entered allmulticast mode [ 210.486185][T10412] bridge_slave_1: entered promiscuous mode [ 210.491173][ T5927] usb 8-1: Using ep0 maxpacket: 32 [ 210.512123][ T5927] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 210.532658][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.538443][ T5927] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 210.575932][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.589038][ T5927] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.608995][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.631373][ T5927] usb 8-1: config 0 descriptor?? [ 210.636900][T10421] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 210.657398][ T5927] hub 8-1:0.0: USB hub found [ 210.668973][T10412] team0: Port device team_slave_0 added [ 210.686108][ T51] kovaplus 0003:1E7D:2D50.002B: couldn't init struct kovaplus_device [ 210.697310][ T51] kovaplus 0003:1E7D:2D50.002B: couldn't install mouse [ 210.710631][T10412] team0: Port device team_slave_1 added [ 210.717468][ T11] bridge_slave_1: left allmulticast mode [ 210.724087][ T51] kovaplus 0003:1E7D:2D50.002B: probe with driver kovaplus failed with error -71 [ 210.733550][ T11] bridge_slave_1: left promiscuous mode [ 210.739256][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.749588][ T51] usb 7-1: USB disconnect, device number 12 [ 210.763285][ T11] bridge_slave_0: left allmulticast mode [ 210.769094][ T11] bridge_slave_0: left promiscuous mode [ 210.775949][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.880639][ T5927] hub 8-1:0.0: 2 ports detected [ 211.288732][ T5927] hub 8-1:0.0: set hub depth failed [ 211.297060][ T5927] usb 8-1: USB disconnect, device number 7 [ 211.587755][ T29] audit: type=1400 audit(1731649229.940:579): avc: denied { setopt } for pid=10451 comm="syz.3.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.608564][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.648822][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.672334][ T11] bond0 (unregistering): Released all slaves [ 211.778373][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.789677][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.857880][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.890056][T10465] ALSA: seq fatal error: cannot create timer (-22) [ 211.932933][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.939940][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.989390][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.005715][T10469] vlan1: entered promiscuous mode [ 212.033818][T10474] batadv_slave_1: entered promiscuous mode [ 212.036657][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 212.064135][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 212.101125][ T54] Bluetooth: hci2: command tx timeout [ 212.162847][T10467] batadv_slave_1: left promiscuous mode [ 212.170338][T10467] vlan1: left promiscuous mode [ 212.253353][T10412] hsr_slave_0: entered promiscuous mode [ 212.269884][T10412] hsr_slave_1: entered promiscuous mode [ 212.285771][T10412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.302234][T10412] Cannot create hsr debugfs directory [ 212.386657][ T11] hsr_slave_0: left promiscuous mode [ 212.393205][T10499] input: syz0 as /devices/virtual/input/input44 [ 212.407760][ T11] hsr_slave_1: left promiscuous mode [ 212.415149][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.429721][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.469451][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.482140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.563348][ T11] veth1_macvtap: left promiscuous mode [ 212.569974][ T11] veth0_macvtap: left promiscuous mode [ 212.578707][ T11] veth1_vlan: left promiscuous mode [ 212.585625][T10509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.594665][ T11] veth0_vlan: left promiscuous mode [ 213.274275][ T11] team0 (unregistering): Port device team_slave_1 removed [ 213.323514][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.182581][ T54] Bluetooth: hci2: command tx timeout [ 214.456903][T10412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.474572][T10412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.493683][T10412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.509268][T10412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.655690][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.692514][T10542] syz.3.1754 (10542) used greatest stack depth: 21344 bytes left [ 214.699336][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.719882][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.726986][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.764030][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.771174][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.130661][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.217820][T10412] veth0_vlan: entered promiscuous mode [ 215.246664][T10412] veth1_vlan: entered promiscuous mode [ 215.315563][T10412] veth0_macvtap: entered promiscuous mode [ 215.325555][T10412] veth1_macvtap: entered promiscuous mode [ 215.331163][ T29] audit: type=1400 audit(1731649233.680:580): avc: denied { read } for pid=10591 comm="syz.7.1771" laddr=fe80::13 lport=50952 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.337557][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.365436][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.376778][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.387449][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.397332][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.407857][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.418848][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.428250][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.438932][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.449030][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.460341][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.470691][ T29] audit: type=1400 audit(1731649233.820:581): avc: denied { create } for pid=10598 comm="syz.4.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 215.490472][T10412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.501182][T10412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.512081][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.546233][T10412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.557694][T10412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.568310][T10412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.578855][T10412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.587733][ T5881] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 215.742586][ T5881] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.754541][ T5881] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.765230][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.776048][ T5881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 215.781278][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 215.787347][ T5828] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 215.802513][ T5828] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 215.813562][ T5881] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 215.835804][ T5881] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.852843][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.860934][ T5881] usb 4-1: Product: syz [ 215.865923][ T5881] usb 4-1: Manufacturer: syz [ 215.877375][ T5881] cdc_wdm 4-1:1.0: skipping garbage [ 215.882706][ T5881] cdc_wdm 4-1:1.0: skipping garbage [ 215.888648][ T5881] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 215.894664][ T5881] cdc_wdm 4-1:1.0: Unknown control protocol [ 216.082610][ T5927] usb 4-1: USB disconnect, device number 22 [ 216.138653][T10614] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 216.265227][ T54] Bluetooth: hci2: command tx timeout [ 216.833799][ T29] audit: type=1400 audit(1731649235.180:582): avc: denied { read } for pid=10620 comm="syz.3.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.881837][ T29] audit: type=1400 audit(1731649235.240:583): avc: denied { setopt } for pid=10620 comm="syz.3.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 217.871228][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 217.877399][ T5828] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 218.341153][ T54] Bluetooth: hci2: command tx timeout [ 219.951259][ T5828] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 219.957411][ T5828] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 220.041811][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.069057][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.082063][ T29] audit: type=1400 audit(1731649238.440:584): avc: denied { getopt } for pid=10634 comm="syz.6.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 220.082276][T10636] IPVS: length: 128 != 24 [ 220.125424][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.134137][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.264810][ T5926] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 220.432390][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.444216][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.455780][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 220.480814][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.494190][ T5926] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.504011][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.513794][ T5926] usb 4-1: config 0 descriptor?? [ 220.519424][T10629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.587935][ T8528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.625636][ T29] audit: type=1400 audit(1731649238.980:585): avc: denied { getopt } for pid=10659 comm="syz.4.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 220.719672][ T8528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.817269][ T8528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.877071][ T8528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.938931][ T5926] plantronics 0003:047F:FFFF.002C: unknown main item tag 0xd [ 220.962662][ T5926] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 220.974750][ T8528] bridge_slave_1: left allmulticast mode [ 220.980415][ T8528] bridge_slave_1: left promiscuous mode [ 220.986805][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.994415][ T5926] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 221.010202][ T8528] bridge_slave_0: left allmulticast mode [ 221.016006][ T8528] bridge_slave_0: left promiscuous mode [ 221.021894][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.217971][ T5926] usb 4-1: USB disconnect, device number 23 [ 221.374118][ T8528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.388904][ T8528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.399946][ T8528] bond0 (unregistering): Released all slaves [ 221.662371][ T8528] hsr_slave_0: left promiscuous mode [ 221.681990][ T8528] hsr_slave_1: left promiscuous mode [ 221.704714][T10670] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 221.747154][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.755401][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.769771][ T8528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.811905][ T8528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.829311][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.840324][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.855978][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.863876][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.865455][ T8528] veth1_macvtap: left promiscuous mode [ 221.871364][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.876511][ T8528] veth0_macvtap: left promiscuous mode [ 221.890585][ T8528] veth1_vlan: left promiscuous mode [ 221.892704][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.896051][ T8528] veth0_vlan: left promiscuous mode [ 221.990363][ T5927] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 221.998690][ T5927] hid-generic 0000:0000:0000.002D: unknown main item tag 0xd [ 222.010109][ T5927] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 222.103884][ T29] audit: type=1400 audit(1731649240.450:586): avc: denied { write } for pid=10685 comm="syz.7.1808" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 222.428335][ T8528] team0 (unregistering): Port device team_slave_1 removed [ 222.476884][ T8528] team0 (unregistering): Port device team_slave_0 removed [ 223.011142][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1809'. [ 223.048881][T10689] 8021q: adding VLAN 0 to HW filter on device team1 [ 223.267044][ T29] audit: type=1400 audit(1731649241.600:587): avc: denied { getopt } for pid=10694 comm="syz.7.1814" lport=54783 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 223.430900][T10674] chnl_net:caif_netlink_parms(): no params data found [ 223.632241][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.661089][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.668295][T10674] bridge_slave_0: entered allmulticast mode [ 223.675127][T10674] bridge_slave_0: entered promiscuous mode [ 223.736404][T10727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.752142][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.759364][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.771669][T10674] bridge_slave_1: entered allmulticast mode [ 223.779199][T10674] bridge_slave_1: entered promiscuous mode [ 223.840338][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.913057][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.916798][ T29] audit: type=1400 audit(1731649242.270:588): avc: denied { watch } for pid=10731 comm="syz.7.1826" path="/105/file0" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 223.948666][ T54] Bluetooth: hci2: command tx timeout [ 223.986365][T10691] syz.3.1810 (10691): drop_caches: 2 [ 224.011190][T10674] team0: Port device team_slave_0 added [ 224.020465][T10674] team0: Port device team_slave_1 added [ 224.139397][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.150067][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.183920][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.207725][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.214884][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.246065][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.320643][T10674] hsr_slave_0: entered promiscuous mode [ 224.327193][T10674] hsr_slave_1: entered promiscuous mode [ 224.333705][T10674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.341609][T10674] Cannot create hsr debugfs directory [ 224.351228][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 224.504227][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.516985][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.528961][ T25] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 224.538392][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.552013][ T25] usb 8-1: config 0 descriptor?? [ 224.592628][ T29] audit: type=1400 audit(1731649242.950:589): avc: denied { accept } for pid=10756 comm="syz.6.