last executing test programs: 10.15648336s ago: executing program 0 (id=5539): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x6}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xfff, 0xfffd, 0x8bc}) 9.554584189s ago: executing program 3 (id=5540): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9.54657513s ago: executing program 2 (id=5541): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x42, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef000c2c00000000fdfffffffffffffeffe0000002000000000000000000000000000029bd768bc85d000100000000000cc74054a1d008342ae6e53263181e4705b8"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000260801, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80)) 8.588081597s ago: executing program 1 (id=5542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x5b8, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x5b8) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) r10 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r10, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) ptrace$ARCH_SET_CPUID(0x1e, r6, 0x0, 0x1012) 8.380841034s ago: executing program 3 (id=5543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x5b8, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x5b8) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) r10 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r10, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$NBD_CLEAR_SOCK(r10, 0xab04) ptrace$ARCH_SET_CPUID(0x1e, r6, 0x0, 0x1012) 8.278232342s ago: executing program 2 (id=5544): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_io_uring_setup(0x320f, &(0x7f0000000280)={0x0, 0x0, 0x4000, 0x0, 0x22d}, &(0x7f0000000500), &(0x7f0000000300)) syz_io_uring_setup(0x2287, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x26003, 0x1) r4 = openat(r3, &(0x7f0000000500)='.\x00', 0x10882, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0xcc, 0x0, &(0x7f0000000340)=""/204, 0x7d, 0x0, 0x50, 0x0, &(0x7f0000000440)="d7bf79c0777dcae7c0f6263a79bf0526a545ceec253563ca7bfe057c0b3a64f431ac2602052cb3aa12e1a6bd479dcb0120f42e668c5b41290a34d99d3323f79fdc52a255a4ca6d86b44721c7fda489c4", &(0x7f0000000540), 0x2, 0x0, 0x80000001}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x1, @remote}, r6, 0xfffffffc}}, 0x48) 7.81030021s ago: executing program 0 (id=5545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140000001600150f00000000fbdbdf250400000003b8000e0bdbd8227ffaf7e17503ceeb09aa88885b911d90926757733dc64c04872145ec24bfc48227b7e89bc2d7a41193c871961425323c815f428191d88465ef0cbec3156b7d40bfe7294054598e667cfdea67b21557e36e6a30255e138d8949d03c14cb7ecaae94f2f3aa24d1f724ee540935689bc934276e469ae3672eb85e71f37caa0c950b450e089da656682c08be0b911970aae4595fe60abb34ae8e141c5f251c31020a8560d9fe8ce66fb9658ec78956b7e3cf7138fd02328653590ed90ac4b88846c263a582dd25"], 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80e2ff00000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010300000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 7.169054142s ago: executing program 2 (id=5546): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000260801, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e874c7ea7db92eabbb3c6b5fb17018de874fda916bc0f0a74d822f0f0eed257cd012be1c375ad3202a28e744b3260f6026f49bd3a1bd"], &(0x7f0000000240)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd6b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000f80)) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x7, 0x5, 0x0, 0x0, 0x1}}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 7.120664886s ago: executing program 1 (id=5547): syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffc}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$alg(r1, &(0x7f0000000280)=""/146, 0x92) 6.602381307s ago: executing program 1 (id=5548): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.734080517s ago: executing program 0 (id=5549): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_io_uring_setup(0x320f, &(0x7f0000000280)={0x0, 0x0, 0x4000, 0x0, 0x22d}, &(0x7f0000000500), &(0x7f0000000300)) syz_io_uring_setup(0x2287, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x26003, 0x1) r4 = openat(r3, &(0x7f0000000500)='.\x00', 0x10882, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0xcc, 0x0, &(0x7f0000000340)=""/204, 0x7d, 0x0, 0x50, 0x0, &(0x7f0000000440)="d7bf79c0777dcae7c0f6263a79bf0526a545ceec253563ca7bfe057c0b3a64f431ac2602052cb3aa12e1a6bd479dcb0120f42e668c5b41290a34d99d3323f79fdc52a255a4ca6d86b44721c7fda489c4", &(0x7f0000000540), 0x2, 0x0, 0x80000001}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x1, @remote}, r6, 0xfffffffc}}, 0x48) 5.719228889s ago: executing program 3 (id=5550): syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.538216874s ago: executing program 0 (id=5551): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x90, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008040) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x4000040) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x5, 0x0, &(0x7f00000003c0)) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) syz_open_dev$sndctrl(&(0x7f0000000680), 0xb, 0x30b180) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 4.451679421s ago: executing program 2 (id=5552): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.2230833s ago: executing program 1 (id=5553): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_io_uring_setup(0x320f, &(0x7f0000000280)={0x0, 0x0, 0x4000, 0x0, 0x22d}, &(0x7f0000000500), &(0x7f0000000300)) syz_io_uring_setup(0x2287, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x26003, 0x1) r4 = openat(r3, &(0x7f0000000500)='.\x00', 0x10882, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0xcc, 0x0, &(0x7f0000000340)=""/204, 0x7d, 0x0, 0x50, 0x0, &(0x7f0000000440)="d7bf79c0777dcae7c0f6263a79bf0526a545ceec253563ca7bfe057c0b3a64f431ac2602052cb3aa12e1a6bd479dcb0120f42e668c5b41290a34d99d3323f79fdc52a255a4ca6d86b44721c7fda489c4", &(0x7f0000000540), 0x2, 0x0, 0x80000001}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x1, @remote}, r6, 0xfffffffc}}, 0x48) 3.148099876s ago: executing program 2 (id=5554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140000001600150f00000000fbdbdf250400000003b8000e0bdbd8227ffaf7e17503ceeb09aa88885b911d90926757733dc64c04872145ec24bfc48227b7e89bc2d7a41193c871961425323c815f428191d88465ef0cbec3156b7d40bfe7294054598e667cfdea67b21557e36e6a30255e138d8949d03c14cb7ecaae94f2f3aa24d1f724ee540935689bc934276e469ae3672eb85e71f37caa0c950b450e089da656682c08be0b911970aae4595fe60abb34ae8e141c5f251c31020a8560d9fe8ce66fb9658ec78956b7e3cf7138fd02328653590ed90ac4b88846c263a582dd25"], 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80e2ff00000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010300000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) 2.962745601s ago: executing program 3 (id=5555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)={0x1d}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0), 0x0) fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) 2.177406564s ago: executing program 1 (id=5556): syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffc}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$alg(r1, &(0x7f0000000280)=""/146, 0x92) 2.10762353s ago: executing program 0 (id=5557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000400)={0x1d}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0), 0x0) fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) 1.127497149s ago: executing program 2 (id=5558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000029c0)={0x5b8, 0x0, r2, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r3, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r3, r4, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r3, r4, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r3, r4, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r3, r4, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r3, r4, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r3, r4, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r4, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x5b8) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) setreuid(r6, r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r11, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r9, 0xab03) 1.069994394s ago: executing program 3 (id=5559): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_io_uring_setup(0x320f, &(0x7f0000000280)={0x0, 0x0, 0x4000, 0x0, 0x22d}, &(0x7f0000000500), &(0x7f0000000300)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4000}, 0x1}) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x26003, 0x1) r4 = openat(r3, &(0x7f0000000500)='.\x00', 0x10882, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0xcc, 0x0, &(0x7f0000000340)=""/204, 0x7d, 0x0, 0x50, 0x0, &(0x7f0000000440)="d7bf79c0777dcae7c0f6263a79bf0526a545ceec253563ca7bfe057c0b3a64f431ac2602052cb3aa12e1a6bd479dcb0120f42e668c5b41290a34d99d3323f79fdc52a255a4ca6d86b44721c7fda489c4", &(0x7f0000000540), 0x2, 0x0, 0x80000001}, 0x50) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x1, @remote}, r6, 0xfffffffc}}, 0x48) 1.039146946s ago: executing program 1 (id=5560): r0 = socket$inet6(0xa, 0x80002, 0x0) bind(r0, &(0x7f0000000980)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) syz_io_uring_setup(0x417, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000000), &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380), 0x0, 0x0, 0x10006, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) 1.37308ms ago: executing program 0 (id=5561): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup(r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) 0s ago: executing program 3 (id=5562): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x6}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0xfff, 0xfffd, 0x8bc}) kernel console output (not intermixed with test programs): ether 4-1:1.0: skipping garbage [ 1290.157113][ T5862] cdc_ether 3-1:1.0: skipping garbage [ 1290.158455][ T23] cdc_ether 4-1:1.0: skipping garbage [ 1290.158471][ T23] cdc_ether 4-1:1.0: skipping garbage [ 1290.218295][ T5862] cdc_ether 3-1:1.0: skipping garbage [ 1290.224270][ T23] cdc_ether 4-1:1.0: skipping garbage [ 1290.229724][ T23] cdc_ether 4-1:1.0: skipping garbage [ 1290.242307][ T5862] cdc_ether 3-1:1.0: skipping garbage [ 1290.247768][ T5862] cdc_ether 3-1:1.0: skipping garbage [ 1290.271467][ T23] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1290.299392][ T5862] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1290.329802][ T23] usb 4-1: USB disconnect, device number 92 [ 1290.357620][ T5862] usb 3-1: USB disconnect, device number 81 [ 1290.904131][T19288] overlayfs: workdir and upperdir must reside under the same mount [ 1291.746108][T19296] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1293.519716][T19306] autofs4:pid:19306:autofs_fill_super: called with bogus options [ 1293.609741][T19305] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1295.729295][T19326] overlayfs: workdir and upperdir must reside under the same mount [ 1296.699431][T19332] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1300.157046][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3926'. [ 1300.701097][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.713926][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.835192][T19375] overlayfs: workdir and upperdir must reside under the same mount [ 1303.829712][T19383] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1304.841402][ T8] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1304.896670][T19394] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1305.067554][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1305.181623][T12473] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1305.182389][T19396] kvm: pic: non byte read [ 1305.204027][ T8] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.230700][ T8] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1305.231614][T19396] kvm: pic: level sensitive irq not supported [ 1305.256922][T19396] kvm: pic: non byte read [ 1305.286999][T19396] kvm: pic: level sensitive irq not supported [ 1305.287840][T19396] kvm: pic: non byte read [ 1305.421979][T19396] kvm: pic: level sensitive irq not supported [ 1305.422905][T19396] kvm: pic: non byte read [ 1305.467776][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1305.522520][T12473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1305.583263][T12473] usb 1-1: not running at top speed; connect to a high speed hub [ 1305.591718][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.600131][ T8] usb 3-1: Product: syz [ 1305.614827][T12473] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.625511][ T8] usb 3-1: Manufacturer: syz [ 1305.632443][ T8] usb 3-1: SerialNumber: syz [ 1305.638250][T12473] usb 1-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=4c.7a [ 1305.648774][T12473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.657307][T12473] usb 1-1: Product: syz [ 1305.664266][T12473] usb 1-1: Manufacturer: syz [ 1305.669525][T12473] usb 1-1: SerialNumber: syz [ 1306.621666][ T8] usb 3-1: USB disconnect, device number 82 [ 1306.632562][T19388] udevd[19388]: setting owner of /dev/bus/usb/003/082 to uid=0, gid=0 failed: No such file or directory [ 1307.023973][T12473] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1307.069060][T12473] usb 1-1: USB disconnect, device number 89 [ 1307.211372][ T8] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1307.275955][T19419] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1307.405281][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1307.423985][ T8] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.442540][ T8] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1307.465409][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1307.481562][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.489630][ T8] usb 3-1: Product: syz [ 1307.512618][ T8] usb 3-1: Manufacturer: syz [ 1307.521581][ T8] usb 3-1: SerialNumber: syz [ 1307.757993][ T8] usb 3-1: USB disconnect, device number 83 [ 1308.583227][T19424] binder: 19423:19424 ioctl 4018620d 0 returned -22 [ 1308.616006][T19424] binder: 19423:19424 unknown command 0 [ 1308.630926][T19424] binder: 19423:19424 ioctl c0306201 2000000003c0 returned -22 [ 1312.455200][T19459] binder: 19458:19459 unknown command 0 [ 1312.481696][T19459] binder: 19458:19459 ioctl c0306201 2000000003c0 returned -22 [ 1312.505978][T19459] binder_alloc: 19458: binder_alloc_buf, no vma [ 1312.980694][T19466] autofs4:pid:19466:autofs_fill_super: called with bogus options [ 1313.243247][T19470] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1315.703031][ T5862] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1316.511434][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 1316.520294][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1316.540135][ T5862] usb 4-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1316.597060][ T5862] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1316.644182][ T5862] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1316.658943][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.681307][ T5862] usb 4-1: Product: syz [ 1316.691374][ T5862] usb 4-1: Manufacturer: syz [ 1316.699539][ T5862] usb 4-1: SerialNumber: syz [ 1317.585560][ T5862] cdc_ether 4-1:1.0: skipping garbage [ 1317.878031][ T5862] cdc_ether 4-1:1.0: skipping garbage [ 1317.902168][ T5862] cdc_ether 4-1:1.0: skipping garbage [ 1317.921393][ T5862] cdc_ether 4-1:1.0: skipping garbage [ 1317.944443][ T5862] cdc_ether 4-1:1.0: skipping garbage [ 1318.147099][ T5862] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1318.483717][ T5862] usb 4-1: USB disconnect, device number 93 [ 1318.864693][T19511] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1319.760990][T19524] binder: 19521:19524 ioctl c0306201 0 returned -14 [ 1319.849738][T19524] binder: 19521:19524 unknown command 0 [ 1319.855781][T19524] binder: 19521:19524 ioctl c0306201 2000000003c0 returned -22 [ 1320.281418][ T55] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1321.273785][ T55] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1321.356835][ T55] usb 3-1: not running at top speed; connect to a high speed hub [ 1321.400672][ T55] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.430543][ T55] usb 3-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=4c.7a [ 1321.441100][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.451388][ T55] usb 3-1: Product: syz [ 1321.595806][ T55] usb 3-1: Manufacturer: syz [ 1321.595865][ T55] usb 3-1: SerialNumber: syz [ 1322.164244][T19543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1322.835303][ T55] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1322.892401][ T55] usb 3-1: USB disconnect, device number 84 [ 1324.521202][T19560] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1324.528471][T19560] overlayfs: failed to set xattr on upper [ 1324.535385][T19560] overlayfs: ...falling back to redirect_dir=nofollow. [ 1324.545384][T19560] overlayfs: ...falling back to index=off. [ 1324.557383][T19560] overlayfs: ...falling back to uuid=null. [ 1324.565775][T19560] overlayfs: maximum fs stacking depth exceeded [ 1325.567340][T19574] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1328.630677][T19594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1329.251396][ T5777] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1329.443534][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3994'. [ 1329.873442][ T5777] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1329.892031][ T5777] usb 3-1: not running at top speed; connect to a high speed hub [ 1329.920237][ T5777] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.951799][ T5777] usb 3-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=4c.7a [ 1329.993843][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.002981][ T5777] usb 3-1: Product: syz [ 1330.013117][ T5777] usb 3-1: Manufacturer: syz [ 1330.017873][ T5777] usb 3-1: SerialNumber: syz [ 1331.188339][T19616] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1331.195811][T19616] overlayfs: failed to set xattr on upper [ 1331.202009][T19616] overlayfs: ...falling back to redirect_dir=nofollow. [ 1331.209051][T19616] overlayfs: ...falling back to index=off. [ 1331.215119][T19616] overlayfs: ...falling back to uuid=null. [ 1331.221016][T19616] overlayfs: maximum fs stacking depth exceeded [ 1331.920508][ T5777] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1331.964478][ T5777] usb 3-1: USB disconnect, device number 85 [ 1333.956921][T19637] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1334.873231][T19641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4005'. [ 1335.691391][T12473] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1335.969574][T19654] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1335.980787][T19654] overlayfs: failed to set xattr on upper [ 1336.014425][T19654] overlayfs: ...falling back to redirect_dir=nofollow. [ 1336.032751][T19654] overlayfs: ...falling back to index=off. [ 1336.042425][T19654] overlayfs: ...falling back to uuid=null. [ 1336.050691][T19654] overlayfs: maximum fs stacking depth exceeded [ 1336.200353][T12473] usb 4-1: Using ep0 maxpacket: 16 [ 1336.392593][T12473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1336.485935][T12473] usb 4-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1336.721444][T12473] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1336.777850][T12473] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1336.799880][T12473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.814544][T12473] usb 4-1: Product: syz [ 1336.820930][T12473] usb 4-1: Manufacturer: syz [ 1336.829100][T12473] usb 4-1: SerialNumber: syz [ 1336.944711][T19658] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1336.956987][T19658] overlayfs: failed to set xattr on upper [ 1337.011702][T19658] overlayfs: ...falling back to redirect_dir=nofollow. [ 1337.018986][T19658] overlayfs: ...falling back to index=off. [ 1337.025750][T19658] overlayfs: ...falling back to uuid=null. [ 1337.032186][T19658] overlayfs: maximum fs stacking depth exceeded [ 1337.543379][T19652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1337.975267][T12473] cdc_ether 4-1:1.0: skipping garbage [ 1337.980899][T12473] cdc_ether 4-1:1.0: skipping garbage [ 1337.988040][T12473] cdc_ether 4-1:1.0: skipping garbage [ 1337.993583][T12473] cdc_ether 4-1:1.0: skipping garbage [ 1337.999099][T12473] cdc_ether 4-1:1.0: skipping garbage [ 1338.004950][T12473] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1338.019111][T12473] usb 4-1: USB disconnect, device number 94 [ 1338.097216][T19672] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1341.827738][T19707] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1341.843837][T19707] overlayfs: failed to set xattr on upper [ 1341.849706][T19707] overlayfs: ...falling back to redirect_dir=nofollow. [ 1341.856831][T19707] overlayfs: ...falling back to index=off. [ 1341.863853][T19707] overlayfs: ...falling back to uuid=null. [ 1341.869857][T19707] overlayfs: maximum fs stacking depth exceeded [ 1347.793425][T19763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1347.800577][T19763] overlayfs: failed to set xattr on upper [ 1347.806667][T19763] overlayfs: ...falling back to redirect_dir=nofollow. [ 1347.814660][T19763] overlayfs: ...falling back to index=off. [ 1347.820631][T19763] overlayfs: ...falling back to uuid=null. [ 1347.826821][T19763] overlayfs: maximum fs stacking depth exceeded [ 1348.349169][T19764] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1348.357915][T19764] overlayfs: failed to set xattr on upper [ 1348.363839][T19764] overlayfs: ...falling back to redirect_dir=nofollow. [ 1348.372304][T19764] overlayfs: ...falling back to index=off. [ 1348.381467][T19764] overlayfs: ...falling back to uuid=null. [ 1348.388386][T19764] overlayfs: maximum fs stacking depth exceeded [ 1349.295035][T19769] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1349.302944][T19769] overlayfs: failed to set xattr on upper [ 1349.309239][T19769] overlayfs: ...falling back to redirect_dir=nofollow. [ 1349.320554][T19769] overlayfs: ...falling back to index=off. [ 1349.326749][T19769] overlayfs: ...falling back to uuid=null. [ 1349.332843][T19769] overlayfs: maximum fs stacking depth exceeded [ 1350.132690][T19768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1350.201620][T12473] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1350.396663][T12473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1350.421153][T12473] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.454730][T12473] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1350.479987][T12473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.506761][T12473] usb 1-1: Product: syz [ 1350.520923][T12473] usb 1-1: Manufacturer: syz [ 1350.534353][T12473] usb 1-1: SerialNumber: syz [ 1351.474100][T12473] usb 1-1: reset high-speed USB device number 90 using dummy_hcd [ 1351.690558][T12473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1351.706675][T12473] usb 1-1: device firmware changed [ 1351.726435][T12473] usb 1-1: USB disconnect, device number 90 [ 1352.225014][T19805] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1352.233837][T19805] overlayfs: failed to set xattr on upper [ 1352.239906][T19805] overlayfs: ...falling back to redirect_dir=nofollow. [ 1352.247716][T19805] overlayfs: ...falling back to index=off. [ 1352.256175][T19805] overlayfs: ...falling back to uuid=null. [ 1352.264267][T19805] overlayfs: maximum fs stacking depth exceeded [ 1353.035007][T19808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1353.042316][T19808] overlayfs: failed to set xattr on upper [ 1353.048215][T19808] overlayfs: ...falling back to redirect_dir=nofollow. [ 1353.055384][T19808] overlayfs: ...falling back to index=off. [ 1353.061471][T19808] overlayfs: ...falling back to uuid=null. [ 1353.067552][T19808] overlayfs: maximum fs stacking depth exceeded [ 1355.426710][T19821] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1355.971407][ T1188] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1356.161472][ T1188] usb 1-1: Using ep0 maxpacket: 16 [ 1356.176178][ T1188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1356.189537][ T1188] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.258230][ T1188] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1356.291688][T12473] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1356.671513][ T1188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1356.677421][T19832] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1356.691280][T19832] overlayfs: failed to set xattr on upper [ 1356.704449][T19832] overlayfs: ...falling back to redirect_dir=nofollow. [ 1356.717782][T19832] overlayfs: ...falling back to index=off. [ 1356.735002][T19832] overlayfs: ...falling back to uuid=null. [ 1356.748413][T19832] overlayfs: maximum fs stacking depth exceeded [ 1356.815566][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.917333][T12473] usb 4-1: Using ep0 maxpacket: 16 [ 1356.924610][ T1188] usb 1-1: Product: syz [ 1356.937420][T12473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1356.946785][T12473] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.957590][ T1188] usb 1-1: Manufacturer: syz [ 1356.966878][ T1188] usb 1-1: SerialNumber: syz [ 1356.972577][T12473] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1357.001645][T12473] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1357.012701][T12473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.020768][T12473] usb 4-1: Product: syz [ 1357.035807][T12473] usb 4-1: Manufacturer: syz [ 1357.051158][T12473] usb 4-1: SerialNumber: syz [ 1357.216113][ T1188] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1357.253469][ T1188] usb 1-1: USB disconnect, device number 91 [ 1357.492420][T12473] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1357.515945][T12473] usb 4-1: USB disconnect, device number 95 [ 1357.630284][T19843] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1357.637555][T19843] overlayfs: failed to set xattr on upper [ 1357.643644][T19843] overlayfs: ...falling back to redirect_dir=nofollow. [ 1357.650650][T19843] overlayfs: ...falling back to index=off. [ 1357.656905][T19843] overlayfs: ...falling back to uuid=null. [ 1357.663950][T19843] overlayfs: maximum fs stacking depth exceeded [ 1358.758017][T19845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4065'. [ 1359.472913][T19852] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1359.480189][T19852] overlayfs: failed to set xattr on upper [ 1359.486373][T19852] overlayfs: ...falling back to redirect_dir=nofollow. [ 1359.498390][T19852] overlayfs: ...falling back to index=off. [ 1359.504581][T19852] overlayfs: ...falling back to uuid=null. [ 1359.521454][T19852] overlayfs: maximum fs stacking depth exceeded [ 1360.057467][T19855] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1361.098330][T19877] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1361.105624][T19877] overlayfs: failed to set xattr on upper [ 1361.111806][T19877] overlayfs: ...falling back to redirect_dir=nofollow. [ 1361.118807][T19877] overlayfs: ...falling back to index=off. [ 1361.124904][T19877] overlayfs: ...falling back to uuid=null. [ 1361.130892][T19877] overlayfs: maximum fs stacking depth exceeded [ 1362.175822][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.581411][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.101337][T12473] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1365.369402][T12473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1365.424724][T12473] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.478856][T12473] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1365.514845][T12473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.537290][T12473] usb 1-1: Product: syz [ 1365.541688][T12473] usb 1-1: Manufacturer: syz [ 1365.546492][T12473] usb 1-1: SerialNumber: syz [ 1366.461719][T12473] usb 1-1: reset high-speed USB device number 92 using dummy_hcd [ 1367.360915][T12473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1367.382391][T12473] usb 1-1: device firmware changed [ 1367.411655][T12473] usb 1-1: USB disconnect, device number 92 [ 1367.603393][T19917] binder: 19916:19917 ioctl 4018620d 0 returned -22 [ 1367.627652][T19917] binder: 19916:19917 unknown command 0 [ 1367.636212][T19917] binder: 19916:19917 ioctl c0306201 2000000003c0 returned -22 [ 1369.108554][T19934] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1369.965916][T12473] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1370.376044][T19938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1370.546789][T12473] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1370.560720][T12473] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.596597][T12473] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1370.615107][T12473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.638723][T12473] usb 4-1: Product: syz [ 1370.665343][T12473] usb 4-1: Manufacturer: syz [ 1370.670040][T12473] usb 4-1: SerialNumber: syz [ 1370.778007][T19946] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1370.785727][T19946] overlayfs: failed to set xattr on upper [ 1370.795225][T19946] overlayfs: ...falling back to redirect_dir=nofollow. [ 1370.805606][T19946] overlayfs: ...falling back to index=off. [ 1370.812204][T19946] overlayfs: ...falling back to uuid=null. [ 1370.826348][T19946] overlayfs: maximum fs stacking depth exceeded [ 1372.591902][ T23] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1372.791328][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1372.796564][T19959] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1372.796587][T19959] overlayfs: failed to set xattr on upper [ 1372.796597][T19959] overlayfs: ...falling back to redirect_dir=nofollow. [ 1372.796606][T19959] overlayfs: ...falling back to index=off. [ 1372.796616][T19959] overlayfs: ...falling back to uuid=null. [ 1372.796631][T19959] overlayfs: maximum fs stacking depth exceeded [ 1372.816972][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1372.930927][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.952067][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1372.974866][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.002269][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.018732][ T23] usb 2-1: Product: syz [ 1373.023562][ T23] usb 2-1: Manufacturer: syz [ 1373.028325][ T23] usb 2-1: SerialNumber: syz [ 1373.451144][T12473] usb 4-1: USB disconnect, device number 96 [ 1373.684212][ T23] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1373.732999][ T23] usb 2-1: USB disconnect, device number 101 [ 1380.871479][ T1188] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1381.311865][ T1188] usb 1-1: Using ep0 maxpacket: 16 [ 1381.662169][ T1188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1381.686490][ T1188] usb 1-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1381.719479][ T1188] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1381.763092][ T1188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1381.772372][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.780408][ T1188] usb 1-1: Product: syz [ 1381.784713][ T1188] usb 1-1: Manufacturer: syz [ 1381.789370][ T1188] usb 1-1: SerialNumber: syz [ 1382.080347][ T1188] cdc_ether 1-1:1.0: skipping garbage [ 1382.095559][ T1188] cdc_ether 1-1:1.0: skipping garbage [ 1382.107483][ T1188] cdc_ether 1-1:1.0: skipping garbage [ 1382.113253][ T1188] cdc_ether 1-1:1.0: skipping garbage [ 1382.119147][ T1188] cdc_ether 1-1:1.0: skipping garbage [ 1382.125769][ T1188] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1382.137506][ T1188] usb 1-1: USB disconnect, device number 93 [ 1383.779332][T20028] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1383.786666][T20028] overlayfs: failed to set xattr on upper [ 1383.792852][T20028] overlayfs: ...falling back to redirect_dir=nofollow. [ 1383.799822][T20028] overlayfs: ...falling back to index=off. [ 1383.806309][T20028] overlayfs: ...falling back to uuid=null. [ 1383.815778][T20028] overlayfs: maximum fs stacking depth exceeded [ 1384.134575][T20032] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1388.359490][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1390.152300][T20078] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1395.621046][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 1395.906578][T20123] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1395.913984][T20123] overlayfs: failed to set xattr on upper [ 1395.919855][T20123] overlayfs: ...falling back to redirect_dir=nofollow. [ 1395.927144][T20123] overlayfs: ...falling back to index=off. [ 1395.933442][T20123] overlayfs: ...falling back to uuid=null. [ 1395.939368][T20123] overlayfs: maximum fs stacking depth exceeded [ 1402.366469][T20171] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1402.550374][T20171] overlayfs: failed to set xattr on upper [ 1402.602870][T20171] overlayfs: ...falling back to redirect_dir=nofollow. [ 1402.671434][T20171] overlayfs: ...falling back to index=off. [ 1402.677438][T20171] overlayfs: ...falling back to uuid=null. [ 1402.692047][T20171] overlayfs: maximum fs stacking depth exceeded [ 