last executing test programs: 3m33.57707766s ago: executing program 1 (id=2243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000008d80)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1b10284938c218a739ce2f69368a687b", 0x10}, {&(0x7f0000000000)="aaff74ae9e880691b797155dec9406879d61c9eed813ea3a07656e7e34d5d4cf91d423321f9577a0cb47cd4bcdbda3c3a40fa8a09d1a94e802d4179e4d77568c0faf80316f80051d20785799f1227305fd9324c8adae618dc096e2544d0042332e5e0bb72089d6661f72b1e88b28f004a1e6e7648196fb6ff16ac87116617d4d717f99012851fbc0", 0x88}, {&(0x7f0000000ac0)="d915e8fa1300effcd04d41a711f81e0f0fe404f19a511c15bd6d3ca4dcc4bd2f2ae33f52882a3aa24662ec647605afd539e101aff45866a1d38046bb4cf8657434d7a9fc7db579be4324bf1412e93ac7582f840ecbb451ed1af70d08122fd3520b764420351a75cb1eb91ac9476e9b7d472d3da7d0185dc77876fd7ccbfbf0581c3ebca58d8140fe4e9ccec2c9b4b83ccebf90f8ff2ebcf5c36e3919bdd341098271b7b65359b7a9c501d924d7c6635d38170b8d2a052cac2b18b7a2300973c80674db68c5c2f6f52219c52fcd873c97a74c065f94e6c46669a888f094ebb860f33256112758d89b491c672a", 0xec}], 0x3, &(0x7f0000000a80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40041}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000280)=""/252, 0xfc}], 0x2}, 0x3ff}], 0x1, 0x0, 0x0) 3m33.385589716s ago: executing program 1 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) 3m33.251641438s ago: executing program 1 (id=2248): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) 3m33.035346049s ago: executing program 1 (id=2250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 3m32.981632135s ago: executing program 1 (id=2251): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7fffffff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) 3m30.860304944s ago: executing program 1 (id=2255): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() rt_sigreturn() ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xc0085504, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 3m30.475720651s ago: executing program 32 (id=2255): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() rt_sigreturn() ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xc0085504, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 32.380486458s ago: executing program 2 (id=3606): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0, 0xc00, 0xfffffffffffffffc, 0xfffffbffffffffff}, @fda={0x66646185, 0x3, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 32.157349231s ago: executing program 2 (id=3610): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r0, &(0x7f0000000d00)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, '\xa4\xdfy\xf5Y\xbf\xd9i@8\\\x87h\xa6\xa0\xa43\x84\xe7\xd5\x98\xe8\x01\xd3\xf0\xc72\xdf\xfb\x00\xfd\xcd\xf2q\x84\xcb-\xf3\x92\x12\xef^~v\x10/X\x1e\xc3\xb1T\xf4\xd0m|\xabr\xc7L\x9b3\xbeCJ\xad!\xb2\xb5g\x7f\xe9W\a\x00\x03=q\x8a\x83|\\w\xe1\xf3\xf1\xe8\x83\xef\xe2\x8bU\xebG4<\x1b\a57<;\xefm:?\x8e\x16\tu\xd5=\xc6P5\xd7\xeci\xcaI\x15\x00]\xc6%\x94&9\xac\xa9\xe9k\x99qc2\xc6V6\x1e\x1c\xeb\x9e\xc78\xb4y+\x85\xc4\xfa.\x15\xe4\x11\xa2\x92\t\xde\xa9\xdc\xe1\xfd\x98\xd2Ja\'r4\xe3sFv\x02\xa6\x8exO\xd0D\x8ea\xc3g\xe5V|@1\x15H4(\xb8E\xa4\xa9\x8bp:\x82k/.:\xf6\x003G(\xd4\xfc\xa0\x01\xe3Q\x805?\br\xc2\x96(y\x8c\x95\xf2Rx\xca\x06\xea\xf43\xf2/8L\xd3u\x87m\x96\xfc\x9cU]\xffiN\x14\xe7-{\xea\x9f\'D\xc0\xeeqA\x1a\xed\x8d\xc8\xad\xcdZS\x1b\xb6{\xfa\xa8\x84\nd=\x0e\x8fc9\xf0\x7fK\xd7\b\x86r\xac\xaf\xd0\xb6^y\xc5\x03c\xc22\xa9R\x90\x9e\xfc\xce\x957O\x06]\xdcZ\x17\xb3\x1bb\xc9Dm\xa2\xd3\x91'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqjJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 5.085755119s ago: executing program 0 (id=3808): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000100)={0x0, 0xe, 0x1, '\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) read$char_usb(r1, &(0x7f0000000440)=""/247, 0xf7) 3.084683986s ago: executing program 6 (id=3826): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$qrtrtun(r1, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ffffff, 0x12, r0, 0x0) 2.980215568s ago: executing program 6 (id=3827): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xaed}], 0x5}}], 0x1, 0x0) 2.834916723s ago: executing program 6 (id=3828): syz_usb_connect(0x5, 0x3d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x1dd, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x67b, 0x100, 0x3, 0x0, 0xffd7) 2.643758729s ago: executing program 5 (id=3831): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.941909329s ago: executing program 0 (id=3833): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x2, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 1.653196199s ago: executing program 0 (id=3837): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x7, 0xfff1}, {0x0, 0x8}, {0x2, 0x6}}}, 0x24}}, 0x48040) 1.603862657s ago: executing program 3 (id=3838): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.518114842s ago: executing program 0 (id=3839): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xaed}], 0x5}}], 0x1, 0x0) 1.51643667s ago: executing program 5 (id=3840): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0x33de64, 0x175bce}) 1.448356402s ago: executing program 6 (id=3842): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) 1.336815176s ago: executing program 0 (id=3843): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000100)={0x0, 0xe, 0x1, '\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="0001000000000000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) read$char_usb(r1, &(0x7f0000000440)=""/247, 0xf7) 1.271965631s ago: executing program 5 (id=3845): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.237035133s ago: executing program 3 (id=3846): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) 1.091895744s ago: executing program 5 (id=3848): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x2, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 961.782994ms ago: executing program 3 (id=3849): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000d00)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, '\xa4\xdfy\xf5Y\xbf\xd9i@8\\\x87h\xa6\xa0\xa43\x84\xe7\xd5\x98\xe8\x01\xd3\xf0\xc72\xdf\xfb\x00\xfd\xcd\xf2q\x84\xcb-\xf3\x92\x12\xef^~v\x10/X\x1e\xc3\xb1T\xf4\xd0m|\xabr\xc7L\x9b3\xbeCJ\xad!\xb2\xb5g\x7f\xe9W\a\x00\x03=q\x8a\x83|\\w\xe1\xf3\xf1\xe8\x83\xef\xe2\x8bU\xebG4<\x1b\a57<;\xefm:?\x8e\x16\tu\xd5=\xc6P5\xd7\xeci\xcaI\x15\x00]\xc6%\x94&9\xac\xa9\xe9k\x99qc2\xc6V6\x1e\x1c\xeb\x9e\xc78\xb4y+\x85\xc4\xfa.\x15\xe4\x11\xa2\x92\t\xde\xa9\xdc\xe1\xfd\x98\xd2Ja\'r4\xe3sFv\x02\xa6\x8exO\xd0D\x8ea\xc3g\xe5V|@1\x15H4(\xb8E\xa4\xa9\x8bp:\x82k/.:\xf6\x003G(\xd4\xfc\xa0\x01\xe3Q\x805?\br\xc2\x96(y\x8c\x95\xf2Rx\xca\x06\xea\xf43\xf2/8L\xd3u\x87m\x96\xfc\x9cU]\xffiN\x14\xe7-{\xea\x9f\'D\xc0\xeeqA\x1a\xed\x8d\xc8\xad\xcdZS\x1b\xb6{\xfa\xa8\x84\nd=\x0e\x8fc9\xf0\x7fK\xd7\b\x86r\xac\xaf\xd0\xb6^y\xc5\x03c\xc22\xa9R\x90\x9e\xfc\xce\x957O\x06]\xdcZ\x17\xb3\x1bb\xc9Dm\xa2\xd3\x91'}, {0x20, 'ro\x00'}, {0x20, '+'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb"], 0x54}, 0x1, 0x0, 0x0, 0x2040000}, 0x80) 836.961639ms ago: executing program 5 (id=3851): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000002080)) 805.708003ms ago: executing program 3 (id=3852): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000180)=""/191, 0xbf}], 0x1) 744.692924ms ago: executing program 4 (id=3853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0}) 716.175793ms ago: executing program 3 (id=3854): sendmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000240)=@xdp={0x2c, 0xc, 0x0, 0x3b}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)="100cdef9f95b1118bb652c7e60dbec3de579c7a2e2c7d0848cb4eea133b66a2bee7196505656167da1403fff50db223203584a92025a0aea805bb1739f2a6d39dc11959e999b375b3ec506b80c0c3e1bd28d9d3bb8dbba6525a7504626f2f3e01dd423692abcd3812a32aef0e5722c263dc63c5dcce67fd75ad8a576876c2c0d5b89fea407decc796e37ab", 0x8b}, {&(0x7f0000000140)="57b74e8fbe9bf99e5f4e6d40bd5c6f96f3aa5a10baaa13333e10f9c6c155", 0x1e}, {&(0x7f0000000540)="1f3b2fac73f31dbe86b42d18ae8a26a10623a834451df12c148719e31c3fba5ea9bd81f10e9aab9c7c5ac7554a5c3a2211eb77a95d4d63846eaa4e74f78dadc620e4157bd5ff55fbea2b60578cd30c786135341536b92bedd65786b0b3fc7ad0087683e1d69056b12661818c617223597ac799cb24f7856e4b81708ba82456aad5474c51daab368f77c64c01d93a2f05b57ecdf1da7dd3039cdde46e1371cde4cbe879ca5d38ad3066e9e75d48f6d6751c3359cfd0bc4a40b124a0819a3a4171313dde", 0xc3}, {&(0x7f0000000640)="f57bfb38e34c4c9fe011967514a4ef4f5e8a663e7430c71fdc258bca0da4db46f0cc4fd09827d7208ec70e9ecd9f22fa0bbe31c4706edd25acbdaf8ebb6a751ba55f0ebe7fc46bf5fdf4193d643fe535cdde565a51333885cce693751d7e430901ebcc7685688092c95443bd68b6d763896453edb00a208ac7a872b65aa93ef709e9a3cad680c4aa9f47", 0x8a}, {0x0}], 0x5}}], 0x1, 0x41) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 708.803667ms ago: executing program 5 (id=3855): syz_usb_connect(0x5, 0x3d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x1dd, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x67b, 0x100, 0x3, 0x0, 0xffd7) 636.295887ms ago: executing program 4 (id=3856): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000007376cc880471770399f4d2ade510952e1ce7f580eaa0303ad0aeafef1822c4facddef8d2fc3fe0cdf259e9d10a3ea8b15c9434a909596b35e895da2d400eee080f2d12323f56c3ecdefdc8f3efad840af121605fe3608ee9bc767487f5ef0fe5ee5839bc454b35348f3420d5bb0263d6912ae97146d3462650eae0548a78befa47f1db800844129be276ee2c6347a4e0c17226e8dd6aa98f017966b02ba8bab6e6004bf13d790b93bf8629b25bfdc171b832cdba86a24a719f76dbf274f00a853f0fb3cfc33c68e66096e896cba2fe1bdc151cbc0901f7646131fa282a02c1d91f12b920c94c60f56fff6088888b2ce791", @ANYRES16, @ANYBLOB="afd304000000030000001600000008000300", @ANYRES32], 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x5, 0x0, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='scmi_xfer_response_wait\x00', 0xffffffffffffffff, 0x0, 0x1a0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) socket$key(0xf, 0x3, 0x2) msgget(0x3, 0x713) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) 581.263768ms ago: executing program 3 (id=3857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d17b00305f"}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x50}}, 0x0) unshare(0x62040200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x60, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe49, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48880}, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r5, 0x6}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) socket(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) socket$kcm(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) 476.755982ms ago: executing program 4 (id=3858): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/211, 0xd3}], 0x1}, 0x38, 0x40000040) 460.706281ms ago: executing program 6 (id=3859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000280)="566a5a8ec253e57889ba328c65a1a0015f7bfc8e333907323274d82bf6d7f5ef", 0x20}], 0x1, 0x0, 0x0, 0x24008090}, 0x8044) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1}}], 0x1, 0x41, 0x0) 460.312581ms ago: executing program 4 (id=3860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x1, 0x5000, 0x1000, &(0x7f0000fed000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) 319.137835ms ago: executing program 6 (id=3861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000005) 0s ago: executing program 4 (id=3862): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3fffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): id=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2288" name="/newroot/413/file0" dev="tmpfs" ino=2121 res=1 errno=0 [ 385.645177][T12058] tipc: Enabled bearer , priority 0 [ 385.721359][T12059] syzkaller1: entered promiscuous mode [ 385.727957][T12059] syzkaller1: entered allmulticast mode [ 385.774520][T12058] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 385.784433][T12058] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 385.797267][T12058] tipc: Resetting bearer [ 385.918357][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 386.136118][T12001] chnl_net:caif_netlink_parms(): no params data found [ 386.156266][T12082] input: syz1 as /devices/virtual/input/input8 [ 386.385875][T12090] kvm: pic: non byte write [ 386.469882][ T746] hsr_slave_0: left promiscuous mode [ 386.508418][ T746] hsr_slave_1: left promiscuous mode [ 386.544779][ T746] veth1_macvtap: left promiscuous mode [ 386.564582][ T746] veth0_macvtap: left promiscuous mode [ 386.639809][ T47] tipc: Node number set to 2735631453 [ 387.400296][ T746] team0 (unregistering): Port device team_slave_1 removed [ 387.449645][ T746] team0 (unregistering): Port device team_slave_0 removed [ 387.459947][ T5838] Bluetooth: hci0: command tx timeout [ 387.919291][T12099] tipc: Enabling of bearer rejected, failed to enable media [ 387.932969][ T11] tipc: Resetting bearer [ 387.964684][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.972215][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.979513][T12001] bridge_slave_0: entered allmulticast mode [ 387.987867][T12001] bridge_slave_0: entered promiscuous mode [ 388.013749][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.022560][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.030901][T12001] bridge_slave_1: entered allmulticast mode [ 388.043471][T12001] bridge_slave_1: entered promiscuous mode [ 388.145867][T12001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.195339][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 388.200954][T12001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.291858][T12116] tipc: Enabled bearer , priority 0 [ 388.327279][T12117] kvm: pic: non byte write [ 388.346919][T12108] syzkaller0: entered promiscuous mode [ 388.352632][T12108] syzkaller0: entered allmulticast mode [ 388.358640][T12108] tipc: Resetting bearer [ 388.398270][T12001] team0: Port device team_slave_0 added [ 388.406057][T12106] tipc: Resetting bearer [ 388.642835][T12129] Set syz1 is full, maxelem 65536 reached [ 389.074219][T12139] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 391.288459][T12106] tipc: Disabling bearer [ 391.304771][ T746] IPVS: stop unused estimator thread 0... [ 391.311014][T12001] team0: Port device team_slave_1 added [ 391.474887][T12001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.482589][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.519433][T12165] input: syz1 as /devices/virtual/input/input9 [ 391.528031][T12001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.553046][T12001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.564575][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.597170][T12001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.867629][T12001] hsr_slave_0: entered promiscuous mode [ 391.885224][T12001] hsr_slave_1: entered promiscuous mode [ 391.939120][T12001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.954862][T12001] Cannot create hsr debugfs directory [ 392.089352][T12192] netlink: 'syz.0.2338': attribute type 29 has an invalid length. [ 392.115246][T12193] tipc: Started in network mode [ 392.136433][T12193] tipc: Node identity 1a7439e03bb5, cluster identity 4711 [ 392.150770][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 392.173750][T12193] tipc: Enabled bearer , priority 0 [ 392.281742][T12188] syzkaller0: entered