last executing test programs: 4m12.826532564s ago: executing program 2 (id=3): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x8, 0x80000001) fsopen(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdn/=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,cache=loose,\x00']) openat(0xffffffffffffff9c, 0x0, 0x121c42, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 3m57.348775622s ago: executing program 32 (id=3): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x8, 0x80000001) fsopen(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdn/=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,cache=loose,\x00']) openat(0xffffffffffffff9c, 0x0, 0x121c42, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 2m56.087081305s ago: executing program 4 (id=96): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 2m55.008955014s ago: executing program 4 (id=99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.103880899s ago: executing program 4 (id=103): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x5}, 0x2) 2m49.973254426s ago: executing program 4 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x4, r2, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r8 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r11, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x211}, 0x1}) io_uring_enter(r8, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r12, 0x6, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 2m42.583317649s ago: executing program 4 (id=119): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) 2m41.602105998s ago: executing program 4 (id=121): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 2m26.041685095s ago: executing program 33 (id=121): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 50.001702089s ago: executing program 0 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14, 0x100010, r1, 0xeefa7000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[0x1], [], 0x0, 0x0, 0x8, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x300, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 47.242249782s ago: executing program 0 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 45.900022454s ago: executing program 0 (id=360): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') pwritev2(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x9, 0x1, 0x8) 45.161471517s ago: executing program 0 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 42.385039322s ago: executing program 0 (id=369): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2}}, 0x20) 41.403880083s ago: executing program 0 (id=373): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xdc, 0x0, 0x2, 0x0, 0x8}) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000400140000fe000001000000000c001a0001530cd998", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0x5, r6}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x3) 26.227133821s ago: executing program 34 (id=373): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xdc, 0x0, 0x2, 0x0, 0x8}) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000400140000fe000001000000000c001a0001530cd998", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000380)={0x48, 0x5, r6}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x3) 14.284990062s ago: executing program 6 (id=427): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x28, r0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x28}}, 0x0) 13.378355543s ago: executing program 6 (id=432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, r2, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) 12.464589291s ago: executing program 6 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5e, 0x0, &(0x7f0000000280)="e04eea217108939feafd68cff9a151e056746017131d83ccb77ab52872c905dc3bed4ae47d6b7b04f92ae80f7cc2a77a090154be3833deddb41e7edb431774d285b809b7f2ff1ccd412c58bb7237f4e6d0c7ff000e8ad557b83aeec25510"}) 7.85506875s ago: executing program 6 (id=441): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}}, 0x0) 6.568743402s ago: executing program 5 (id=446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f", 0x45}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e7", 0x2f}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x172}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534", 0xa4}, {0x0}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.532201363s ago: executing program 3 (id=447): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83) ftruncate(r1, 0x3000000) sendfile(r0, r1, 0x0, 0x80000001) 6.31972959s ago: executing program 6 (id=448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.022080475s ago: executing program 5 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="0000000000005948e4bc66735b9155", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 5.583989304s ago: executing program 6 (id=450): socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc) 4.587034289s ago: executing program 3 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, r3, 0x1, 0x50bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x810) 4.07486276s ago: executing program 1 (id=454): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f", 0x45}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e7", 0x2f}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec42234c4ff967a186f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb499476249232f3de5f56d1482d7bab9f33f68c81514f33d3221beb6b43d9df67f51e074ca10d9098480d122fa9ecd129e742345ba1d270aaebb4ffc6a5a8e2b75164bca73279aeab172a28c2db9cd08546c686b1074a7f9084a5a6b1452a150a1ca556e5a37f98be0337277d698269edb11194b5a84130bdcdfc876210907acae04dd8f287a73d3cd3de3d2c000000", 0x172}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534", 0xa4}, {0x0}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 3.612441517s ago: executing program 1 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) socket$unix(0x1, 0x1, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.161977868s ago: executing program 5 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a0000"], 0x84}}, 0x0) 3.116014679s ago: executing program 1 (id=457): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x30, r0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}}, 0x0) 2.751417806s ago: executing program 3 (id=458): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f", 0x45}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e7", 0x2f}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec42234c4ff967a186f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb499476249232f3de5f56d1482d7bab9f33f68c81514f33d3221beb6b43d9df67f51e074ca10d9098480d122fa9ecd129e742345ba1d270aaebb4ffc6a5a8e2b75164bca73279aeab172a28c2db9cd08546c686b1074a7f9084a5a6b1452a150a1ca556e5a37f98be0337277d698269edb11194b5a84130bdcdfc876210907acae04dd8f287a73d3cd3de3d2c000000", 0x172}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534", 0xa4}, {0x0}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.376146177s ago: executing program 1 (id=459): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50) 2.329768015s ago: executing program 5 (id=460): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") 2.18012048s ago: executing program 3 (id=461): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83) ftruncate(r1, 0x3000000) sendfile(r0, r1, 0x0, 0x80000001) 1.116004399s ago: executing program 5 (id=462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000000000000000008001e0040000000", 0x24) 874.128807ms ago: executing program 3 (id=463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000980)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac9c58"]) 811.536909ms ago: executing program 1 (id=464): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f", 0x45}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e7", 0x2f}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="68377862ebcae81666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249299dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec42234c4ff967a186f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb499476249232f3de5f56d1482d7bab9f33f68c81514f33d3221beb6b43d9df67f51e074ca10d9098480d122fa9ecd129e742345ba1d270aaebb4ffc6a5a8e2b75164bca73279aeab172a28c2db9cd08546c686b1074a7f9084a5a6b1452a150a1ca556e5a37f98be0337277d698269edb11194b5a84130bdcdfc876210907acae04dd8f287a73d3cd3de3d2c000000", 0x172}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534", 0xa4}, {0x0}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 230.679661ms ago: executing program 1 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="0000000000005948e4bc66735b9155", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 209.707195ms ago: executing program 5 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 0s ago: executing program 3 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, r3, 0x1, 0x50bd29, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x4008000}, 0x810) kernel console output (not intermixed with test programs): T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.695921][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.714171][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.721873][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.743741][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.809866][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.817486][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.958440][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.966068][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.033335][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.096741][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.143559][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.151395][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.260596][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.268308][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.381041][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.388645][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.448624][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.565685][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.600259][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.801400][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.809298][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.830795][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.838511][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.857081][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.864780][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.885644][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.893248][ T3704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.351456][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.466641][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.884207][ T5802] veth0_vlan: entered promiscuous mode [ 244.984303][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.993836][ T5802] veth1_vlan: entered promiscuous mode [ 245.018740][ T5809] veth0_vlan: entered promiscuous mode [ 245.125986][ T5809] veth1_vlan: entered promiscuous mode [ 245.181225][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.336885][ T5802] veth0_macvtap: entered promiscuous mode [ 245.386023][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.403749][ T5802] veth1_macvtap: entered promiscuous mode [ 245.581796][ T5809] veth0_macvtap: entered promiscuous mode [ 245.656519][ T5809] veth1_macvtap: entered promiscuous mode [ 245.721061][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.787912][ T5798] veth0_vlan: entered promiscuous mode [ 245.889388][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.929081][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.965213][ T5798] veth1_vlan: entered promiscuous mode [ 245.992765][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.017375][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.026568][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.035699][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.044901][ T5802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.199206][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.210237][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.219507][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.228775][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.252074][ T5803] veth0_vlan: entered promiscuous mode [ 246.314167][ T5803] veth1_vlan: entered promiscuous mode [ 246.517900][ T5798] veth0_macvtap: entered promiscuous mode [ 246.609181][ T5798] veth1_macvtap: entered promiscuous mode [ 246.694264][ T5803] veth0_macvtap: entered promiscuous mode [ 246.807060][ T5803] veth1_macvtap: entered promiscuous mode [ 246.881036][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.950078][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.073172][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.085054][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.094382][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.103539][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.152951][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.203625][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.289898][ T5803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.299038][ T5803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.308288][ T5803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.317257][ T5803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.853801][ T5812] veth0_vlan: entered promiscuous mode [ 247.988562][ T5812] veth1_vlan: entered promiscuous mode [ 248.321440][ T5812] veth0_macvtap: entered promiscuous mode [ 248.365884][ T5812] veth1_macvtap: entered promiscuous mode [ 248.507345][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.619687][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.733198][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.742569][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.752793][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.762012][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.175866][ T4099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.184267][ T4099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.432274][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.442177][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.621281][ T3921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.630082][ T3921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.807335][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.815710][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.943095][ T5802] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 253.507354][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 254.016408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.024558][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.052296][ T5986] 9pnet_fd: Insufficient options for proto=fd [ 254.163506][ T5988] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 254.183939][ T3779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.194858][ T3779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.209537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 254.426097][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.434433][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.665357][ T4099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.674288][ T4099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.500417][ T5998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.628033][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.636125][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.907973][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.916066][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.546201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 256.643971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 256.678900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 257.056081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.919096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 259.941440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 260.738151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 260.895644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 261.053974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 262.846455][ T9] IPVS: starting estimator thread 0... [ 262.958085][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.998230][ T6023] IPVS: using max 192 ests per chain, 9600 per kthread [ 265.742870][ T6030] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.14'. [ 265.819117][ T6029] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.14'. [ 268.402733][ T6035] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 268.409596][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.418965][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 268.608876][ T6035] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 268.615698][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.625406][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 268.648266][ T5853] vhci_hcd: vhci_device speed not set [ 268.748095][ T5853] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 268.819290][ T6035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.899664][ T6042] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 268.906574][ T6042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.915619][ T6042] vhci_hcd vhci_hcd.0: Device attached [ 269.048384][ T6035] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 269.055292][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.063519][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 269.063849][ T6046] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 269.267135][ T6035] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 269.274076][ T6035] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.281322][ T6042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.282467][ T6035] vhci_hcd vhci_hcd.0: Device attached [ 269.330747][ T6050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.338416][ T6050] IPv6: NLM_F_CREATE should be set when creating new route [ 269.390142][ T6054] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.556264][ T6057] lo: entered allmulticast mode [ 269.569282][ T6057] tunl0: entered allmulticast mode [ 269.580514][ T6057] gre0: entered allmulticast mode [ 269.662400][ T6059] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.726431][ T6057] gretap0: entered allmulticast mode [ 269.775315][ T6057] erspan0: entered allmulticast mode [ 269.788328][ T6057] ip_vti0: entered allmulticast mode [ 269.798314][ T6057] ip6_vti0: entered allmulticast mode [ 269.821352][ T6057] sit0: entered allmulticast mode [ 269.835769][ T6057] ip6tnl0: entered allmulticast mode [ 269.847038][ T6057] ip6gre0: entered allmulticast mode [ 269.899187][ T6057] syz_tun: entered allmulticast mode [ 269.907520][ T6035] vhci_hcd vhci_hcd.0: port 0 already used [ 269.988746][ T6057] ip6gretap0: entered allmulticast mode [ 270.000872][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.009684][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.019904][ T6057] bridge0: entered allmulticast mode [ 270.031660][ T6057] vcan0: entered allmulticast mode [ 270.039157][ T6057] bond0: entered allmulticast mode [ 270.044412][ T6057] bond_slave_0: entered allmulticast mode [ 270.050835][ T6057] bond_slave_1: entered allmulticast mode [ 270.068560][ T6057] team0: entered allmulticast mode [ 270.073934][ T6057] team_slave_0: entered allmulticast mode [ 270.080333][ T6057] team_slave_1: entered allmulticast mode [ 270.092909][ T6057] dummy0: entered allmulticast mode [ 270.400290][ T6036] vhci_hcd: connection reset by peer [ 270.407328][ T6038] vhci_hcd: connection closed [ 270.418380][ T6047] vhci_hcd: connection closed [ 270.423839][ T6051] vhci_hcd: connection closed [ 270.426411][ T3921] vhci_hcd: stop threads [ 270.438468][ T3921] vhci_hcd: release socket [ 270.443171][ T3921] vhci_hcd: disconnect device [ 270.458784][ T6043] vhci_hcd: connection closed [ 270.471103][ T6057] nlmon0: entered allmulticast mode [ 270.487525][ T6057] caif0: entered allmulticast mode [ 270.494139][ T6057] batadv0: entered allmulticast mode [ 270.509880][ T6057] vxcan0: entered allmulticast mode [ 270.517340][ T6057] vxcan1: entered allmulticast mode [ 270.524724][ T6057] veth0: entered allmulticast mode [ 270.535274][ T6057] veth1: entered allmulticast mode [ 270.545888][ T6057] veth0_to_bridge: entered allmulticast mode [ 270.562216][ T6057] veth1_to_bridge: entered allmulticast mode [ 270.583085][ T6057] veth0_to_bond: entered allmulticast mode [ 270.596216][ T6057] veth1_to_bond: entered allmulticast mode [ 270.609427][ T6057] veth0_to_team: entered allmulticast mode [ 270.625953][ T6057] veth1_to_team: entered allmulticast mode [ 270.645304][ T6057] veth0_to_batadv: entered allmulticast mode [ 270.664075][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.674525][ T6057] batadv_slave_0: entered allmulticast mode [ 270.687590][ T6057] veth1_to_batadv: entered allmulticast mode [ 270.703066][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.711178][ T6057] batadv_slave_1: entered allmulticast mode [ 270.726487][ T6057] xfrm0: entered allmulticast mode [ 270.739148][ T6057] veth0_to_hsr: entered allmulticast mode [ 270.752570][ T6057] hsr_slave_0: entered allmulticast mode [ 270.764095][ T6057] veth1_to_hsr: entered allmulticast mode [ 270.780595][ T6057] hsr_slave_1: entered allmulticast mode [ 270.794175][ T6057] hsr0: entered allmulticast mode [ 270.806597][ T6057] veth1_virt_wifi: entered allmulticast mode [ 270.821780][ T6057] veth0_virt_wifi: entered allmulticast mode [ 270.836539][ T6057] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 270.845453][ T6057] veth1_vlan: entered allmulticast mode [ 270.861305][ T6057] veth0_vlan: entered allmulticast mode [ 270.898784][ T6057] vlan0: entered allmulticast mode [ 270.904923][ T6057] vlan1: entered allmulticast mode [ 270.977681][ T3921] vhci_hcd: stop threads [ 270.984860][ T3921] vhci_hcd: release socket [ 270.989973][ T3921] vhci_hcd: disconnect device [ 271.059409][ T6057] macvlan0: entered allmulticast mode [ 271.114431][ T6057] macvlan1: entered allmulticast mode [ 271.130493][ T6057] ipvlan0: entered allmulticast mode [ 271.136964][ T6057] ipvlan1: entered allmulticast mode [ 271.143837][ T6057] veth1_macvtap: entered allmulticast mode [ 271.159571][ T6057] veth0_macvtap: entered allmulticast mode [ 271.528780][ T3921] vhci_hcd: stop threads [ 271.533274][ T3921] vhci_hcd: release socket [ 271.538039][ T3921] vhci_hcd: disconnect device [ 271.544894][ T3921] vhci_hcd: stop threads [ 271.549642][ T3921] vhci_hcd: release socket [ 271.554310][ T3921] vhci_hcd: disconnect device [ 271.568141][ T3921] vhci_hcd: stop threads [ 271.572643][ T3921] vhci_hcd: release socket [ 271.577352][ T3921] vhci_hcd: disconnect device [ 271.590104][ T5091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.623464][ T5091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.640509][ T5091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.657037][ T5091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.769077][ T5091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.603682][ T6057] macvtap0: entered allmulticast mode [ 272.628982][ T6057] macsec0: entered allmulticast mode [ 273.299486][ T6057] geneve0: entered allmulticast mode [ 273.339493][ T6057] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.348968][ T6057] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.358209][ T6057] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.367245][ T6057] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.431860][ T6057] geneve1: entered allmulticast mode [ 273.513585][ T6057] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 273.546760][ T6057] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 273.645547][ T6057] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 273.718513][ T6057] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 273.879085][ T5853] vhci_hcd: vhci_device speed not set [ 273.888501][ T5091] Bluetooth: hci5: command tx timeout [ 273.944338][ T6057] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 275.511675][ T6057] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 276.275175][ T5091] Bluetooth: hci5: command tx timeout [ 277.766549][ T6083] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 277.783204][ T6083] batman_adv: batadv0: Adding interface: gretap1 [ 277.789962][ T6083] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.816700][ T6083] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 278.661616][ T5091] Bluetooth: hci5: command tx timeout [ 278.668000][ T5860] usb usb42-port1: attempt power cycle [ 280.688946][ T5091] Bluetooth: hci5: command tx timeout [ 281.576616][ T6093] capability: warning: `syz.0.29' uses deprecated v2 capabilities in a way that may be insecure [ 281.641018][ T5860] usb usb42-port1: unable to enumerate USB device [ 283.831262][ T6068] chnl_net:caif_netlink_parms(): no params data found [ 284.808338][ T5860] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 285.058703][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 285.121324][ T5860] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 285.131761][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.197438][ T5860] usb 2-1: config 0 descriptor?? [ 285.238860][ T5860] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 285.249691][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 286.215744][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.222565][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.274557][ T6119] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 286.290121][ T6119] batman_adv: batadv0: Adding interface: gretap1 [ 286.296718][ T6119] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.322733][ T6119] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 286.908884][ T5860] gspca_vc032x: reg_w err -71 [ 286.913876][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.920276][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.925659][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.931134][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.936536][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.943878][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.950051][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.956757][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.962530][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.968295][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.973718][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.979213][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.984617][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.990106][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 286.995515][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.001049][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.006472][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.012118][ T5860] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.017648][ T5860] gspca_vc032x: Unknown sensor... [ 287.023199][ T5860] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 287.222532][ T5860] usb 2-1: USB disconnect, device number 2 [ 287.235986][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.243632][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.251220][ T6068] bridge_slave_0: entered allmulticast mode [ 287.261862][ T6068] bridge_slave_0: entered promiscuous mode [ 287.296624][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.304554][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.312152][ T6068] bridge_slave_1: entered allmulticast mode [ 287.320422][ T6068] bridge_slave_1: entered promiscuous mode [ 287.471282][ T6123] netlink: 112 bytes leftover after parsing attributes in process `syz.0.38'. [ 287.706324][ T6128] veth0_vlan: entered allmulticast mode [ 287.761538][ T6128] veth0_vlan: left promiscuous mode [ 287.775423][ T6128] veth0_vlan: entered promiscuous