1405.437246][T20202] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1405.457413][T20202] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1405.525339][T20202] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1406.343476][T20213] binder: 20211:20213 unknown command 0 [ 1406.509351][T20213] binder: 20211:20213 ioctl c0306201 2000000003c0 returned -22 [ 1411.053932][ T1188] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1411.085375][ T1188] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1411.093128][T20247] binder: 20246:20247 unknown command 0 [ 1411.100602][T20247] binder: 20246:20247 ioctl c0306201 2000000003c0 returned -22 [ 1411.758667][T20253] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1411.766265][T20253] overlayfs: failed to set xattr on upper [ 1411.772351][T20253] overlayfs: ...falling back to redirect_dir=nofollow. [ 1411.779350][T20253] overlayfs: ...falling back to index=off. [ 1411.785460][T20253] overlayfs: ...falling back to uuid=null. [ 1411.791751][T20253] overlayfs: maximum fs stacking depth exceeded [ 1412.431003][T20250] fido_id[20250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1412.931776][ T1188] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1413.331400][ T1188] usb 2-1: Using ep0 maxpacket: 16 [ 1413.339794][ T1188] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1413.350931][ T1188] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1413.369228][ T1188] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1413.422131][ T1188] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.465225][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.513235][ T1188] usb 2-1: Product: syz [ 1413.534709][ T1188] usb 2-1: Manufacturer: syz [ 1413.591470][ T1188] usb 2-1: SerialNumber: syz [ 1414.643590][ T1188] cdc_ether 2-1:1.0: skipping garbage [ 1414.671673][ T1188] cdc_ether 2-1:1.0: skipping garbage [ 1414.689835][ T1188] cdc_ether 2-1:1.0: skipping garbage [ 1414.701280][ T1188] cdc_ether 2-1:1.0: skipping garbage [ 1414.706747][ T1188] cdc_ether 2-1:1.0: skipping garbage [ 1414.716981][ T1188] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1414.757607][ T1188] usb 2-1: USB disconnect, device number 102 [ 1415.243066][T20282] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1415.250227][T20282] overlayfs: failed to set xattr on upper [ 1415.256896][T20282] overlayfs: ...falling back to redirect_dir=nofollow. [ 1415.264054][T20282] overlayfs: ...falling back to index=off. [ 1415.270079][T20282] overlayfs: ...falling back to uuid=null. [ 1415.278348][T20282] overlayfs: maximum fs stacking depth exceeded [ 1416.228623][T20291] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1416.244074][T20291] overlayfs: failed to set xattr on upper [ 1416.251243][T20291] overlayfs: ...falling back to redirect_dir=nofollow. [ 1416.262637][T20291] overlayfs: ...falling back to index=off. [ 1416.270078][T20291] overlayfs: ...falling back to uuid=null. [ 1416.306119][T20291] overlayfs: maximum fs stacking depth exceeded [ 1416.772630][T20293] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1416.790839][T20293] overlayfs: failed to set xattr on upper [ 1416.799505][T20293] overlayfs: ...falling back to redirect_dir=nofollow. [ 1416.812497][T20293] overlayfs: ...falling back to index=off. [ 1416.827451][T20293] overlayfs: ...falling back to uuid=null. [ 1416.837274][T20293] overlayfs: maximum fs stacking depth exceeded [ 1418.905612][T20308] binder: 20306:20308 unknown command 0 [ 1418.922241][T20308] binder: 20306:20308 ioctl c0306201 2000000003c0 returned -22 [ 1420.461306][ T5879] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1421.252341][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 1421.307440][ T5879] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1421.336403][ T5879] usb 4-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1421.419992][ T5879] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1421.540015][ T5879] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1421.550579][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.558869][ T5879] usb 4-1: Product: syz [ 1421.566021][ T5879] usb 4-1: Manufacturer: syz [ 1421.571517][ T5879] usb 4-1: SerialNumber: syz [ 1422.628074][T20342] binder: 20341:20342 unknown command 0 [ 1422.636185][T20342] binder: 20341:20342 ioctl c0306201 2000000003c0 returned -22 [ 1422.884102][T20344] binder: 20343:20344 unknown command 0 [ 1422.904039][T20344] binder: 20343:20344 ioctl c0306201 2000000003c0 returned -22 [ 1422.944072][ T5879] cdc_ether 4-1:1.0: skipping garbage [ 1422.963201][ T5879] cdc_ether 4-1:1.0: skipping garbage [ 1422.968770][ T5879] cdc_ether 4-1:1.0: skipping garbage [ 1422.991410][ T5879] cdc_ether 4-1:1.0: skipping garbage [ 1422.997114][ T5879] cdc_ether 4-1:1.0: skipping garbage [ 1423.074568][ T5879] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1423.109371][ T5879] usb 4-1: USB disconnect, device number 97 [ 1423.200849][T20326] udevd[20326]: setting owner of /dev/bus/usb/004/097 to uid=0, gid=0 failed: No such file or directory [ 1423.592440][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.598786][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.903855][T20365] [U] ¹ [ 1427.582295][T20378] binder: 20375:20378 unknown command 0 [ 1427.739248][T20378] binder: 20375:20378 ioctl c0306201 2000000003c0 returned -22 [ 1429.201399][ T5862] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1429.678590][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 1429.758004][ T5862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1429.871158][ T5862] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1429.883756][ T5862] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1429.899780][ T5862] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.972187][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.980883][ T5862] usb 2-1: Product: syz [ 1430.025114][ T5862] usb 2-1: Manufacturer: syz [ 1430.061278][ T5862] usb 2-1: SerialNumber: syz [ 1432.869504][ T5862] cdc_ether 2-1:1.0: skipping garbage [ 1433.112061][ T5862] cdc_ether 2-1:1.0: skipping garbage [ 1433.152334][ T5862] cdc_ether 2-1:1.0: skipping garbage [ 1433.232539][ T5862] cdc_ether 2-1:1.0: skipping garbage [ 1433.293188][ T5862] cdc_ether 2-1:1.0: skipping garbage [ 1433.385801][ T5862] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1433.694842][ T5862] usb 2-1: USB disconnect, device number 103 [ 1436.722077][T20450] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1436.729274][T20450] overlayfs: failed to set xattr on upper [ 1436.735205][T20450] overlayfs: ...falling back to redirect_dir=nofollow. [ 1436.742397][T20450] overlayfs: ...falling back to index=off. [ 1436.748737][T20450] overlayfs: ...falling back to uuid=null. [ 1436.754817][T20450] overlayfs: maximum fs stacking depth exceeded [ 1446.336809][T20512] [U] ¹ [ 1446.430473][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4255'. [ 1461.535929][T20631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1467.702318][T20669] binder: 20667:20669 ioctl c0306201 0 returned -14 [ 1472.330442][T20702] overlayfs: workdir and upperdir must reside under the same mount [ 1474.767652][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4310'. [ 1477.695486][T20738] binder: BINDER_SET_CONTEXT_MGR already set [ 1477.721380][T20738] binder: 20737:20738 ioctl 4018620d 200000000040 returned -16 [ 1479.464901][T20760] overlayfs: failed to resolve './file0': -2 [ 1480.969140][T20773] overlayfs: workdir and upperdir must reside under the same mount [ 1481.750292][T20778] overlayfs: workdir and upperdir must reside under the same mount [ 1481.976406][T20784] overlayfs: workdir and upperdir must reside under the same mount [ 1484.683654][T20804] fuse: Bad value for 'fd' [ 1484.746517][T20807] overlayfs: workdir and upperdir must reside under the same mount [ 1484.779084][T20808] binder: 20805:20808 unknown command 0 [ 1484.811531][T20808] binder: 20805:20808 ioctl c0306201 2000000003c0 returned -22 [ 1484.842867][T20808] binder: 20805:20808 ioctl c0306201 0 returned -14 [ 1484.861699][ T5777] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1485.051978][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.058470][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.065044][ T5777] usb 2-1: Using ep0 maxpacket: 16 [ 1485.108190][ T5777] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1485.134331][ T5777] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1485.198407][ T5777] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1485.250033][ T5777] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1485.259445][ T5777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.292787][ T5777] usb 2-1: Product: syz [ 1485.297233][ T5777] usb 2-1: Manufacturer: syz [ 1485.302845][ T5777] usb 2-1: SerialNumber: syz [ 1485.353592][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4339'. [ 1486.542327][ T5777] cdc_ether 2-1:1.0: skipping garbage [ 1486.548117][ T5777] cdc_ether 2-1:1.0: skipping garbage [ 1486.581627][ T5777] cdc_ether 2-1:1.0: skipping garbage [ 1486.587198][ T5777] cdc_ether 2-1:1.0: skipping garbage [ 1486.701490][ T5777] cdc_ether 2-1:1.0: skipping garbage [ 1486.812576][ T5777] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1487.114547][ T5777] usb 2-1: USB disconnect, device number 104 [ 1488.403933][T20843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1491.754091][ T8] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1491.948385][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1491.966791][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1492.020442][ T8] usb 4-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1492.041382][T12473] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1492.109160][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1492.146717][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1492.161295][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.174917][ T8] usb 4-1: Product: syz [ 1492.182198][ T8] usb 4-1: Manufacturer: syz [ 1492.187547][ T8] usb 4-1: SerialNumber: syz [ 1492.271263][T12473] usb 2-1: Using ep0 maxpacket: 16 [ 1492.279519][T12473] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1492.289240][T12473] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1492.301872][T12473] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1492.357666][T12473] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1492.367028][T12473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.381696][T12473] usb 2-1: Product: syz [ 1492.388332][T12473] usb 2-1: Manufacturer: syz [ 1492.394004][T12473] usb 2-1: SerialNumber: syz [ 1492.879326][T20875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1493.061044][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1493.074033][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1493.079684][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1493.087233][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1493.094901][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1493.101900][T12473] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1493.134463][T12473] usb 2-1: USB disconnect, device number 105 [ 1493.865688][ T8] cdc_ether 4-1:1.0: skipping garbage [ 1493.871132][ T8] cdc_ether 4-1:1.0: skipping garbage [ 1493.882395][ T8] cdc_ether 4-1:1.0: skipping garbage [ 1493.889067][ T8] cdc_ether 4-1:1.0: skipping garbage [ 1493.897448][ T8] cdc_ether 4-1:1.0: skipping garbage [ 1493.903629][ T8] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1493.930773][ T8] usb 4-1: USB disconnect, device number 98 [ 1494.451442][T20891] overlayfs: failed to resolve './file1': -2 [ 1498.088444][T20925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4371'. [ 1499.139628][T20937] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1499.148191][T20937] overlayfs: failed to set xattr on upper [ 1499.156456][T20937] overlayfs: ...falling back to redirect_dir=nofollow. [ 1499.163864][T20937] overlayfs: ...falling back to index=off. [ 1499.171243][T20937] overlayfs: ...falling back to uuid=null. [ 1499.180854][T20937] overlayfs: maximum fs stacking depth exceeded [ 1500.229233][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'. [ 1504.645825][T20977] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1504.991835][T20977] overlayfs: failed to set xattr on upper [ 1504.998701][T20977] overlayfs: ...falling back to redirect_dir=nofollow. [ 1505.006453][T20977] overlayfs: ...falling back to index=off. [ 1505.019365][T20977] overlayfs: ...falling back to uuid=null. [ 1505.026108][T20977] overlayfs: maximum fs stacking depth exceeded [ 1510.321454][T12473] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1510.579240][T12473] usb 2-1: Using ep0 maxpacket: 16 [ 1510.626187][T12473] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1510.691433][T21018] overlayfs: workdir and upperdir must reside under the same mount [ 1510.768374][T12473] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1510.853039][T12473] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1510.958919][T12473] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1511.019274][T12473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.076716][T12473] usb 2-1: Product: syz [ 1511.091422][T12473] usb 2-1: Manufacturer: syz [ 1511.097545][T12473] usb 2-1: SerialNumber: syz [ 1513.488328][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1513.501305][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1513.506921][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1513.532090][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1513.546159][T12473] cdc_ether 2-1:1.0: skipping garbage [ 1513.812941][T12473] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1513.984799][T12473] usb 2-1: USB disconnect, device number 106 [ 1514.299258][T21056] overlayfs: workdir and upperdir must reside under the same mount [ 1515.061304][T12473] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1515.487355][T21069] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1516.141368][T12473] usb 2-1: Using ep0 maxpacket: 16 [ 1516.363436][T12473] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1516.550019][T12473] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1516.576442][T12473] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1516.780811][T12473] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.015440][T12473] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.153735][T12473] usb 2-1: Product: syz [ 1517.200938][T12473] usb 2-1: Manufacturer: syz [ 1517.444262][T12473] usb 2-1: SerialNumber: syz [ 1517.823512][T12473] usb 2-1: can't set config #1, error -71 [ 1517.893773][T12473] usb 2-1: USB disconnect, device number 107 [ 1519.022692][T21096] binder: 21095:21096 ioctl c0306201 0 returned -14 [ 1521.556535][T21107] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1521.997376][T21112] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1522.005131][T21112] overlayfs: failed to set xattr on upper [ 1522.011109][T21112] overlayfs: ...falling back to redirect_dir=nofollow. [ 1522.018895][T21112] overlayfs: ...falling back to index=off. [ 1522.025535][T21112] overlayfs: ...falling back to uuid=null. [ 1522.037502][T21112] overlayfs: maximum fs stacking depth exceeded [ 1522.951455][T19410] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1523.161390][T19410] usb 2-1: Using ep0 maxpacket: 16 [ 1523.239574][T19410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1523.274819][T19410] usb 2-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1523.301244][T19410] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1523.391761][T19410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1523.416581][T19410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.424848][T19410] usb 2-1: Product: syz [ 1523.429086][T19410] usb 2-1: Manufacturer: syz [ 1523.433984][T19410] usb 2-1: SerialNumber: syz [ 1526.160063][T19410] cdc_ether 2-1:1.0: skipping garbage [ 1526.176119][T19410] cdc_ether 2-1:1.0: skipping garbage [ 1526.191345][T19410] cdc_ether 2-1:1.0: skipping garbage [ 1526.196886][T19410] cdc_ether 2-1:1.0: skipping garbage [ 1526.211253][T19410] cdc_ether 2-1:1.0: skipping garbage [ 1526.231363][T19410] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1526.270555][T19410] usb 2-1: USB disconnect, device number 108 [ 1527.235983][T21137] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1527.245639][T21137] overlayfs: failed to set xattr on upper [ 1527.254455][T21137] overlayfs: ...falling back to redirect_dir=nofollow. [ 1527.261451][T21137] overlayfs: ...falling back to index=off. [ 1527.268542][T21137] overlayfs: ...falling back to uuid=null. [ 1527.274488][T21137] overlayfs: maximum fs stacking depth exceeded [ 