promiscuous mode [ 392.298271][T12188] syzkaller0: entered allmulticast mode [ 392.312771][T12188] tipc: Resetting bearer [ 392.323420][T12199] netlink: 'syz.0.2338': attribute type 29 has an invalid length. [ 392.464870][T12187] tipc: Resetting bearer [ 392.489509][T12203] Set syz1 is full, maxelem 65536 reached [ 393.189905][ T5834] tipc: Node number set to 566311392 [ 394.387837][T12236] Set syz1 is full, maxelem 65536 reached [ 395.118206][T12187] tipc: Disabling bearer [ 395.327747][T12246] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.707638][T12264] input: syz1 as /devices/virtual/input/input10 [ 395.819849][T12001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 395.856511][T12001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 395.880835][T12001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 395.896464][T12001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.974557][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.990900][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.026770][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.033997][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.072899][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.080112][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.615627][T12001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.775882][T12305] input: syz1 as /devices/virtual/input/input11 [ 397.204908][T12001] veth0_vlan: entered promiscuous mode [ 397.242995][T12001] veth1_vlan: entered promiscuous mode [ 397.292868][T12001] veth0_macvtap: entered promiscuous mode [ 397.316324][T12001] veth1_macvtap: entered promiscuous mode [ 397.356595][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.400897][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.418101][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.447367][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.481064][T12001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.525709][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.543558][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.557821][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.579254][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.595781][T12001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.628793][T12001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.643098][T12001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.657736][T12001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.671947][T12001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.856358][ T6051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.895290][ T6051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.971196][T12342] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 397.984806][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.010255][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.206741][T12349] input: syz1 as /devices/virtual/input/input12 [ 398.393300][T12353] block device autoloading is deprecated and will be removed. [ 398.785233][T12368] kvm: pic: non byte write [ 398.975083][T12375] kvm: kvm [12373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5d81 [ 399.029343][T12375] kvm: kvm [12373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe599 [ 399.045199][T12375] kvm: kvm [12373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe579 [ 399.058535][T12375] kvm: kvm [12373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7c9a [ 399.076666][T12375] kvm: kvm [12373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xae78 [ 399.095028][T12375] kvm: kvm [12373]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6463 [ 399.229208][T12386] usb usb8: usbfs: process 12386 (syz.5.2402) did not claim interface 0 before use [ 399.531200][T12394] input: syz1 as /devices/virtual/input/input13 [ 399.740300][T12404] binder: 12402:12404 ioctl c0306201 0 returned -14 [ 400.475004][T12435] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 400.674290][T12442] Set syz1 is full, maxelem 65536 reached [ 402.221778][T12494] kvm: kvm [12493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5d81 [ 402.270943][T12494] kvm: kvm [12493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe599 [ 402.289545][T12494] kvm: kvm [12493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe579 [ 402.340832][T12494] kvm: kvm [12493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7c9a [ 406.344915][T12654] 9pnet_virtio: no channels available for device syz [ 406.417262][T12656] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 406.703656][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 406.712972][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 407.449329][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 407.609942][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 407.621834][ T47] usb 4-1: config 0 has no interfaces? [ 407.630364][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.651913][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.680154][ T47] usb 4-1: config 0 descriptor?? [ 407.697338][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.710431][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.721292][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.730809][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.738839][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.746713][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.961961][ T5882] usb 4-1: USB disconnect, device number 2 [ 408.097158][T12688] chnl_net:caif_netlink_parms(): no params data found [ 408.386675][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.394991][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.419305][T12688] bridge_slave_0: entered allmulticast mode [ 408.427860][T12688] bridge_slave_0: entered promiscuous mode [ 408.442293][T12688] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.449948][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.457345][T12688] bridge_slave_1: entered allmulticast mode [ 408.465430][T12688] bridge_slave_1: entered promiscuous mode [ 408.618464][T12688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.658911][T12688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.735472][T12688] team0: Port device team_slave_0 added [ 408.755027][T12688] team0: Port device team_slave_1 added [ 408.846770][T12688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.865130][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.922006][T12688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.956574][T12688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.974286][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.042022][T12688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.214032][T12688] hsr_slave_0: entered promiscuous mode [ 409.232113][T12688] hsr_slave_1: entered promiscuous mode [ 409.259787][T12688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.267765][T12688] Cannot create hsr debugfs directory [ 409.781140][ T5850] Bluetooth: hci4: command tx timeout [ 410.402097][T12688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.486516][T12762] syzkaller1: entered promiscuous mode [ 410.509560][T12762] syzkaller1: entered allmulticast mode [ 410.540306][T12688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.576130][T12764] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 410.577652][T12688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.640343][T12688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.877222][T12688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.911755][T12688] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.949063][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.956347][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.975773][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.982984][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.378112][T12688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.484023][T12688] veth0_vlan: entered promiscuous mode [ 411.505537][T12688] veth1_vlan: entered promiscuous mode [ 411.585818][T12688] veth0_macvtap: entered promiscuous mode [ 411.603115][T12688] veth1_macvtap: entered promiscuous mode [ 411.660435][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.680433][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.692748][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.704138][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.725613][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.759802][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.791361][T12688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.825695][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.855830][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.870400][ T5850] Bluetooth: hci4: command tx timeout [ 411.897062][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.960949][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.990201][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.006050][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.046341][T12688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.085507][T12805] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 412.113094][T12688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.121517][T12805] picdev_read: 8 callbacks suppressed [ 412.121538][T12805] kvm: pic: non byte read [ 412.145132][T12688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.158866][T12688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.174734][T12688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.345971][T12817] input: syz1 as /devices/virtual/input/input15 [ 412.615362][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.642368][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.805522][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.842380][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.506906][T12861] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2584'. [ 413.940944][ T5850] Bluetooth: hci4: command tx timeout [ 413.969983][T12822] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 414.130263][T12822] usb 3-1: Using ep0 maxpacket: 8 [ 414.147700][T12822] usb 3-1: config 0 has no interfaces? [ 414.153830][T12822] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.163643][T12822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.175350][T12822] usb 3-1: config 0 descriptor?? [ 414.394091][ T5911] usb 3-1: USB disconnect, device number 3 [ 414.554039][T12893] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 414.583577][T12893] kvm: pic: level sensitive irq not supported [ 414.583702][T12893] kvm: pic: non byte read [ 414.598282][T12893] kvm: pic: non byte read [ 414.608382][T12893] kvm: pic: non byte read [ 414.630096][T12893] kvm: pic: non byte read [ 414.645507][T12893] kvm: pic: non byte read [ 414.650485][T12893] kvm: pic: level sensitive irq not supported [ 414.650549][T12893] kvm: pic: non byte read [ 415.162915][T12913] input: syz1 as /devices/virtual/input/input16 [ 416.026443][ T5850] Bluetooth: hci4: command tx timeout [ 416.504488][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.516061][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.525518][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.541433][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.550094][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 416.559191][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.077569][T12950] chnl_net:caif_netlink_parms(): no params data found [ 417.365245][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.399925][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.445705][T12950] bridge_slave_0: entered allmulticast mode [ 417.463050][T12950] bridge_slave_0: entered promiscuous mode [ 417.590028][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.597563][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.659933][T12950] bridge_slave_1: entered allmulticast mode [ 417.667024][T12950] bridge_slave_1: entered promiscuous mode [ 417.977178][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.996377][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.134269][T12950] team0: Port device team_slave_0 added [ 418.167888][T12950] team0: Port device team_slave_1 added [ 418.252921][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.266482][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.300516][T12993] block nbd5: shutting down sockets [ 418.320033][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.345269][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.358972][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.386100][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.389977][T12822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 418.533537][T12950] hsr_slave_0: entered promiscuous mode [ 418.559786][T12822] usb 1-1: Using ep0 maxpacket: 32 [ 418.562082][T12950] hsr_slave_1: entered promiscuous mode [ 418.578078][T12822] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.592672][T12950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.600387][T12822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 418.600443][T12822] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.607837][T12950] Cannot create hsr debugfs directory [ 418.625316][T12822] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 418.659845][T12822] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 418.669949][ T5838] Bluetooth: hci1: command tx timeout [ 418.684095][T12822] usb 1-1: Product: syz [ 418.688346][T12822] usb 1-1: Manufacturer: syz [ 418.729806][T12822] usb 1-1: SerialNumber: syz [ 418.830518][T12822] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input17 [ 418.851972][T13007] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 418.897296][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 418.913757][T13007] kvm: pic: level sensitive irq not supported [ 418.913844][T13007] kvm: pic: non byte read [ 418.951695][T13007] kvm: pic: level sensitive irq not supported [ 418.951853][T13007] kvm: pic: non byte read [ 418.971323][T13007] kvm: pic: level sensitive irq not supported [ 418.971473][T13007] kvm: pic: non byte read [ 419.154823][T12950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.178874][T12822] usb 1-1: USB disconnect, device number 4 [ 419.279591][T12822] appletouch 1-1:1.0: input: appletouch disconnected [ 419.476022][T13028] input: syz1 as /devices/virtual/input/input18 [ 419.503323][T12950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.716490][T12950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.896186][T12950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.932674][T13041] fuse: Bad value for 'fd' [ 420.093581][T12950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.118337][T12950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.174272][T13048] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 420.188043][T12950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.202625][T12950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.242331][T13048] kvm: pic: level sensitive irq not supported [ 420.242423][T13048] kvm: pic: non byte read [ 420.266297][T13048] kvm: pic: level sensitive irq not supported [ 420.266394][T13048] kvm: pic: non byte read [ 