mode [ 288.097177][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.730724][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.642969][ T6068] team0: Port device team_slave_0 added [ 289.676336][ T6068] team0: Port device team_slave_1 added [ 290.053833][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.061253][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.088234][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.297324][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.333886][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.342169][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.368989][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.587647][ T6139] loop1: detected capacity change from 0 to 128 [ 290.722933][ T6139] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.776682][ T6139] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.819138][ T5860] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 291.023632][ T5860] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 291.032433][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.064594][ T6068] hsr_slave_0: entered promiscuous mode [ 291.074731][ T6068] hsr_slave_1: entered promiscuous mode [ 291.082711][ T6068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.090657][ T6068] Cannot create hsr debugfs directory [ 291.117532][ T6139] overlayfs: missing 'lowerdir' [ 291.192931][ T5860] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 291.202648][ T5860] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 291.211137][ T5860] usb 5-1: Manufacturer: syz [ 291.776791][ T5860] usb 5-1: config 0 descriptor?? [ 292.743906][ T6151] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 292.753610][ T6151] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 292.763520][ T6151] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 292.813319][ T30] audit: type=1800 audit(1750375301.985:2): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.44" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 294.191845][ T30] audit: type=1326 audit(1750375303.415:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.214622][ T30] audit: type=1326 audit(1750375303.415:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.240938][ T30] audit: type=1326 audit(1750375303.425:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.265000][ T30] audit: type=1326 audit(1750375303.425:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.287261][ T30] audit: type=1326 audit(1750375303.425:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.309689][ T30] audit: type=1326 audit(1750375303.425:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.335470][ T30] audit: type=1326 audit(1750375303.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.359289][ T30] audit: type=1326 audit(1750375303.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.381642][ T30] audit: type=1326 audit(1750375303.425:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.4.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5d9e98e929 code=0x7ffc0000 [ 294.566372][ T5798] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.660439][ T5860] rc_core: IR keymap rc-hauppauge not found [ 294.666576][ T5860] Registered IR keymap rc-empty [ 294.674097][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 294.686827][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 294.897484][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 295.610676][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 295.936473][ T5861] usb 5-1: USB disconnect, device number 2 [ 296.029104][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 296.036233][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 296.071495][ T5860] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.080607][ T5860] usb 4-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 296.091599][ T5860] usb 4-1: config 179 has no interface number 0 [ 296.098221][ T5860] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 296.109687][ T5860] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 296.121350][ T5860] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 296.135048][ T5860] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 296.144480][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.217547][ T6068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.279513][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 296.321481][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 296.330923][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.393315][ T6068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.440647][ T9] usb 1-1: config 0 descriptor?? [ 296.505506][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 296.580960][ T6068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.675307][ T6161] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 296.803491][ T6068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.042730][ T6172] Unknown options in mask 5 [ 297.685170][ T9] gspca_sq930x: ucbus_write failed -71 [ 297.692499][ T9] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 299.591046][ T9] usb 1-1: USB disconnect, device number 2 [ 300.208780][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.304152][ T5860] usb 4-1: USB disconnect, device number 2 [ 300.444147][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.605244][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.761292][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.586777][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.661298][ T6192] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 301.960618][ T6068] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.188906][ T70] bridge_slave_1: left allmulticast mode [ 302.194821][ T70] bridge_slave_1: left promiscuous mode [ 302.201959][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.222880][ T70] bridge_slave_0: left allmulticast mode [ 302.229591][ T70] bridge_slave_0: left promiscuous mode [ 302.236155][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.866964][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 304.565136][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.629033][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.659218][ T70] bond0 (unregistering): Released all slaves [ 304.848223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.855838][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.432281][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.440490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.683293][ T70] hsr_slave_0: left promiscuous mode [ 307.737573][ T70] hsr_slave_1: left promiscuous mode [ 307.759523][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.767570][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.022668][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.031163][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.407033][ T70] veth1_macvtap: left promiscuous mode [ 308.413515][ T70] veth0_macvtap: left promiscuous mode [ 308.420341][ T70] veth1_vlan: left promiscuous mode [ 308.425991][ T70] veth0_vlan: left promiscuous mode [ 308.499013][ T6225] misc userio: No port type given on /dev/userio [ 309.467155][ T70] team0 (unregistering): Port device team_slave_1 removed [ 309.580216][ T70] team0 (unregistering): Port device team_slave_0 removed [ 313.908718][ T6242] sctp: failed to load transform for md5: -4 [ 315.726248][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.413297][ T6283] misc userio: No port type given on /dev/userio [ 319.638463][ T6287] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 320.727341][ T6306] syz.3.81 (6306) used greatest stack depth: 2472 bytes left [ 323.818425][ T5860] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 324.481735][ T5860] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 324.490734][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.627439][ T5860] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 324.638247][ T5860] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 324.646532][ T5860] usb 2-1: Manufacturer: syz [ 324.693824][ T6068] veth0_vlan: entered promiscuous mode [ 324.807411][ T5860] usb 2-1: config 0 descriptor?? [ 325.004027][ T6068] veth1_vlan: entered promiscuous mode [ 325.701850][ T6068] veth0_macvtap: entered promiscuous mode [ 325.819452][ T6068] veth1_macvtap: entered promiscuous mode [ 325.997203][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 325.997277][ T30] audit: type=1326 audit(1750375335.225:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.027208][ T30] audit: type=1326 audit(1750375335.225:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.050290][ T30] audit: type=1326 audit(1750375335.225:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.073545][ T30] audit: type=1326 audit(1750375335.225:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.096577][ T30] audit: type=1326 audit(1750375335.225:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.119160][ T30] audit: type=1326 audit(1750375335.235:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.141781][ T30] audit: type=1326 audit(1750375335.235:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.164590][ T30] audit: type=1326 audit(1750375335.235:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.188118][ T30] audit: type=1326 audit(1750375335.235:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.211037][ T30] audit: type=1326 audit(1750375335.235:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 326.255032][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.694872][ T6068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.744761][ T5860] rc_core: IR keymap rc-hauppauge not found [ 326.751862][ T5860] Registered IR keymap rc-empty [ 326.759388][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 326.776132][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 326.803352][ T6068] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.812907][ T6068] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.822446][ T6068] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.832645][ T6068] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.209517][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 327.295945][ T5860] usb 2-1: USB disconnect, device number 3 [ 327.650916][ T6334] misc userio: No port type given on /dev/userio [ 330.493156][ T6359] overlay: filesystem on ./bus not supported as upperdir [ 331.259490][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.269453][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.279081][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.298250][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.309634][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.408579][ T5091] Bluetooth: hci3: command tx timeout [ 333.703595][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 334.070064][ T11] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 334.079235][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.298210][ T11] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 334.307649][ T11] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 334.316071][ T11] usb 1-1: Manufacturer: syz [ 334.455008][ T11] usb 1-1: config 0 descriptor?? [ 334.581838][ T6391] misc userio: No port type given on /dev/userio [ 335.488185][ T5091] Bluetooth: hci3: command tx timeout [ 335.511098][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 335.511163][ T30] audit: type=1326 audit(1750375344.715:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.541093][ T30] audit: type=1326 audit(1750375344.715:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.563808][ T30] audit: type=1326 audit(1750375344.715:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.586437][ T30] audit: type=1326 audit(1750375344.715:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.612678][ T30] audit: type=1326 audit(1750375344.715:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.636633][ T30] audit: type=1326 audit(1750375344.715:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.659412][ T30] audit: type=1326 audit(1750375344.715:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.682116][ T30] audit: type=1326 audit(1750375344.715:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.708241][ T30] audit: type=1326 audit(1750375344.715:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.732099][ T30] audit: type=1326 audit(1750375344.715:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 335.934071][ T6366] chnl_net:caif_netlink_parms(): no params data found [ 336.044785][ T11] rc_core: IR keymap rc-hauppauge not found [ 336.051108][ T11] Registered IR keymap rc-empty [ 336.072056][ T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 336.086055][ T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 336.236831][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 336.306113][ T11] usb 1-1: USB disconnect, device number 3 [ 336.849094][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 337.045717][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 337.056349][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.104770][ T9] usb 2-1: config 0 descriptor?? [ 337.568681][ T5091] Bluetooth: hci3: command tx timeout [ 338.398883][ T9] usb 2-1: Cannot set autoneg [ 338.404666][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 338.592748][ T9] usb 2-1: USB disconnect, device number 4 [ 338.615147][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 339.185267][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.193834][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.385761][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.396128][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.649203][ T5091] Bluetooth: hci3: command tx timeout [ 340.438347][ T3548] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.649164][ T6446] misc userio: No port type given on /dev/userio [ 340.900745][ T3548] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.282586][ T3548] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.438469][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.446048][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.455016][ T6366] bridge_slave_0: entered allmulticast mode [ 343.464522][ T6366] bridge_slave_0: entered promiscuous mode [ 343.532942][ T3548] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.710292][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.718150][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.725904][ T6366] bridge_slave_1: entered allmulticast mode [ 343.736003][ T6366] bridge_slave_1: entered promiscuous mode [ 343.943163][ T5860] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 344.193558][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.279686][ T5860] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 344.288623][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.384792][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.418471][ T5860] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 344.428094][ T5860] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 344.440396][ T5860] usb 1-1: Manufacturer: syz [ 344.469726][ T3548] bridge_slave_1: left allmulticast mode [ 344.475741][ T3548] bridge_slave_1: left promiscuous mode [ 344.482592][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.496088][ T5860] usb 1-1: config 0 descriptor?? [ 344.692368][ T3548] bridge_slave_0: left allmulticast mode [ 344.698831][ T3548] bridge_slave_0: left promiscuous mode [ 344.705392][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.788389][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 344.788472][ T30] audit: type=1326 audit(1750375354.015:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.821235][ T30] audit: type=1326 audit(1750375354.015:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.845204][ T30] audit: type=1326 audit(1750375354.015:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.867936][ T30] audit: type=1326 audit(1750375354.015:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.890657][ T30] audit: type=1326 audit(1750375354.015:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.917088][ T30] audit: type=1326 audit(1750375354.015:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.941060][ T30] audit: type=1326 audit(1750375354.015:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.963781][ T30] audit: type=1326 audit(1750375354.015:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.978171][ T5860] rc_core: IR keymap rc-hauppauge not found [ 344.987173][ T30] audit: type=1326 audit(1750375354.015:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 344.992698][ T5860] Registered IR keymap rc-empty [ 345.018837][ T30] audit: type=1326 audit(1750375354.025:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff31718e929 code=0x7ffc0000 [ 345.024394][ T5860] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 345.058499][ T5860] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 345.438023][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 345.483033][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 345.507165][ T5860] usb 1-1: USB disconnect, device number 4 [ 345.675227][ T11] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.685973][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 345.693228][ T11] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 345.702651][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.904592][ T11] usb 2-1: config 0 descriptor?? [ 345.943855][ T6490] misc userio: No port type given on /dev/userio [ 346.000056][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.162659][ T11] usbhid 2-1:0.0: can't add hid device: -71 [ 346.171113][ T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 346.215234][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.226730][ T11] usb 2-1: USB disconnect, device number 5 [ 346.292400][ T3548] bond0 (unregistering): Released all slaves [ 346.681675][ T3548] hsr_slave_0: left promiscuous mode [ 346.708310][ T3548] hsr_slave_1: left promiscuous mode [ 346.717091][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.725724][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.872276][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.881478][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.037831][ T3548] veth1_macvtap: left promiscuous mode [ 347.043858][ T3548] veth0_macvtap: left promiscuous mode [ 347.051018][ T3548] veth1_vlan: left promiscuous mode [ 347.056482][ T3548] veth0_vlan: left promiscuous mode [ 347.291300][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.298902][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.939797][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 348.190579][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 348.228156][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 348.258306][ T5860] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 348.269177][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.277460][ T5860] usb 2-1: Product: syz [ 348.283901][ T5860] usb 2-1: Manufacturer: syz [ 348.289531][ T5860] usb 2-1: SerialNumber: syz [ 348.340288][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 348.435973][ T5860] usb 2-1: config 0 descriptor?? [ 348.984160][ T6366] team0: Port device team_slave_0 added [ 349.072826][ T5860] airspy 2-1:0.0: Board ID: 00 [ 349.078264][ T5860] airspy 2-1:0.0: Firmware version: [ 349.169550][ T6366] team0: Port device team_slave_1 added [ 349.368914][ T6512] random: crng reseeded on system resumption [ 349.496649][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.504222][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.534876][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.681680][ T5860] airspy 2-1:0.0: usb_control_msg() failed -32 request 12 [ 349.704938][ T5860] airspy 2-1:0.0: Registered as swradio24 [ 349.711228][ T5860] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 349.812069][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.820178][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.852485][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.571207][ T6366] hsr_slave_0: entered promiscuous mode [ 350.581575][ T6366] hsr_slave_1: entered promiscuous mode [ 351.757564][ T9] usb 2-1: USB disconnect, device number 6 [ 353.993205][ T6366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.112016][ T6366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.283342][ T6366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.417214][ T6366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.449407][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 354.456119][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 354.463701][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 354.765357][ T6552] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 355.008912][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 355.392065][ T9] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 355.401063][ T9] usb 4-1: config 0 has no interface number 0 [ 355.625793][ T9] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=f2.48 [ 355.635419][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.644131][ T9] usb 4-1: Product: syz [ 355.649021][ T9] usb 4-1: Manufacturer: syz [ 355.653759][ T9] usb 4-1: SerialNumber: syz [ 356.413616][ T9] usb 4-1: config 0 descriptor?? [ 357.903533][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 358.363554][ T9] qmi_wwan 4-1:0.52: probe with driver qmi_wwan failed with error -22 [ 358.391956][ T9] usb 4-1: USB disconnect, device number 3 [ 358.481665][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.492348][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.629965][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.642646][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.651625][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.659962][ T11] usb 2-1: SerialNumber: syz [ 358.964551][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.076149][ T11] usb 2-1: 0:2 : does not exist [ 359.081359][ T11] usb 2-1: unit 5 not found! [ 359.225726][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.233355][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.295105][ T11] usb 2-1: USB disconnect, device number 7 [ 359.344306][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.351858][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.545282][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.822534][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 362.053880][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 362.110387][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 362.123779][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 362.136711][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 362.142120][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.148190][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 362.169044][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 362.260366][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.273915][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 362.285039][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 362.294564][ T9] usb 1-1: Product: syz [ 362.298945][ T9] usb 1-1: Manufacturer: syz [ 362.303667][ T9] usb 1-1: SerialNumber: syz [ 362.352269][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.419034][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.443733][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.472644][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.501707][ T9] usb 1-1: config 0 descriptor?? [ 362.572269][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.754120][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 362.823325][ T5861] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 362.900031][ T9] usb 1-1: USB disconnect, device number 5 [ 362.977508][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 363.066935][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 363.094309][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.105042][ T5861] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 363.273351][ T5861] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 363.283055][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.291587][ T5861] usb 4-1: Product: syz [ 363.295994][ T5861] usb 4-1: Manufacturer: syz [ 363.301169][ T5861] usb 4-1: SerialNumber: syz [ 363.392235][ T5861] usb 4-1: config 0 descriptor?? [ 363.634726][ T5861] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 363.643520][ T5861] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 363.729480][ T11] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 363.741793][ T5861] usb 4-1: USB disconnect, device number 4 [ 363.973429][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.984191][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.170267][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.180343][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.188833][ T11] usb 2-1: SerialNumber: syz [ 364.564693][ T11] usb 2-1: 0:2 : does not exist [ 364.588186][ T11] usb 2-1: unit 5 not found! [ 364.772469][ T5808] Bluetooth: hci5: command tx timeout [ 364.789378][ T6593] chnl_net:caif_netlink_parms(): no params data found [ 364.870457][ T11] usb 2-1: USB disconnect, device number 8 [ 365.325103][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.585393][ T6366] veth0_vlan: entered promiscuous mode [ 366.738128][ T6366] veth1_vlan: entered promiscuous mode [ 366.849070][ T5808] Bluetooth: hci5: command tx timeout [ 367.192265][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.200654][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.208652][ T6593] bridge_slave_0: entered allmulticast mode [ 367.216929][ T6593] bridge_slave_0: entered promiscuous mode [ 367.299778][ T6593] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.307674][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.315515][ T6593] bridge_slave_1: entered allmulticast mode [ 367.324189][ T6593] bridge_slave_1: entered promiscuous mode [ 367.343157][ T6628] [U]  [ 367.561557][ T6366] veth0_macvtap: entered promiscuous mode [ 367.703140][ T6366] veth1_macvtap: entered promiscuous mode [ 367.781619][ T6593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.924530][ T6593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.985706][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.171827][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.447001][ T6366] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.457988][ T6366] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.467338][ T6366] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.481891][ T6366] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.510057][ T6593] team0: Port device team_slave_0 added [ 368.603322][ T6593] team0: Port device team_slave_1 added [ 368.928705][ T5808] Bluetooth: hci5: command tx timeout [ 369.114474][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.123031][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.149469][ T6593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.324043][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 369.390567][ T6593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.400043][ T6593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.426776][ T6593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.551701][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.562160][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.639412][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.649003][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.657264][ T9] usb 1-1: SerialNumber: syz [ 369.974825][ T9] usb 1-1: 0:2 : does not exist [ 369.980006][ T9] usb 1-1: unit 5 not found! [ 370.178919][ T9] usb 1-1: USB disconnect, device number 6 [ 370.527151][ T6593] hsr_slave_0: entered promiscuous mode [ 370.537933][ T6593] hsr_slave_1: entered promiscuous mode [ 370.546797][ T6593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.554905][ T6593] Cannot create hsr debugfs directory [ 370.696591][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.008490][ T5808] Bluetooth: hci5: command tx timeout [ 371.809279][ T11] IPVS: starting estimator thread 0... [ 372.056829][ T6678] IPVS: using max 192 ests per chain, 9600 per kthread [ 372.779161][ T6669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.016998][ T6593] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.143091][ T6593] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.271990][ T6593] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.373268][ T6593] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.866862][ T6593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.973714][ T5860] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 380.060182][ T6593] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.149090][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.156571][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.206370][ T5860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.219052][ T5860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.228512][ T5860] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.240692][ T5860] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 380.332733][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.340570][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.502230][ T5860] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.511932][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.520389][ T5860] usb 2-1: SerialNumber: syz [ 380.911209][ T5860] usb 2-1: 0:2 : does not exist [ 380.916425][ T5860] usb 2-1: unit 5 not found! [ 381.005576][ T5861] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 381.091741][ T5860] usb 2-1: USB disconnect, device number 9 [ 381.194559][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 381.247237][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 381.330177][ T5861] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 381.341131][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.349764][ T5861] usb 1-1: Product: syz [ 381.354203][ T5861] usb 1-1: Manufacturer: syz [ 381.359366][ T5861] usb 1-1: SerialNumber: syz [ 381.377066][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.561415][ T5861] usb 1-1: config 0 descriptor?? [ 382.075593][ T5861] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 382.084620][ T5861] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 382.572147][ T5861] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 382.822105][ T5861] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.834323][ T5861] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 30768, setting to 64 [ 382.948230][ T5861] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 382.957574][ T5861] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 382.966268][ T5861] usb 2-1: Manufacturer: syz [ 382.971253][ T5861] usb 2-1: SerialNumber: syz [ 383.256199][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.411132][ T5861] yealink 2-1:36.0: invalid payload size 64, expected 16 [ 383.423137][ T5861] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input9 [ 383.580044][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.587674][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.596575][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.605566][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.618136][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.628313][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.635833][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.643425][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.651191][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.658204][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.664798][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.672369][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.679437][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.686012][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.693491][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.700956][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.708590][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.716076][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.723103][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.735940][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.743696][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.750689][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.757131][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.764451][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.771457][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.778000][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.785369][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.792376][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.800948][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.809179][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.816213][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.822567][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.830511][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.837531][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.844163][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.851481][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.858478][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.864852][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.872271][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.879315][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.887954][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.895433][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.902392][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.908882][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.916246][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.923256][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.930863][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.939435][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 383.946438][ C1] yealink 2-1:36.0: unexpected response 0 [ 383.953318][ T5861] usb 2-1: USB disconnect, device number 10 [ 383.959647][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 383.959769][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 384.279718][ T11] usb 1-1: USB disconnect, device number 7 [ 384.944768][ T3704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.953762][ T3704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.294848][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.303835][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.165900][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 386.400182][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.411015][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.421031][ T11] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.432032][ T11] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 386.639156][ T11] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.648981][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.657183][ T11] usb 4-1: SerialNumber: syz [ 387.025658][ T11] usb 4-1: 0:2 : does not exist [ 387.031556][ T11] usb 4-1: unit 5 not found! [ 387.155619][ T6593] veth0_vlan: entered promiscuous mode [ 387.273557][ T11] usb 4-1: USB disconnect, device number 5 [ 387.286532][ T6768] loop5: detected capacity change from 0 to 4096 [ 387.355350][ T6593] veth1_vlan: entered promiscuous mode [ 387.761237][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.902876][ T6593] veth0_macvtap: entered promiscuous mode [ 388.043703][ T6593] veth1_macvtap: entered promiscuous mode [ 388.324968][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 388.325037][ T30] audit: type=1800 audit(1750375397.555:173): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.17" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 388.419480][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.509750][ T6593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.719326][ T6593] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.729676][ T6593] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.744284][ T6593] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.755205][ T6593] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.949092][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 392.030892][ T6821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 392.219056][ T11] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.233112][ T11] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.243724][ T11] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.254705][ T11] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 392.484902][ T11] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.495272][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.504431][ T11] usb 4-1: SerialNumber: syz [ 392.869615][ T11] usb 4-1: 0:2 : does not exist [ 392.874812][ T11] usb 4-1: unit 5 not found! [ 392.980132][ T4471] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.099875][ T11] usb 4-1: USB disconnect, device number 6 [ 393.233151][ T4471] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.412835][ T4471] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.491865][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.673270][ T4471] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.321018][ T4471] bridge_slave_1: left allmulticast mode [ 394.327025][ T4471] bridge_slave_1: left promiscuous mode [ 394.333924][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.520879][ T4471] bridge_slave_0: left allmulticast mode [ 394.526809][ T4471] bridge_slave_0: left promiscuous mode [ 394.533590][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.977039][ T4471] batman_adv: batadv0: Removing interface: gretap1 [ 397.632475][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.720105][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.797044][ T4471] bond0 (unregistering): Released all slaves [ 398.812595][ T4471] hsr_slave_0: left promiscuous mode [ 398.825087][ T4471] hsr_slave_1: left promiscuous mode [ 398.833474][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.843276][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.857658][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.865811][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.967154][ T5861] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 399.053509][ T4471] veth1_macvtap: left promiscuous mode [ 399.059873][ T4471] veth0_macvtap: left promiscuous mode [ 399.065827][ T4471] veth1_vlan: left promiscuous mode [ 399.071837][ T4471] veth0_vlan: left promiscuous mode [ 399.174862][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.187645][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.763138][ T5861] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.773754][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.783063][ T5861] usb 1-1: SerialNumber: syz [ 399.852007][ T6890] process 'syz.5.227' launched '/dev/fd/8' with NULL argv: empty string added [ 400.447082][ T5861] usb 1-1: 0:2 : does not exist [ 400.452518][ T5861] usb 1-1: unit 5 not found! [ 400.770197][ T5861] usb 1-1: USB disconnect, device number 8 [ 400.996242][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.216395][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 402.276396][ T4471] team0 (unregistering): Port device team_slave_0 removed [ 403.212880][ T4471] IPVS: stop unused estimator thread 0... [ 403.708551][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 403.942364][ T11] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 403.952771][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.054097][ T11] usb 1-1: config 0 descriptor?? [ 404.593611][ T11] usb 1-1: Cannot read MAC address [ 404.599861][ T11] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 404.721527][ T11] usb 1-1: USB disconnect, device number 9 [ 405.279052][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 405.349545][ T5861] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 405.378230][ T5861] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 405.491646][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 405.548548][ T11] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 405.558245][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.569801][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.578180][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.679689][ T11] pvrusb2: Hardware description: Terratec Grabster AV400 [ 405.687060][ T11] pvrusb2: ********** [ 405.691925][ T11] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 405.702355][ T11] pvrusb2: Important functionality might not be entirely working. [ 405.710505][ T11] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 405.722701][ T11] pvrusb2: ********** [ 405.931013][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.939536][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.236081][ T2331] pvrusb2: Invalid write control endpoint [ 406.840191][ T11] usb 6-1: USB disconnect, device number 2 [ 408.774954][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.782470][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.254912][ T6946] fido_id[6946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 409.375832][ T2331] pvrusb2: Invalid write control endpoint [ 409.382558][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 409.392369][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 409.400277][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 409.410732][ T2331] pvrusb2: Device being rendered inoperable [ 409.416804][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 409.427086][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 409.436869][ T2331] pvrusb2: Attached sub-driver cx25840 [ 409.442671][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 409.452948][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 409.832108][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 410.098451][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 