1527.663813][T21151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1529.380040][T21160] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1529.423086][T21160] overlayfs: failed to set xattr on upper [ 1529.435953][T21160] overlayfs: ...falling back to redirect_dir=nofollow. [ 1529.445617][T21160] overlayfs: ...falling back to index=off. [ 1529.452385][T21160] overlayfs: ...falling back to uuid=null. [ 1529.458679][T21160] overlayfs: maximum fs stacking depth exceeded [ 1529.732724][T12473] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1529.744837][T21167] overlayfs: workdir and upperdir must reside under the same mount [ 1530.391335][T12473] usb 1-1: Using ep0 maxpacket: 16 [ 1530.400423][T12473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1530.409969][T12473] usb 1-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 1530.421250][T12473] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1530.455098][T12473] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1530.489919][T12473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.499030][T12473] usb 1-1: Product: syz [ 1530.506543][T12473] usb 1-1: Manufacturer: syz [ 1530.512677][T12473] usb 1-1: SerialNumber: syz [ 1530.877546][T12473] cdc_ether 1-1:1.0: skipping garbage [ 1530.885642][T12473] cdc_ether 1-1:1.0: skipping garbage [ 1530.893158][T12473] cdc_ether 1-1:1.0: skipping garbage [ 1530.898573][T12473] cdc_ether 1-1:1.0: skipping garbage [ 1530.913719][T12473] cdc_ether 1-1:1.0: skipping garbage [ 1530.926817][T12473] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1530.996781][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1531.662388][T12473] usb 1-1: USB disconnect, device number 94 [ 1540.405965][T21242] binder: 21241:21242 ioctl c0306201 0 returned -14 [ 1545.331467][T21281] fuse: Bad value for 'fd' [ 1546.582790][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.589158][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.267817][T21332] binder: 21331:21332 ioctl c0306201 0 returned -14 [ 1556.505732][T21370] binder: 21366:21370 ioctl c0306201 0 returned -14 [ 1556.760264][T21373] fuse: Invalid rootmode [ 1557.624631][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4490'. [ 1560.842667][T21407] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1565.058014][T21434] overlayfs: missing 'lowerdir' [ 1567.128056][T21448] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1567.137558][T21448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1567.703577][T21442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4509'. [ 1568.316631][T21459] overlayfs: missing 'lowerdir' [ 1568.793509][T21453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1575.821290][ T1188] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1576.001287][ T1188] usb 1-1: Using ep0 maxpacket: 16 [ 1576.010367][ T1188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1576.023634][ T1188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1576.164280][ T1188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.184748][ T1188] usb 1-1: Product: syz [ 1576.188975][ T1188] usb 1-1: Manufacturer: syz [ 1576.625374][ T1188] usb 1-1: SerialNumber: syz [ 1577.814253][ T1188] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 1577.924984][ T1188] usb 1-1: USB disconnect, device number 95 [ 1579.440841][T21540] binder: 21539:21540 ioctl c0306201 0 returned -14 [ 1583.761392][ T5777] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1583.828190][T21567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1583.837856][T21567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1583.904764][T21567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1583.919786][T21567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1583.932611][T21567] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1583.942882][T21567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1583.981254][ T5777] usb 2-1: Using ep0 maxpacket: 16 [ 1584.207538][ T3479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.427627][ T3479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.537125][ T5777] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1584.579985][ T3479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.601931][ T5777] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1584.614210][ T5777] usb 2-1: can't read configurations, error -71 [ 1584.759180][ T3479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.150433][T21566] chnl_net:caif_netlink_parms(): no params data found [ 1586.321455][T21567] Bluetooth: hci1: command tx timeout [ 1586.465488][T21566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.483440][T21566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.499493][T21566] bridge_slave_0: entered allmulticast mode [ 1586.548946][T21566] bridge_slave_0: entered promiscuous mode [ 1586.710306][T21566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.717918][T21566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.731607][T21566] bridge_slave_1: entered allmulticast mode [ 1586.747922][T21566] bridge_slave_1: entered promiscuous mode [ 1587.182882][T21566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.215401][T21566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.477997][T21566] team0: Port device team_slave_0 added [ 1587.554850][T21566] team0: Port device team_slave_1 added [ 1588.069936][T21566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.077379][T21566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.131208][T21566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.382604][T21567] Bluetooth: hci1: command tx timeout [ 1588.641309][T21566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.661205][T21566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.755705][T21566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.180554][T21566] hsr_slave_0: entered promiscuous mode [ 1589.281586][T21566] hsr_slave_1: entered promiscuous mode [ 1589.441783][ T3479] hsr_slave_0: left promiscuous mode [ 1589.447790][ T3479] hsr_slave_1: left promiscuous mode [ 1589.458573][ T3479] bridge_slave_1: left allmulticast mode [ 1589.465392][ T3479] bridge_slave_1: left promiscuous mode [ 1589.473010][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.603279][ T3479] bridge_slave_0: left allmulticast mode [ 1589.609087][ T3479] bridge_slave_0: left promiscuous mode [ 1589.647970][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.276511][ T3479] veth1_macvtap: left promiscuous mode [ 1590.299765][ T3479] veth0_macvtap: left promiscuous mode [ 1590.324508][ T3479] veth1_vlan: left promiscuous mode [ 1590.345381][ T3479] veth0_vlan: left promiscuous mode [ 1590.451278][T21567] Bluetooth: hci1: command tx timeout [ 1591.252459][T21651] fuse: Bad value for 'fd' [ 1592.540434][T21567] Bluetooth: hci1: command tx timeout [ 1592.871836][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 1592.943754][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 1593.004957][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.068388][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.615521][ T3479] bond0 (unregistering): Released all slaves [ 1593.726358][T21636] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1593.802671][T21636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1593.841728][T21636] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1597.377288][T21566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1597.442260][T21566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1597.465775][T21566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1597.532304][T21566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1598.427640][T21566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.538518][T21566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.623020][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.630230][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.725974][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.733197][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.630900][T21566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.480985][T21566] veth0_vlan: entered promiscuous mode [ 1600.606673][T21566] veth1_vlan: entered promiscuous mode [ 1600.815356][T21566] veth0_macvtap: entered promiscuous mode [ 1601.395062][T21566] veth1_macvtap: entered promiscuous mode [ 1601.511618][T21566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.528886][T21566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.579901][T21566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.634723][T21566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1601.720326][T21566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.782830][T21566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.805278][T21566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.846083][T21566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.869829][T21566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.943779][T21566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.759039][T15722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.789492][T15722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.968571][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.988490][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.353229][T21798] fuse: Bad value for 'fd' [ 1606.062144][T21821] overlayfs: workdir and upperdir must reside under the same mount [ 1608.014488][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.026304][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1623.849930][T22009] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1629.119295][T22050] binder: 22049:22050 ioctl c0306201 0 returned -14 [ 1629.130212][T22050] binder: BINDER_SET_CONTEXT_MGR already set [ 1629.138982][T22050] binder: 22049:22050 ioctl 4018620d 200000004a80 returned -16 [ 1629.785365][T22054] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1630.828444][T22065] overlayfs: workdir and upperdir must reside under the same mount [ 1641.911565][ T5777] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1642.793254][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1642.804324][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.821374][ T5777] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1642.841380][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.854560][ T5777] usb 1-1: config 0 descriptor?? [ 1642.869909][ T5777] hub 1-1:0.0: USB hub found [ 1643.098026][ T5777] hub 1-1:0.0: 2 ports detected [ 1643.282606][ T5777] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1643.290842][ T5777] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1643.701683][ T5777] usbhid 1-1:0.0: can't add hid device: -71 [ 1643.712554][ T5777] usbhid: probe of 1-1:0.0 failed with error -71 [ 1643.772804][ T5777] usb 1-1: USB disconnect, device number 96 [ 1654.311391][T19410] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1654.503685][T19410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1654.517490][T19410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.527952][T19410] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1654.539794][T19410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.570057][T19410] usb 1-1: config 0 descriptor?? [ 1654.609250][T19410] hub 1-1:0.0: USB hub found [ 1654.810758][T19410] hub 1-1:0.0: 2 ports detected [ 1655.042117][T19410] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1655.081274][T19410] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1655.115368][T19410] usbhid 1-1:0.0: can't add hid device: -71 [ 1655.122785][T19410] usbhid: probe of 1-1:0.0 failed with error -71 [ 1655.184702][T19410] usb 1-1: USB disconnect, device number 97 [ 1660.006428][T22319] overlayfs: workdir and upperdir must reside under the same mount [ 1665.077017][T22370] overlayfs: workdir and upperdir must reside under the same mount [ 1668.381305][T22388] binder: 22387:22388 ioctl c0306201 0 returned -14 [ 1669.486725][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.656591][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.641191][ T55] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1672.881293][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 1672.912802][ T55] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 1672.961525][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.981947][ T55] usb 4-1: config 0 has no interface number 0 [ 1672.991286][ T55] usb 4-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1673.005119][ T55] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1673.031274][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.103351][ T55] usb 4-1: config 0 descriptor?? [ 1673.701301][T12473] usb 4-1: USB disconnect, device number 99 [ 1675.278105][T22445] block nbd2: shutting down sockets [ 1675.383700][T22457] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1676.908190][T21567] block nbd3: Receive control failed (result -32) [ 1676.933557][T22469] block nbd3: shutting down sockets [ 1677.489613][T22461] block nbd1: shutting down sockets [ 1677.821453][T21775] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1678.430264][T21775] usb 1-1: Using ep0 maxpacket: 32 [ 1678.443329][T21775] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 1678.468477][T21775] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.489310][T21775] usb 1-1: config 0 has no interface number 0 [ 1678.496960][T21775] usb 1-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1678.514538][T21775] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1678.524301][T21775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.538512][T21775] usb 1-1: config 0 descriptor?? [ 1678.563976][T22485] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1678.601469][T19410] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1678.791251][T19410] usb 3-1: Using ep0 maxpacket: 32 [ 1678.803363][T19410] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 1678.860050][T19410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.915702][T19410] usb 3-1: config 0 has no interface number 0 [ 1678.945096][T19410] usb 3-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1679.071320][T19410] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1679.080928][T19410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.397278][T19410] usb 3-1: config 0 descriptor?? [ 1679.472129][T19410] usb 1-1: USB disconnect, device number 98 [ 1679.488298][T22486] block nbd1: shutting down sockets [ 1679.704539][ T9] usb 3-1: USB disconnect, device number 86 [ 1681.591999][T22498] block nbd1: shutting down sockets [ 1683.217790][T22518] block nbd3: shutting down sockets [ 1684.607733][T22524] block nbd1: shutting down sockets [ 1685.493668][T12473] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1685.544003][T21567] block nbd0: Receive control failed (result -32) [ 1685.555009][T22533] block nbd0: shutting down sockets [ 1685.691205][T12473] usb 4-1: Using ep0 maxpacket: 32 [ 1685.699246][T12473] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 1685.709644][T12473] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.758476][T12473] usb 4-1: config 0 has no interface number 0 [ 1685.786996][T12473] usb 4-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1685.840033][T12473] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1685.872963][T12473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.947171][T12473] usb 4-1: config 0 descriptor?? [ 1686.681259][ T8] usb 4-1: USB disconnect, device number 100 [ 1687.060357][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1687.078452][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1687.089288][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1687.103365][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1687.113514][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1687.121034][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1687.193431][T20339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.330312][T20339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.430241][T20339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.518378][T20339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.718998][T22549] chnl_net:caif_netlink_parms(): no params data found [ 1688.102858][T22549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.129546][T22549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.139613][T22549] bridge_slave_0: entered allmulticast mode [ 1688.168672][T22549] bridge_slave_0: entered promiscuous mode [ 1688.707578][T22549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.725533][T22549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.733053][T22549] bridge_slave_1: entered allmulticast mode [ 1688.742546][T22549] bridge_slave_1: entered promiscuous