420.280695][T13048] kvm: pic: level sensitive irq not supported [ 420.280783][T13048] kvm: pic: non byte read [ 420.585528][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.626302][T12950] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.646448][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.653652][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.698048][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.705276][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.749467][ T5838] Bluetooth: hci1: command tx timeout [ 420.764959][T12950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.798103][T12950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.864166][T13064] syzkaller1: entered promiscuous mode [ 420.873352][T13064] syzkaller1: entered allmulticast mode [ 421.126294][T13074] fuse: Bad value for 'fd' [ 421.206723][T12950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.497494][T13086] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 421.510389][T13086] kvm: pic: level sensitive irq not supported [ 421.510502][T13086] kvm: pic: non byte read [ 421.521615][T13086] kvm: pic: level sensitive irq not supported [ 421.521700][T13086] kvm: pic: non byte read [ 421.534198][T13086] kvm: pic: level sensitive irq not supported [ 421.534292][T13086] kvm: pic: non byte read [ 421.629025][T13095] input: syz1 as /devices/virtual/input/input19 [ 421.905549][T12950] veth0_vlan: entered promiscuous mode [ 421.937852][T12950] veth1_vlan: entered promiscuous mode [ 422.016603][T12950] veth0_macvtap: entered promiscuous mode [ 422.052313][T12950] veth1_macvtap: entered promiscuous mode [ 422.070623][T13114] fuse: Bad value for 'fd' [ 422.112799][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.139575][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.154993][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.166004][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.176376][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.204260][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.230185][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.246967][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.261749][T12950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.323269][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.396286][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.433230][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.459829][ T5882] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 422.477849][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.520485][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.553947][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.571437][T12950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.593681][T12950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.617503][T12950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.636276][ T5882] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 422.651741][ T5882] usb 3-1: config 0 has no interface number 0 [ 422.661633][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.698258][T12950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.708910][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 422.722956][T12950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.731751][ T5882] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 422.744364][T12950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.753780][T12950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.763370][ T5882] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 422.777376][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 422.806564][ T5882] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 422.819952][ T5838] Bluetooth: hci1: command tx timeout [ 422.831357][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.890784][ T5882] usb 3-1: config 0 descriptor?? [ 422.897301][T13118] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.953470][T13129] input: syz1 as /devices/virtual/input/input20 [ 422.962731][ T5882] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 423.072956][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.091455][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.227122][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.279149][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.336026][ T8] usb 3-1: USB disconnect, device number 4 [ 423.342168][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 423.392237][ T8] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 423.789276][T13151] 9pnet_virtio: no channels available for device syz [ 424.106442][T13159] kvm: pic: non byte write [ 424.900267][ T5838] Bluetooth: hci1: command tx timeout [ 425.351581][T13213] input: syz1 as /devices/virtual/input/input21 [ 425.669279][ T5838] Bluetooth: hci3: Unknown advertising packet type: 0x18 [ 425.669359][ T5838] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 426.013183][T13237] Bluetooth: MGMT ver 1.23 [ 426.040098][T13237] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 426.213341][T13248] input: syz1 as /devices/virtual/input/input22 [ 427.534046][T13297] input: syz1 as /devices/virtual/input/input23 [ 427.685778][T13306] kvm: pic: non byte write [ 427.817430][T13308] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2759'. [ 428.276432][T13324] fuse: Bad value for 'fd' [ 428.690320][T12822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 428.870048][T12822] usb 4-1: Using ep0 maxpacket: 8 [ 428.884905][T12822] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.899725][T12822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.910711][T12822] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.925246][T12822] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.938936][T12822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.948645][T12822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.184671][T12822] usb 4-1: usb_control_msg returned -32 [ 429.190456][T13359] fuse: Bad value for 'fd' [ 429.205646][T12822] usbtmc 4-1:16.0: can't read capabilities [ 429.237272][T13361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 429.586887][T13373] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 429.941510][T13390] fuse: Bad value for 'fd' [ 430.139266][T13400] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2798'. [ 431.172542][T13434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2810'. [ 431.543219][ T25] usb 4-1: USB disconnect, device number 3 [ 432.126291][T13463] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 433.330335][T13513] 8021q: VLANs not supported on ipvlan1 [ 433.620357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.628834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.637683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 433.647586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 433.960870][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2849'. [ 435.359989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 435.368503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 435.377981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 439.677536][T13700] kvm: pic: non byte write [ 440.433047][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.470539][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.424213][T13746] process 'syz.2.2937' launched './file0' with NULL argv: empty string added [ 442.316850][ T29] audit: type=1326 audit(1736415602.192:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13747 comm="syz.0.2938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea91385d29 code=0x0 [ 442.546248][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 442.720147][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 442.755255][ T5834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.824695][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.846746][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.874153][ T5834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.921471][ T5834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.930930][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.150422][ T5834] usb 5-1: usb_control_msg returned -32 [ 443.156247][ T5834] usbtmc 5-1:16.0: can't read capabilities [ 444.677583][T13820] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 444.711548][T13820] kvm: pic: level sensitive irq not supported [ 444.711663][T13820] kvm: pic: non byte read [ 444.737487][ T29] audit: type=1326 audit(1736415604.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.2.2961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6814d85d29 code=0x0 [ 444.812737][T13820] kvm: pic: non byte read [ 444.845605][T13820] kvm: pic: non byte read [ 444.867011][T13820] kvm: pic: non byte read [ 444.920291][T13820] kvm: pic: non byte read [ 444.924986][T13820] kvm: pic: level sensitive irq not supported [ 444.925091][T13820] kvm: pic: non byte read [ 445.399182][ T5911] usb 5-1: USB disconnect, device number 2 [ 445.532485][T13843] tipc: Started in network mode [ 445.537414][T13843] tipc: Node identity 6271b0b7a7ca, cluster identity 4711 [ 445.563085][T13843] tipc: Enabled bearer , priority 0 [ 445.625334][T13843] syzkaller0: entered promiscuous mode [ 445.636632][T13843] syzkaller0: entered allmulticast mode [ 445.643329][T13843] tipc: Resetting bearer [ 445.682403][T13842] tipc: Resetting bearer [ 446.350245][T13858] fuse: Bad value for 'group_id' [ 446.362796][T13858] fuse: Bad value for 'group_id' [ 446.684455][ T8] tipc: Node number set to 3317412023 [ 447.294890][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2986'. [ 449.332632][T13842] tipc: Disabling bearer [ 449.367269][T13873] bridge0: port 3(syz_tun) entered blocking state [ 449.380995][T13873] bridge0: port 3(syz_tun) entered disabled state [ 449.429844][T13873] syz_tun: entered allmulticast mode [ 449.472675][T13873] syz_tun: entered promiscuous mode [ 449.480241][T13873] bridge0: port 3(syz_tun) entered blocking state [ 449.487279][T13873] bridge0: port 3(syz_tun) entered forwarding state [ 449.657993][T13889] fuse: Bad value for 'group_id' [ 449.663571][T13889] fuse: Bad value for 'group_id' [ 450.287890][T13907] tipc: Started in network mode [ 450.293439][T13907] tipc: Node identity d2f8db7e3aee, cluster identity 4711 [ 450.300947][T13907] tipc: Enabled bearer , priority 0 [ 450.345015][T13907] syzkaller0: entered promiscuous mode [ 450.389535][T13907] syzkaller0: entered allmulticast mode [ 450.420741][T13907] tipc: Resetting bearer [ 450.494137][T13905] tipc: Resetting bearer [ 450.713423][T13911] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed [ 450.713444][T13911] kvm: kvm [13910]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 450.769908][T13911] kvm: kvm [13910]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 450.810880][T13911] kvm: kvm [13910]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbe702911 [ 450.845550][T13911] kvm: kvm [13910]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 450.870052][T13911] kvm: kvm [13910]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 451.121571][T13921] fuse: Bad value for 'group_id' [ 451.138004][T13921] fuse: Bad value for 'group_id' [ 451.290023][ T29] audit: type=1326 audit(1736415611.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13924 comm="syz.4.3005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d2ed85d29 code=0x0 [ 451.360028][ T8] tipc: Node number set to 3893812094 [ 451.662380][T13931] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 455.319510][T13905] tipc: Disabling bearer [ 455.634407][ T29] audit: type=1326 audit(1736415615.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13969 comm="syz.5.3022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6c185d29 code=0x0 [ 455.812607][T13973] bridge0: port 3(syz_tun) entered blocking state [ 455.831998][T13973] bridge0: port 3(syz_tun) entered disabled state [ 455.845542][T13973] syz_tun: entered allmulticast mode [ 455.855474][T13973] syz_tun: entered promiscuous mode [ 455.861682][T13973] bridge0: port 3(syz_tun) entered blocking state [ 455.868304][T13973] bridge0: port 3(syz_tun) entered forwarding state [ 455.910569][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3024'. [ 456.641668][T13995] binder: BINDER_SET_CONTEXT_MGR already set [ 456.676053][T13995] binder: 13993:13995 ioctl 4018620d 20000100 returned -16 [ 456.701891][T13995] binder: BINDER_SET_CONTEXT_MGR already set [ 456.713340][T13995] binder: 13993:13995 ioctl 4018620d 200001c0 returned -16 [ 456.820258][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 456.927717][T14000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 456.987776][T14000] kvm: pic: level sensitive irq not supported [ 456.987896][T14000] kvm: pic: non byte read [ 457.020272][T14000] kvm: pic: non byte read [ 457.022749][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.034733][T14000] kvm: pic: non byte read [ 457.046947][T14000] kvm: pic: non byte read [ 457.047309][ T25] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 457.060414][T14000] kvm: pic: non byte read [ 457.068737][T14000] kvm: pic: level sensitive irq not supported [ 457.068887][T14000] kvm: pic: non byte read [ 457.088708][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.134371][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 457.183605][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 457.209557][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.225827][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.244677][ T25] usb 5-1: Product: syz [ 457.248894][ T25] usb 5-1: Manufacturer: syz [ 457.281805][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 457.287055][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 457.330339][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 457.336300][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 457.865486][T14027] netlink: 'syz.2.3046': attribute type 4 has an invalid length. [ 458.262639][T12822] usb 5-1: USB disconnect, device number 3 [ 458.352999][ T29] audit: type=1326 audit(1736415618.252:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.5.3043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6c185d29 code=0x0 [ 459.343609][T14061] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 459.519064][T14067] fuse: Unknown parameter 'grou00000000000000000000' [ 460.381590][T14097] fuse: Unknown parameter 'grou00000000000000000000' [ 460.453719][ T29] audit: type=1326 audit(1736415620.352:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.0.3065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea91385d29 code=0x0 [ 461.060090][T14109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3080'. [ 461.268795][T14116] netlink: 'syz.0.3084': attribute type 39 has an invalid length. [ 461.466754][T14126] fuse: Unknown parameter 'grou00000000000000000000' [ 461.491479][T14122] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 461.578494][T14122] kvm: pic: level sensitive irq not supported [ 461.578585][T14122] kvm: pic: non byte read [ 461.601054][T14122] kvm: pic: non byte read [ 461.610349][T14122] kvm: pic: non byte read [ 461.625399][T14122] kvm: pic: non byte read [ 461.638377][T14122] kvm: pic: level sensitive irq not supported [ 462.165551][ T29] audit: type=1326 