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.860495][T10674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.874814][T10674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.896570][T10674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.907234][T10674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.965157][T10674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.974004][ T25] arvo 0003:1E7D:30D4.002E: global environment stack underflow [ 224.980844][T10674] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.996401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.003527][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.011388][ T25] arvo 0003:1E7D:30D4.002E: item 0 4 1 11 parsing failed [ 225.018786][ T25] arvo 0003:1E7D:30D4.002E: parse failed [ 225.026156][ T25] arvo 0003:1E7D:30D4.002E: probe with driver arvo failed with error -22 [ 225.040347][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.047494][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.127631][T10769] loop8: detected capacity change from 0 to 7 [ 225.141345][T10769] Dev loop8: unable to read RDB block 7 [ 225.148615][T10769] loop8: unable to read partition table [ 225.158464][T10769] loop8: partition table beyond EOD, truncated [ 225.161997][ T5881] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 225.164950][T10769] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 225.164950][T10769] ) failed (rc=-5) [ 225.199067][ T25] usb 8-1: USB disconnect, device number 8 [ 225.199911][T10674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.258228][T10674] veth0_vlan: entered promiscuous mode [ 225.269291][T10674] veth1_vlan: entered promiscuous mode [ 225.296279][T10674] veth0_macvtap: entered promiscuous mode [ 225.305735][T10674] veth1_macvtap: entered promiscuous mode [ 225.320008][T10674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.332135][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 225.332532][T10674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.345915][ T5881] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 225.349063][T10674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.359829][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.366774][T10674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.375249][ T5881] usb 5-1: Product: syz [ 225.389799][ T5881] usb 5-1: Manufacturer: syz [ 225.408548][T10674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.419525][T10674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.428822][ T5881] usb 5-1: SerialNumber: syz [ 225.433559][T10674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.440076][ T5881] usb 5-1: config 0 descriptor?? [ 225.455640][T10674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.467081][T10674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.478015][T10674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.489835][T10674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.502969][T10674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.515567][T10674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.527598][T10674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.539190][T10674] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.548746][T10674] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.571118][T10674] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.580048][T10674] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.649948][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.661328][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.684372][ T5881] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 225.687143][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.700136][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.711355][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 225.883019][ T25] usb 4-1: config 0 has an invalid interface number: 248 but max is 0 [ 225.892218][ T25] usb 4-1: config 0 has no interface number 0 [ 225.899084][ T25] usb 4-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice= 4.3d [ 225.908850][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.919368][ T25] usb 4-1: config 0 descriptor?? [ 225.925565][ T25] ftdi_sio 4-1:0.248: FTDI USB Serial Device converter detected [ 225.933589][ T25] ftdi_sio ttyUSB0: unknown device type: 0x43d [ 226.035097][T10794] netlink: 'syz.7.1848': attribute type 39 has an invalid length. [ 226.156073][ T25] usb 4-1: USB disconnect, device number 24 [ 226.163982][ T25] ftdi_sio 4-1:0.248: device disconnected [ 226.558314][ T29] audit: type=1400 audit(1731649244.910:590): avc: denied { ioctl } for pid=10803 comm="syz.7.1852" path="socket:[42413]" dev="sockfs" ino=42413 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.667275][ T29] audit: type=1400 audit(1731649245.020:591): avc: denied { ioctl } for pid=10807 comm="syz.7.1854" path="socket:[42421]" dev="sockfs" ino=42421 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 226.729427][T10811] evm: overlay not supported [ 226.743928][ T29] audit: type=1804 audit(1731649245.100:592): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1855" name="/newroot/357/bus/file0" dev="overlay" ino=1928 res=1 errno=0 [ 226.910018][ T5881] gspca_sunplus: reg_w_riv err -71 [ 226.917652][ T5881] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 226.927817][ T5881] usb 5-1: USB disconnect, device number 30 [ 227.396009][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.468696][T10826] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 228.483100][ T29] audit: type=1400 audit(1731649246.820:593): avc: denied { mounton } for pid=10827 comm="syz.6.1859" path="/227/file0" dev="tmpfs" ino=1219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 228.506250][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.564274][T10826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.626606][T10829] bond3: (slave bridge2): making interface the new active one [ 228.649329][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.661667][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.675076][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.683668][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.692961][T10829] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 228.695705][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.709353][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.716701][T10834] netlink: 'syz.3.1860': attribute type 39 has an invalid length. [ 228.764134][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1863'. [ 228.773811][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1863'. [ 228.793417][T10840] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.802414][T10840] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.811164][T10840] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.819869][T10840] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.830318][T10840] vxlan0: entered promiscuous mode [ 228.931052][ T5832] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 229.037186][T10835] chnl_net:caif_netlink_parms(): no params data found [ 229.111292][ T5832] usb 8-1: Using ep0 maxpacket: 8 [ 229.119285][ T5832] usb 8-1: config 0 has no interfaces? [ 229.125964][ T5832] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.135147][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.144887][ T5832] usb 8-1: config 0 descriptor?? [ 229.155683][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.163104][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.170298][T10835] bridge_slave_0: entered allmulticast mode [ 229.182158][T10835] bridge_slave_0: entered promiscuous mode [ 229.226090][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.246804][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.246945][ T29] audit: type=1400 audit(1731649247.600:594): avc: denied { cmd } for pid=10856 comm="syz.3.1868" path="socket:[42526]" dev="sockfs" ino=42526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.257782][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.276928][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.291598][T10835] bridge_slave_1: entered allmulticast mode [ 229.301429][T10835] bridge_slave_1: entered promiscuous mode [ 229.348383][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.372165][ T5883] usb 8-1: USB disconnect, device number 9 [ 229.391685][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.426222][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.446397][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.473792][T10835] team0: Port device team_slave_0 added [ 229.481723][T10835] team0: Port device team_slave_1 added [ 229.503094][T10835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.510610][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.538795][T10835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.564615][T10864] netlink: 'syz.3.1871': attribute type 1 has an invalid length. [ 229.582598][T10864] netlink: 'syz.3.1871': attribute type 2 has an invalid length. [ 229.600803][T10835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.621432][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.647677][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.679774][T10835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.722730][T10835] hsr_slave_0: entered promiscuous mode [ 229.739512][T10835] hsr_slave_1: entered promiscuous mode [ 229.752919][T10835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.760694][T10835] Cannot create hsr debugfs directory [ 229.851387][ T52] bridge_slave_1: left allmulticast mode [ 229.857158][ T52] bridge_slave_1: left promiscuous mode [ 229.874890][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.912996][ T52] bridge_slave_0: left allmulticast mode [ 229.924616][ T52] bridge_slave_0: left promiscuous mode [ 229.931222][ T5832] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 229.940517][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.111332][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 230.126639][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 230.137731][ T5832] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 230.147746][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 230.161661][ T5832] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 230.175435][ T5832] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 230.189679][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.198110][ T5832] usb 7-1: Product: syz [ 230.203332][ T5832] usb 7-1: Manufacturer: syz [ 230.210859][ T5832] usb 7-1: SerialNumber: syz [ 230.219011][ T5832] usb 7-1: config 0 descriptor?? [ 230.226228][ T5832] usb 7-1: NFC: Unable to get FW version [ 230.246586][ T5832] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -90 [ 230.533358][ T5926] usb 7-1: USB disconnect, device number 13 [ 230.607802][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.619942][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.634860][ T52] bond0 (unregistering): Released all slaves [ 230.741230][ T54] Bluetooth: hci2: command tx timeout [ 230.803330][T10908] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 231.006088][ T52] hsr_slave_0: left promiscuous mode [ 231.015033][ T52] hsr_slave_1: left promiscuous mode [ 231.020755][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.029883][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.041890][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.049988][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.061216][ T5883] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 231.086529][ T52] veth1_macvtap: left promiscuous mode [ 231.096798][ T52] veth0_macvtap: left promiscuous mode [ 231.102500][ T52] veth1_vlan: left promiscuous mode [ 231.107956][ T52] veth0_vlan: left promiscuous mode [ 231.246750][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.268245][ T5883] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.287113][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.308714][ T5883] usb 4-1: config 0 descriptor?? [ 231.315406][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 231.575187][ T52] team0 (unregistering): Port device team_slave_1 removed [ 231.620726][ T52] team0 (unregistering): Port device team_slave_0 removed [ 231.730711][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.737671][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.757532][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.776025][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 231.796008][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 232.024700][ T5883] pwc: recv_control_msg error -71 req 02 val 2000 [ 232.033410][ T5883] pwc: recv_control_msg error -71 req 02 val 2100 [ 232.071808][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 232.087525][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 232.099759][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 232.234113][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 232.274632][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 232.293827][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 232.302146][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 232.316387][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 232.333747][ T5883] pwc: Registered as video103. [ 232.351713][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 232.416929][ T5883] usb 4-1: USB disconnect, device number 25 [ 232.733966][T10941] input: syz1 as /devices/virtual/input/input47 [ 232.824136][ T54] Bluetooth: hci2: command tx timeout [ 232.943837][T10835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.955847][T10835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.965053][T10835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.976526][T10835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.038967][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.064595][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.077872][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.085266][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.104201][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.111344][ T8526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.236387][T10835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.246063][ T29] audit: type=1400 audit(1731649507.604:595): avc: denied { ioctl } for pid=10948 comm="syz.3.1904" path="/376/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 233.264477][T10835] veth0_vlan: entered promiscuous mode [ 233.292632][T10835] veth1_vlan: entered promiscuous mode [ 233.332790][T10835] veth0_macvtap: entered promiscuous mode [ 233.348272][T10835] veth1_macvtap: entered promiscuous mode [ 233.362929][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.373877][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.384130][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.394723][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.404873][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.416666][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.427556][T10835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.445413][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.457187][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.468435][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.479008][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.489276][T10835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.500300][T10835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.511332][T10835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.537335][T10835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.549983][T10835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.565077][T10835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.574253][T10835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.636569][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.648673][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.670335][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.679635][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.821254][ T5832] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 233.983705][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.995137][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.005021][ T5832] usb 7-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 234.011261][ T5927] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 234.014148][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.032313][ T5832] usb 7-1: config 0 descriptor?? [ 234.185321][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.207878][ T5927] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.226897][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.240271][ T5927] usb 4-1: config 0 descriptor?? [ 234.445465][ T5832] belkin 0003:1020:0006.002F: report_id 0 is invalid [ 234.453066][ T5832] belkin 0003:1020:0006.002F: item 0 0 1 8 parsing failed [ 234.460669][ T5832] belkin 0003:1020:0006.002F: parse failed [ 234.466758][ T5832] belkin 0003:1020:0006.002F: probe with driver belkin failed with error -22 [ 234.581255][ T5881] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 234.591197][ T5926] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 234.662108][ T5927] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 234.671965][ T25] usb 7-1: USB disconnect, device number 14 [ 234.675636][ T5927] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0030/input/input48 [ 234.751957][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 234.759281][ T5927] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 234.778295][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 234.787396][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 234.788982][ T5881] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 234.792820][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.810792][ T5926] usb 5-1: Product: syz [ 234.812076][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.815544][ T5926] usb 5-1: Manufacturer: syz [ 234.829484][ T5926] usb 5-1: SerialNumber: syz [ 234.831196][ T5881] usb 8-1: config 0 descriptor?? [ 234.840139][ T5926] usb 5-1: config 0 descriptor?? [ 234.841568][ T5881] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 234.847742][ T5926] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 235.073703][ T5927] usb 4-1: USB disconnect, device number 26 [ 235.359263][T10976] sd 0:0:1:0: PR command failed: 1026 [ 235.365185][T10976] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 235.372249][T10976] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 235.542359][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.281155][ T5881] gspca_sonixj: i2c_w8 err -71 [ 236.301199][ T5881] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 236.311194][ T5881] usb 8-1: USB disconnect, device number 10 [ 236.461187][ T5926] gspca_vc032x: reg_w err -71 [ 236.465963][ T5926] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 236.475940][ T5926] usb 5-1: USB disconnect, device number 31 [ 236.862465][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.872656][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.883878][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.894454][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.902803][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 236.918003][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.085752][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.185496][T11011] Failed to get privilege flags for destination (handle=0x2:0x0) [ 237.186926][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.225115][T10992] chnl_net:caif_netlink_parms(): no params data found [ 237.255148][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.306808][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.314787][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.325021][T10992] bridge_slave_0: entered allmulticast mode [ 237.331903][T10992] bridge_slave_0: entered promiscuous mode [ 237.339319][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.351178][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.358435][T10992] bridge_slave_1: entered allmulticast mode [ 237.366854][T10992] bridge_slave_1: entered promiscuous mode [ 237.409078][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.425782][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.451831][ T5883] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 237.460326][ T52] bridge_slave_1: left allmulticast mode [ 237.466503][ T52] bridge_slave_1: left promiscuous mode [ 237.472703][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.481715][ T52] bridge_slave_0: left allmulticast mode [ 237.487404][ T52] bridge_slave_0: left promiscuous mode [ 237.493601][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.601289][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 237.612966][ T5883] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 237.634903][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.657166][ T5883] usb 5-1: config 0 descriptor?? [ 238.009732][T11032] option changes via remount are deprecated (pid=11030 comm=syz.3.1935) [ 238.110442][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.128146][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.142454][ T52] bond0 (unregistering): Released all slaves [ 238.190077][T10992] team0: Port device team_slave_0 added [ 238.212108][T10992] team0: Port device team_slave_1 added [ 238.335252][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.343083][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.378139][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.419181][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.430459][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.461325][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.689707][ T52] hsr_slave_0: left promiscuous mode [ 238.700560][ T52] hsr_slave_1: left promiscuous mode [ 238.710705][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.718593][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.726673][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.735488][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.770822][ T52] veth1_macvtap: left promiscuous mode [ 238.776629][ T52] veth0_macvtap: left promiscuous mode [ 238.784506][ T52] veth1_vlan: left promiscuous mode [ 238.789944][ T52] veth0_vlan: left promiscuous mode [ 238.985962][ T54] Bluetooth: hci2: command tx timeout [ 239.131121][ T25] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 239.151090][ T5926] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 239.310167][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 239.312863][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.317309][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.338300][ T5883] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 239.356091][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.360746][ T5883] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 239.378669][ T25] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 239.378817][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.401841][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.411994][ T25] usb 8-1: config 0 descriptor?? [ 239.412929][ T5883] asix 5-1:0.0: probe with driver asix failed with error -71 [ 239.436589][ T5883] usb 5-1: USB disconnect, device number 32 [ 239.450615][ T5926] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 239.485651][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.497127][ T5926] usb 7-1: config 0 descriptor?? [ 239.582360][ T52] team0 (unregistering): Port device team_slave_1 removed [ 239.653843][ T52] team0 (unregistering): Port device team_slave_0 removed [ 240.003625][ T25] hid-steam 0003:28DE:1142.0031: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 240.009265][ T5926] usbhid 7-1:0.0: can't add hid device: -71 [ 240.030692][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 240.069575][ T5926] usb 7-1: USB disconnect, device number 15 [ 240.236020][ T5927] usb 8-1: USB disconnect, device number 11 [ 240.341252][ T5883] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 240.379873][T10992] hsr_slave_0: entered promiscuous mode [ 240.388243][T10992] hsr_slave_1: entered promiscuous mode [ 240.397247][T10992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.407573][T10992] Cannot create hsr debugfs directory [ 240.526154][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 240.577132][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.602794][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.647647][ T5883] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 240.673584][ T5883] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 240.682289][ T5883] usb 5-1: Product: syz [ 240.687163][ T5883] usb 5-1: Manufacturer: syz [ 240.705101][ T5883] usb 5-1: config 0 descriptor?? [ 241.016167][T10992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.033026][T10992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.042002][T10992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.050800][T10992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.072194][ T54] Bluetooth: hci2: command tx timeout [ 241.121764][ T29] audit: type=1400 audit(1731649515.474:596): avc: denied { setattr } for pid=11074 comm="syz.3.1950" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.155939][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.157108][ T5883] kovaplus 0003:1E7D:2D50.0032: item fetching failed at offset 5/7 [ 241.172520][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.190589][ T5883] kovaplus 0003:1E7D:2D50.0032: parse failed [ 241.198656][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.205756][ T8528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.213823][ T5883] kovaplus 0003:1E7D:2D50.0032: probe with driver kovaplus failed with error -22 [ 241.225160][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.232301][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.377275][ T5828] usb 5-1: USB disconnect, device number 33 [ 241.390309][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.439623][T10992] veth0_vlan: entered promiscuous mode [ 241.452193][T10992] veth1_vlan: entered promiscuous mode [ 241.486258][T10992] veth0_macvtap: entered promiscuous mode [ 241.496319][T10992] veth1_macvtap: entered promiscuous mode [ 241.510898][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.522150][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.532431][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.543285][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.553402][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.564271][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.576205][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.595799][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.606815][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.620113][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.631838][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.644739][T10992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.656236][T10992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.667712][ T29] audit: type=1326 audit(1731649516.024:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11082 comm="syz.3.