mode [ 1688.875561][T22549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.949097][T22549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.068424][ T50] block nbd2: Receive control failed (result -32) [ 1689.078649][T22565] block nbd2: shutting down sockets [ 1689.171364][ T50] Bluetooth: hci2: command tx timeout [ 1689.501710][T22549] team0: Port device team_slave_0 added [ 1689.539678][T22549] team0: Port device team_slave_1 added [ 1690.686126][T22590] block nbd1: shutting down sockets [ 1690.956040][T22549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1691.004059][T22549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.032168][T22582] block nbd2: shutting down sockets [ 1691.115310][T22549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.252896][ T50] Bluetooth: hci2: command tx timeout [ 1691.270000][T22549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.299606][T22549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.329382][T22549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.545207][T22549] hsr_slave_0: entered promiscuous mode [ 1691.563578][T22549] hsr_slave_1: entered promiscuous mode [ 1691.572426][T22549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1691.595502][T22549] Cannot create hsr debugfs directory [ 1692.940069][T20339] hsr_slave_0: left promiscuous mode [ 1692.997272][T20339] hsr_slave_1: left promiscuous mode [ 1693.019600][T20339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.058219][T20339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.095685][T20339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.146997][T20339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.325200][T20339] bridge_slave_1: left allmulticast mode [ 1693.333141][ T50] Bluetooth: hci2: command tx timeout [ 1693.360970][T20339] bridge_slave_1: left promiscuous mode [ 1693.392712][T20339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.431843][T20339] bridge_slave_0: left allmulticast mode [ 1693.462710][T20339] bridge_slave_0: left promiscuous mode [ 1693.486394][T20339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.626293][T20339] veth1_macvtap: left promiscuous mode [ 1693.652384][T20339] veth0_macvtap: left promiscuous mode [ 1693.672853][T20339] veth1_vlan: left promiscuous mode [ 1693.686072][T20339] veth0_vlan: left promiscuous mode [ 1695.650294][ T50] Bluetooth: hci2: command tx timeout [ 1695.741532][T22638] block nbd1: shutting down sockets [ 1696.120455][T20339] team0 (unregistering): Port device team_slave_1 removed [ 1696.206790][T20339] team0 (unregistering): Port device team_slave_0 removed [ 1696.274210][T20339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.357962][T20339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.360721][T20339] bond0 (unregistering): Released all slaves [ 1697.782985][T22624] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1697.818159][T22624] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1697.943414][T22624] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1698.221675][T22649] block nbd1: shutting down sockets [ 1700.016536][T22549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1700.087907][T22549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1700.152795][T22549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1700.202167][T22549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1700.752812][T22670] block nbd1: shutting down sockets [ 1701.438885][T22685] block nbd3: shutting down sockets [ 1701.585673][T22549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.656147][T22549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.720366][T19617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.727694][T19617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.769117][T22426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.776350][T22426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.611679][T22693] block nbd1: shutting down sockets [ 1703.110584][T22549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.369311][T22549] veth0_vlan: entered promiscuous mode [ 1703.398670][T22549] veth1_vlan: entered promiscuous mode [ 1703.401281][T21775] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1703.540825][T22549] veth0_macvtap: entered promiscuous mode [ 1703.574674][T22549] veth1_macvtap: entered promiscuous mode [ 1703.650394][T22549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.653297][T21775] usb 3-1: Using ep0 maxpacket: 32 [ 1703.670816][T22549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.712992][T22549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.714680][T21775] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 1703.766221][T22549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1703.783971][T21775] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.819660][T22549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.820751][T21775] usb 3-1: config 0 has no interface number 0 [ 1703.856158][T21775] usb 3-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1703.873327][T21775] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1703.892616][T22549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1703.894692][T21775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.930823][T21775] usb 3-1: config 0 descriptor?? [ 1704.022708][T22549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.101398][T22549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.110911][T22549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.141439][T22549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.559721][T15722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.610537][T15722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.641757][T19410] usb 3-1: USB disconnect, device number 87 [ 1704.766982][T15722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.796475][T15722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.675366][T22746] block nbd0: shutting down sockets [ 1707.197832][T22762] block nbd0: shutting down sockets [ 1707.411282][T21567] Bluetooth: hci1: command 0x0406 tx timeout [ 1708.512875][T22777] block nbd0: shutting down sockets [ 1709.262879][ T50] block nbd2: Receive control failed (result -32) [ 1709.283285][T22779] block nbd2: shutting down sockets [ 1710.427083][T22797] block nbd2: shutting down sockets [ 1710.791386][ T50] block nbd1: Receive control failed (result -32) [ 1710.802830][T22793] block nbd1: shutting down sockets [ 1712.001821][T22800] block nbd1: shutting down sockets [ 1712.356960][T22798] block nbd2: shutting down sockets [ 1714.835259][ T50] block nbd2: Receive control failed (result -32) [ 1714.843284][T22830] block nbd2: shutting down sockets [ 1716.324145][T22834] block nbd0: shutting down sockets [ 1717.719896][ T50] block nbd3: Receive control failed (result -32) [ 1717.727105][T22849] block nbd3: shutting down sockets [ 1719.062409][ T50] block nbd2: Receive control failed (result -32) [ 1719.125263][T22857] block nbd2: shutting down sockets [ 1719.760941][ T50] block nbd1: Receive control failed (result -32) [ 1719.783628][T22871] block nbd1: shutting down sockets [ 1720.326211][T22881] block nbd1: shutting down sockets [ 1726.148069][ T50] block nbd3: Receive control failed (result -32) [ 1726.159145][T22920] block nbd3: shutting down sockets [ 1730.711951][T21567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1730.725795][T21567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1730.736515][T21567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1730.745328][T21567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1730.753371][T21567] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1730.760909][T21567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1730.776858][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.784607][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.089383][ T3459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.300533][ T3459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.455194][ T3459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.498182][T22963] chnl_net:caif_netlink_parms(): no params data found [ 1731.628000][ T3459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.279869][T22977] block nbd0: shutting down sockets [ 1732.419895][T22963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.429282][T22963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.447775][T22963] bridge_slave_0: entered allmulticast mode [ 1732.472704][T22963] bridge_slave_0: entered promiscuous mode [ 1732.543290][T22963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.562486][T22963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.701910][T22963] bridge_slave_1: entered allmulticast mode [ 1732.712985][T22963] bridge_slave_1: entered promiscuous mode [ 1732.851610][T21567] Bluetooth: hci3: command tx timeout [ 1733.486092][T22963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.546736][T22963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.931278][T21567] Bluetooth: hci3: command tx timeout [ 1735.213683][T22963] team0: Port device team_slave_0 added [ 1735.688895][T22963] team0: Port device team_slave_1 added [ 1736.108850][T22963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.125861][T22963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.763325][T22963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.848900][T22963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.872178][T22963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.948620][T22963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.011275][T21567] Bluetooth: hci3: command tx timeout [ 1737.246222][T22963] hsr_slave_0: entered promiscuous mode [ 1737.278982][T22963] hsr_slave_1: entered promiscuous mode [ 1737.299503][T22963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1737.310537][T22963] Cannot create hsr debugfs directory [ 1739.091315][T21567] Bluetooth: hci3: command tx timeout [ 1739.608868][ T3459] hsr_slave_0: left promiscuous mode [ 1739.632899][ T3459] hsr_slave_1: left promiscuous mode [ 1739.640936][ T3459] bridge_slave_1: left allmulticast mode [ 1739.650605][ T3459] bridge_slave_1: left promiscuous mode [ 1739.658500][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.680340][ T3459] bridge_slave_0: left allmulticast mode [ 1739.695825][ T3459] bridge_slave_0: left promiscuous mode [ 1739.704189][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.760497][ T3459] veth1_macvtap: left promiscuous mode [ 1739.767833][ T3459] veth0_macvtap: left promiscuous mode [ 1739.775221][ T3459] veth1_vlan: left promiscuous mode [ 1739.780947][ T3459] veth0_vlan: left promiscuous mode [ 1744.104952][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 1744.630355][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 1744.866830][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.995861][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.818280][T21567] block nbd1: Receive control failed (result -32) [ 1747.854943][T23094] block nbd1: shutting down sockets [ 1748.261399][ T5879] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1748.490426][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1748.540609][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.553664][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1748.563508][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.594879][ T5879] usb 2-1: config 0 descriptor?? [ 1748.630449][ T5879] hub 2-1:0.0: USB hub found [ 1748.886594][ T5879] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1748.926418][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 1748.932716][ T5879] usbhid: probe of 2-1:0.0 failed with error -71 [ 1748.982501][ T5879] usb 2-1: USB disconnect, device number 111 [ 1749.177901][ T3459] bond0 (unregistering): Released all slaves [ 1749.488548][T23049] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1749.641246][T23049] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1749.650940][T23049] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1750.455439][T23115] block nbd1: shutting down sockets [ 1752.505762][T22963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1752.540984][T22963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1752.586976][T22963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1752.608918][T22963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1753.888689][T23152] block nbd0: shutting down sockets [ 1753.906051][T22963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.936316][T22963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.014059][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.021640][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.104633][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.111910][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.449596][T23182] block nbd0: shutting down sockets [ 1757.542710][T22963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.640998][T22963] veth0_vlan: entered promiscuous mode [ 1757.667731][T22963] veth1_vlan: entered promiscuous mode [ 1757.764793][T22963] veth0_macvtap: entered promiscuous mode [ 1757.776942][T23192] block nbd2: shutting down sockets [ 1757.840063][T22963] veth1_macvtap: entered promiscuous mode [ 1757.925022][T22963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.965652][T22963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.999843][T22963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.111334][T22963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.124340][T22963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.217346][T22963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.229393][T22963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.243353][T22963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.255181][T22963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.288389][T22963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.398405][T22963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.408590][T22963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.420153][T22963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.431633][T22963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.541424][ T8] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1758.813066][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1758.851491][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.879060][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1759.232989][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.319285][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.464965][ T8] usb 2-1: config 0 descriptor?? [ 1759.465563][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.487334][ T8] hub 2-1:0.0: USB hub found [ 1759.555127][T22055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.566502][T23208] block nbd2: shutting down sockets [ 1759.582018][T22055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.709063][ T8] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1759.761742][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 1759.767767][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 1759.846707][ T8] usb 2-1: USB disconnect, device number 112 [ 1761.901478][ T8] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1762.446307][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1762.616891][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.684201][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1762.697450][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.755034][ T8] usb 4-1: config 0 descriptor?? [ 1762.780757][ T8] hub 4-1:0.0: USB hub found [ 1763.084131][ T8] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1763.191391][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 1763.198451][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 1763.306385][ T8] usb 4-1: USB disconnect, device number 101 [ 1763.373509][ T5862] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1763.784626][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1763.825350][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.852461][ T5862] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1763.876256][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.902894][ T5862] usb 1-1: config 0 descriptor?? [ 1764.099274][ T5862] hub 1-1:0.0: USB hub found [ 1764.282759][ T5862] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1764.324224][ T5862] usbhid 1-1:0.0: can't add hid device: -71 [ 1764.335788][ T5862] usbhid: probe of 1-1:0.0 failed with error -71 [ 1764.647964][ T5862] usb 1-1: USB disconnect, device number 99 [ 1764.674759][T23284] binder: 23282:23284 ioctl 4018620d 0 returned -22 [ 1764.813006][T21567] block nbd2: Receive control failed (result -32) [ 1764.820304][T23281] block nbd2: shutting down sockets [ 1768.261638][T23321] block nbd3: shutting down sockets [ 1772.481763][ T5879] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1772.813855][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1772.831496][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.842165][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1772.983347][T23368] block nbd0: shutting down sockets [ 1773.040736][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.090227][ T5879] usb 2-1: config 0 descriptor?? [ 1773.226623][ T5879] hub 2-1:0.0: USB hub found [ 1773.507449][T23372] block nbd3: shutting down sockets [ 1773.619647][ T5879] hub 2-1:0.0: 2 ports detected [ 1773.914487][ T5879] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1773.942545][ T5879] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1774.015192][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 1774.110328][ T5879] usbhid: probe of 2-1:0.0 failed with error -71 [ 1774.162917][ T5879] usb 2-1: USB disconnect, device number 113 [ 1781.141691][T23418] block nbd3: shutting down sockets [ 1788.133345][T23481] block nbd3: shutting down sockets [ 1788.205861][T23482] block nbd2: shutting down sockets [ 1788.222535][T23468] block nbd1: shutting down sockets [ 1790.515363][ T50] block nbd2: Receive control failed (result -32) [ 1790.523609][T23497] block nbd2: shutting down sockets [ 1791.086915][T23503] block nbd1: shutting down sockets [ 1792.338760][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.347666][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.420099][T21567] block nbd0: Receive control failed (result -32) [ 1792.437651][T23515] block nbd0: shutting down sockets [ 1798.245354][T23561] overlayfs: workdir and upperdir must reside under the same mount [ 1799.603155][T23559] block nbd2: shutting down sockets [ 1803.766545][T23606] overlayfs: workdir and upperdir must reside under the same mount [ 1806.765166][T23621] block nbd2: shutting down sockets [ 1807.081829][T23614] block nbd3: shutting down sockets [ 1808.110612][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1808.126096][T23642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1808.419826][T23643] overlayfs: workdir and upperdir must reside under the same mount [ 1809.654035][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1811.195000][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1811.203970][T23650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1811.851346][ T5879] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1812.106456][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1812.133932][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.172605][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1812.199833][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.236798][ T5879] usb 4-1: config 0 descriptor?? [ 1812.255212][ T5879] hub 4-1:0.0: USB hub found [ 1812.291171][T21567] block nbd0: Receive control failed (result -32) [ 1812.300381][T23667] block nbd0: shutting down sockets [ 1812.474322][ T5879] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1812.515077][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 1812.531677][ T5879] usbhid: probe of 4-1:0.0 failed with error -71 [ 1812.585651][ T5879] usb 4-1: USB disconnect, device number 102 [ 1814.155130][T23676] overlayfs: workdir and upperdir must reside under the same mount [ 1818.997682][T23696] block nbd0: shutting down sockets [ 1819.300619][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5036'. [ 1819.309644][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5036'. [ 1819.933998][T23710] overlayfs: workdir and upperdir must reside under the same mount [ 1821.749066][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1821.761110][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1821.770597][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1821.780942][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1821.789277][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1821.796978][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1822.064893][T23716] block nbd3: shutting down sockets [ 1822.420589][ T3459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.612743][ T3459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.844084][ T3459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.483763][ T3459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.495186][ T50] block nbd3: Receive control failed (result -32) [ 1823.512515][T23736] block nbd3: shutting down sockets [ 1823.891269][ T50] Bluetooth: hci4: command tx timeout [ 1823.969267][T23723] chnl_net:caif_netlink_parms(): no params data found [ 1824.945269][T23723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.211829][T23723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.623686][T23723] bridge_slave_0: entered allmulticast mode [ 1825.692177][T23723] bridge_slave_0: entered promiscuous mode [ 1825.720383][T23723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.741432][T23723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.774398][T23723] bridge_slave_1: entered allmulticast mode [ 1825.792313][T23723] bridge_slave_1: entered promiscuous mode [ 1825.971793][ T50] Bluetooth: hci4: command tx timeout [ 1826.039519][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1826.048752][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5048'. [ 1826.733945][T23723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.853548][T23723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.081457][ T55] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1827.094651][T23723] team0: Port device team_slave_0 added [ 1827.136988][T23723] team0: Port device team_slave_1 added [ 1827.395615][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1827.408417][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.418588][ T55] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1827.461140][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.497669][ T55] usb 1-1: config 0 descriptor?? [ 1827.538908][ T55] hub 1-1:0.0: USB hub found [ 1827.809087][ T55] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1827.849836][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 1827.861345][ T55] usbhid: probe of 1-1:0.0 failed with error -71 [ 1827.955242][ T55] usb 1-1: USB disconnect, device number 100 [ 1828.054061][ T50] Bluetooth: hci4: command tx timeout [ 1828.110497][T23723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1828.125773][T23723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.153422][T23723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1828.754584][T23723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.771745][T23723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1828.802384][T23723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1829.921452][ T3459] hsr_slave_0: left promiscuous mode [ 1829.955394][ T3459] hsr_slave_1: left promiscuous mode [ 1830.024556][ T3459] bridge_slave_1: left allmulticast mode [ 1830.044367][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5056'. [ 1830.053666][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5056'. [ 1830.064543][ T3459] bridge_slave_1: left promiscuous mode [ 1830.076491][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.114236][ T3459] bridge_slave_0: left allmulticast mode [ 1830.131276][ T50] Bluetooth: hci4: command tx timeout [ 1830.160709][ T3459] bridge_slave_0: left promiscuous mode [ 1830.176542][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.339280][ T3459] veth1_macvtap: left promiscuous mode [ 1830.353028][ T3459] veth0_macvtap: left promiscuous mode [ 1830.370764][ T3459] veth1_vlan: left promiscuous mode [ 1830.389706][ T3459] veth0_vlan: left promiscuous mode [ 1833.487719][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5063'. [ 1833.497413][T23829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5063'. [ 1833.629591][T23827] block nbd3: shutting down sockets [ 1835.123047][T23839] block nbd3: shutting down sockets [ 1835.951216][T23845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1835.960178][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1836.293480][ T3459] team0 (unregistering): Port device team_slave_1 removed [ 1837.124051][T23859] overlayfs: workdir and upperdir must reside under the same mount [ 1837.216439][ T3459] team0 (unregistering): Port device team_slave_0 removed [ 1838.325332][ T3459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.880083][ T3459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.957645][T23862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1838.968556][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5073'. [ 1840.350072][ T50] block nbd3: Receive control failed (result -32) [ 1840.363970][T23873] block nbd3: shutting down sockets [ 1841.508957][ T50] block nbd0: Receive control failed (result -32) [ 1841.526127][T23883] block nbd0: shutting down sockets [ 1841.768107][T23888] block nbd3: shutting down sockets [ 1841.802760][ T3459] bond0 (unregistering): Released all slaves [ 1842.733830][T23723] hsr_slave_0: entered promiscuous mode [ 1842.812030][T23723] hsr_slave_1: entered promiscuous mode [ 1842.831341][T23723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1842.855869][T23723] Cannot create hsr debugfs directory [ 1845.120679][ T3459] IPVS: stop unused estimator thread 0... [ 1845.288470][T23912] block nbd0: shutting down sockets [ 1847.588731][T23943] overlayfs: workdir and upperdir must reside under the same mount [ 1848.098364][T23723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1848.142765][T23723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1848.154553][T23723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1848.175651][T23723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1849.048125][T23723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.713035][T23723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1849.783731][T12294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.790941][T12294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1849.912969][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.920187][T12294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.635562][T23723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1850.885082][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1850.894433][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1851.021411][T23723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1852.820202][T23723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.115630][T23723] veth0_vlan: entered promiscuous mode [ 1853.238781][T23723] veth1_vlan: entered promiscuous mode [ 1853.277793][T23723] veth0_macvtap: entered promiscuous mode [ 1853.289334][T23723] veth1_macvtap: entered promiscuous mode [ 1853.660446][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.667178][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.307535][T23723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1854.339625][T23723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.411142][T23723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1854.449359][T23723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.606546][T23723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1854.807565][T23723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.262606][T23723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.313800][T23723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.368137][T23723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.400445][T24008] block nbd2: shutting down sockets [ 1855.410335][T23723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.461273][T23723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.489597][T23723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.506512][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5100'. [ 1855.532327][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5100'. [ 1855.541596][T23723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.595661][T23723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1855.604306][T24019] block nbd0: shutting down sockets [ 1855.644531][T23723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.688041][T23723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.701519][T23723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.711114][T23723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.014113][T22426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.141432][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1856.341123][T22426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.728128][T24023] block nbd0: shutting down sockets [ 1856.784573][T19617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.827983][T19617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.388563][T24060] block nbd3: shutting down sockets [ 1860.939668][T24069] block nbd2: shutting down sockets [ 1862.864515][T24095] block nbd2: shutting down sockets [ 1863.571671][T24102] block nbd1: shutting down sockets [ 1866.493580][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1866.502603][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1867.742168][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5123'. [ 1867.770034][T24143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5123'. [ 1867.839207][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5121'. [ 1867.851580][T24144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5121'. [ 1868.270801][T24135] block nbd0: shutting down sockets [ 1869.546724][T24153] block nbd1: shutting down sockets [ 1871.402637][ T50] block nbd0: Receive control failed (result -32) [ 1871.410160][T24162] block nbd0: shutting down sockets [ 1871.945970][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1871.954954][T24166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1872.037924][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1872.050788][T24184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1872.264218][T24188] overlayfs: workdir and upperdir must reside under the same mount [ 1873.950063][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5134'. [ 1873.959615][T24198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5134'. [ 1875.376273][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'. [ 1875.405206][T24214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5135'. [ 1875.784245][T24211] block nbd0: shutting down sockets [ 1877.372147][T24224] block nbd2: shutting down sockets [ 1877.749202][T24242] overlayfs: workdir and upperdir must reside under the same mount [ 1882.827411][T24264] block nbd3: shutting down sockets [ 1883.386943][T24279] block nbd2: shutting down sockets [ 1885.862865][ T50] block nbd1: Receive control failed (result -32) [ 1885.940735][T24199] block nbd1: shutting down sockets [ 1886.085845][T24301] block nbd0: shutting down sockets [ 1887.505937][T21567] block nbd2: Receive control failed (result -32) [ 1887.513461][T24304] block nbd2: shutting down sockets [ 1887.726505][T24315] block nbd0: shutting down sockets [ 1888.553507][ T5862] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1888.741156][ T5862] usb 1-1: device descriptor read/64, error -71 [ 1889.198046][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1889.207266][T24330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1889.277791][ T5862] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1889.455308][ T5862] usb 1-1: device descriptor read/64, error -71 [ 1889.671991][ T5862] usb usb1-port1: attempt power cycle [ 1890.053173][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1890.062494][T24337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1890.186427][ T5862] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1890.561569][ T5862] usb 1-1: device descriptor read/8, error -71 [ 1891.406135][ T5862] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 1891.463863][ T5862] usb 1-1: device descriptor read/8, error -71 [ 1891.585019][ T5862] usb usb1-port1: unable to enumerate USB device [ 1891.921977][T24347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5169'. [ 1891.931216][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5169'. [ 1893.741300][T24357] block nbd3: shutting down sockets [ 1894.143426][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1894.152426][T24351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1895.696628][T24378] block nbd3: shutting down sockets [ 1896.350528][T24370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'. [ 1896.359528][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5175'. [ 