audit(1736415622.062:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14131 comm="syz.2.3090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6814d85d29 code=0x0 [ 462.393233][T14153] fuse: Unknown parameter 'group_i00000000000000000000' [ 462.703461][T14161] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 462.741012][T14168] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3104'. [ 462.757337][T14161] kvm: pic: level sensitive irq not supported [ 462.757479][T14161] picdev_read: 2 callbacks suppressed [ 462.757494][T14161] kvm: pic: non byte read [ 462.798053][T14161] kvm: pic: level sensitive irq not supported [ 462.798129][T14161] kvm: pic: non byte read [ 462.814255][T14161] kvm: pic: level sensitive irq not supported [ 462.814331][T14161] kvm: pic: non byte read [ 462.847041][T14161] kvm: pic: level sensitive irq not supported [ 462.847116][T14161] kvm: pic: non byte read [ 463.239954][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 463.360558][T14185] fuse: Unknown parameter 'group_i00000000000000000000' [ 463.403486][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 463.421676][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.439828][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.480839][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.521762][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.570802][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.606191][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.838302][ T8] usb 4-1: usb_control_msg returned -32 [ 463.846223][ T8] usbtmc 4-1:16.0: can't read capabilities [ 463.867261][ T8] usb 4-1: USB disconnect, device number 4 [ 464.643160][T14220] fuse: Unknown parameter 'group_i00000000000000000000' [ 464.825807][T14224] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 464.866135][T14224] kvm: pic: level sensitive irq not supported [ 464.866243][T14224] kvm: pic: non byte read [ 465.030247][T14224] kvm: pic: non byte read [ 465.034960][T14224] kvm: pic: non byte read [ 465.059933][T14224] kvm: pic: non byte read [ 465.124452][T14224] kvm: pic: non byte read [ 465.140094][T14224] kvm: pic: level sensitive irq not supported [ 465.140173][T14224] kvm: pic: non byte read [ 465.360360][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 465.429918][T14241] binder: 14240:14241 ioctl 4018620d 0 returned -22 [ 465.542472][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.571835][ T8] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 465.607132][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.627436][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 465.670920][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 465.705613][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.727985][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 465.762987][ T8] usb 1-1: Product: syz [ 465.767396][ T8] usb 1-1: Manufacturer: syz [ 465.816888][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 465.834576][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 465.869093][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 465.876191][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 465.930580][T14255] fuse: Unknown parameter 'group_id00000000000000000000' [ 466.054232][T14254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 466.067621][T14254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 466.091703][T14254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.103325][T14254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 466.113011][T14254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 466.137266][T14254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 466.155515][T14254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 466.172351][T14254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 466.204812][T14254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 466.225926][T14254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.240149][T14254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 466.262190][T14254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 466.666139][ T8] usb 1-1: USB disconnect, device number 5 [ 466.989900][T14280] tipc: Enabled bearer , priority 0 [ 467.199419][T14280] syzkaller0: entered promiscuous mode [ 467.232221][T14280] syzkaller0: entered allmulticast mode [ 467.261094][T14280] tipc: Resetting bearer [ 467.320893][T14279] tipc: Resetting bearer [ 467.782343][T14295] fuse: Unknown parameter 'group_id00000000000000000000' [ 468.106333][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 468.112616][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 468.190583][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.196811][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 468.259944][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 468.627027][T14321] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 468.650167][T14314] kvm: pic: level sensitive irq not supported [ 468.650266][T14314] kvm: pic: non byte read [ 468.661391][T14314] kvm: pic: non byte read [ 468.666079][T14314] kvm: pic: non byte read [ 468.672871][T14314] kvm: pic: non byte read [ 468.677504][T14314] kvm: pic: non byte read [ 468.682545][T14314] kvm: pic: level sensitive irq not supported [ 468.682648][T14314] kvm: pic: non byte read [ 468.809840][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 468.982619][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 468.999946][ T25] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 469.025858][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 469.050263][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 469.071336][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 469.104993][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 469.130151][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 469.144160][ T25] usb 3-1: Product: syz [ 469.148866][ T25] usb 3-1: Manufacturer: syz [ 469.160288][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 469.165735][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 469.182936][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 469.188930][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 469.322175][T14331] fuse: Unknown parameter 'group_id00000000000000000000' [ 470.038594][ T8] usb 3-1: USB disconnect, device number 5 [ 470.193093][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 470.260314][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 470.267061][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 470.340076][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 470.753966][T14351] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 470.785957][T14351] kvm: pic: level sensitive irq not supported [ 470.786047][T14351] kvm: pic: non byte read [ 470.807545][T14351] kvm: pic: non byte read [ 470.822551][T14351] kvm: pic: non byte read [ 470.827269][T14351] kvm: pic: non byte read [ 470.832817][T14351] kvm: pic: level sensitive irq not supported [ 471.729176][T14279] tipc: Disabling bearer [ 471.808252][T14349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.008080][T14349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.066035][T14359] tipc: Enabled bearer , priority 0 [ 472.073258][T14364] fuse: Bad value for 'user_id' [ 472.073281][T14364] fuse: Bad value for 'user_id' [ 472.191755][T14349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.339290][T14359] syzkaller0: entered promiscuous mode [ 472.340323][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 472.351563][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 472.366660][T14359] syzkaller0: entered allmulticast mode [ 472.392884][T14359] tipc: Resetting bearer [ 472.429492][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 472.448307][T14370] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 472.560072][T14349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.623779][T14358] tipc: Resetting bearer [ 472.837749][T14383] 9pnet_virtio: no channels available for device syz [ 473.191907][T14385] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 473.263121][T14385] kvm: pic: level sensitive irq not supported [ 473.288738][T14385] kvm: pic: level sensitive irq not supported [ 473.344323][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.344511][T14392] fuse: Bad value for 'user_id' [ 473.380056][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.403866][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.418876][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.425066][T14392] fuse: Bad value for 'user_id' [ 473.446762][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.469837][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.541270][ T5838] Bluetooth: hci3: command tx timeout [ 475.977462][T14358] tipc: Disabling bearer [ 476.119426][T14349] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.156824][T14349] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.188246][T14349] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.218142][T14409] kvm: kvm [14407]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 476.223794][T14349] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.574446][T14421] fuse: Bad value for 'user_id' [ 476.591243][T14421] fuse: Bad value for 'user_id' [ 476.952032][T14435] tipc: Enabled bearer , priority 0 [ 477.048316][T14435] syzkaller0: entered promiscuous mode [ 477.091179][T14435] syzkaller0: entered allmulticast mode [ 477.097632][T14435] tipc: Resetting bearer [ 477.225774][ T746] tipc: Resetting bearer [ 477.238456][T14393] chnl_net:caif_netlink_parms(): no params data found [ 477.260498][T14433] tipc: Resetting bearer [ 477.628924][ T5838] Bluetooth: hci3: command tx timeout [ 479.704291][ T5838] Bluetooth: hci3: command tx timeout [ 479.819195][T14433] tipc: Disabling bearer [ 479.878872][T14443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.061692][T14443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.252519][T14443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.381551][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.388954][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.396516][T14393] bridge_slave_0: entered allmulticast mode [ 480.405040][T14393] bridge_slave_0: entered promiscuous mode [ 480.412847][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.420193][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.428429][T14393] bridge_slave_1: entered allmulticast mode [ 480.439206][T14393] bridge_slave_1: entered promiscuous mode [ 480.531952][T14443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.582389][T14477] fuse: Bad value for 'fd' [ 480.588725][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.612337][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.724587][T14393] team0: Port device team_slave_0 added [ 480.743715][T14479] tipc: Enabled bearer , priority 0 [ 480.765717][T14393] team0: Port device team_slave_1 added [ 480.806057][T14483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 480.880583][T14479] syzkaller0: entered promiscuous mode [ 480.886481][T14479] syzkaller0: entered allmulticast mode [ 480.902582][T14479] tipc: Resetting bearer [ 480.938602][T14443] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.963551][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.973579][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.016932][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.036890][T14478] tipc: Resetting bearer [ 481.786159][ T5838] Bluetooth: hci3: command tx timeout [ 483.952426][T14478] tipc: Disabling bearer [ 483.969123][T14443] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.995080][T14488] macvlan2: entered allmulticast mode [ 484.002274][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.009270][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.065872][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.143063][T14443] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.192450][T14443] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.381025][T14393] hsr_slave_0: entered promiscuous mode [ 484.440028][T14393] hsr_slave_1: entered promiscuous mode [ 484.468723][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.486710][T14393] Cannot create hsr debugfs directory [ 484.861811][T14510] fuse: Bad value for 'fd' [ 485.009271][T14512] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 485.333643][T14527] tipc: Enabled bearer , priority 0 [ 485.454332][T14523] syzkaller0: entered promiscuous mode [ 485.469860][T14523] syzkaller0: entered allmulticast mode [ 485.483323][T14523] tipc: Resetting bearer [ 485.564743][T14522] tipc: Resetting bearer [ 488.804426][ T5882] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 488.993687][ T5882] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 489.002730][ T5882] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 489.020618][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 489.037956][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 489.049485][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 489.102003][ T5882] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 489.116635][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 489.124957][ T5882] usb 1-1: Product: syz [ 489.129142][ T5882] usb 1-1: Manufacturer: syz [ 489.141014][ T5882] cdc_wdm 1-1:1.0: skipping garbage [ 489.146279][ T5882] cdc_wdm 1-1:1.0: skipping garbage [ 489.152793][ T5882] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 489.158775][ T5882] cdc_wdm 1-1:1.0: Unknown control protocol [ 490.235987][T14522] tipc: Disabling bearer [ 490.601260][T14571] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 490.649768][T14393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.694464][T14393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.730236][T14393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.794701][T14393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.019009][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.079933][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.117739][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.124974][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.182209][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.189796][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.601041][ T5911] usb 1-1: USB disconnect, device number 6 [ 491.793537][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.840423][T14600] tipc: Enabled bearer , priority 0 [ 491.957127][T14603] syzkaller0: entered promiscuous mode [ 491.994310][T14603] syzkaller0: entered allmulticast mode [ 492.025682][T14603] tipc: Resetting bearer [ 492.092052][T14393] veth0_vlan: entered promiscuous mode [ 492.104917][T14393] veth1_vlan: entered promiscuous mode [ 492.116229][T14599] tipc: Resetting bearer [ 493.386976][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 493.561195][ T5834] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 493.578744][ T5834] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 493.589122][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 493.598583][ T5834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 493.609963][ T5834] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 493.633241][ T5834] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 