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x0 [ 241.670128][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.706966][T10992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.716341][T10992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.725142][T10992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.734016][T10992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.817419][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.830044][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.896409][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.906506][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.949576][T11089] Bluetooth: MGMT ver 1.23 [ 242.095604][T11093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.302660][ T29] audit: type=1400 audit(1731649516.654:598): avc: denied { link } for pid=11101 comm="syz.7.1959" name="file1" dev="overlay" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.331954][ T29] audit: type=1400 audit(1731649516.694:599): avc: denied { setattr } for pid=11101 comm="syz.7.1959" name="#45" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.369832][ T29] audit: type=1400 audit(1731649516.694:600): avc: denied { rename } for pid=11101 comm="syz.7.1959" name="#45" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.253383][ T5883] libceph: connect (1)[c::]:6789 error -113 [ 243.259535][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 243.324055][T11123] ceph: No mds server is up or the cluster is laggy [ 243.569357][T11112] syz.6.1963 (11112) used greatest stack depth: 21088 bytes left [ 243.933693][ T2947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.243785][T11157] netlink: 'syz.6.1978': attribute type 1 has an invalid length. [ 245.447498][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.467592][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.482607][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.494737][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.505834][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.544516][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.611867][ T29] audit: type=1326 audit(1731649519.954:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 245.667749][ T29] audit: type=1326 audit(1731649519.954:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 245.693125][ T29] audit: type=1326 audit(1731649519.994:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 245.717096][ T29] audit: type=1326 audit(1731649519.994:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 245.777453][ T29] audit: type=1326 audit(1731649519.994:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.4.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 245.810383][ T2947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.834168][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 245.844194][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 245.844332][T11194] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 245.880512][T11194] CIFS mount error: No usable UNC path provided in device string! [ 245.880512][T11194] [ 245.911428][T11194] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 246.044267][ T2947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.068396][T11170] chnl_net:caif_netlink_parms(): no params data found [ 246.117498][T11203] syzkaller0: entered promiscuous mode [ 246.126251][T11203] syzkaller0: entered allmulticast mode [ 246.203186][ T2947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.626993][ T5846] Bluetooth: hci2: command tx timeout [ 248.553983][T11215] netlink: 'syz.6.1993': attribute type 39 has an invalid length. [ 248.636893][T11223] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.714513][ T5846] Bluetooth: hci2: command tx timeout [ 251.201176][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2004'. [ 251.210314][T11242] netlink: 'syz.7.2004': attribute type 5 has an invalid length. [ 251.261285][T11242] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.270035][T11242] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.279519][T11242] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.288287][T11242] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.320727][T11242] vxlan0: entered promiscuous mode [ 251.372218][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.394330][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.411351][T11170] bridge_slave_0: entered allmulticast mode [ 251.429622][T11170] bridge_slave_0: entered promiscuous mode [ 251.459926][T11170] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.473400][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.480624][T11170] bridge_slave_1: entered allmulticast mode [ 251.489989][T11170] bridge_slave_1: entered promiscuous mode [ 251.561230][ T5828] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 251.622623][ T2947] bridge_slave_1: left allmulticast mode [ 251.629101][ T2947] bridge_slave_1: left promiscuous mode [ 251.655221][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.677026][ T2947] bridge_slave_0: left allmulticast mode [ 251.686824][ T2947] bridge_slave_0: left promiscuous mode [ 251.692995][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.733107][ T5828] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 251.746934][ T5828] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 251.755626][ T5828] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 251.772323][ T5828] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 251.784015][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 251.791061][ T54] Bluetooth: hci2: command tx timeout [ 251.797087][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.824389][ T5828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 251.864928][ T5828] usb 7-1: language id specifier not provided by device, defaulting to English [ 251.903028][ T5828] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 251.912565][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.920587][ T5828] usb 7-1: Product: Ο頨䟋௩盘컴郜鞄⾣漖à»çœéšŠØ§ä‹˜ç—‚⶿朙뎜튡î–ê¯í™‚êᥢ唸㥘蟮ç¡æ¾¢í’í‰ã°á¹£êµŠä•Žî› à£¦ê˜µì»‹ë‰œ [ 251.942778][ T5828] usb 7-1: config 0 descriptor?? [ 251.949444][ T5828] hub 7-1:0.0: bad descriptor, ignoring hub [ 251.958651][ T5828] hub 7-1:0.0: probe with driver hub failed with error -5 [ 251.969545][ T5828] input: Ο頨䟋௩盘컴郜鞄⾣漖à»çœéšŠØ§ä‹˜ç—‚⶿朙뎜튡î–ê¯í™‚êᥢ唸㥘蟮ç¡æ¾¢í’í‰ã°á¹£êµŠä•Žî› à£¦ê˜µì»‹ as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input49 [ 252.278680][ T5828] usb 7-1: USB disconnect, device number 16 [ 252.286469][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.300752][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.311460][ T2947] bond0 (unregistering): Released all slaves [ 252.321857][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.345170][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.358655][T11287] pim6reg1: entered promiscuous mode [ 252.369493][T11287] pim6reg1: entered allmulticast mode [ 252.455629][T11170] team0: Port device team_slave_0 added [ 252.517956][T11170] team0: Port device team_slave_1 added [ 252.589783][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.598655][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.627686][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.675618][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.683169][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.709618][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.777928][ T2947] hsr_slave_0: left promiscuous mode [ 252.794538][ T2947] hsr_slave_1: left promiscuous mode [ 252.805750][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.831253][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.866171][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.879964][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.963459][ T2947] veth1_macvtap: left promiscuous mode [ 252.979630][T11313] syz.7.2029 (11313): /proc/11312/oom_adj is deprecated, please use /proc/11312/oom_score_adj instead. [ 252.979894][ T2947] veth0_macvtap: left promiscuous mode [ 253.012898][ T2947] veth1_vlan: left promiscuous mode [ 253.025815][ T2947] veth0_vlan: left promiscuous mode [ 253.849770][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 253.849788][ T29] audit: type=1326 audit(1731649528.204:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 253.882145][ T54] Bluetooth: hci2: command 0x0419 tx timeout [ 253.941237][ T29] audit: type=1326 audit(1731649528.204:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.020205][ T29] audit: type=1326 audit(1731649528.204:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.074239][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2039'. [ 254.088357][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 254.130317][ T29] audit: type=1326 audit(1731649528.214:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.174851][ T29] audit: type=1326 audit(1731649528.214:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.229530][ T29] audit: type=1326 audit(1731649528.214:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.271441][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 254.279039][ T29] audit: type=1326 audit(1731649528.214:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.305741][ T29] audit: type=1326 audit(1731649528.214:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.354227][ T29] audit: type=1326 audit(1731649528.214:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.399207][ T29] audit: type=1326 audit(1731649528.214:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11335 comm="syz.3.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x7ffc0000 [ 254.519520][ T5883] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 254.689652][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 254.706489][ T5883] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 254.716903][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.727006][ T5883] usb 4-1: config 0 descriptor?? [ 254.738571][ T5883] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 255.057457][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2045'. [ 255.081300][T11355] bridge_slave_1: left allmulticast mode [ 255.087431][T11355] bridge_slave_1: left promiscuous mode [ 255.117070][T11355] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.142699][T11355] bridge_slave_0: left allmulticast mode [ 255.148481][T11355] bridge_slave_0: left promiscuous mode [ 255.161281][T11355] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.253627][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2046'. [ 255.263137][T11357] netlink: 'syz.6.2046': attribute type 7 has an invalid length. [ 255.271008][T11357] netlink: 'syz.6.2046': attribute type 8 has an invalid length. [ 255.278847][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2046'. [ 255.300504][T11357] erspan0: entered promiscuous mode [ 255.342435][T11357] batadv_slave_1: entered promiscuous mode [ 255.466099][T11170] hsr_slave_0: entered promiscuous mode [ 255.497593][T11170] hsr_slave_1: entered promiscuous mode [ 255.518513][T11170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.534137][T11170] Cannot create hsr debugfs directory [ 255.811467][ T5926] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 255.941158][ T5846] Bluetooth: hci2: command 0x0419 tx timeout [ 255.981112][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 255.988186][ T5926] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 255.996770][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.011110][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.028213][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 216 [ 256.038888][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.053050][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.079637][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.308579][T11170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.331069][T11170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.343355][ T5926] usb 5-1: usb_control_msg returned -32 [ 256.349180][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 256.360614][T11170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.368139][ T5883] gspca_vc032x: reg_w err -71 [ 256.372926][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.378213][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.385342][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.395032][T11170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.401963][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.413204][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.429252][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.444123][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.459300][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.482607][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.491203][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.496526][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.502180][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.507594][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.513120][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.513867][T11170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.518392][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.531099][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.536465][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.542331][ T5883] gspca_vc032x: I2c Bus Busy Wait 00 [ 256.547621][ T5883] gspca_vc032x: Unknown sensor... [ 256.552742][ T5883] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 256.557082][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 256.562601][ T5883] usb 4-1: USB disconnect, device number 27 [ 256.599855][T11170] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.634753][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.641956][ T8528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.674287][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.681450][ T8528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.771142][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 256.778147][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.808623][ T25] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 256.820836][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 256.835354][ T25] usb 8-1: SerialNumber: syz [ 256.842296][ T25] usb 8-1: config 0 descriptor?? [ 256.850456][ T25] usb 8-1: Found UVC 0.00 device (05ac:8501) [ 256.860339][ T25] usb 8-1: No valid video chain found. [ 256.869765][T11170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.908762][T11170] veth0_vlan: entered promiscuous mode [ 256.924606][T11170] veth1_vlan: entered promiscuous mode [ 256.953429][T11170] veth0_macvtap: entered promiscuous mode [ 256.963329][T11170] veth1_macvtap: entered promiscuous mode [ 256.980673][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.991685][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.019914][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.042261][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.055932][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.068044][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.080435][T11170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.095624][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.095700][ T25] usb 8-1: USB disconnect, device number 12 [ 