410.175365][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 410.185038][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.193431][ T9] usb 7-1: Product: syz [ 410.197932][ T9] usb 7-1: Manufacturer: syz [ 410.202849][ T9] usb 7-1: SerialNumber: syz [ 410.358194][ T9] usb 7-1: config 0 descriptor?? [ 410.846734][ T9] airspy 7-1:0.0: Board ID: 00 [ 410.852972][ T9] airspy 7-1:0.0: Firmware version: [ 411.454946][ T9] airspy 7-1:0.0: usb_control_msg() failed -32 request 12 [ 411.466260][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 411.530944][ T9] airspy 7-1:0.0: Registered as swradio24 [ 411.536962][ T9] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 411.730077][ T11] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 411.739940][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.833607][ T11] usb 1-1: config 0 descriptor?? [ 412.387012][ T11] usb 1-1: Cannot read MAC address [ 412.401312][ T11] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 412.505286][ T11] usb 1-1: USB disconnect, device number 10 [ 412.968117][ T5853] usb 7-1: USB disconnect, device number 2 [ 413.390328][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.258'. [ 413.999621][ T5853] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 414.275556][ T5853] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 414.286443][ T5853] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 414.296274][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.651799][ T5853] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 415.872896][ T7032] loop3: detected capacity change from 0 to 128 [ 417.160714][ T5853] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 417.169519][ T5853] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 418.171192][ T5853] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 418.180025][ T5853] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 418.408479][ T7032] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 418.408748][ T7032] EXT4-fs: failed to create workqueue [ 418.424263][ T7032] EXT4-fs (loop3): mount failed [ 419.675603][ T5861] usb 2-1: USB disconnect, device number 11 [ 419.878173][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 420.098348][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 420.191920][ T5853] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 420.201589][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.211992][ T5853] usb 6-1: Product: syz [ 420.216383][ T5853] usb 6-1: Manufacturer: syz [ 420.224183][ T5853] usb 6-1: SerialNumber: syz [ 420.371870][ T5853] usb 6-1: config 0 descriptor?? [ 420.539028][ T5861] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 420.708478][ T5860] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 420.899065][ T5861] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 420.909051][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.000560][ T5853] airspy 6-1:0.0: Board ID: 00 [ 421.005910][ T5853] airspy 6-1:0.0: Firmware version: [ 421.058260][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 421.172122][ T5860] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.180935][ T5860] usb 4-1: config 0 has no interface number 0 [ 421.243055][ T5861] usb 7-1: config 0 descriptor?? [ 421.442813][ T5860] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 421.452886][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.461499][ T5860] usb 4-1: Product: syz [ 421.465866][ T5860] usb 4-1: Manufacturer: syz [ 421.470931][ T5860] usb 4-1: SerialNumber: syz [ 422.491985][ T5861] usb 7-1: Cannot read MAC address [ 422.498226][ T5861] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 422.520423][ T5853] airspy 6-1:0.0: usb_control_msg() failed -32 request 0f [ 422.542791][ T5860] usb 4-1: config 0 descriptor?? [ 422.551456][ T5853] airspy 6-1:0.0: Registered as swradio24 [ 422.557602][ T5853] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 422.596749][ T5860] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 422.606018][ T5860] usb 4-1: selecting invalid altsetting 1 [ 422.612569][ T5860] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 422.669549][ T5861] usb 7-1: USB disconnect, device number 3 [ 422.818773][ T5853] usb 6-1: USB disconnect, device number 3 [ 423.078580][ T5860] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 423.090727][ T5860] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 423.099643][ T5860] usb 4-1: media controller created [ 423.559578][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.971635][ T7049] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 424.627013][ T5860] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 424.634581][ T5860] zl10353_read_register: readreg error (reg=127, ret==-32) [ 424.839051][ T5860] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 425.598100][ T5861] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 425.691960][ T5853] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 425.728782][ T5860] usb 4-1: USB disconnect, device number 7 [ 425.835253][ T5861] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 425.847988][ T5861] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 425.859326][ T5861] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 425.869584][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.022479][ T5853] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 426.034256][ T5853] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 426.044812][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.040115][ T7080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 427.056644][ T5853] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 427.073161][ T5861] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.093209][ T5861] usb 1-1: USB disconnect, device number 11 [ 428.958016][ T11] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 429.182736][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 429.260342][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 429.379125][ T11] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 429.388581][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.401057][ T11] usb 2-1: Product: syz [ 429.405454][ T11] usb 2-1: Manufacturer: syz [ 429.411727][ T11] usb 2-1: SerialNumber: syz [ 429.573955][ T11] usb 2-1: config 0 descriptor?? [ 429.703568][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 429.909866][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 429.914159][ T5853] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 429.923836][ T5853] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 430.025003][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 430.035205][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.044226][ T9] usb 6-1: Product: syz [ 430.048878][ T9] usb 6-1: Manufacturer: syz [ 430.053877][ T9] usb 6-1: SerialNumber: syz [ 430.118692][ T11] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 430.126560][ T11] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 430.352020][ T9] usb 6-1: config 0 descriptor?? [ 430.881270][ T9] airspy 6-1:0.0: Board ID: 00 [ 430.886299][ T9] airspy 6-1:0.0: Firmware version: [ 430.916773][ T5853] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 430.925421][ T5853] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 431.319343][ T5853] usb 7-1: USB disconnect, device number 4 [ 431.696002][ T9] airspy 6-1:0.0: usb_control_msg() failed -32 request 0f [ 431.739013][ T9] airspy 6-1:0.0: Registered as swradio24 [ 431.745109][ T9] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 431.758360][ T5853] usb 2-1: USB disconnect, device number 12 [ 431.909416][ T9] usb 6-1: USB disconnect, device number 4 [ 432.101283][ T7120] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 432.300415][ T7124] overlayfs: failed to resolve './file0': -2 [ 435.701657][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.138619][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 436.361606][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 436.465800][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 436.553813][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 436.566814][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.576520][ T9] usb 4-1: Product: syz [ 436.581037][ T9] usb 4-1: Manufacturer: syz [ 436.585881][ T9] usb 4-1: SerialNumber: syz [ 436.759974][ T9] usb 4-1: config 0 descriptor?? [ 436.829575][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 436.839874][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 437.211248][ T7151] netlink: 96 bytes leftover after parsing attributes in process `syz.6.298'. [ 437.418568][ T11] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 437.568191][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 438.578353][ T5853] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 438.718487][ T11] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 438.729004][ T11] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 438.738568][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.740239][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 438.944602][ T5853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 439.056879][ T5853] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 439.066928][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.075431][ T5853] usb 6-1: Product: syz [ 439.079983][ T5853] usb 6-1: Manufacturer: syz [ 439.084803][ T5853] usb 6-1: SerialNumber: syz [ 439.374083][ T5853] usb 6-1: config 0 descriptor?? [ 439.739432][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 439.756434][ T9] em28xx 4-1:0.0: board has no eeprom [ 439.774003][ T11] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 440.088266][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 440.096463][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 440.100159][ T5853] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 440.109752][ T5856] em28xx 4-1:0.0: Binding DVB extension [ 440.109813][ T5853] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 440.199210][ T9] usb 4-1: USB disconnect, device number 8 [ 440.208551][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 440.216252][ T7179] 9pnet_fd: Insufficient options for proto=fd [ 440.776697][ T7183] syzkaller0: entered promiscuous mode [ 440.782632][ T7183] syzkaller0: entered allmulticast mode [ 441.175348][ T5856] em28xx 4-1:0.0: Registering input extension [ 441.186783][ T11] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 441.195317][ T11] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 441.227953][ T9] em28xx 4-1:0.0: Closing input extension [ 441.252724][ T11] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 441.262594][ T11] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 442.031510][ T5861] usb 6-1: USB disconnect, device number 5 [ 442.249102][ T11] usb 1-1: USB disconnect, device number 12 [ 442.262047][ T9] em28xx 4-1:0.0: Freeing device [ 443.363927][ T7206] loop6: detected capacity change from 0 to 764 [ 443.504954][ T7206] Symlink component flag not implemented [ 443.511775][ T7206] Symlink component flag not implemented (7) [ 443.999459][ T30] audit: type=1326 audit(1750375453.235:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.022339][ T30] audit: type=1326 audit(1750375453.235:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.264883][ T30] audit: type=1326 audit(1750375453.335:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.291035][ T30] audit: type=1326 audit(1750375453.335:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.313953][ T30] audit: type=1326 audit(1750375453.335:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.336703][ T30] audit: type=1326 audit(1750375453.385:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.363361][ T30] audit: type=1326 audit(1750375453.385:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.387420][ T30] audit: type=1326 audit(1750375453.385:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.410722][ T30] audit: type=1326 audit(1750375453.385:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd56ed8e929 code=0x7ffc0000 [ 444.833408][ T7228] 9pnet_fd: Insufficient options for proto=fd [ 446.281901][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 446.303253][ T30] audit: type=1326 audit(1750375453.815:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd56edc11e5 code=0x7ffc0000 [ 446.552730][ T7238] loop1: detected capacity change from 0 to 128 [ 446.810989][ T7238] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.949140][ T7238] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.300679][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 447.545296][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 447.577142][ T11] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 447.587296][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.595698][ T11] usb 4-1: Product: syz [ 447.601136][ T11] usb 4-1: Manufacturer: syz [ 447.606075][ T11] usb 4-1: SerialNumber: syz [ 447.740157][ T11] usb 4-1: config 0 descriptor?? [ 447.969452][ T5798] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.325173][ T11] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 448.332782][ T11] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 450.286423][ T11] usb 4-1: USB disconnect, device number 9 [ 450.746353][ T7266] loop1: detected capacity change from 0 to 512 [ 450.905882][ T7266] EXT4-fs: Ignoring removed i_version option [ 450.912432][ T7266] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.088562][ T7266] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.328: inode #13: comm syz.1.328: iget: illegal inode # [ 451.118060][ T11] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 451.128917][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 451.210465][ T7266] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.328: couldn't read orphan inode 13 (err -117) [ 451.296261][ T7266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.338930][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 451.359434][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 