493.642711][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 493.651393][ T5834] usb 5-1: Product: syz [ 493.655593][ T5834] usb 5-1: Manufacturer: syz [ 493.694891][ T5834] cdc_wdm 5-1:1.0: skipping garbage [ 493.702232][ T5834] cdc_wdm 5-1:1.0: skipping garbage [ 493.709067][ T5834] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 493.715476][ T5834] cdc_wdm 5-1:1.0: Unknown control protocol [ 495.542622][T14599] tipc: Disabling bearer [ 495.629289][T14393] veth0_macvtap: entered promiscuous mode [ 495.681174][T14393] veth1_macvtap: entered promiscuous mode [ 495.760781][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.784610][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.794974][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.806264][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.824589][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.846541][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.866526][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.887540][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.904075][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.932103][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.948971][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.998474][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.044841][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.080198][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.119918][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.145800][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.198232][ T5834] usb 5-1: USB disconnect, device number 4 [ 496.213725][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.267203][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.299900][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.312057][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.323067][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.334209][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.345094][T14393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.354225][T14393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.363356][T14393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.372311][T14393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.561706][ T6051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.569858][ T6051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.577587][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.642675][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.659223][T14659] 9pnet_virtio: no channels available for device syz [ 497.013665][T14663] tipc: Enabled bearer , priority 0 [ 497.096681][T14663] syzkaller0: entered promiscuous mode [ 497.103985][T14663] syzkaller0: entered allmulticast mode [ 497.110602][T14663] tipc: Resetting bearer [ 497.175992][T14662] tipc: Resetting bearer [ 498.142715][T14680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.182827][T14680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.192610][T14680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.220834][T14680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.257231][T14680] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 498.270525][T14680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.430131][ T5882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 498.641486][ T5882] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 498.652632][ T5882] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 498.680166][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 498.700889][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 498.724284][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 498.748243][ T5882] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 498.757636][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 498.769879][ T5882] usb 1-1: Product: syz [ 498.774101][ T5882] usb 1-1: Manufacturer: syz [ 498.797153][ T5882] cdc_wdm 1-1:1.0: skipping garbage [ 498.803014][ T5882] cdc_wdm 1-1:1.0: skipping garbage [ 498.839055][ T5882] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 498.846738][ T5882] cdc_wdm 1-1:1.0: Unknown control protocol [ 500.351791][ T5838] Bluetooth: hci2: command tx timeout [ 501.260531][ T5911] usb 1-1: USB disconnect, device number 7 [ 501.872319][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.879171][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.427561][ T5838] Bluetooth: hci2: command tx timeout [ 502.706497][T14662] tipc: Disabling bearer [ 502.861887][T14708] 9pnet_virtio: no channels available for device syz [ 503.190066][ T5834] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 503.360448][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 503.391562][ T5834] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 503.404264][ T5834] usb 5-1: config 0 has no interface number 0 [ 503.419274][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 503.427275][T14678] chnl_net:caif_netlink_parms(): no params data found [ 503.431366][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 503.452243][ T5834] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.464606][ T5834] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.489576][ T5834] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 503.518741][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.552042][ T5834] usb 5-1: config 0 descriptor?? [ 503.586735][ T5834] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 503.661886][T14678] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.669046][T14678] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.695147][T14678] bridge_slave_0: entered allmulticast mode [ 503.719271][T14678] bridge_slave_0: entered promiscuous mode [ 503.746017][T14678] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.766188][T14678] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.790375][T14678] bridge_slave_1: entered allmulticast mode [ 503.808743][T14678] bridge_slave_1: entered promiscuous mode [ 504.021970][T14736] syzkaller0: entered promiscuous mode [ 504.037378][T14736] syzkaller0: entered allmulticast mode [ 504.086925][ T5882] usb 5-1: USB disconnect, device number 5 [ 504.106977][ T5882] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 504.229623][ T6053] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.276894][T14740] tipc: Enabled bearer , priority 0 [ 504.306635][T14735] tipc: Resetting bearer [ 504.500195][ T5838] Bluetooth: hci2: command tx timeout [ 504.889924][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 505.042066][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 505.087308][ T5882] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 505.097967][ T5882] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.107261][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.036088][ T5834] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 506.200704][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 506.208270][ T5834] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 506.217606][ T5834] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 506.241629][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 506.260914][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.272051][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 506.292082][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 506.305466][ T5834] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 506.314790][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.351113][ T5834] usb 5-1: config 0 descriptor?? [ 506.586781][ T5838] Bluetooth: hci2: command tx timeout [ 506.597259][ T5834] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 506.616760][ T5834] usb 5-1: USB disconnect, device number 6 [ 506.627507][ T5834] usblp0: removed [ 507.105700][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 507.274819][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 507.292278][ T5834] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 507.301789][ T5834] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 507.329458][ T5834] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 507.338827][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 507.348943][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 507.358753][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.372025][ T5834] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 507.381359][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.405429][ T5834] usb 5-1: config 0 descriptor?? [ 507.618801][ T5841] usb 6-1: USB disconnect, device number 2 [ 507.630265][ T5834] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 507.900127][ T5841] usb 5-1: USB disconnect, device number 7 [ 507.912284][ T5841] usblp0: removed [ 508.812896][T14816] binder_alloc: 14814: binder_alloc_buf, no vma [ 508.844059][T14735] tipc: Disabling bearer [ 508.888286][ T6053] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.952633][T14678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.011580][ T6053] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.030079][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 509.058168][T14678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.187405][ T6053] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.220176][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 509.228663][ T5841] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 509.258695][T14678] team0: Port device team_slave_0 added [ 509.259193][ T5841] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 509.286098][T14678] team0: Port device team_slave_1 added [ 509.298237][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.363049][T14830] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 509.367563][T14678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.387771][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.449746][T14678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.489609][T14678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.507874][T14678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.586387][T14678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.818478][T14678] hsr_slave_0: entered promiscuous mode [ 509.825700][T14678] hsr_slave_1: entered promiscuous mode [ 509.843246][T14678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.864548][T14678] Cannot create hsr debugfs directory [ 509.919473][ T6053] bridge_slave_1: left allmulticast mode [ 509.926023][ T6053] bridge_slave_1: left promiscuous mode [ 509.932553][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.950651][ T6053] bridge_slave_0: left allmulticast mode [ 509.957932][ T6053] bridge_slave_0: left promiscuous mode [ 509.966185][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.555676][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.574065][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.588908][ T6053] bond0 (unregistering): (slave team0): Releasing backup interface [ 510.600214][ T6053] bond0 (unregistering): Released all slaves [ 510.618100][T14844] tipc: Enabled bearer , priority 0 [ 510.714329][T14845] syzkaller0: entered promiscuous mode [ 510.720588][T14845] syzkaller0: entered allmulticast mode [ 510.727073][T14845] tipc: Resetting bearer [ 510.784655][T14843] tipc: Resetting bearer [ 511.818715][ T5841] usb 6-1: USB disconnect, device number 3 [ 512.013242][T14877] binder: BINDER_SET_CONTEXT_MGR already set [ 512.019306][T14877] binder: 14876:14877 ioctl 4018620d 20000040 returned -16 [ 514.297903][T14906] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 514.693653][T14914] 9pnet_virtio: no channels available for device syz [ 514.700080][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 514.866100][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 514.889021][ T25] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 514.910289][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.920273][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.462428][T14843] tipc: Disabling bearer [ 515.476066][ T6053] tipc: Left network mode [ 515.805777][T14925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input27 [ 515.892095][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 516.050914][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 516.082320][ T5834] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 516.105877][ T5834] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 516.148578][ T5834] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 516.178054][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.201232][ T5834] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.256876][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 516.285284][ T5834] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 516.319906][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.401005][ T5834] usb 1-1: config 0 descriptor?? [ 516.620750][ T5834] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 516.656309][ T6053] hsr_slave_0: left promiscuous mode [ 516.662282][ T5834] usb 1-1: USB disconnect, device number 8 [ 516.671706][ T5834] usblp0: removed [ 516.696788][ T6053] hsr_slave_1: left promiscuous mode [ 516.705136][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.718004][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.730679][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.738474][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.776107][ T6053] veth1_macvtap: left promiscuous mode [ 516.788094][ T6053] veth0_macvtap: left promiscuous mode [ 516.796866][ T6053] veth1_vlan: left promiscuous mode [ 516.808262][ T6053] veth0_vlan: left promiscuous mode [ 517.117382][ T5841] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 517.309370][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 517.316696][ T5841] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 517.325720][ T5841] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 517.337014][ T5841] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 517.358253][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.384849][ T5841] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.396020][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 517.409445][ T5841] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 517.433023][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.470040][ T5841] usb 1-1: config 0 descriptor?? [ 517.503543][ T5882] usb 3-1: USB disconnect, device number 6 [ 517.723565][ T5841] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 517.736087][T14958] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 517.943182][ T5841] usb 1-1: USB disconnect, device number 9 [ 517.959461][ T5841] usblp0: removed [ 517.972981][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 518.065915][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 518.076768][ T2968] smc: removing ib device syz1 [ 518.802436][T14947] tipc: Enabling of bearer rejected, failed to enable media [ 519.092016][T14678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.176376][T14678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.228680][T14977] binder: BINDER_SET_CONTEXT_MGR already set [ 519.239012][T14977] binder: 14976:14977 ioctl 4018620d 20000100 returned -16 [ 