257.108293][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.135777][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.147280][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.160529][T11170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.176545][T11170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.187491][T11170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.205607][T11170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.215372][T11170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.229519][T11170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.240602][T11170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.343269][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.361584][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.405713][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.414798][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.523805][ T5883] usb 5-1: USB disconnect, device number 34 [ 258.711181][ T5926] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 258.821642][ T8] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 258.874697][ T5926] usb 7-1: New USB device found, idVendor=2ba2, idProduct=93b6, bcdDevice=de.4d [ 258.884194][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.892454][ T5926] usb 7-1: Product: syz [ 258.897218][ T5926] usb 7-1: Manufacturer: syz [ 258.904440][ T5926] usb 7-1: SerialNumber: syz [ 258.910034][ T5926] usb 7-1: config 0 descriptor?? [ 258.941238][ T5883] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 258.984064][ T8] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 258.992300][ T8] usb 8-1: config 0 has no interface number 0 [ 258.998399][ T8] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 259.009461][ T8] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.020614][ T8] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 259.029873][ T8] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 259.037996][ T8] usb 8-1: Product: syz [ 259.042343][ T8] usb 8-1: SerialNumber: syz [ 259.048061][ T8] usb 8-1: config 0 descriptor?? [ 259.054391][ T8] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 259.064303][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input50 [ 259.091262][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 259.098624][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 259.109604][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 259.119580][ T5883] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 259.128744][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.138326][ T5883] usb 5-1: config 0 descriptor?? [ 259.153933][ T8] usb 7-1: USB disconnect, device number 17 [ 259.209353][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.286003][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.294886][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.309133][ C0] cm109_urb_ctl_callback: 59 callbacks suppressed [ 259.309158][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 259.310864][ T5881] usb 8-1: USB disconnect, device number 13 [ 259.315611][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 259.339516][ T5881] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 259.555013][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.563566][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.575509][ T5883] hid (null): usage index exceeded [ 259.584226][ T5883] hid-generic 0003:0158:0100.0033: unknown main item tag 0x1 [ 259.591804][ T5883] hid-generic 0003:0158:0100.0033: unexpected long global item [ 259.600025][ T5883] hid-generic 0003:0158:0100.0033: probe with driver hid-generic failed with error -22 [ 259.796233][ T8] usb 5-1: USB disconnect, device number 35 [ 260.760728][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.823308][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 260.823325][ T29] audit: type=1400 audit(1731649535.184:628): avc: denied { read } for pid=11469 comm="syz.3.2088" dev="sockfs" ino=49457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 260.881872][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.894502][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.921325][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.949853][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.964855][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.974147][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.051254][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.162947][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.228547][T11486] syzkaller0: entered promiscuous mode [ 261.238654][T11486] syzkaller0: entered allmulticast mode [ 261.861209][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 262.024410][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 262.065549][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.074345][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.084570][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.113452][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.132590][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.140647][ T8] usb 5-1: Product: syz [ 262.144942][ T8] usb 5-1: Manufacturer: syz [ 262.158025][ T8] usb 5-1: SerialNumber: syz [ 262.606919][ T8] usb 5-1: 0:2 : does not exist [ 263.070114][ T5846] Bluetooth: hci2: command tx timeout [ 263.104100][ T5883] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 263.264115][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 263.278361][ T5883] usb 8-1: config 0 has an invalid interface number: 237 but max is 0 [ 263.289582][ T5883] usb 8-1: config 0 has no interface number 0 [ 263.298695][ T5883] usb 8-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice=2a.87 [ 263.318619][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.329563][ T5883] usb 8-1: Product: syz [ 263.336033][ T5883] usb 8-1: Manufacturer: syz [ 263.340825][ T5883] usb 8-1: SerialNumber: syz [ 263.353800][ T5883] usb 8-1: config 0 descriptor?? [ 263.609384][ T5883] gspca_main: pac207-2.14.0 probing 093a:2460 [ 263.724827][ T5883] gspca_pac207: Failed to read a register (index 0x0001, error -110) [ 263.843459][ T5828] usb 8-1: USB disconnect, device number 14 [ 263.927678][ T8] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 263.969122][ T8] usb 5-1: USB disconnect, device number 36 [ 264.159759][T11498] netlink: 'syz.3.2099': attribute type 4 has an invalid length. [ 264.220509][T11507] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 264.294948][ T35] bridge_slave_1: left allmulticast mode [ 264.300720][ T35] bridge_slave_1: left promiscuous mode [ 264.306853][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.317462][ T35] bridge_slave_0: left allmulticast mode [ 264.323865][ T35] bridge_slave_0: left promiscuous mode [ 264.329761][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.487949][ T29] audit: type=1326 audit(1731649538.844:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.543466][ T29] audit: type=1326 audit(1731649538.844:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.588866][ T29] audit: type=1326 audit(1731649538.844:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.651501][ T29] audit: type=1326 audit(1731649538.844:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.687709][ T29] audit: type=1326 audit(1731649538.844:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.711761][ T29] audit: type=1326 audit(1731649538.844:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.735482][ T29] audit: type=1326 audit(1731649538.844:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.798347][ T29] audit: type=1326 audit(1731649538.844:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 264.841983][ T29] audit: type=1326 audit(1731649538.844:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.4.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f491237e719 code=0x7ffc0000 [ 265.095344][ T5828] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 265.147393][ T5846] Bluetooth: hci2: command tx timeout [ 265.155228][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.166651][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.178301][ T35] bond0 (unregistering): Released all slaves [ 265.257567][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.269779][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.284273][ T5828] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 265.295811][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.324202][ T5828] usb 7-1: config 0 descriptor?? [ 265.373904][T11471] chnl_net:caif_netlink_parms(): no params data found [ 265.542744][ T5828] usbhid 7-1:0.0: can't add hid device: -71 [ 265.554530][ T5828] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 265.569598][ T5828] usb 7-1: USB disconnect, device number 18 [ 265.745336][ T35] hsr_slave_0: left promiscuous mode [ 265.773888][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.789955][ T35] hsr_slave_1: left promiscuous mode [ 265.797170][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.807647][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.815463][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.818931][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.833457][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.840901][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.851677][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.865835][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.878593][ T35] veth1_macvtap: left promiscuous mode [ 265.884264][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.891586][ T35] veth0_macvtap: left promiscuous mode [ 265.897462][ T35] veth1_vlan: left promiscuous mode [ 265.904043][ T35] veth0_vlan: left promiscuous mode [ 266.617827][ T35] team0 (unregistering): Port device team_slave_1 removed [ 266.702501][ T35] team0 (unregistering): Port device team_slave_0 removed [ 267.221268][ T5846] Bluetooth: hci2: command tx timeout [ 267.390013][T11471] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.398752][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.407497][T11471] bridge_slave_0: entered allmulticast mode [ 267.415246][T11471] bridge_slave_0: entered promiscuous mode [ 267.426090][T11562] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 267.445797][T11563] netlink: 'syz.7.2122': attribute type 10 has an invalid length. [ 267.456552][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.464111][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.507402][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.515258][T11563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.522757][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.530023][T11563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.572480][T11563] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.583823][T11471] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.591085][T11471] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.598304][T11471] bridge_slave_1: entered allmulticast mode [ 267.609778][T11471] bridge_slave_1: entered promiscuous mode [ 267.682203][T11471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.693631][ T2947] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 267.724573][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 267.736024][T11471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.838638][T11471] team0: Port device team_slave_0 added [ 267.917271][T11471] team0: Port device team_slave_1 added [ 267.996649][T11471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.022777][ T5846] Bluetooth: hci1: command tx timeout [ 268.058551][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.084703][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.108213][T11471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.190676][T11471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.202773][T11471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.228823][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.280838][T11471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.368545][T11471] hsr_slave_0: entered promiscuous mode [ 268.375794][T11471] hsr_slave_1: entered promiscuous mode [ 268.383672][T11471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.391938][T11471] Cannot create hsr debugfs directory [ 268.417719][T11553] chnl_net:caif_netlink_parms(): no params data found [ 268.424847][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 268.581101][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 268.610780][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.650363][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.682437][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.689710][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.699173][ T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 268.715438][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.731313][T11553] bridge_slave_0: entered allmulticast mode [ 268.738156][T11553] bridge_slave_0: entered promiscuous mode [ 268.742438][ T8] usb 7-1: config 0 descriptor?? [ 268.794829][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.803261][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.811790][T11553] bridge_slave_1: entered allmulticast mode [ 268.819904][T11553] bridge_slave_1: entered promiscuous mode [ 268.881404][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.894068][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.935154][T11622] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 268.943225][T11622] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2143'. [ 268.952839][T11622] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 268.960162][T11553] team0: Port device team_slave_0 added [ 268.979124][T11553] team0: Port device team_slave_1 added [ 269.005891][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.013323][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.043093][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.057047][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.064266][ T5881] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 269.072191][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.098439][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.145873][T11553] hsr_slave_0: entered promiscuous mode [ 269.164345][T11553] hsr_slave_1: entered promiscuous mode [ 269.170874][T11553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.175097][ T8] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0034/input/input51 [ 269.179272][T11553] Cannot create hsr debugfs directory [ 269.200320][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 269.200336][ T29] audit: type=1326 audit(1731649543.554:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.3.2144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8697e719 code=0x0 [ 