451.370965][ T11] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 451.383452][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 451.478463][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 451.487226][ T9] usb 4-1: config 179 has no interface number 0 [ 451.493938][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 451.505407][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 451.513319][ T7277] 9pnet_fd: Insufficient options for proto=fd [ 451.521373][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.535869][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 451.546240][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 451.559906][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 451.569323][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.648111][ T11] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 451.657565][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.666068][ T11] usb 6-1: Product: syz [ 451.670540][ T11] usb 6-1: Manufacturer: syz [ 451.675359][ T11] usb 6-1: SerialNumber: syz [ 451.707259][ T7271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 451.713347][ T11] usb 6-1: config 0 descriptor?? [ 451.727694][ T7272] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 451.772487][ T7272] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 451.843043][ T9] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 451.863276][ T7280] netlink: 'syz.6.333': attribute type 1 has an invalid length. [ 451.884676][ T11] usb 6-1: ucan: probing device on interface #0 [ 452.099537][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.131187][ T5861] usb 4-1: USB disconnect, device number 10 [ 452.555623][ T11] ucan 6-1:0.0 can0: registered device [ 452.742626][ T11] ucan 6-1:0.0 can0: firmware string: unknown [ 452.823643][ T11] usb 6-1: USB disconnect, device number 6 [ 454.118423][ T11] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 454.319279][ T7303] netlink: 148 bytes leftover after parsing attributes in process `syz.1.342'. [ 454.329489][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 454.358426][ T11] usb 6-1: config 0 interface 0 has no altsetting 0 [ 454.412543][ T11] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 454.423183][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.431790][ T11] usb 6-1: Product: syz [ 454.436198][ T11] usb 6-1: Manufacturer: syz [ 454.441217][ T11] usb 6-1: SerialNumber: syz [ 454.568171][ T11] usb 6-1: config 0 descriptor?? [ 454.756386][ T7307] loop6: detected capacity change from 0 to 1024 [ 454.781488][ T7307] EXT4-fs: Ignoring removed orlov option [ 454.904118][ T7307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.929495][ T49] Bluetooth: hci2: unexpected event 0x1c length: 12 > 5 [ 455.068395][ T11] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 455.083080][ T11] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 455.998227][ T5861] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 456.031881][ T6593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.210253][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 456.240453][ T5861] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 456.249932][ T5861] usb 4-1: config 179 has no interface number 0 [ 456.256438][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 456.268173][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 456.279800][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 456.291501][ T5861] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 456.301913][ T5861] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 456.315745][ T5861] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 456.327376][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.480466][ T7332] xt_TCPMSS: Only works on TCP SYN packets [ 456.934723][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 457.267121][ T7323] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 457.343727][ T5861] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 457.523549][ T5861] usb 6-1: USB disconnect, device number 7 [ 457.745184][ T5853] usb 4-1: USB disconnect, device number 11 [ 458.824716][ T7340] loop5: detected capacity change from 0 to 1024 [ 458.899990][ T7340] ======================================================= [ 458.899990][ T7340] WARNING: The mand mount option has been deprecated and [ 458.899990][ T7340] and is ignored by this kernel. Remove the mand [ 458.899990][ T7340] option from the mount to silence this warning. [ 458.899990][ T7340] ======================================================= [ 459.264189][ T7340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.426074][ T7340] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.354: Allocating blocks 385-513 which overlap fs metadata [ 459.724390][ T7340] EXT4-fs (loop5): pa ffff888125342070: logic 16, phys. 129, len 24 [ 459.738128][ T7340] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 459.979504][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 460.281849][ T6366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.128827][ T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 461.500717][ T7377] xt_TCPMSS: Only works on TCP SYN packets [ 463.378397][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 463.436723][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 463.706015][ T11] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 463.715511][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.723961][ T11] usb 2-1: Product: syz [ 463.728410][ T11] usb 2-1: Manufacturer: syz [ 463.733224][ T11] usb 2-1: SerialNumber: syz [ 463.750795][ T11] usb 2-1: config 0 descriptor?? [ 464.049354][ T7385] netlink: 52 bytes leftover after parsing attributes in process `syz.5.370'. [ 464.059430][ T7385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.370'. [ 464.068704][ T7385] netlink: 52 bytes leftover after parsing attributes in process `syz.5.370'. [ 464.100564][ T5853] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 464.289705][ T11] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 464.296878][ T11] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 464.398171][ T5853] usb 7-1: Using ep0 maxpacket: 8 [ 464.426297][ T11] usb 2-1: USB disconnect, device number 13 [ 464.450650][ T5853] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 464.459597][ T5853] usb 7-1: config 179 has no interface number 0 [ 464.466200][ T5853] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 464.478026][ T5853] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 464.489822][ T5853] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.501537][ T5853] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 464.511968][ T5853] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 464.528024][ T5853] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 464.540779][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.782652][ T7394] xt_hashlimit: max too large, truncated to 1048576 [ 464.932629][ T7382] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 465.591426][ T5853] xpad 7-1:179.65: probe with driver xpad failed with error -5 [ 465.620817][ T5853] usb 7-1: USB disconnect, device number 5 [ 466.094610][ T7413] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 469.258354][ T7430] xt_TCPMSS: Only works on TCP SYN packets [ 470.241906][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.250870][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.749418][ T7438] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 470.756332][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 470.766958][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 470.998463][ T5853] vhci_hcd: vhci_device speed not set [ 471.115344][ T5853] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 471.338604][ T7443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 471.483596][ T7441] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 471.490408][ T7441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 471.498798][ T7441] vhci_hcd vhci_hcd.0: Device attached [ 471.619389][ T7438] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(12) [ 471.626280][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 471.635190][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 471.656707][ T7439] vhci_hcd: connection reset by peer [ 471.662913][ T7442] vhci_hcd: connection closed [ 471.664778][ T7444] vhci_hcd: connection closed [ 471.673818][ T7036] vhci_hcd: stop threads [ 471.685825][ T7036] vhci_hcd: release socket [ 471.691343][ T7036] vhci_hcd: disconnect device [ 471.786867][ T7036] vhci_hcd: stop threads [ 471.791616][ T7036] vhci_hcd: release socket [ 471.796344][ T7036] vhci_hcd: disconnect device [ 471.847954][ T7036] vhci_hcd: stop threads [ 471.852441][ T7036] vhci_hcd: release socket [ 471.857121][ T7036] vhci_hcd: disconnect device [ 471.900147][ T7451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.385'. [ 471.909525][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'. [ 471.919319][ T7451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.385'. [ 472.016002][ T7452] Cannot find add_set index 0 as target [ 472.258083][ T11] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 472.485544][ T11] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 472.494702][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.550294][ T11] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 472.559825][ T11] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 472.568620][ T11] usb 4-1: Manufacturer: syz [ 472.666714][ T11] usb 4-1: config 0 descriptor?? [ 473.438347][ T11] rc_core: IR keymap rc-hauppauge not found [ 473.444600][ T11] Registered IR keymap rc-empty [ 473.452369][ T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 473.466188][ T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 473.573477][ T7466] loop5: detected capacity change from 0 to 512 [ 473.581183][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 473.697313][ T7466] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 473.711257][ T7466] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.809420][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 473.809492][ T30] audit: type=1326 audit(1750375483.045:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 473.845792][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 473.916648][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 473.925717][ T9] usb 7-1: config 179 has no interface number 0 [ 473.932731][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 473.948426][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 473.962153][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 473.975817][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 473.988112][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 474.001981][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 474.011515][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.049190][ T30] audit: type=1326 audit(1750375483.105:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.073745][ T30] audit: type=1326 audit(1750375483.185:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.082496][ T7464] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 474.096667][ T30] audit: type=1326 audit(1750375483.185:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.126205][ T30] audit: type=1326 audit(1750375483.185:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.162427][ T7466] EXT4-fs (loop5): 1 orphan inode deleted [ 474.168727][ T7466] EXT4-fs (loop5): 1 truncate cleaned up [ 474.176641][ T7466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.437845][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 474.775419][ T5861] usb 7-1: USB disconnect, device number 6 [ 474.775620][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 474.796264][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 474.904992][ T30] audit: type=1326 audit(1750375483.395:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.928171][ T30] audit: type=1326 audit(1750375483.395:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.943462][ T6366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.952984][ T30] audit: type=1326 audit(1750375483.395:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 474.986758][ T30] audit: type=1326 audit(1750375483.435:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 475.009662][ T30] audit: type=1326 audit(1750375483.435:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7453 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7235f8e929 code=0x7ffc0000 [ 476.460787][ T5853] vhci_hcd: vhci_device speed not set [ 476.475750][ T5861] usb 4-1: USB disconnect, device number 12 [ 477.709025][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.036992][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.501783][ T7493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.563876][ T7494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.954771][ T7503] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 478.961577][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 478.970067][ T7503] vhci_hcd vhci_hcd.0: Device attached [ 479.082041][ T7503] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 479.088859][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 479.097138][ T7503] vhci_hcd vhci_hcd.0: Device attached [ 479.172825][ T7503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 479.218149][ T5853] vhci_hcd: vhci_device speed not set [ 479.223762][ T7503] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 479.230495][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 479.239141][ T7503] vhci_hcd vhci_hcd.0: Device attached [ 479.294059][ T7511] netlink: 44 bytes leftover after parsing attributes in process `syz.5.402'. [ 479.304183][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'. [ 479.313529][ T7511] netlink: 44 bytes leftover after parsing attributes in process `syz.5.402'. [ 479.326871][ T7513] vhci_hcd: connection closed [ 479.328118][ T7504] vhci_hcd: connection closed [ 479.343213][ T7507] vhci_hcd: connection closed [ 479.348621][ T3779] vhci_hcd: stop threads [ 479.358587][ T3779] vhci_hcd: release socket [ 479.367540][ T3779] vhci_hcd: disconnect device [ 479.420711][ T5853] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 479.434902][ T3779] vhci_hcd: stop threads [ 479.439726][ T3779] vhci_hcd: release socket [ 479.444478][ T3779] vhci_hcd: disconnect device [ 479.495581][ T3779] vhci_hcd: stop threads [ 479.504697][ T3779] vhci_hcd: release socket [ 479.510370][ T3779] vhci_hcd: disconnect device [ 481.183881][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.199542][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.211794][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.232347][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.249875][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.809267][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 481.948116][ T7520] loop6: detected capacity change from 0 to 8192 [ 483.089345][ T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 483.098851][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.338587][ T49] Bluetooth: hci4: command tx timeout [ 484.061091][ T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 484.070645][ T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 484.083635][ T9] usb 6-1: Manufacturer: syz [ 484.100527][ T9] usb 6-1: config 0 descriptor?? [ 484.598244][ T5853] vhci_hcd: vhci_device speed not set [ 485.010578][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.118478][ T9] rc_core: IR keymap rc-hauppauge not found [ 485.124649][ T9] Registered IR keymap rc-empty [ 485.132732][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 485.146836][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 485.205217][ T7561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.415'. [ 485.217938][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.415'. [ 485.227068][ T7561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.415'. [ 485.369082][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 485.407951][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.431612][ T9] usb 6-1: USB disconnect, device number 8 [ 485.449833][ T49] Bluetooth: hci4: command tx timeout [ 485.681933][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.804617][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.159683][ T7567] netlink: 'syz.6.417': attribute type 4 has an invalid length. [ 486.280246][ T7568] netlink: 'syz.6.417': attribute type 4 has an invalid length. [ 486.589775][ T7572] evm: overlay not supported [ 487.506707][ T5808] Bluetooth: hci4: command tx timeout [ 487.568080][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 490.080142][ T49] Bluetooth: hci4: command tx timeout [ 491.080172][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.088079][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.095806][ T7533] bridge_slave_0: entered allmulticast mode [ 491.105156][ T7533] bridge_slave_0: entered promiscuous mode [ 491.727080][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.735451][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.743324][ T7533] bridge_slave_1: entered allmulticast mode [ 491.755822][ T7533] bridge_slave_1: entered promiscuous mode [ 492.106487][ T3566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.122057][ T7599] netlink: 44 bytes leftover after parsing attributes in process `syz.5.428'. [ 492.132253][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.428'. [ 492.141509][ T7599] netlink: 44 bytes leftover after parsing attributes in process `syz.5.428'. [ 492.344702][ T3566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.477263][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.574769][ T3566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.714138][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.843907][ T3566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.305785][ T7533] team0: Port device team_slave_0 added [ 493.366651][ T7533] team0: Port device team_slave_1 added [ 493.495221][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 493.495298][ T30] audit: type=1326 audit(1750375502.685:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.524470][ T30] audit: type=1326 audit(1750375502.735:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.547094][ T30] audit: type=1326 audit(1750375502.735:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.569803][ T30] audit: type=1326 audit(1750375502.735:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.593132][ T30] audit: type=1326 audit(1750375502.735:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.617293][ T30] audit: type=1326 audit(1750375502.735:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.640489][ T30] audit: type=1326 audit(1750375502.735:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 493.666266][ T7613] Zero length message leads to an empty skb [ 494.548387][ T30] audit: type=1326 audit(1750375502.905:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 494.571859][ T30] audit: type=1326 audit(1750375502.925:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 494.594928][ T30] audit: type=1326 audit(1750375502.925:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f290998e929 code=0x7ffc0000 [ 496.645370][ T3566] bridge_slave_1: left allmulticast mode [ 496.651401][ T3566] bridge_slave_1: left promiscuous mode [ 496.658193][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.719726][ T3566] bridge_slave_0: left allmulticast mode [ 497.725661][ T3566] bridge_slave_0: left promiscuous mode [ 497.733053][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.296386][ T7625] syz.1.439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 498.844716][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.442'. [ 498.854384][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.442'. [ 498.863750][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.442'. [ 499.027755][ T3566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.101300][ T3566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.145689][ T3566] bond0 (unregistering): Released all slaves [ 499.234852][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.243647][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.271897][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.386933][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.395317][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.422030][ T7533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.073208][ T3566] hsr_slave_0: left promiscuous mode [ 500.111098][ T3566] hsr_slave_1: left promiscuous mode [ 500.379161][ T3566] veth1_macvtap: left promiscuous mode [ 500.385045][ T3566] veth0_macvtap: left promiscuous mode [ 500.391279][ T3566] veth1_vlan: left promiscuous mode [ 500.396872][ T3566] veth0_vlan: left promiscuous mode [ 502.031457][ T3566] team0 (unregistering): Port device team_slave_1 removed [ 502.125178][ T3566] team0 (unregistering): Port device team_slave_0 removed [ 502.860610][ T7533] hsr_slave_0: entered promiscuous mode [ 502.870426][ T7533] hsr_slave_1: entered promiscuous mode [ 502.878884][ T7533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.886622][ T7533] Cannot create hsr debugfs directory [ 503.154420][ T7664] netlink: 44 bytes leftover after parsing attributes in process `syz.5.456'. [ 503.164710][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.456'. [ 503.174399][ T7664] netlink: 44 bytes leftover after parsing attributes in process `syz.5.456'. [ 503.271367][ T3566] IPVS: stop unused estimator thread 0... [ 504.021367][ T7674] overlayfs: failed to resolve './file1': -2 [ 504.192260][ T7672] loop5: detected capacity change from 0 to 1024 [ 504.311697][ T7672] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 504.328646][ T7672] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 504.340042][ T7672] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 504.372319][ T7672] JBD2: no valid journal superblock found [ 504.376176][ T7533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 504.378537][ T7672] EXT4-fs (loop5): Could not load journal inode [ 504.413840][ T7533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 504.435182][ T7533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 504.548427][ T7533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 506.117751][ T7684] ===================================================== [ 506.125085][ T7684] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 506.132731][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.133522][ T7684] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 506.145932][ T7684] do_xdp_generic+0xd52/0x1690 [ 506.151061][ T7684] tun_get_user+0x447a/0x6b40 [ 506.155958][ T7684] tun_chr_write_iter+0x3e9/0x5c0 [ 506.161315][ T7684] vfs_write+0xb4b/0x1580 [ 506.165990][ T7684] __x64_sys_write+0x1fb/0x4d0 [ 506.171119][ T7684] x64_sys_call+0x38c3/0x3db0 [ 506.176038][ T7684] do_syscall_64+0xd9/0x210 [ 506.180831][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.186931][ T7684] [ 506.189455][ T7684] Uninit was stored to memory at: [ 506.194796][ T7684] pskb_expand_head+0x310/0x1610 [ 506.200049][ T7684] do_xdp_generic+0xa79/0x1690 [ 506.205004][ T7684] tun_get_user+0x447a/0x6b40 [ 506.210053][ T7684] tun_chr_write_iter+0x3e9/0x5c0 [ 506.215332][ T7684] vfs_write+0xb4b/0x1580 [ 506.220023][ T7684] __x64_sys_write+0x1fb/0x4d0 [ 506.225030][ T7684] x64_sys_call+0x38c3/0x3db0 [ 506.230034][ T7684] do_syscall_64+0xd9/0x210 [ 506.234756][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.240983][ T7684] [ 506.243417][ T7684] Uninit was created at: [ 506.248037][ T7684] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 506.254766][ T7684] kmalloc_reserve+0x22f/0x4b0 [ 506.259931][ T7684] __alloc_skb+0x347/0x7d0 [ 506.264598][ T7684] alloc_skb_with_frags+0xc5/0xa60 [ 506.270025][ T7684] sock_alloc_send_pskb+0xad8/0xc70 [ 506.275492][ T7684] tun_get_user+0x1019/0x6b40 [ 506.280591][ T7684] tun_chr_write_iter+0x3e9/0x5c0 [ 506.285820][ T7684] vfs_write+0xb4b/0x1580 [ 506.290505][ T7684] __x64_sys_write+0x1fb/0x4d0 [ 506.295500][ T7684] x64_sys_call+0x38c3/0x3db0 [ 506.300500][ T7684] do_syscall_64+0xd9/0x210 [ 506.305195][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.311403][ T7684] [ 506.313886][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.5.466 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(undef) [ 506.319438][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.326157][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.343129][ T7684] ===================================================== [ 506.350419][ T7684] Disabling lock debugging due to kernel taint [ 506.356732][ T7684] Kernel panic - not syncing: kmsan.panic set ... [ 506.363331][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.5.466 Tainted: G B 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(undef) [ 506.377119][ T7684] Tainted: [B]=BAD_PAGE [ 506.381407][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.391647][ T7684] Call Trace: [ 506.395062][ T7684] [ 506.398118][ T7684] __dump_stack+0x26/0x30 [ 506.402653][ T7684] dump_stack_lvl+0x53/0x270 [ 506.407436][ T7684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 506.413470][ T7684] dump_stack+0x1e/0x25 [ 506.417806][ T7684] panic+0x4bd/0xd50 [ 506.421914][ T7684] kmsan_report+0x31c/0x320 [ 506.426616][ T7684] ? __msan_warning+0x1b/0x30 [ 506.431471][ T7684] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 506.437547][ T7684] ? do_xdp_generic+0xd52/0x1690 [ 506.442657][ T7684] ? tun_get_user+0x447a/0x6b40 [ 506.447704][ T7684] ? tun_chr_write_iter+0x3e9/0x5c0 [ 506.453107][ T7684] ? vfs_write+0xb4b/0x1580 [ 506.457821][ T7684] ? __x64_sys_write+0x1fb/0x4d0 [ 506.462968][ T7684] ? x64_sys_call+0x38c3/0x3db0 [ 506.468022][ T7684] ? do_syscall_64+0xd9/0x210 [ 506.472872][ T7684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.479124][ T7684] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 506.485168][ T7684] ? ___bpf_prog_run+0xea65/0xeba0 [ 506.490504][ T7684] ? __bpf_prog_run32+0xc2/0xf0 [ 506.495541][ T7684] ? kmsan_get_metadata+0xfb/0x160 [ 506.500874][ T7684] __msan_warning+0x1b/0x30 [ 506.505568][ T7684] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 506.511548][ T7684] do_xdp_generic+0xd52/0x1690 [ 506.516489][ T7684] ? tun_get_user+0x3f51/0x6b40 [ 506.521507][ T7684] ? filter_irq_stacks+0x49/0x190 [ 506.526730][ T7684] ? tun_get_user+0x43f5/0x6b40 [ 506.531760][ T7684] tun_get_user+0x447a/0x6b40 [ 506.536606][ T7684] ? stack_depot_save_flags+0x35/0x7b0 [ 506.542245][ T7684] ? __rcu_read_unlock+0x6d/0xd0 [ 506.547430][ T7684] ? kmsan_get_metadata+0xfb/0x160 [ 506.552737][ T7684] ? kmsan_get_metadata+0xfb/0x160 [ 506.558047][ T7684] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 506.564576][ T7684] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 506.570886][ T7684] tun_chr_write_iter+0x3e9/0x5c0 [ 506.576125][ T7684] vfs_write+0xb4b/0x1580 [ 506.580673][ T7684] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 506.586396][ T7684] __x64_sys_write+0x1fb/0x4d0 [ 506.591375][ T7684] x64_sys_call+0x38c3/0x3db0 [ 506.596247][ T7684] do_syscall_64+0xd9/0x210 [ 506.600917][ T7684] ? irqentry_exit+0x16/0x60 [ 506.605670][ T7684] ? clear_bhb_loop+0x40/0x90 [ 506.610515][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.616583][ T7684] RIP: 0033:0x7fd56ed8d3df [ 506.621138][ T7684] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 506.641015][ T7684] RSP: 002b:00007fd56fc97000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 506.649607][ T7684] RAX: ffffffffffffffda RBX: 00007fd56efb5fa0 RCX: 00007fd56ed8d3df [ 506.657763][ T7684] RDX: 000000000000fdef RSI: 0000200000000280 RDI: 00000000000000c8 [ 506.665866][ T7684] RBP: 00007fd56ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 506.673968][ T7684] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 506.682068][ T7684] R13: 0000000000000000 R14: 00007fd56efb5fa0 R15: 00007fff3a914e98 [ 506.690272][ T7684] [ 506.693752][ T7684] Kernel Offset: disabled [ 506.698163][ T7684] Rebooting in 86400 seconds..