519.265752][T14678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.343587][T14678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.539401][T14678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.555824][T14678] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.569538][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.576933][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.635717][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.642929][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.340096][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 520.422632][ T6053] IPVS: stop unused estimator thread 0... [ 520.435736][T14678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.493057][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 520.513460][ T47] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.527215][ T47] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.585910][ T47] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.586632][T14678] veth0_vlan: entered promiscuous mode [ 520.629790][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.678488][ T47] usbtmc 6-1:16.0: bulk endpoints not found [ 520.684963][T14678] veth1_vlan: entered promiscuous mode [ 520.771512][T14678] veth0_macvtap: entered promiscuous mode [ 520.796003][T14678] veth1_macvtap: entered promiscuous mode [ 520.853185][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.881532][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.906966][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.937949][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.957911][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.977591][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.019477][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.057362][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.074089][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.086820][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.110760][T14678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.135198][T15009] tipc: Started in network mode [ 521.141345][T15009] tipc: Node identity 761dfc67352e, cluster identity 4711 [ 521.148906][T15009] tipc: Enabled bearer , priority 0 [ 521.182983][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.215721][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.243258][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.269829][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.298120][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.312996][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.329798][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.340739][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.351159][T14678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.362017][T14678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.373575][T14678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.454795][T15011] syzkaller0: entered promiscuous mode [ 521.461309][T15011] syzkaller0: entered allmulticast mode [ 521.467567][T15011] tipc: Resetting bearer [ 521.487707][T15004] tipc: Resetting bearer [ 522.215785][ T5841] tipc: Node number set to 1127480423 [ 522.529147][T15026] binder_alloc: 15025: binder_alloc_buf size 12032 failed, no address space [ 522.558250][T15026] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 522.623688][ T25] usb 6-1: USB disconnect, device number 4 [ 525.215365][T15004] tipc: Disabling bearer [ 525.232130][T14678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.241536][T14678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.250772][T14678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.259507][T14678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.563271][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.589249][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.697062][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.721306][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.878707][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 525.898038][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'. [ 525.916403][T15063] fuse: Unknown parameter 'user_i00000000000000000000' [ 525.924775][T15061] netlink: 'syz.0.3414': attribute type 25 has an invalid length. [ 525.989783][ T5882] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 526.174491][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 526.206076][ T5882] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 526.218829][T15071] tipc: Started in network mode [ 526.235761][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.249336][T15071] tipc: Node identity 3e80df75571e, cluster identity 4711 [ 526.265257][T15071] tipc: Enabled bearer , priority 0 [ 526.279829][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.306761][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.330323][ T5882] usbtmc 3-1:16.0: bulk endpoints not found [ 526.370350][T15074] syzkaller0: entered promiscuous mode [ 526.379856][T15074] syzkaller0: entered allmulticast mode [ 526.405356][T15074] tipc: Resetting bearer [ 526.434638][T15075] block nbd4: NBD_DISCONNECT [ 526.463679][T15075] block nbd4: Disconnected due to user request. [ 526.473989][T15075] block nbd4: shutting down sockets [ 526.565339][T15077] kvm: kvm [15076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x34500000000 [ 526.596794][ T6053] tipc: Resetting bearer [ 526.609422][T15069] tipc: Resetting bearer [ 526.632760][T15077] kvm: kvm [15076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x34600000000 [ 526.660571][T15077] kvm: kvm [15076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x47e00000053 [ 526.678372][T15077] kvm: kvm [15076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x64e00000053 [ 526.703322][T15077] kvm: kvm [15076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x64f00000082 [ 526.724056][T15077] kvm_intel: kvm [15076]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7750000003a [ 527.327150][ T5882] tipc: Node number set to 1772019573 [ 528.344985][T15100] fuse: Unknown parameter 'user_i00000000000000000000' [ 528.783711][ T8] usb 3-1: USB disconnect, device number 7 [ 531.047551][T15069] tipc: Disabling bearer [ 531.430266][T15118] Set syz1 is full, maxelem 65536 reached [ 531.586129][ T81] dvmrp8 (unregistering): left allmulticast mode [ 531.938721][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.962356][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.974114][ T81] bond0 (unregistering): Released all slaves [ 531.990184][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 532.103416][T15139] 9pnet_virtio: no channels available for device syz [ 532.112484][ T81] tipc: Left network mode [ 532.159775][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 532.166567][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 532.177438][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.191300][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.200903][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.232476][ T8] usbtmc 3-1:16.0: bulk endpoints not found [ 532.561843][T15148] kvm: kvm [15147]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 532.612520][T15148] kvm: kvm [15147]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 532.629013][T15154] tipc: Started in network mode [ 532.647969][T15154] tipc: Node identity 563f8c1b2d58, cluster identity 4711 [ 532.668469][T15154] tipc: Enabled bearer , priority 0 [ 532.682417][T15148] kvm: kvm [15147]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 532.779529][T15156] syzkaller0: entered promiscuous mode [ 532.789557][T15156] syzkaller0: entered allmulticast mode [ 532.809433][T15156] tipc: Resetting bearer [ 532.821738][ T81] hsr_slave_0: left promiscuous mode [ 532.849965][ T81] hsr_slave_1: left promiscuous mode [ 532.855742][ T81] batman_adv: batadv0: Removing interface: team0 [ 532.880611][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.892469][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.538025][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3450'. [ 533.789829][ T8] tipc: Node number set to 2070383643 [ 534.100360][ T81] team0 (unregistering): Port device team_slave_1 removed [ 534.256833][ T81] team0 (unregistering): Port device team_slave_0 removed [ 534.730130][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'. [ 534.804812][ T5841] usb 3-1: USB disconnect, device number 8 [ 535.193948][ T81] lo (unregistering): left allmulticast mode [ 535.202855][T15152] tipc: Resetting bearer [ 535.836081][T15195] fuse: Bad value for 'fd' [ 538.142800][T15152] tipc: Disabling bearer [ 538.798475][T15224] fuse: Bad value for 'fd' [ 539.094763][ T81] IPVS: stop unused estimator thread 0... [ 539.674743][T15241] binder: 15240:15241 ioctl 4018620d 0 returned -22 [ 540.493341][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.503876][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.518101][ T81] bond0 (unregistering): Released all slaves [ 540.538140][T15251] vlan2: entered promiscuous mode [ 540.697485][ T81] tipc: Left network mode [ 540.738535][T15257] fuse: Bad value for 'fd' [ 541.267317][T15270] binder: 15268:15270 ioctl 4018620d 0 returned -22 [ 541.858967][ T81] hsr_slave_0: left promiscuous mode [ 541.880155][ T81] hsr_slave_1: left promiscuous mode [ 541.996837][T15218] Set syz1 is full, maxelem 65536 reached [ 542.253884][T15290] fuse: Unknown parameter '0x0000000000000004' [ 542.544997][T15305] binder: BINDER_SET_CONTEXT_MGR already set [ 542.576253][T15305] binder: 15304:15305 ioctl 4018620d 20000100 returned -16 [ 542.598286][T15305] binder: BINDER_SET_CONTEXT_MGR already set [ 542.616726][T15305] binder: 15304:15305 ioctl 4018620d 20000040 returned -16 [ 542.773493][ T81] team0 (unregistering): Port device vlan0 removed [ 543.037928][T15320] ebtables: ebtables: counters copy to user failed while replacing table [ 543.874354][T15335] fuse: Unknown parameter '0x0000000000000004' [ 544.041781][ T81] team0 (unregistering): Port device team_slave_1 removed [ 544.208980][ T81] team0 (unregistering): Port device team_slave_0 removed [ 544.386684][T15348] binder: BINDER_SET_CONTEXT_MGR already set [ 544.394619][T15348] binder: 15347:15348 ioctl 4018620d 20000040 returned -16 [ 544.783634][T15360] evm: overlay not supported [ 545.021712][T15362] fuse: Unknown parameter '0x0000000000000004' [ 545.640163][T15373] binder: BINDER_SET_CONTEXT_MGR already set [ 545.646301][T15373] binder: 15372:15373 ioctl 4018620d 20000100 returned -16 [ 545.674113][T15373] binder: BINDER_SET_CONTEXT_MGR already set [ 545.680328][T15373] binder: 15372:15373 ioctl 4018620d 20000040 returned -16 [ 545.982017][T15379] : entered promiscuous mode [ 546.037816][T15387] fuse: Unknown parameter '0x0000000000000004' [ 546.636282][ T81] IPVS: stop unused estimator thread 0... [ 547.169789][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 547.224780][T15419] fuse: Unknown parameter '0x0000000000000004' [ 547.323080][ T5834] usb 1-1: device descriptor read/64, error -71 [ 547.579925][ T5834] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 547.729863][ T5834] usb 1-1: device descriptor read/64, error -71 [ 547.852611][ T5834] usb usb1-port1: attempt power cycle [ 548.154939][T15444] tipc: Enabled bearer , priority 0 [ 548.209939][ T5834] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 548.258745][ T5834] usb 1-1: device descriptor read/8, error -71 [ 548.284005][T15444] syzkaller0: entered promiscuous mode [ 548.294567][T15444] syzkaller0: entered allmulticast mode [ 548.301830][T15444] tipc: Resetting bearer [ 548.319362][T15443] tipc: Resetting bearer [ 548.501223][ T5834] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 548.541260][ T5834] usb 1-1: device descriptor read/8, error -71 [ 548.608984][T15451] fuse: Unknown parameter '0x0000000000000004' [ 548.680058][ T5834] usb usb1-port1: unable to enumerate USB device [ 548.859176][T15459] binder: BINDER_SET_CONTEXT_MGR already set [ 548.866038][T15459] binder: 15458:15459 ioctl 4018620d 20000100 returned -16 [ 548.887630][T15459] binder: 15458:15459 ioctl c0306201 0 returned -14 [ 548.926667][T15459] binder: BINDER_SET_CONTEXT_MGR already set [ 548.933055][T15459] binder: 15458:15459 ioctl 4018620d 20000040 returned -16 [ 548.937428][T15461] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3563'. [ 549.599987][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 549.759903][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 549.767886][ T8] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 549.781819][ T8] usb 3-1: config 0 has no interface number 0 [ 549.787991][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.807371][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 549.819585][ T8] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.839640][ T8] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 549.854877][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 549.864467][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.876015][ T8] usb 3-1: config 0 descriptor?? [ 549.886428][ T8] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 550.356245][ T25] usb 3-1: USB disconnect, device number 9 [ 550.365852][ T25] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 551.918379][T15443] tipc: Disabling bearer [ 553.160779][T15526] tipc: Enabled bearer , priority 0 [ 553.309091][T15526] syzkaller0: entered promiscuous mode [ 553.336955][T15526] syzkaller0: entered allmulticast mode [ 553.345636][T15526] tipc: Resetting bearer [ 553.405198][T15525] tipc: Resetting bearer [ 556.286483][T15525] tipc: Disabling bearer [ 557.163548][T15587] tipc: Enabled bearer , priority 0 [ 557.241291][T15587] syzkaller0: entered promiscuous mode [ 557.257818][T15587] syzkaller0: entered allmulticast mode [ 557.270582][T15587] tipc: Resetting bearer [ 557.311866][T15588] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.350134][T15586] tipc: Resetting bearer [ 557.515021][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'. [ 557.524485][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3617'. [ 557.534159][T15596] netlink: 'syz.3.3617': attribute type 25 has an invalid length. [ 558.357431][T15604] binder: BINDER_SET_CONTEXT_MGR already set [ 558.369304][T15604] binder: 15603:15604 ioctl 4018620d 20000100 returned -16 [ 558.388671][T15604] binder: BINDER_SET_CONTEXT_MGR already set [ 558.405799][T15604] binder: 15603:15604 ioctl 4018620d 20000040 returned -16 [ 560.690196][T15586] tipc: Disabling bearer [ 560.700463][T15588] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.945122][T15588] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.010343][T15588] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.181355][T15588] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.229491][T15588] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.292136][T15588] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.328028][T15588] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.776795][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 561.797787][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.943759][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 561.958620][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.976633][ T25] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 561.988623][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.001013][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 562.021707][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 562.050804][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.066329][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.101791][ T25] usb 6-1: Product: syz [ 562.106448][ T25] usb 6-1: Manufacturer: syz [ 562.138684][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 562.152431][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 562.162064][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.172880][ T25] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 562.330244][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.690635][ T81] bridge_slave_1: left allmulticast mode [ 562.700305][T14680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.711979][T14680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.722272][T14680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.730982][ T81] bridge_slave_1: left promiscuous mode [ 562.738687][T14680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.739361][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.760450][T14680] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 562.778149][T14680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.790340][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 562.832327][ T81] bridge_slave_0: left allmulticast mode [ 562.838042][ T81] bridge_slave_0: left promiscuous mode [ 562.870561][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.964895][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 562.972002][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 562.999339][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.010530][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.021932][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.050102][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.084542][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.308243][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.316669][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.316797][ T5834] usb 4-1: usb_control_msg returned -32 [ 563.328903][ T5834] usbtmc 4-1:16.0: can't read capabilities [ 563.528503][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.543342][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.555804][ T81] bond0 (unregistering): Released all slaves [ 563.637721][ T81] : left promiscuous mode [ 563.814383][ T81] tipc: Left network mode [ 564.015434][T15667] chnl_net:caif_netlink_parms(): no params data found [ 564.254442][ T81] hsr_slave_0: left promiscuous mode [ 564.261415][ T81] hsr_slave_1: left promiscuous mode [ 564.272628][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.281079][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.289098][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.298943][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.321405][ T81] veth1_macvtap: left promiscuous mode [ 564.327019][ T81] veth0_macvtap: left promiscuous mode [ 564.334536][ T81] veth1_vlan: left promiscuous mode [ 564.342168][ T81] veth0_vlan: left promiscuous mode [ 564.542544][T12822] usb 6-1: USB disconnect, device number 5 [ 564.828393][ T5838] Bluetooth: hci3: command tx timeout [ 565.086786][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 565.130090][T15707] netlink: 'syz.0.3659': attribute type 22 has an invalid length. [ 565.166951][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'. [ 565.353088][ T81] team0 (unregistering): Port device team_slave_1 removed [ 565.424668][ T81] team0 (unregistering): Port device team_slave_0 removed [ 565.577074][ T5841] usb 4-1: USB disconnect, device number 5 [ 566.277693][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.295601][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.311850][T15667] bridge_slave_0: entered allmulticast mode [ 566.330810][T15667] bridge_slave_0: entered promiscuous mode [ 566.449496][T15709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.475109][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.507911][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.520572][T15667] bridge_slave_1: entered allmulticast mode [ 566.527891][T15667] bridge_slave_1: entered promiscuous mode [ 566.750989][T15709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.817237][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.852337][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.900747][ T5838] Bluetooth: hci3: command tx timeout [ 566.933120][T15709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.017029][T15667] team0: Port device team_slave_0 added [ 567.121871][T15709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.169138][T15667] team0: Port device team_slave_1 added [ 567.265824][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.278407][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.307569][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.367314][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.376234][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.404632][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.429886][ T5841] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 567.457890][T15709] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.499175][T15709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.618098][ T5841] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.628902][T15709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.652488][ T5841] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 567.665181][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.672778][T15709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.674403][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 567.693677][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 567.719015][ T5841] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.735463][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.745202][ T5841] usb 4-1: Product: syz [ 567.748572][T15667] hsr_slave_0: entered promiscuous mode [ 567.749440][ T5841] usb 4-1: Manufacturer: syz [ 567.766014][T15667] hsr_slave_1: entered promiscuous mode [ 567.775862][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 567.789173][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 567.795152][ T5841] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 567.890988][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 568.050016][ T25] usb 1-1: device descriptor read/64, error -71 [ 568.067165][T15667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.084288][T15667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.097874][T15667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.112841][T15667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.173340][T15667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.196309][T15667] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.209457][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.216758][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.225840][ T5834] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 568.246011][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.253169][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.289895][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 568.390034][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 568.396915][ T5834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.423076][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.436906][ T25] usb 1-1: device descriptor read/64, error -71 [ 568.444485][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.462658][ T5834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.465554][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.486406][ T5834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.495922][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.560181][ T25] usb usb1-port1: attempt power cycle [ 568.721895][ T5834] usb 5-1: usb_control_msg returned -32 [ 568.739005][ T5834] usbtmc 5-1:16.0: can't read capabilities [ 568.827365][T15667] veth0_vlan: entered promiscuous mode [ 568.854991][T15667] veth1_vlan: entered promiscuous mode [ 568.900269][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 568.915179][T15667] veth0_macvtap: entered promiscuous mode [ 568.929789][ T25] usb 1-1: device descriptor read/8, error -71 [ 568.944005][T15667] veth1_macvtap: entered promiscuous mode [ 568.973052][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.980348][ T5838] Bluetooth: hci3: command tx timeout [ 569.000332][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.019969][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.040944][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.059873][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.080739][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.099770][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.119780][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.143253][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.169738][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.181609][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.192921][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 569.212570][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.239840][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.251215][ T25] usb 1-1: device descriptor read/8, error -71 [ 569.257907][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.279941][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.299764][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.319832][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.331686][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.342351][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.353070][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.364225][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.375364][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.385693][T15667] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.394545][T15667] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.403421][T15667] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.412260][T15667] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.423807][ T25] usb usb1-port1: unable to enumerate USB device [ 569.551079][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.565945][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.601326][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.609303][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.928684][T15763] binder: 15762:15763 ioctl c0306201 0 returned -14 [ 570.204520][ T25] usb 4-1: USB disconnect, device number 6 [ 571.026419][ T25] usb 5-1: USB disconnect, device number 8 [ 571.060042][ T5838] Bluetooth: hci3: command tx timeout [ 571.318706][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 571.479897][ T5882] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 571.651581][ T5882] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 571.676629][ T5882] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 571.701706][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 571.721711][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 571.748187][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 571.772713][ T5882] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 571.790084][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 571.790102][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 571.819106][ T5882] usb 7-1: Product: syz [ 571.828580][ T5882] usb 7-1: Manufacturer: syz [ 571.845642][ T5882] cdc_wdm 7-1:1.0: skipping garbage [ 571.858366][ T5882] cdc_wdm 7-1:1.0: skipping garbage [ 571.869831][ T5882] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 571.929883][ T25] usb 1-1: device descriptor read/64, error -71 [ 572.027238][T15814] xt_hashlimit: size too large, truncated to 1048576 [ 572.213819][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 572.579925][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 572.718977][T15829] binder: BINDER_SET_CONTEXT_MGR already set [ 572.729567][T15829] binder: 15828:15829 ioctl 4018620d 20000100 returned -16 [ 572.739884][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 572.757213][ T5882] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 572.776893][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 572.809331][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 572.845870][ T5882] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.896819][ T5882] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 572.927879][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.177880][ T5882] usb 4-1: usb_control_msg returned -32 [ 573.196265][ T5882] usbtmc 4-1:16.0: can't read capabilities [ 574.219853][ T25] usb 1-1: device descriptor read/64, error -71 [ 574.263684][ T5841] usb 7-1: USB disconnect, device number 2 [ 574.340090][ T25] usb usb1-port1: attempt power cycle [ 574.368661][ T29] audit: type=1804 audit(1736415734.262:15): pid=15843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3717" name="/newroot/283/file0" dev="tmpfs" ino=1579 res=1 errno=0 [ 575.221886][T15857] binder: 15856:15857 ioctl c0306201 20000600 returned -14 [ 575.403225][ T5841] usb 4-1: USB disconnect, device number 7 [ 576.169995][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 576.260001][ T29] audit: type=1804 audit(1736415736.152:16): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3721" name="/newroot/11/file0" dev="tmpfs" ino=77 res=1 errno=0 [ 576.352012][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 576.367390][ T25] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 576.416325][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 576.465933][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 576.479211][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 576.523740][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 576.537132][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 576.552417][ T25] usb 1-1: Product: syz [ 576.571977][ T25] usb 1-1: Manufacturer: syz [ 576.586474][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 576.592793][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 576.608510][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 576.923558][ T47] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.943833][ T47] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 576.966013][ T47] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.08 Device [syz0] on syz1 [ 577.295454][ T29] audit: type=1326 audit(1736415737.192:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.4.3732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d2ed85d29 code=0x0 FROZEN[ 578.750059][ T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 578.883507][T15737] usb 1-1: USB disconnect, device number 21 [ 578.919822][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 578.927044][ T47] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 578.937417][T15957] overlayfs: failed to resolve './file1': -2 [ 578.941089][ T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.992522][ T47] usb 7-1: config 0 has no interface