269.229615][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.272774][ T5881] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.284741][ T5881] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.293215][ T8] appleir 0003:05AC:8241.0034: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 269.299706][ T5881] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.309174][ T5846] Bluetooth: hci2: command tx timeout [ 269.336021][T11471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.343773][ T5881] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 269.356519][T11471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.363786][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.389287][T11471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.412428][T11620] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 269.420126][T11471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.488550][T11553] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 269.498128][T11553] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.508905][T11553] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.518265][T11553] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 269.570490][T11471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.608399][T11471] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.638550][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.645802][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.654862][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.662033][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.684229][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.716378][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.737343][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.744601][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.759288][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.766737][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.929179][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.953003][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.973673][ T5832] usb 7-1: USB disconnect, device number 19 [ 270.024442][T11471] veth0_vlan: entered promiscuous mode [ 270.037191][T11471] veth1_vlan: entered promiscuous mode [ 270.058260][T11471] veth0_macvtap: entered promiscuous mode [ 270.080566][T11471] veth1_macvtap: entered promiscuous mode [ 270.101673][ T5846] Bluetooth: hci1: command tx timeout [ 270.115622][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.126493][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.136475][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.147107][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.157153][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.167779][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.178798][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.190441][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.201335][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.211456][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.222023][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.231983][T11471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.242552][T11471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.253583][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.267305][T11471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.276258][T11471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.285282][T11471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.294633][T11471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.391219][T11553] veth0_vlan: entered promiscuous mode [ 270.406358][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.419214][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.449389][T11553] veth1_vlan: entered promiscuous mode [ 270.470706][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.479452][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.517580][T11553] veth0_macvtap: entered promiscuous mode [ 270.543354][T11553] veth1_macvtap: entered promiscuous mode [ 270.636556][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.654594][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.675753][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.695509][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.720369][T11656] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 270.720994][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.746057][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.756469][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.767104][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.779863][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.792589][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.803293][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.815015][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.825684][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.835530][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.846284][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.856126][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.866843][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.877760][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.899978][T11553] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.911966][T11553] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.920763][T11553] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.931455][T11553] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.035639][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.044641][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.062034][T11658] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 271.070467][T11658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 271.090253][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.107244][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.241963][ T5926] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 271.401234][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 271.410204][ T5926] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.424477][ T5926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.435150][ T5926] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.449667][ T5926] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.475692][ T5926] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.485031][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.574157][ T5881] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 271.583111][ T5881] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input52 [ 271.612741][ T5881] usb 8-1: USB disconnect, device number 15 [ 271.618705][ C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 271.697932][ T5926] usb 4-1: usb_control_msg returned -32 [ 271.709972][ T5926] usbtmc 4-1:16.0: can't read capabilities [ 272.182300][ T5846] Bluetooth: hci1: command tx timeout [ 273.828646][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.839259][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.850696][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.869139][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.883685][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.896903][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.980490][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.019752][ T5881] usb 4-1: USB disconnect, device number 28 [ 274.146028][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.261190][ T54] Bluetooth: hci1: command tx timeout [ 274.498353][ T29] audit: type=1400 audit(1731649548.854:652): avc: denied { write } for pid=11695 comm="syz.8.2162" name="/" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 274.646012][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.669626][T11678] chnl_net:caif_netlink_parms(): no params data found [ 274.672157][T11698] block device autoloading is deprecated and will be removed. [ 274.709238][T11702] lo speed is unknown, defaulting to 1000 [ 274.749535][T11702] lo speed is unknown, defaulting to 1000 [ 274.817371][ T29] audit: type=1400 audit(1731649549.154:653): avc: denied { cmd } for pid=11704 comm="syz.8.2165" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 274.908787][T11702] lo speed is unknown, defaulting to 1000 [ 274.947783][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.959623][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.971820][T11702] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 275.012303][T11678] bridge_slave_0: entered allmulticast mode [ 275.019206][T11678] bridge_slave_0: entered promiscuous mode [ 275.051225][T11702] lo speed is unknown, defaulting to 1000 [ 275.058272][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.086270][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.095872][T11678] bridge_slave_1: entered allmulticast mode [ 275.103434][T11678] bridge_slave_1: entered promiscuous mode [ 275.111866][T11702] lo speed is unknown, defaulting to 1000 [ 275.119566][T11702] lo speed is unknown, defaulting to 1000 [ 275.140522][T11702] lo speed is unknown, defaulting to 1000 [ 275.151570][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.237975][T11702] lo speed is unknown, defaulting to 1000 [ 275.249700][T11702] lo speed is unknown, defaulting to 1000 [ 275.272558][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.326663][T11702] lo speed is unknown, defaulting to 1000 [ 275.405821][T11678] team0: Port device team_slave_0 added [ 275.438368][T11678] team0: Port device team_slave_1 added [ 275.501641][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.508715][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.546799][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.562155][ T29] audit: type=1404 audit(1731649549.914:654): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 275.571171][ T5881] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 275.596931][ T29] audit: type=1400 audit(1731649549.954:655): avc: denied { ioctl } for pid=11719 comm="syz.6.2170" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 275.626772][ T29] audit: type=1400 audit(1731649549.954:656): avc: denied { mount } for pid=11729 comm="syz.3.2176" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=0 [ 275.653600][ T29] audit: type=1400 audit(1731649549.984:657): avc: denied { ioctl } for pid=11721 comm="syz.7.2172" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 275.685588][ T5883] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 275.701571][ T29] audit: type=1400 audit(1731649549.984:658): avc: denied { mounton } for pid=11729 comm="syz.3.2176" path="/447/file0" dev="tmpfs" ino=2446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 275.728444][ T29] audit: type=1400 audit(1731649550.014:659): avc: denied { unmount } for pid=11730 comm="syz.8.2175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 275.751565][ T29] audit: type=1400 audit(1731649550.044:660): avc: denied { read write } for pid=5836 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.781039][ T29] audit: type=1400 audit(1731649550.044:661): avc: denied { unmount } for pid=11553 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 275.937668][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.020385][ T35] bridge_slave_1: left allmulticast mode [ 276.026431][ T35] bridge_slave_1: left promiscuous mode [ 276.033376][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.052474][ T35] bridge_slave_0: left allmulticast mode [ 276.058347][ T35] bridge_slave_0: left promiscuous mode [ 276.081486][ T35] bridge0: port 1(bridge_slave_0) entered disabled state Nov 15 05:45:50 syzkaller auth.info sshd[5815]: Received disconnect from 10.128.0.169 port 34136:11: disconnected by user Nov 15 05:45:50 syzkaller auth.info sshd[5815]: Disconnected from user root 10.128.0.169 port 34136 [ 276.922722][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.933557][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.944821][ T35] bond0 (unregistering): Released all slaves [ 277.240648][ T35] hsr_slave_0: left promiscuous mode [ 277.247163][ T35] hsr_slave_1: left promiscuous mode [ 277.252942][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.260512][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.268330][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.276072][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.290446][ T35] veth1_macvtap: left promiscuous mode [ 277.296105][ T35] veth0_macvtap: left promiscuous mode [ 277.301819][ T35] veth1_vlan: left promiscuous mode [ 277.307058][ T35] veth0_vlan: left promiscuous mode [ 277.738950][ T35] team0 (unregistering): Port device team_slave_1 removed [ 277.794389][ T35] team0 (unregistering): Port device team_slave_0 removed [ 278.603695][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.614536][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.663427][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.673884][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.728535][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.739437][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.817563][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.828077][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.926992][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.937730][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.948199][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46056 - 0 [ 279.028656][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.039153][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.050012][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46056 - 0 [ 279.127007][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.137523][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.147918][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46056 - 0 [ 279.218980][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.229461][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.239962][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46056 - 0 [ 279.355160][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.437536][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.491288][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.548243][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.619460][ T35] bridge_slave_1: left allmulticast mode [ 279.625398][ T35] bridge_slave_1: left promiscuous mode [ 279.632439][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.640625][ T35] bridge_slave_0: left allmulticast mode [ 279.646769][ T35] bridge_slave_0: left promiscuous mode [ 279.652583][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.663819][ T35] bridge_slave_1: left allmulticast mode [ 279.669478][ T35] bridge_slave_1: left promiscuous mode [ 279.675245][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.683523][ T35] bridge_slave_0: left allmulticast mode [ 279.689343][ T35] bridge_slave_0: left promiscuous mode [ 279.695190][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.706227][ T35] bridge_slave_1: left allmulticast mode [ 279.712002][ T35] bridge_slave_1: left promiscuous mode [ 279.717651][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.721907][ T11] [ 279.727302][ T11] ============================= [ 279.732292][ T11] WARNING: suspicious RCU usage [ 279.737141][ T11] 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 Not tainted [ 279.744722][ T11] ----------------------------- [ 279.749653][ T11] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 279.758582][ T11] [ 279.758582][ T11] other info that might help us debug this: [ 279.758582][ T11] [ 279.768921][ T11] [ 279.768921][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 279.777160][ T11] 3 locks held by kworker/u8:0/11: [ 279.782440][ T11] #0: ffff88805c82e148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 279.793132][ T11] #1: ffffc90000107d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 279.805463][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 279.815312][ T11] [ 279.815312][ T11] stack backtrace: [ 279.821274][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 279.831972][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 279.842048][ T11] Workqueue: bond0 bond_mii_monitor [ 279.847251][ T11] Call Trace: [ 279.850600][ T11] [ 279.853523][ T11] dump_stack_lvl+0x16c/0x1f0 [ 279.858196][ T11] lockdep_rcu_suspicious+0x210/0x3c0 [ 279.863581][ T11] dev_deactivate_queue+0x167/0x190 [ 279.868781][ T11] dev_deactivate_many+0xe7/0xb20 [ 279.873889][ T11] dev_deactivate+0xf9/0x1c0 [ 279.878470][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 279.883660][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.889556][ T11] linkwatch_do_dev+0x11e/0x160 [ 279.894405][ T11] linkwatch_sync_dev+0x181/0x210 [ 279.899419][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 279.905045][ T11] ethtool_op_get_link+0x1d/0x70 [ 279.909967][ T11] bond_check_dev_link+0x197/0x490 [ 279.915069][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 279.920688][ T11] ? rcu_is_watching+0x12/0xc0 [ 279.925451][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 279.930383][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 279.935743][ T11] ? rcu_is_watching+0x12/0xc0 [ 279.940495][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 279.945782][ T11] ? process_one_work+0x921/0x1ba0 [ 279.950888][ T11] ? lock_acquire+0x2f/0xb0 [ 279.955382][ T11] ? process_one_work+0x921/0x1ba0 [ 279.960485][ T11] process_one_work+0x9c5/0x1ba0 [ 279.965428][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 279.970877][ T11] ? __pfx_process_one_work+0x10/0x10 [ 279.976246][ T11] ? assign_work+0x1a0/0x250 [ 279.980915][ T11] worker_thread+0x6c8/0xf00 [ 279.985592][ T11] ? __pfx_worker_thread+0x10/0x10 [ 279.990684][ T11] kthread+0x2c1/0x3a0 [ 279.994751][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.999950][ T11] ? __pfx_kthread+0x10/0x10 [ 280.004801][ T11] ret_from_fork+0x45/0x80 [ 280.009203][ T11] ? __pfx_kthread+0x10/0x10 [ 280.013782][ T11] ret_from_fork_asm+0x1a/0x30 [ 280.018631][ T11] [ 280.024436][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 280.024451][ T29] audit: type=1400 audit(1731649554.384:698): avc: denied { read } for pid=5181 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 280.026458][ T11] [ 280.058001][ T11] ============================= [ 280.058013][ T11] WARNING: suspicious RCU usage [ 280.058021][ T11] 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 Not tainted [ 280.058031][ T11] ----------------------------- [ 280.080482][ T11] include/linux/rtnetlink.h:100 suspicious rcu_dereference_protected() usage! Nov 15 05:45:54 [ 280.089591][ T11] [ 280.089591][ T11] other info that might help us debug this: [ 280.089591][ T11] [ 280.089794][ T29] audit: type=1400 audit(1731649554.454:699): avc: denied { read } for pid=5181 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 syzkaller daemon[ 280.123262][ T11] [ 280.123262][ T11] rcu_scheduler_active = 2, debug_locks = 1 .err dhcpcd[5493]: ps_sendpsmmsg[ 280.132771][ T11] 3 locks held by kworker/u8:0/11: : Connection ref[ 280.132786][ T11] #0: ffff88805c82e148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 used [ 280.132852][ T11] #1: ffffc90000107d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 Nov 15 05:45:54 [ 280.132902][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 syzkaller daemon[ 280.132958][ T11] [ 280.132958][ T11] stack backtrace: .err dhcpcd[5493[ 280.132967][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 ]: ps_root_recvm[ 280.132987][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 sgcb: failed to [ 280.133000][ T11] Workqueue: bond0 bond_mii_monitor send message to [ 280.133026][ T11] Call Trace: pid 10597: Conne[ 280.133032][ T11] ction refused [ 280.133041][ T11] dump_stack_lvl+0x16c/0x1f0 [ 280.133064][ T11] lockdep_rcu_suspicious+0x210/0x3c0 [ 280.133095][ T11] dev_deactivate_many+0x8af/0xb20 [ 280.133128][ T11] dev_deactivate+0xf9/0x1c0 [ 280.133153][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 280.133177][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.133210][ T11] linkwatch_do_dev+0x11e/0x160 [ 280.133242][ T11] linkwatch_sync_dev+0x181/0x210 [ 280.133262][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 280.133276][ T11] ethtool_op_get_link+0x1d/0x70 [ 280.133290][ T11] bond_check_dev_link+0x197/0x490 [ 280.133308][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 280.133324][ T11] ? rcu_is_watching+0x12/0xc0 [ 280.133350][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 280.133375][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 280.133394][ T11] ? rcu_is_watching+0x12/0xc0 [ 280.133410][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 280.133427][ T11] ? process_one_work+0x921/0x1ba0 [ 280.133442][ T11] ? lock_acquire+0x2f/0xb0 [ 280.133454][ T11] ? process_one_work+0x921/0x1ba0 [ 280.133471][ T11] process_one_work+0x9c5/0x1ba0 [ 280.133490][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 280.133511][ T11] ? __pfx_process_one_work+0x10/0x10 [ 280.133530][ T11] ? assign_work+0x1a0/0x250 [ 280.133552][ T11] worker_thread+0x6c8/0xf00 [ 280.133574][ T11] ? __pfx_worker_thread+0x10/0x10 [ 280.133587][ T11] kthread+0x2c1/0x3a0 [ 280.133603][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.133622][ T11] ? __pfx_kthread+0x10/0x10 [ 280.133640][ T11] ret_from_fork+0x45/0x80 [ 280.133653][ T11] ? __pfx_kthread+0x10/0x10 [ 280.133670][ T11] ret_from_fork_asm+0x1a/0x30 [ 280.133699][ T11] [ 280.134102][ T11] BUG: sleeping function called from invalid context at net/core/dev.c:11284 [ 280.399627][ T11] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11, name: kworker/u8:0 [ 280.409584][ T11] preempt_count: 0, expected: 0 [ 280.414520][ T11] RCU nest depth: 1, expected: 0 [ 280.419561][ T11] 3 locks held by kworker/u8:0/11: [ 280.424802][ T11] #0: ffff88805c82e148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 280.435484][ T11] #1: ffffc90000107d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 280.448077][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 280.457773][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 280.468437][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 280.478496][ T11] Workqueue: bond0 bond_mii_monitor [ 280.483718][ T11] Call Trace: [ 280.486987][ T11] [ 280.489940][ T11] dump_stack_lvl+0x16c/0x1f0 [ 280.494606][ T11] __might_resched+0x3c0/0x5e0 [ 280.499358][ T11] ? __pfx___might_resched+0x10/0x10 [ 280.504618][ T11] ? dev_deactivate_many+0x260/0xb20 [ 280.509898][ T11] synchronize_net+0x1b/0x60 [ 280.514470][ T11] dev_deactivate_many+0x2a1/0xb20 [ 280.519561][ T11] dev_deactivate+0xf9/0x1c0 [ 280.524146][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 280.529320][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.535195][ T11] linkwatch_do_dev+0x11e/0x160 [ 280.540033][ T11] linkwatch_sync_dev+0x181/0x210 [ 280.545125][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 280.550753][ T11] ethtool_op_get_link+0x1d/0x70 [ 280.555685][ T11] bond_check_dev_link+0x197/0x490 [ 280.560780][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 280.566411][ T11] ? rcu_is_watching+0x12/0xc0 [ 280.571179][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 280.576139][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 280.581586][ T11] ? rcu_is_watching+0x12/0xc0 [ 280.586504][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 280.591703][ T11] ? process_one_work+0x921/0x1ba0 [ 280.596847][ T11] ? lock_acquire+0x2f/0xb0 [ 280.601351][ T11] ? process_one_work+0x921/0x1ba0 [ 280.606465][ T11] process_one_work+0x9c5/0x1ba0 [ 280.611400][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 280.616789][ T11] ? __pfx_process_one_work+0x10/0x10 [ 280.622177][ T11] ? assign_work+0x1a0/0x250 [ 280.626973][ T11] worker_thread+0x6c8/0xf00 [ 280.631680][ T11] ? __pfx_worker_thread+0x10/0x10 [ 280.636819][ T11] kthread+0x2c1/0x3a0 [ 280.640905][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.646200][ T11] ? __pfx_kthread+0x10/0x10 [ 280.650786][ T11] ret_from_fork+0x45/0x80 [ 280.655205][ T11] ? __pfx_kthread+0x10/0x10 [ 280.659784][ T11] ret_from_fork_asm+0x1a/0x30 [ 280.664539][ T11] [ 280.668988][ T11] [ 280.671407][ T11] ============================= [ 280.676246][ T11] WARNING: suspicious RCU usage [ 280.681296][ T11] 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 Tainted: G W [ 280.690143][ T11] ----------------------------- [ 280.695035][ T11] kernel/rcu/tree_exp.h:946 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 280.705748][ T11] [ 280.705748][ T11] other info that might help us debug this: [ 280.705748][ T11] [ 280.716052][ T11] [ 280.716052][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 280.724165][ T11] 3 locks held by kworker/u8:0/11: [ 280.729266][ T11] #0: ffff88805c82e148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 280.739937][ T11] #1: ffffc90000107d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 280.752786][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 280.762531][ T11] [ 280.762531][ T11] stack backtrace: [ 280.768421][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G W 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 280.780569][ T11] Tainted: [W]=WARN [ 280.784364][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 280.794409][ T11] Workqueue: bond0 bond_mii_monitor [ 280.799609][ T11] Call Trace: [ 280.802873][ T11] [ 280.805789][ T11] dump_stack_lvl+0x16c/0x1f0 [ 280.810454][ T11] lockdep_rcu_suspicious+0x210/0x3c0 [ 280.815828][ T11] synchronize_rcu_expedited+0x1e5/0x450 [ 280.821447][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 280.827596][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 280.832433][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 280.837277][ T11] ? add_taint+0x5f/0xd0 [ 280.841520][ T11] ? __pfx___might_resched+0x10/0x10 [ 280.846789][ T11] ? dev_deactivate_many+0x260/0xb20 [ 280.852084][ T11] synchronize_net+0x3e/0x60 [ 280.856665][ T11] dev_deactivate_many+0x2a1/0xb20 [ 280.861958][ T11] dev_deactivate+0xf9/0x1c0 [ 280.866555][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 280.871753][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.877814][ T11] linkwatch_do_dev+0x11e/0x160 [ 280.882654][ T11] linkwatch_sync_dev+0x181/0x210 [ 280.887668][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 280.893284][ T11] ethtool_op_get_link+0x1d/0x70 [ 280.898378][ T11] bond_check_dev_link+0x197/0x490 [ 280.903582][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 280.909319][ T11] ? rcu_is_watching+0x12/0xc0 [ 280.914078][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 280.919042][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 280.924404][ T11] ? rcu_is_watching+0x12/0xc0 [ 280.929164][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 280.934358][ T11] ? process_one_work+0x921/0x1ba0 [ 280.939465][ T11] ? lock_acquire+0x2f/0xb0 [ 280.944000][ T11] ? process_one_work+0x921/0x1ba0 [ 280.949118][ T11] process_one_work+0x9c5/0x1ba0 [ 280.954044][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 280.959494][ T11] ? __pfx_process_one_work+0x10/0x10 [ 280.964865][ T11] ? assign_work+0x1a0/0x250 [ 280.969628][ T11] worker_thread+0x6c8/0xf00 [ 280.974219][ T11] ? __pfx_worker_thread+0x10/0x10 [ 280.979313][ T11] kthread+0x2c1/0x3a0 [ 280.983374][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.988562][ T11] ? __pfx_kthread+0x10/0x10 [ 280.993148][ T11] ret_from_fork+0x45/0x80 [ 280.997568][ T11] ? __pfx_kthread+0x10/0x10 [ 281.002151][ T11] ret_from_fork_asm+0x1a/0x30 [ 281.006912][ T11] [ 281.011644][ T11] [ 281.013986][ T11] ============================= [ 281.018895][ T11] [ BUG: Invalid wait context ] [ 281.023722][ T11] 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 Tainted: G W [ 281.032280][ T11] ----------------------------- [ 281.037099][ T11] kworker/u8:0/11 is trying to lock: [ 281.042358][ T11] ffffffff8e1c3c38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 281.052197][ T11] other info that might help us debug this: [ 281.058069][ T11] context-{4:4} [ 281.061517][ T11] 3 locks held by kworker/u8:0/11: [ 281.066617][ T11] #0: ffff88805c82e148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 281.077310][ T11] #1: ffffc90000107d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 281.089561][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 281.099217][ T11] stack backtrace: [ 281.102956][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G W 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 281.115568][ T11] Tainted: [W]=WARN [ 281.119372][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 281.129449][ T11] Workqueue: bond0 bond_mii_monitor [ 281.135299][ T11] Call Trace: [ 281.138593][ T11] [ 281.141549][ T11] dump_stack_lvl+0x116/0x1f0 [ 281.146216][ T11] __lock_acquire+0x13db/0x3ce0 [ 281.151071][ T11] ? __pfx___lock_acquire+0x10/0x10 [ 281.156251][ T11] ? add_lock_to_list+0x17d/0x390 [ 281.161288][ T11] lock_acquire.part.0+0x11b/0x380 [ 