number 0 [ 579.014976][ T47] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.025648][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.044696][ T29] audit: type=1804 audit(1736415738.942:18): pid=15960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3748" name="/newroot/211/file0" dev="tmpfs" ino=1172 res=1 errno=0 [ 579.088246][ T47] usb 7-1: config 0 descriptor?? [ 579.107140][ T47] ldusb 7-1:0.55: Interrupt in endpoint not found [ 579.325043][ T47] usb 7-1: USB disconnect, device number 3 [ 580.050905][T15991] binder: BINDER_SET_CONTEXT_MGR already set [ 580.057056][T15991] binder: 15990:15991 ioctl 4018620d 20000100 returned -16 [ 580.091664][T15991] binder: BINDER_SET_CONTEXT_MGR already set [ 580.108398][T15991] binder: 15990:15991 ioctl 4018620d 20000040 returned -16 [ 580.165668][T15994] binder: 15990:15994 ioctl c0306201 0 returned -14 [ 580.269621][ T29] audit: type=1804 audit(1736415740.162:19): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3762" name="/newroot/58/file0" dev="tmpfs" ino=338 res=1 errno=0 [ 580.366150][T15980] mmap: syz.0.3755 (15980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 580.890730][ T5841] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 580.940460][T16022] overlayfs: statfs failed on './file0' FROZEN[ 581.088473][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 581.113386][ T5841] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 581.122758][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.137821][ T5841] usb 4-1: config 0 has no interface number 0 [ 581.145010][ T5841] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 581.206699][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.214226][ T29] audit: type=1804 audit(1736415741.082:20): pid=16031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3777" name="/newroot/214/file0" dev="tmpfs" ino=1189 res=1 errno=0 [ 581.265577][ T5841] usb 4-1: config 0 descriptor?? [ 581.274817][T16029] binder: 16028:16029 ioctl c0306201 0 returned -14 [ 581.296468][ T5841] ldusb 4-1:0.55: Interrupt in endpoint not found [ 581.520607][T15737] usb 4-1: USB disconnect, device number 8 [ 582.180069][T16058] overlayfs: failed to resolve './file0': -2 [ 582.425761][T16068] binder: BINDER_SET_CONTEXT_MGR already set [ 582.449485][T16071] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 582.459063][T16068] binder: 16067:16068 ioctl 4018620d 20000100 returned -16 [ 582.484719][T16073] binder: BINDER_SET_CONTEXT_MGR already set [ 582.510086][T16073] binder: 16067:16073 ioctl 4018620d 20000040 returned -16 [ 583.572362][T16097] overlayfs: failed to resolve './file0': -2 [ 583.611685][T12819] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 583.697458][T16096] overlayfs: statfs failed on './file0' [ 583.807181][T12819] usb 6-1: Using ep0 maxpacket: 8 [ 583.827459][T12819] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 583.853805][T12819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.899772][T12819] usb 6-1: config 0 has no interface number 0 [ 583.905997][T12819] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.979953][T12819] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.010981][T12819] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 584.038286][T12819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.067904][T12819] usb 6-1: config 0 descriptor?? [ 584.088728][T12819] ldusb 6-1:0.55: Interrupt in endpoint not found [ 584.150065][T15737] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 584.303596][ T25] usb 6-1: USB disconnect, device number 6 [ 584.320381][T15737] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.343398][T15737] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 584.363600][T15737] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.377494][T15737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 584.406996][T15737] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 584.431182][T15737] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.448547][T15737] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.460686][T15737] usb 1-1: Product: syz [ 584.469620][T15737] usb 1-1: Manufacturer: syz [ 584.491226][T15737] cdc_wdm 1-1:1.0: skipping garbage [ 584.506400][T15737] cdc_wdm 1-1:1.0: skipping garbage [ 584.514556][T15737] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 584.604333][ T29] audit: type=1804 audit(1736415744.502:21): pid=16117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3813" name="/newroot/242/file0" dev="tmpfs" ino=1323 res=1 errno=0 [ 585.880658][ T29] audit: type=1804 audit(1736415745.782:22): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3826" name="/newroot/33/file0" dev="tmpfs" ino=202 res=1 errno=0 [ 586.369848][ T5882] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 586.527743][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 586.539115][ T5882] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 586.569290][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.597249][ T5882] usb 7-1: config 0 has no interface number 0 [ 586.603774][ T5882] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.615772][ T5882] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.629483][ T5882] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 586.639201][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.658675][ T5882] usb 7-1: config 0 descriptor?? [ 586.676971][ T5882] ldusb 7-1:0.55: Interrupt in endpoint not found [ 586.897358][ T25] usb 7-1: USB disconnect, device number 4 [ 586.945602][ T5882] usb 1-1: USB disconnect, device number 22 [ 587.859936][T15737] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 587.991364][T15737] usb 1-1: device descriptor read/64, error -71 [ 588.046610][T16211] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3850'. [ 588.250206][T15737] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 588.400287][T15737] usb 1-1: device descriptor read/64, error -71 [ 588.510285][T15737] usb usb1-port1: attempt power cycle [ 588.516267][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 588.679781][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 588.696008][ T25] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 588.705885][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.726856][ T25] usb 6-1: config 0 has no interface number 0 [ 588.737915][ T25] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.759055][ T25] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.783201][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 588.808264][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.829478][ T25] usb 6-1: config 0 descriptor?? [ 588.850584][ T25] ldusb 6-1:0.55: Interrupt in endpoint not found [ 588.869984][T15737] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 588.919796][T15737] usb 1-1: device descriptor read/8, error -71 [ 588.960137][T16239] [ 588.962532][T16239] ====================================================== [ 588.969669][T16239] WARNING: possible circular locking dependency detected [ 588.976903][T16239] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 588.983871][T16239] ------------------------------------------------------ [ 588.991140][T16239] syz.4.3862/16239 is trying to acquire lock: [ 588.997887][T16239] ffff888032ee3208 (vm_lock){++++}-{0:0}, at: binder_alloc_free_page+0x150/0xd50 [ 589.007158][T16239] [ 589.007158][T16239] but task is already holding lock: [ 589.014543][T16239] ffff88814c748c30 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 589.023806][T16239] [ 589.023806][T16239] which lock already depends on the new lock. [ 589.023806][T16239] [ 589.035022][T16239] [ 589.035022][T16239] the existing dependency chain (in reverse order) is: [ 589.044106][T16239] [ 589.044106][T16239] -> #1 (&l->lock){+.+.}-{3:3}: [ 589.051417][T16239] lock_acquire+0x1ed/0x550 [ 589.056464][T16239] _raw_spin_lock+0x2e/0x40 [ 589.061606][T16239] lock_list_lru_of_memcg+0x24c/0x4d0 [ 589.067513][T16239] list_lru_del+0x58/0x1f0 [ 589.072542][T16239] zswap_entry_free+0x1ff/0x440 [ 589.078384][T16239] zswap_load+0x364/0x4a0 [ 589.083811][T16239] swap_read_folio+0x9b4/0x2690 [ 589.089231][T16239] swap_cluster_readahead+0x3cf/0x710 [ 589.095151][T16239] swapin_readahead+0x1ba/0xd30 [ 589.100608][T16239] do_swap_page+0x5c4/0x5c40 [ 589.106083][T16239] __handle_mm_fault+0x13d7/0x70f0 [ 589.111991][T16239] handle_mm_fault+0x3e2/0x8c0 [ 589.117286][T16239] exc_page_fault+0x459/0x8b0 [ 589.122512][T16239] asm_exc_page_fault+0x26/0x30 [ 589.127913][T16239] [ 589.127913][T16239] -> #0 (vm_lock){++++}-{0:0}: [ 589.135057][T16239] validate_chain+0x18ef/0x5920 [ 589.140631][T16239] __lock_acquire+0x1397/0x2100 [ 589.146117][T16239] lock_acquire+0x1ed/0x550 [ 589.151163][T16239] lock_vma_under_rcu+0x35f/0x9a0 [ 589.156915][T16239] binder_alloc_free_page+0x150/0xd50 [ 589.163070][T16239] __list_lru_walk_one+0x170/0x470 [ 589.168936][T16239] list_lru_walk_node+0xc4/0xa70 [ 589.174971][T16239] binder_shrink_scan+0x138/0x260 [ 589.180825][T16239] do_shrink_slab+0x72d/0x1160 [ 589.186381][T16239] shrink_slab+0x1093/0x14d0 [ 589.192225][T16239] drop_slab+0x142/0x280 [ 589.197179][T16239] drop_caches_sysctl_handler+0xbc/0x160 [ 589.204062][T16239] proc_sys_call_handler+0x5ec/0x920 [ 589.209980][T16239] do_iter_readv_writev+0x71a/0x9d0 [ 589.215884][T16239] vfs_writev+0x38b/0xbc0 [ 589.220921][T16239] do_writev+0x1b6/0x360 [ 589.226112][T16239] do_syscall_64+0xf3/0x230 [ 589.231271][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.237810][T16239] [ 589.237810][T16239] other info that might help us debug this: [ 589.237810][T16239] [ 589.248423][T16239] Possible unsafe locking scenario: [ 589.248423][T16239] [ 589.256069][T16239] CPU0 CPU1 [ 589.261433][T16239] ---- ---- [ 589.266823][T16239] lock(&l->lock); [ 589.270651][T16239] lock(vm_lock); [ 589.276977][T16239] lock(&l->lock); [ 589.283309][T16239] rlock(vm_lock); [ 589.287126][T16239] [ 589.287126][T16239] *** DEADLOCK *** [ 589.287126][T16239] [ 589.295442][T16239] 4 locks held by syz.4.3862/16239: [ 589.300720][T16239] #0: ffff8880309a4ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 589.309965][T16239] #1: ffff88807b5ca420 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0 [ 589.319203][T16239] #2: ffff88814c748c30 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 589.329282][T16239] #3: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 589.339348][T16239] [ 589.339348][T16239] stack backtrace: [ 589.345421][T16239] CPU: 1 UID: 0 PID: 16239 Comm: syz.4.3862 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 589.345438][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 589.345448][T16239] Call Trace: [ 589.345456][T16239] [ 589.345463][T16239] dump_stack_lvl+0x241/0x360 [ 589.345483][T16239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.345496][T16239] ? __pfx__printk+0x10/0x10 [ 589.345518][T16239] print_circular_bug+0x13a/0x1b0 [ 589.345533][T16239] check_noncircular+0x36a/0x4a0 [ 589.345552][T16239] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 589.345569][T16239] ? __pfx_check_noncircular+0x10/0x10 [ 589.345588][T16239] ? lockdep_lock+0x123/0x2b0 [ 589.345605][T16239] ? lockdep_unlock+0x16a/0x300 [ 589.345620][T16239] validate_chain+0x18ef/0x5920 [ 589.345651][T16239] ? __pfx_validate_chain+0x10/0x10 [ 589.345671][T16239] ? __pfx_validate_chain+0x10/0x10 [ 589.345695][T16239] ? __pfx_validate_chain+0x10/0x10 [ 589.345715][T16239] ? mark_lock+0x9a/0x360 [ 589.345732][T16239] __lock_acquire+0x1397/0x2100 [ 589.345753][T16239] lock_acquire+0x1ed/0x550 [ 589.345767][T16239] ? binder_alloc_free_page+0x150/0xd50 [ 589.345787][T16239] ? __pfx_lock_acquire+0x10/0x10 [ 589.345808][T16239] ? mas_walk+0x1f3/0x280 [ 589.345827][T16239] lock_vma_under_rcu+0x35f/0x9a0 [ 589.345842][T16239] ? binder_alloc_free_page+0x150/0xd50 [ 589.345857][T16239] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 589.345872][T16239] ? binder_alloc_free_page+0x150/0xd50 [ 589.345890][T16239] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 589.345906][T16239] ? __schedule+0x18fe/0x4cd0 [ 589.345925][T16239] ? __pfx_validate_chain+0x10/0x10 [ 589.345945][T16239] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 589.345965][T16239] binder_alloc_free_page+0x150/0xd50 [ 589.345984][T16239] __list_lru_walk_one+0x170/0x470 [ 589.345999][T16239] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 589.346015][T16239] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 589.346031][T16239] list_lru_walk_node+0xc4/0xa70 [ 589.346044][T16239] ? mark_lock+0x9a/0x360 [ 589.346061][T16239] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 589.346078][T16239] ? __pfx_list_lru_walk_node+0x10/0x10 [ 589.346093][T16239] binder_shrink_scan+0x138/0x260 [ 589.346110][T16239] ? __pfx_binder_shrink_scan+0x10/0x10 [ 589.346130][T16239] do_shrink_slab+0x72d/0x1160 [ 589.346148][T16239] ? shrink_slab+0x12b/0x14d0 [ 589.346162][T16239] shrink_slab+0x1093/0x14d0 [ 589.346178][T16239] ? shrink_slab+0x12b/0x14d0 [ 589.346191][T16239] ? __pfx_lock_release+0x10/0x10 [ 589.346207][T16239] ? __pfx_shrink_slab+0x10/0x10 [ 589.346225][T16239] ? mem_cgroup_iter+0x3d/0x420 [ 589.346239][T16239] drop_slab+0x142/0x280 [ 589.346255][T16239] drop_caches_sysctl_handler+0xbc/0x160 [ 589.346275][T16239] ? __pfx_drop_caches_sysctl_handler+0x10/0x10 [ 589.346293][T16239] proc_sys_call_handler+0x5ec/0x920 [ 589.346310][T16239] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 589.346328][T16239] do_iter_readv_writev+0x71a/0x9d0 [ 589.346347][T16239] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 589.346363][T16239] ? rcu_read_lock_any_held+0xb7/0x160 [ 589.346381][T16239] vfs_writev+0x38b/0xbc0 [ 589.346395][T16239] ? trace_contention_end+0x3c/0x120 [ 589.346407][T16239] ? __mutex_lock+0x397/0x1010 [ 589.346422][T16239] ? __pfx_vfs_writev+0x10/0x10 [ 589.346439][T16239] ? __fget_files+0x2a/0x410 [ 589.346453][T16239] ? __fget_files+0x395/0x410 [ 589.346465][T16239] ? __fget_files+0x2a/0x410 [ 589.346479][T16239] do_writev+0x1b6/0x360 [ 589.346493][T16239] ? __pfx_do_writev+0x10/0x10 [ 589.346506][T16239] ? do_syscall_64+0x100/0x230 [ 589.346521][T16239] ? do_syscall_64+0xb6/0x230 [ 589.346535][T16239] do_syscall_64+0xf3/0x230 [ 589.346549][T16239] ? clear_bhb_loop+0x35/0x90 [ 589.346567][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.346590][T16239] RIP: 0033:0x7f0d2ed85d29 [ 589.346610][T16239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.346621][T16239] RSP: 002b:00007f0d2fc61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 589.346642][T16239] RAX: ffffffffffffffda RBX: 00007f0d2ef75fa0 RCX: 00007f0d2ed85d29 [ 589.346652][T16239] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 589.346662][T16239] RBP: 00007f0d2ee01b08 R08: 0000000000000000 R09: 0000000000000000 [ 589.346670][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.346679][T16239] R13: 0000000000000000 R14: 00007f0d2ef75fa0 R15: 00007fff697f0418 [ 589.346692][T16239] [ 589.867797][T12338] usb 6-1: USB disconnect, device number 7 [ 589.989767][T15737] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 590.010496][T15737] usb 1-1: device descriptor read/8, error -71 [ 590.038320][T16239] syz.4.3862 (16239): drop_caches: 2 [ 590.120025][T15737] usb usb1-port1: unable to enumerate USB device