281.166378][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.171305][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 281.176915][ T11] ? rcu_is_watching+0x12/0xc0 [ 281.181662][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 281.186841][ T11] ? __might_resched+0x4ca/0x5e0 [ 281.191906][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.196834][ T11] ? lock_acquire+0x2f/0xb0 [ 281.201406][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.206339][ T11] __mutex_lock+0x175/0x9c0 [ 281.210833][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.215845][ T11] ? find_held_lock+0x2d/0x110 [ 281.220600][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.225620][ T11] ? __pfx___mutex_lock+0x10/0x10 [ 281.230711][ T11] ? exp_funnel_lock+0x171/0x3b0 [ 281.235648][ T11] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 281.241086][ T11] ? lock_acquire+0x2f/0xb0 [ 281.245752][ T11] ? exp_funnel_lock+0x13c/0x3b0 [ 281.250772][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.255780][ T11] exp_funnel_lock+0x1a4/0x3b0 [ 281.260528][ T11] ? __pfx_exp_funnel_lock+0x10/0x10 [ 281.265808][ T11] ? __might_resched+0x4ca/0x5e0 [ 281.270728][ T11] ? __pfx___might_resched+0x10/0x10 [ 281.276090][ T11] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 281.281625][ T11] synchronize_rcu_expedited+0x290/0x450 [ 281.287236][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 281.293455][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 281.298289][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 281.303918][ T11] ? add_taint+0x5f/0xd0 [ 281.308153][ T11] ? __pfx___might_resched+0x10/0x10 [ 281.313433][ T11] ? dev_deactivate_many+0x260/0xb20 [ 281.318722][ T11] synchronize_net+0x3e/0x60 [ 281.323397][ T11] dev_deactivate_many+0x2a1/0xb20 [ 281.328618][ T11] dev_deactivate+0xf9/0x1c0 [ 281.333321][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 281.338518][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.344604][ T11] linkwatch_do_dev+0x11e/0x160 [ 281.349542][ T11] linkwatch_sync_dev+0x181/0x210 [ 281.354553][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 281.360383][ T11] ethtool_op_get_link+0x1d/0x70 [ 281.365421][ T11] bond_check_dev_link+0x197/0x490 [ 281.371403][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 281.377024][ T11] ? rcu_is_watching+0x12/0xc0 [ 281.381776][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 281.386703][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 281.392151][ T11] ? rcu_is_watching+0x12/0xc0 [ 281.396923][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 281.402384][ T11] ? process_one_work+0x921/0x1ba0 [ 281.407476][ T11] ? lock_acquire+0x2f/0xb0 [ 281.411958][ T11] ? process_one_work+0x921/0x1ba0 [ 281.417052][ T11] process_one_work+0x9c5/0x1ba0 [ 281.421973][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 281.427331][ T11] ? __pfx_process_one_work+0x10/0x10 [ 281.432686][ T11] ? assign_work+0x1a0/0x250 [ 281.437266][ T11] worker_thread+0x6c8/0xf00 [ 281.441855][ T11] ? __pfx_worker_thread+0x10/0x10 [ 281.446947][ T11] kthread+0x2c1/0x3a0 [ 281.451001][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.456185][ T11] ? __pfx_kthread+0x10/0x10 [ 281.460850][ T11] ret_from_fork+0x45/0x80 [ 281.465246][ T11] ? __pfx_kthread+0x10/0x10 [ 281.469821][ T11] ret_from_fork_asm+0x1a/0x30 [ 281.474576][ T11] [ 281.477947][ T11] ------------[ cut here ]------------ [ 281.483428][ T11] Voluntary context switch within RCU read-side critical section! [ 281.483493][ T11] WARNING: CPU: 1 PID: 11 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xc5c/0x1ae0 [ 281.501582][ T11] Modules linked in: [ 281.505457][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G W 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 281.517758][ T11] Tainted: [W]=WARN [ 281.521541][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 281.531580][ T11] Workqueue: bond0 bond_mii_monitor [ 281.536771][ T11] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 281.543096][ T11] Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 92 c4 d2 0e 01 90 48 c7 c7 40 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 281.562688][ T11] RSP: 0018:ffffc900001073b0 EFLAGS: 00010086 [ 281.568738][ T11] RAX: 0000000000000000 RBX: ffff8880b873fe80 RCX: ffffffff814e6e79 [ 281.576690][ T11] RDX: ffff88801c69a440 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 281.584643][ T11] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 281.592594][ T11] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801c69a440 [ 281.600544][ T11] R13: ffff88801c69a440 R14: ffff88801c69a440 R15: ffff8880b873eec0 [ 281.608515][ T11] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 281.617441][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.624024][ T11] CR2: 0000556ecc32a078 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 281.632196][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000080000000 [ 281.640150][ T11] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 281.648117][ T11] Call Trace: [ 281.651377][ T11] [ 281.654291][ T11] ? __warn+0xea/0x3d0 [ 281.658370][ T11] ? bpf_ksym_find+0x127/0x1c0 [ 281.663161][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 281.668884][ T11] ? report_bug+0x3c0/0x580 [ 281.673369][ T11] ? handle_bug+0x54/0xa0 [ 281.677716][ T11] ? exc_invalid_op+0x17/0x50 [ 281.682374][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 281.687408][ T11] ? __warn_printk+0x199/0x350 [ 281.692244][ T11] ? __warn_printk+0x1a6/0x350 [ 281.696989][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 281.702695][ T11] ? lockdep_unlock+0x11a/0x290 [ 281.707540][ T11] ? __lock_acquire+0x2167/0x3ce0 [ 281.712601][ T11] ? rcu_is_watching+0x12/0xc0 [ 281.717356][ T11] ? schedule+0xe7/0x350 [ 281.721599][ T11] __schedule+0x297/0x5740 [ 281.726004][ T11] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 281.731975][ T11] ? __pfx___schedule+0x10/0x10 [ 281.736813][ T11] ? __mutex_trylock_common+0x78/0x250 [ 281.742255][ T11] ? __pfx___mutex_trylock_common+0x10/0x10 [ 281.748124][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.753058][ T11] ? __mutex_lock+0x7ca/0x9c0 [ 281.757725][ T11] schedule+0xe7/0x350 [ 281.761901][ T11] schedule_preempt_disabled+0x13/0x30 [ 281.767703][ T11] __mutex_lock+0x81e/0x9c0 [ 281.772370][ T11] ? find_held_lock+0x2d/0x110 [ 281.777148][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.782184][ T11] ? __pfx___mutex_lock+0x10/0x10 [ 281.787215][ T11] ? exp_funnel_lock+0x171/0x3b0 [ 281.792151][ T11] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 281.797515][ T11] ? lock_acquire+0x2f/0xb0 [ 281.802097][ T11] ? exp_funnel_lock+0x13c/0x3b0 [ 281.807031][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 281.811989][ T11] exp_funnel_lock+0x1a4/0x3b0 [ 281.816753][ T11] ? __pfx_exp_funnel_lock+0x10/0x10 [ 281.822031][ T11] ? __might_resched+0x4ca/0x5e0 [ 281.826964][ T11] ? __pfx___might_resched+0x10/0x10 [ 281.832244][ T11] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 281.837783][ T11] synchronize_rcu_expedited+0x290/0x450 [ 281.843659][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 281.849902][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 281.854845][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 281.859872][ T11] ? add_taint+0x5f/0xd0 [ 281.864200][ T11] ? __pfx___might_resched+0x10/0x10 [ 281.869553][ T11] ? dev_deactivate_many+0x260/0xb20 [ 281.874846][ T11] synchronize_net+0x3e/0x60 [ 281.879510][ T11] dev_deactivate_many+0x2a1/0xb20 [ 281.884696][ T11] dev_deactivate+0xf9/0x1c0 [ 281.889273][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 281.894485][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 281.900496][ T11] linkwatch_do_dev+0x11e/0x160 [ 281.905331][ T11] linkwatch_sync_dev+0x181/0x210 [ 281.910341][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 281.915969][ T11] ethtool_op_get_link+0x1d/0x70 [ 281.920898][ T11] bond_check_dev_link+0x197/0x490 [ 281.926091][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 281.931706][ T11] ? rcu_is_watching+0x12/0xc0 [ 281.936579][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 281.941513][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 281.946884][ T11] ? rcu_is_watching+0x12/0xc0 [ 281.951637][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 281.956906][ T11] ? process_one_work+0x921/0x1ba0 [ 281.962086][ T11] ? lock_acquire+0x2f/0xb0 [ 281.966567][ T11] ? process_one_work+0x921/0x1ba0 [ 281.971658][ T11] process_one_work+0x9c5/0x1ba0 [ 281.976578][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 281.981936][ T11] ? __pfx_process_one_work+0x10/0x10 [ 281.987292][ T11] ? assign_work+0x1a0/0x250 [ 281.991871][ T11] worker_thread+0x6c8/0xf00 [ 281.996456][ T11] ? __pfx_worker_thread+0x10/0x10 [ 282.001560][ T11] kthread+0x2c1/0x3a0 [ 282.005619][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.010810][ T11] ? __pfx_kthread+0x10/0x10 [ 282.015472][ T11] ret_from_fork+0x45/0x80 [ 282.019880][ T11] ? __pfx_kthread+0x10/0x10 [ 282.024555][ T11] ret_from_fork_asm+0x1a/0x30 [ 282.029316][ T11] [ 282.032315][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.039933][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Tainted: G W 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 282.052062][ T11] Tainted: [W]=WARN [ 282.055859][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 282.065929][ T11] Workqueue: bond0 bond_mii_monitor [ 282.071305][ T11] Call Trace: [ 282.074570][ T11] [ 282.077485][ T11] dump_stack_lvl+0x3d/0x1f0 [ 282.082176][ T11] panic+0x71d/0x800 [ 282.086103][ T11] ? __pfx_panic+0x10/0x10 [ 282.090608][ T11] ? show_trace_log_lvl+0x29d/0x3d0 [ 282.095791][ T11] ? check_panic_on_warn+0x1f/0xb0 [ 282.101413][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 282.107290][ T11] check_panic_on_warn+0xab/0xb0 [ 282.112214][ T11] __warn+0xf6/0x3d0 [ 282.116095][ T11] ? bpf_ksym_find+0x127/0x1c0 [ 282.120843][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 282.126550][ T11] report_bug+0x3c0/0x580 [ 282.130866][ T11] handle_bug+0x54/0xa0 [ 282.135007][ T11] exc_invalid_op+0x17/0x50 [ 282.139665][ T11] asm_exc_invalid_op+0x1a/0x20 [ 282.144677][ T11] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 282.151115][ T11] Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 92 c4 d2 0e 01 90 48 c7 c7 40 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 282.170987][ T11] RSP: 0018:ffffc900001073b0 EFLAGS: 00010086 [ 282.177035][ T11] RAX: 0000000000000000 RBX: ffff8880b873fe80 RCX: ffffffff814e6e79 [ 282.184986][ T11] RDX: ffff88801c69a440 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 282.192962][ T11] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 282.200911][ T11] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801c69a440 [ 282.208865][ T11] R13: ffff88801c69a440 R14: ffff88801c69a440 R15: ffff8880b873eec0 [ 282.216830][ T11] ? __warn_printk+0x199/0x350 [ 282.221582][ T11] ? __warn_printk+0x1a6/0x350 [ 282.226336][ T11] ? lockdep_unlock+0x11a/0x290 [ 282.231168][ T11] ? __lock_acquire+0x2167/0x3ce0 [ 282.236174][ T11] ? rcu_is_watching+0x12/0xc0 [ 282.240924][ T11] ? schedule+0xe7/0x350 [ 282.245155][ T11] __schedule+0x297/0x5740 [ 282.249559][ T11] ? trace_irq_enable.constprop.0+0xe4/0x130 [ 282.255529][ T11] ? __pfx___schedule+0x10/0x10 [ 282.260367][ T11] ? __mutex_trylock_common+0x78/0x250 [ 282.265818][ T11] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.271702][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 282.276642][ T11] ? __mutex_lock+0x7ca/0x9c0 [ 282.281395][ T11] schedule+0xe7/0x350 [ 282.285459][ T11] schedule_preempt_disabled+0x13/0x30 [ 282.290904][ T11] __mutex_lock+0x81e/0x9c0 [ 282.295386][ T11] ? find_held_lock+0x2d/0x110 [ 282.300314][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 282.305248][ T11] ? __pfx___mutex_lock+0x10/0x10 [ 282.310355][ T11] ? exp_funnel_lock+0x171/0x3b0 [ 282.315301][ T11] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.320653][ T11] ? lock_acquire+0x2f/0xb0 [ 282.325138][ T11] ? exp_funnel_lock+0x13c/0x3b0 [ 282.330065][ T11] ? exp_funnel_lock+0x1a4/0x3b0 [ 282.334986][ T11] exp_funnel_lock+0x1a4/0x3b0 [ 282.339735][ T11] ? __pfx_exp_funnel_lock+0x10/0x10 [ 282.345014][ T11] ? __might_resched+0x4ca/0x5e0 [ 282.350028][ T11] ? __pfx___might_resched+0x10/0x10 [ 282.355418][ T11] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 282.361341][ T11] synchronize_rcu_expedited+0x290/0x450 [ 282.366996][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 282.373145][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 282.378067][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 282.382896][ T11] ? add_taint+0x5f/0xd0 [ 282.387136][ T11] ? __pfx___might_resched+0x10/0x10 [ 282.392425][ T11] ? dev_deactivate_many+0x260/0xb20 [ 282.397751][ T11] synchronize_net+0x3e/0x60 [ 282.402424][ T11] dev_deactivate_many+0x2a1/0xb20 [ 282.407523][ T11] dev_deactivate+0xf9/0x1c0 [ 282.412097][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 282.417402][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.423289][ T11] linkwatch_do_dev+0x11e/0x160 [ 282.428136][ T11] linkwatch_sync_dev+0x181/0x210 [ 282.433159][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 282.438772][ T11] ethtool_op_get_link+0x1d/0x70 [ 282.443777][ T11] bond_check_dev_link+0x197/0x490 [ 282.448885][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 282.454522][ T11] ? rcu_is_watching+0x12/0xc0 [ 282.459303][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 282.464239][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 282.469605][ T11] ? rcu_is_watching+0x12/0xc0 [ 282.474350][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 282.479542][ T11] ? process_one_work+0x921/0x1ba0 [ 282.484634][ T11] ? lock_acquire+0x2f/0xb0 [ 282.489302][ T11] ? process_one_work+0x921/0x1ba0 [ 282.494393][ T11] process_one_work+0x9c5/0x1ba0 [ 282.499314][ T11] ? __pfx_batadv_nc_worker+0x10/0x10 [ 282.504673][ T11] ? __pfx_process_one_work+0x10/0x10 [ 282.510025][ T11] ? assign_work+0x1a0/0x250 [ 282.514602][ T11] worker_thread+0x6c8/0xf00 [ 282.519172][ T11] ? __pfx_worker_thread+0x10/0x10 [ 282.524278][ T11] kthread+0x2c1/0x3a0 [ 282.528331][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.533514][ T11] ? __pfx_kthread+0x10/0x10 [ 282.538085][ T11] ret_from_fork+0x45/0x80 [ 282.542489][ T11] ? __pfx_kthread+0x10/0x10 [ 282.547062][ T11] ret_from_fork_asm+0x1a/0x30 [ 282.551825][ T11] [ 282.555072][ T11] Kernel Offset: disabled [ 282.559435][ T11] Rebooting in 86400 seconds..