1896.885026][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1896.894287][T24389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1899.662421][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1899.671894][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1903.808194][T24434] block nbd3: shutting down sockets [ 1905.398011][T24442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5191'. [ 1905.407709][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5191'. [ 1907.435537][T24456] block nbd3: shutting down sockets [ 1909.132285][T24460] block nbd2: shutting down sockets [ 1909.249347][T24466] block nbd1: shutting down sockets [ 1910.461939][T24483] netlink: set zone limit has 8 unknown bytes [ 1910.572672][T24486] bpq0: entered allmulticast mode [ 1910.627229][T21567] block nbd3: Receive control failed (result -32) [ 1910.634713][T24472] block nbd3: shutting down sockets [ 1911.732507][T24494] block nbd2: shutting down sockets [ 1913.005389][T24501] block nbd1: shutting down sockets [ 1913.064106][T24493] block nbd3: shutting down sockets [ 1915.307721][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.344743][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.790932][T21567] block nbd0: Receive control failed (result -32) [ 1917.798185][T24532] block nbd0: shutting down sockets [ 1921.817859][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5219'. [ 1921.827134][T24563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5219'. [ 1922.519174][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1922.529035][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 1923.761358][T24581] netlink: set zone limit has 8 unknown bytes [ 1926.075779][T24592] block nbd0: shutting down sockets [ 1926.802778][T24595] block nbd2: shutting down sockets [ 1930.794888][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5231'. [ 1930.804677][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5231'. [ 1930.814429][T24617] block nbd1: shutting down sockets [ 1932.331242][T24641] block nbd1: shutting down sockets [ 1932.741201][T24647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1932.750281][T24647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1935.261402][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1935.270367][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1936.885244][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5245'. [ 1936.894250][T24679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5245'. [ 1937.793755][T24693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5248'. [ 1937.803235][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5248'. [ 1939.911139][T21567] block nbd0: Receive control failed (result -32) [ 1939.923138][T24700] block nbd0: shutting down sockets [ 1940.428145][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5251'. [ 1940.513174][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5251'. [ 1942.672973][T24729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5257'. [ 1942.682152][T24729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5257'. [ 1943.632150][T24720] block nbd3: shutting down sockets [ 1946.140086][T24756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1946.185385][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1947.907595][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1950.812045][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1950.821078][T24780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1951.612563][T24802] block nbd0: shutting down sockets [ 1955.975926][T24827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5282'. [ 1955.985502][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5282'. [ 1958.417960][T24842] block nbd2: shutting down sockets [ 1960.796921][T24865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 1960.809681][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'. [ 1962.004583][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5292'. [ 1962.055393][T24867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5292'. [ 1962.374993][T24884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1962.384357][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1962.401264][T19410] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1963.049783][T19410] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.060082][T19410] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1963.073809][T19410] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1963.443534][T19410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.468418][T19410] usb 2-1: config 0 descriptor?? [ 1963.485169][T19410] hub 2-1:0.0: bad descriptor, ignoring hub [ 1963.533904][T19410] hub: probe of 2-1:0.0 failed with error -5 [ 1963.542354][T19410] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1964.060786][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5299'. [ 1964.070103][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5299'. [ 1965.012039][ T8] usb 2-1: USB disconnect, device number 114 [ 1966.013998][T24905] netlink: set zone limit has 8 unknown bytes [ 1968.710368][T24916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5307'. [ 1968.752205][T24916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5307'. [ 1968.850770][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5308'. [ 1968.859894][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5308'. [ 1969.381126][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1970.080354][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.102828][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1970.117426][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1970.128236][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.162742][ T9] usb 4-1: config 0 descriptor?? [ 1970.181959][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 1970.197242][ T9] hub: probe of 4-1:0.0 failed with error -5 [ 1970.215656][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1971.082666][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1971.091862][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1971.268542][T24946] netlink: set zone limit has 8 unknown bytes [ 1972.612588][T23367] usb 4-1: USB disconnect, device number 103 [ 1972.761102][T24952] block nbd0: shutting down sockets [ 1975.456149][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1975.465252][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1975.590639][T24976] netlink: set zone limit has 8 unknown bytes [ 1976.540436][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.546931][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.724371][T24985] block nbd3: shutting down sockets [ 1977.436172][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'. [ 1977.445455][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5327'. [ 1979.116525][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5329'. [ 1979.125823][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5329'. [ 1979.545389][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 1979.555796][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5330'. [ 1980.582306][T25015] block nbd0: shutting down sockets [ 1984.959705][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 1984.972548][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5342'. [ 1985.267535][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'. [ 1985.276991][T25054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5341'. [ 1986.068595][T25044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1986.077582][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5343'. [ 1990.327313][T25092] block nbd1: shutting down sockets [ 1990.442288][T25087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1990.451508][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1991.028507][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1991.121335][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1992.788492][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5356'. [ 1992.797704][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5356'. [ 1996.261284][ T5862] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1996.493002][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1996.529974][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1996.547873][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.144454][ T5862] usb 3-1: config 0 descriptor?? [ 1997.413459][T25138] block nbd1: shutting down sockets [ 1997.457203][ T5862] hub 3-1:0.0: bad descriptor, ignoring hub [ 1997.466028][ T5862] hub: probe of 3-1:0.0 failed with error -5 [ 1997.504388][ T5862] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1997.619679][T25131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1997.628666][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1998.018583][T25153] overlayfs: workdir and upperdir must reside under the same mount [ 1999.436896][T19410] usb 3-1: USB disconnect, device number 88 [ 1999.917529][T25169] block nbd2: shutting down sockets [ 2000.091498][T25172] block nbd3: shutting down sockets [ 2003.309706][T25191] netlink: set zone limit has 8 unknown bytes [ 2006.181055][ T9] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2006.424754][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2006.599400][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2006.856336][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.877360][ T9] usb 2-1: config 0 descriptor?? [ 2006.889144][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 2006.905678][ T9] hub: probe of 2-1:0.0 failed with error -5 [ 2006.914899][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2007.349891][T25222] block nbd0: shutting down sockets [ 2008.299144][ T5861] usb 2-1: USB disconnect, device number 115 [ 2008.815137][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5387'. [ 2008.824518][T25231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5387'. [ 2011.579956][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5392'. [ 2011.589022][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5392'. [ 2014.001161][ T5879] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 2014.706629][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.716828][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2014.726095][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.303440][ T5879] usb 4-1: config 0 descriptor?? [ 2015.321465][ T5879] hub 4-1:0.0: bad descriptor, ignoring hub [ 2015.341120][ T5879] hub: probe of 4-1:0.0 failed with error -5 [ 2015.358098][ T5879] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2015.766042][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5404'. [ 2015.775288][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5404'. [ 2016.496750][T25295] block nbd1: shutting down sockets [ 2016.907541][T19410] usb 4-1: USB disconnect, device number 104 [ 2018.072241][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5405'. [ 2018.081419][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5405'. [ 2019.128460][T21567] block nbd2: Receive control failed (result -32) [ 2019.147650][T25308] block nbd2: shutting down sockets [ 2021.296648][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5411'. [ 2021.305888][T25325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5411'. [ 2022.051123][ T5879] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 2022.346032][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.361200][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2022.373793][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.408234][ T5879] usb 2-1: config 0 descriptor?? [ 2022.432840][ T5879] hub 2-1:0.0: bad descriptor, ignoring hub [ 2022.438844][ T5879] hub: probe of 2-1:0.0 failed with error -5 [ 2022.537069][ T5879] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2022.630448][T25336] block nbd0: shutting down sockets [ 2022.758918][T25341] block nbd3: shutting down sockets [ 2025.002590][ T5879] usb 2-1: USB disconnect, device number 116 [ 2026.680166][T21567] block nbd2: Receive control failed (result -32) [ 2026.687415][T25364] block nbd2: shutting down sockets [ 2027.348715][T25381] netlink: set zone limit has 8 unknown bytes [ 2029.480273][T21567] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2029.785288][T25396] block nbd2: shutting down sockets [ 2030.321247][ T5862] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 2030.853749][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2030.883446][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5436'. [ 2030.892975][T25413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5436'. [ 2030.946262][T21567] block nbd3: Receive control failed (result -32) [ 2030.953813][T25402] block nbd3: shutting down sockets [ 2031.019537][ T5862] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2031.041321][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.227078][ T5862] usb 1-1: config 0 descriptor?? [ 2031.253829][ T5862] hub 1-1:0.0: bad descriptor, ignoring hub [ 2031.259831][ T5862] hub: probe of 1-1:0.0 failed with error -5 [ 2032.136294][ T5862] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2032.203829][T25423] overlayfs: workdir and upperdir must reside under the same mount [ 2032.242323][ T5862] usb 1-1: USB disconnect, device number 105 [ 2032.370027][T25428] netlink: set zone limit has 8 unknown bytes [ 2035.762900][T25444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5444'. [ 2035.771921][T25444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5444'. [ 2037.421257][ T5879] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 2037.867002][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2037.921989][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.946911][ T5879] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2037.962097][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.977293][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.986149][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.011240][ T5879] usb 4-1: config 0 descriptor?? [ 2038.026648][ T5879] hub 4-1:0.0: USB hub found [ 2038.076393][T25468] netlink: set zone limit has 8 unknown bytes [ 2039.205669][ T5879] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2039.256123][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 2039.263121][ T5879] usbhid: probe of 4-1:0.0 failed with error -71 [ 2039.363290][ T5879] usb 4-1: USB disconnect, device number 105 [ 2040.839362][T25494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5457'. [ 2040.848910][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5457'. [ 2041.295061][T25497] overlayfs: workdir and upperdir must reside under the same mount [ 2043.344768][T25515] netlink: set zone limit has 8 unknown bytes [ 2044.353789][T25517] block nbd1: shutting down sockets [ 2044.671715][T25522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5463'. [ 2044.680810][T25522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5463'. [ 2045.761056][ T8] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 2046.015591][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2046.032578][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2046.051847][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2046.068398][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.094487][ T8] usb 4-1: config 0 descriptor?? [ 2046.111539][ T8] hub 4-1:0.0: USB hub found [ 2046.315462][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 2046.344917][ T8] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2046.376291][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 2046.387219][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 2046.461956][ T8] usb 4-1: USB disconnect, device number 106 [ 2048.435364][T25545] netlink: set zone limit has 8 unknown bytes [ 2051.520197][T25573] block nbd1: shutting down sockets [ 2051.672597][T25567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 2051.681796][T25567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5477'. [ 2052.940630][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5480'. [ 2052.950097][T25582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5480'. [ 2055.496010][T25598] netlink: set zone limit has 8 unknown bytes [ 2057.186972][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5489'. [ 2057.196277][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 2058.595178][T25635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5492'. [ 2058.604851][T25635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5492'. [ 2061.671408][T25654] netlink: set zone limit has 8 unknown bytes [ 2064.282876][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5500'. [ 2064.292261][T25665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5500'. [ 2072.351209][ T5862] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2072.643160][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2072.665628][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2072.676205][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2072.695592][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.718634][ T5862] usb 3-1: config 0 descriptor?? [ 2072.731598][ T5862] hub 3-1:0.0: USB hub found [ 2073.624664][ T5862] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2073.713082][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 2073.719188][ T5862] usbhid: probe of 3-1:0.0 failed with error -71 [ 2073.902358][ T5862] usb 3-1: USB disconnect, device number 89 [ 2074.861889][T25724] netlink: set zone limit has 8 unknown bytes [ 2076.556170][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5518'. [ 2076.565147][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5518'. [ 2078.971153][ T9] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 2079.354480][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2079.386364][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2079.392460][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5525'. [ 2079.405246][T25758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5525'. [ 2079.466506][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2079.484248][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.502783][ T9] usb 1-1: config 0 descriptor?? [ 2079.529297][ T9] hub 1-1:0.0: USB hub found [ 2079.650312][T25768] netlink: set zone limit has 8 unknown bytes [ 2080.457458][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 2080.464868][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2080.480068][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 2080.493440][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 2080.559479][T25772] bpq0: entered promiscuous mode [ 2080.566494][ T9] usb 1-1: USB disconnect, device number 106 [ 2080.582891][T25772] bpq0: left allmulticast mode [ 2082.897741][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5532'. [ 2082.906735][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5532'. [ 2085.284479][T25818] overlayfs: workdir and upperdir must reside under the same mount [ 2085.684932][T25824] block nbd1: shutting down sockets [ 2087.136191][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5546'. [ 2087.145811][T25838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5546'. [ 2087.267848][T25826] block nbd3: shutting down sockets [ 2090.150630][T25862] overlayfs: workdir and upperdir must reside under the same mount [ 2094.256951][T21567] block nbd2: Receive control failed (result -32) [ 2094.264713][T25887] block nbd2: shutting down sockets [ 2094.291653][ C0] ================================================================== [ 2094.299800][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 2094.307767][ C0] Read of size 2 at addr ffff88805ecd502a by task kworker/u4:14/25650 [ 2094.315951][ C0] [ 2094.318336][ C0] CPU: 0 PID: 25650 Comm: kworker/u4:14 Not tainted 6.6.101-syzkaller #0 [ 2094.326772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2094.336857][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2094.343708][ C0] Call Trace: [ 2094.347013][ C0] [ 2094.349882][ C0] dump_stack_lvl+0x16c/0x230 [ 2094.354638][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 2094.359731][ C0] ? show_regs_print_info+0x20/0x20 [ 2094.364952][ C0] ? load_image+0x3b0/0x3b0 [ 2094.369514][ C0] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 2094.374995][ C0] ? __virt_addr_valid+0x18c/0x540 [ 2094.380154][ C0] ? __virt_addr_valid+0x469/0x540 [ 2094.385283][ C0] print_report+0xac/0x220 [ 2094.389716][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2094.395068][ C0] kasan_report+0x117/0x150 [ 2094.399683][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2094.404926][ C0] rose_timer_expiry+0x46a/0x4b0 [ 2094.409922][ C0] call_timer_fn+0x16e/0x530 [ 2094.414545][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2094.419608][ C0] ? call_timer_fn+0xbf/0x530 [ 2094.424298][ C0] ? __run_timers+0x7d0/0x7d0 [ 2094.429031][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2094.434273][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2094.439511][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2094.444592][ C0] __run_timers+0x52d/0x7d0 [ 2094.449340][ C0] ? detach_timer+0x2b0/0x2b0 [ 2094.454057][ C0] ? lock_chain_count+0x20/0x20 [ 2094.458966][ C0] run_timer_softirq+0x67/0xf0 [ 2094.463861][ C0] handle_softirqs+0x280/0x820 [ 2094.468886][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 2094.473921][ C0] ? do_softirq+0x180/0x180 [ 2094.478471][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2094.483813][ C0] __irq_exit_rcu+0xc7/0x190 [ 2094.488426][ C0] ? irq_exit_rcu+0x20/0x20 [ 2094.493040][ C0] irq_exit_rcu+0x9/0x20 [ 2094.497407][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2094.503088][ C0] [ 2094.506040][ C0] [ 2094.509101][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2094.515232][ C0] RIP: 0010:__alloc_skb+0x3d/0x2c0 [ 2094.520507][ C0] Code: cd 41 89 d6 41 89 f5 89 fb 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 49 bc 00 00 00 00 00 fc ff df e8 57 4d 23 f9 89 5c 24 04 44 24 03 00 44 89 f3 83 e3 01 48 c7 c0 98 97 7d 8c 49 c7 c7 a0 [ 2094.540142][ C0] RSP: 0018:ffffc900043d7a88 EFLAGS: 00000293 [ 2094.546233][ C0] RAX: ffffffff88624839 RBX: 0000000000000ec0 RCX: ffff888024091e00 [ 2094.554220][ C0] RDX: 0000000000000000 RSI: 0000000000000820 RDI: 0000000000000ec0 [ 2094.562216][ C0] RBP: 00000000ffffffff R08: ffffffff90da360f R09: 1ffffffff21b46c1 [ 2094.570234][ C0] R10: dffffc0000000000 R11: fffffbfff21b46c2 R12: dffffc0000000000 [ 2094.578238][ C0] R13: 0000000000000820 R14: 0000000000000000 R15: 00000000000000c0 [ 2094.586264][ C0] ? __alloc_skb+0x39/0x2c0 [ 2094.590816][ C0] ? __alloc_skb+0x39/0x2c0 [ 2094.595356][ C0] nsim_dev_trap_report_work+0x293/0xb00 [ 2094.601019][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2094.606846][ C0] process_scheduled_works+0xa45/0x15b0 [ 2094.612509][ C0] ? assign_work+0x400/0x400 [ 2094.617125][ C0] ? assign_work+0x39e/0x400 [ 2094.621737][ C0] worker_thread+0xa55/0xfc0 [ 2094.626340][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2094.632255][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2094.637179][ C0] kthread+0x2fa/0x390 [ 2094.641260][ C0] ? pr_cont_work+0x560/0x560 [ 2094.645954][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2094.650562][ C0] ret_from_fork+0x48/0x80 [ 2094.655000][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2094.659608][ C0] ret_from_fork_asm+0x11/0x20 [ 2094.664440][ C0] [ 2094.667469][ C0] [ 2094.669811][ C0] Allocated by task 24486: [ 2094.674276][ C0] kasan_set_track+0x4e/0x70 [ 2094.678887][ C0] __kasan_kmalloc+0x8f/0xa0 [ 2094.683490][ C0] rose_add_node+0x23a/0xdd0 [ 2094.688092][ C0] rose_rt_ioctl+0xa42/0xfb0 [ 2094.692689][ C0] rose_ioctl+0x3cf/0x8b0 [ 2094.697027][ C0] sock_do_ioctl+0xd7/0x2f0 [ 2094.701621][ C0] sock_ioctl+0x623/0x7a0 [ 2094.705977][ C0] __se_sys_ioctl+0xfd/0x170 [ 2094.710600][ C0] do_syscall_64+0x55/0xb0 [ 2094.715031][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2094.720949][ C0] [ 2094.723305][ C0] Freed by task 25772: [ 2094.727373][ C0] kasan_set_track+0x4e/0x70 [ 2094.731977][ C0] kasan_save_free_info+0x2e/0x50 [ 2094.737015][ C0] ____kasan_slab_free+0x126/0x1e0 [ 2094.742150][ C0] slab_free_freelist_hook+0x130/0x1b0 [ 2094.747651][ C0] __kmem_cache_free+0xba/0x1f0 [ 2094.752536][ C0] rose_rt_device_down+0x43d/0x490 [ 2094.757769][ C0] rose_device_event+0x604/0x690 [ 2094.762738][ C0] notifier_call_chain+0x197/0x390 [ 2094.767868][ C0] __dev_notify_flags+0x18e/0x2e0 [ 2094.773016][ C0] dev_change_flags+0xe8/0x1a0 [ 2094.777818][ C0] dev_ifsioc+0x6a7/0xe20 [ 2094.782242][ C0] dev_ioctl+0x7e2/0x1170 [ 2094.786597][ C0] sock_do_ioctl+0x226/0x2f0 [ 2094.791231][ C0] sock_ioctl+0x623/0x7a0 [ 2094.795597][ C0] __se_sys_ioctl+0xfd/0x170 [ 2094.800213][ C0] do_syscall_64+0x55/0xb0 [ 2094.804654][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2094.810565][ C0] [ 2094.812924][ C0] Last potentially related work creation: [ 2094.818684][ C0] kasan_save_stack+0x3e/0x60 [ 2094.823398][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 2094.828784][ C0] call_rcu+0x158/0x930 [ 2094.832960][ C0] inet_rcu_free_ifa+0x77/0xc0 [ 2094.837749][ C0] rcu_core+0xcc4/0x1720 [ 2094.842111][ C0] handle_softirqs+0x280/0x820 [ 2094.847146][ C0] __irq_exit_rcu+0xc7/0x190 [ 2094.851748][ C0] irq_exit_rcu+0x9/0x20 [ 2094.856026][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2094.861704][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2094.867718][ C0] [ 2094.870055][ C0] Second to last potentially related work creation: [ 2094.876803][ C0] kasan_save_stack+0x3e/0x60 [ 2094.881568][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 2094.886982][ C0] call_rcu+0x158/0x930 [ 2094.891164][ C0] ip6_route_info_create+0x9c0/0x1200 [ 2094.896617][ C0] ip6_route_add+0x28/0x130 [ 2094.901165][ C0] addrconf_add_dev+0x257/0x340 [ 2094.906239][ C0] inet6_addr_add+0x215/0xb60 [ 2094.910955][ C0] inet6_rtm_newaddr+0x68d/0x940 [ 2094.915924][ C0] rtnetlink_rcv_msg+0x7c7/0xf10 [ 2094.920965][ C0] netlink_rcv_skb+0x216/0x480 [ 2094.925786][ C0] netlink_unicast+0x751/0x8d0 [ 2094.930561][ C0] netlink_sendmsg+0x8c1/0xbe0 [ 2094.935344][ C0] __sys_sendto+0x46a/0x620 [ 2094.939874][ C0] __x64_sys_sendto+0xde/0xf0 [ 2094.944576][ C0] do_syscall_64+0x55/0xb0 [ 2094.949046][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2094.954968][ C0] [ 2094.957303][ C0] The buggy address belongs to the object at ffff88805ecd5000 [ 2094.957303][ C0] which belongs to the cache kmalloc-512 of size 512 [ 2094.971375][ C0] The buggy address is located 42 bytes inside of [ 2094.971375][ C0] freed 512-byte region [ffff88805ecd5000, ffff88805ecd5200) [ 2094.985109][ C0] [ 2094.987449][ C0] The buggy address belongs to the physical page: [ 2094.993877][ C0] page:ffffea00017b3500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805ecd6400 pfn:0x5ecd4 [ 2095.005358][ C0] head:ffffea00017b3500 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2095.014314][ C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2095.022405][ C0] page_type: 0xffffffff() [ 2095.026881][ C0] raw: 00fff00000000840 ffff888017841c80 ffffea0000922d10 ffffea00017bf310 [ 2095.035620][ C0] raw: ffff88805ecd6400 000000000010000d 00000001ffffffff 0000000000000000 [ 2095.044217][ C0] page dumped because: kasan: bad access detected [ 2095.050670][ C0] page_owner tracks the page as allocated [ 2095.056596][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5790, tgid 5790 (syz-executor), ts 89716363807, free_ts 27073821305 [ 2095.077985][ C0] post_alloc_hook+0x1cd/0x210 [ 2095.082813][ C0] get_page_from_freelist+0x195c/0x19f0 [ 2095.088381][ C0] __alloc_pages+0x1e3/0x460 [ 2095.093015][ C0] alloc_slab_page+0x5d/0x170 [ 2095.097746][ C0] new_slab+0x87/0x2e0 [ 2095.101859][ C0] ___slab_alloc+0xc6d/0x12f0 [ 2095.106555][ C0] __kmem_cache_alloc_node+0x1a2/0x260 [ 2095.112043][ C0] __kmalloc+0xa4/0x240 [ 2095.116274][ C0] fib6_info_alloc+0x32/0xe0 [ 2095.120968][ C0] ip6_route_info_create+0x44f/0x1200 [ 2095.126361][ C0] ip6_route_add+0x28/0x130 [ 2095.130884][ C0] add_v4_addrs+0x8b4/0xbc0 [ 2095.135409][ C0] addrconf_init_auto_addrs+0x763/0xaa0 [ 2095.140973][ C0] addrconf_notify+0xb62/0x1010 [ 2095.145838][ C0] notifier_call_chain+0x197/0x390 [ 2095.151002][ C0] __dev_notify_flags+0x18e/0x2e0 [ 2095.156047][ C0] page last free stack trace: [ 2095.160724][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 2095.166204][ C0] free_unref_page+0x32/0x2e0 [ 2095.170903][ C0] free_contig_range+0xa1/0x160 [ 2095.175777][ C0] destroy_args+0x87/0x770 [ 2095.180310][ C0] debug_vm_pgtable+0x3cc/0x410 [ 2095.185186][ C0] do_one_initcall+0x1fd/0x750 [ 2095.190053][ C0] do_initcall_level+0x137/0x1f0 [ 2095.195103][ C0] do_initcalls+0x69/0xd0 [ 2095.199468][ C0] kernel_init_freeable+0x3d2/0x570 [ 2095.204700][ C0] kernel_init+0x1d/0x1c0 [ 2095.209041][ C0] ret_from_fork+0x48/0x80 [ 2095.213473][ C0] ret_from_fork_asm+0x11/0x20 [ 2095.218252][ C0] [ 2095.220584][ C0] Memory state around the buggy address: [ 2095.226224][ C0] ffff88805ecd4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2095.234308][ C0] ffff88805ecd4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2095.242463][ C0] >ffff88805ecd5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2095.250531][ C0] ^ [ 2095.256028][ C0] ffff88805ecd5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2095.264103][ C0] ffff88805ecd5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2095.272267][ C0] ================================================================== [ 2095.280798][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2095.288033][ C0] CPU: 0 PID: 25650 Comm: kworker/u4:14 Not tainted 6.6.101-syzkaller #0 [ 2095.296518][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2095.306623][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2095.313445][ C0] Call Trace: [ 2095.316760][ C0] [ 2095.319632][ C0] dump_stack_lvl+0x16c/0x230 [ 2095.324372][ C0] ? show_regs_print_info+0x20/0x20 [ 2095.329625][ C0] ? load_image+0x3b0/0x3b0 [ 2095.334193][ C0] panic+0x2c0/0x710 [ 2095.338143][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 2095.342700][ C0] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 2095.348656][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2095.354782][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2095.359688][ C0] ? print_memory_metadata+0x314/0x400 [ 2095.365193][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2095.370362][ C0] check_panic_on_warn+0x84/0xa0 [ 2095.375343][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2095.380484][ C0] end_report+0x6f/0x140 [ 2095.384789][ C0] kasan_report+0x128/0x150 [ 2095.389308][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2095.394463][ C0] rose_timer_expiry+0x46a/0x4b0 [ 2095.399436][ C0] call_timer_fn+0x16e/0x530 [ 2095.404071][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2095.409153][ C0] ? call_timer_fn+0xbf/0x530 [ 2095.413865][ C0] ? __run_timers+0x7d0/0x7d0 [ 2095.418572][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2095.423810][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2095.429037][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2095.434084][ C0] __run_timers+0x52d/0x7d0 [ 2095.438628][ C0] ? detach_timer+0x2b0/0x2b0 [ 2095.443330][ C0] ? lock_chain_count+0x20/0x20 [ 2095.450676][ C0] run_timer_softirq+0x67/0xf0 [ 2095.455476][ C0] handle_softirqs+0x280/0x820 [ 2095.460485][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 2095.465267][ C0] ? do_softirq+0x180/0x180 [ 2095.469796][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2095.475022][ C0] __irq_exit_rcu+0xc7/0x190 [ 2095.479714][ C0] ? irq_exit_rcu+0x20/0x20 [ 2095.484253][ C0] irq_exit_rcu+0x9/0x20 [ 2095.488555][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2095.494243][ C0] [ 2095.497196][ C0] [ 2095.500139][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2095.506157][ C0] RIP: 0010:__alloc_skb+0x3d/0x2c0 [ 2095.511307][ C0] Code: cd 41 89 d6 41 89 f5 89 fb 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 49 bc 00 00 00 00 00 fc ff df e8 57 4d 23 f9 89 5c 24 04 44 24 03 00 44 89 f3 83 e3 01 48 c7 c0 98 97 7d 8c 49 c7 c7 a0 [ 2095.530942][ C0] RSP: 0018:ffffc900043d7a88 EFLAGS: 00000293 [ 2095.537046][ C0] RAX: ffffffff88624839 RBX: 0000000000000ec0 RCX: ffff888024091e00 [ 2095.545036][ C0] RDX: 0000000000000000 RSI: 0000000000000820 RDI: 0000000000000ec0 [ 2095.553115][ C0] RBP: 00000000ffffffff R08: ffffffff90da360f R09: 1ffffffff21b46c1 [ 2095.561116][ C0] R10: dffffc0000000000 R11: fffffbfff21b46c2 R12: dffffc0000000000 [ 2095.569278][ C0] R13: 0000000000000820 R14: 0000000000000000 R15: 00000000000000c0 [ 2095.577271][ C0] ? __alloc_skb+0x39/0x2c0 [ 2095.581822][ C0] ? __alloc_skb+0x39/0x2c0 [ 2095.586351][ C0] nsim_dev_trap_report_work+0x293/0xb00 [ 2095.592020][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2095.597765][ C0] process_scheduled_works+0xa45/0x15b0 [ 2095.603355][ C0] ? assign_work+0x400/0x400 [ 2095.607982][ C0] ? assign_work+0x39e/0x400 [ 2095.612612][ C0] worker_thread+0xa55/0xfc0 [ 2095.617368][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2095.623429][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2095.628320][ C0] kthread+0x2fa/0x390 [ 2095.632499][ C0] ? pr_cont_work+0x560/0x560 [ 2095.637196][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2095.641798][ C0] ret_from_fork+0x48/0x80 [ 2095.646234][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2095.650915][ C0] ret_from_fork_asm+0x11/0x20 [ 2095.655976][ C0] [ 2095.659295][ C0] Kernel Offset: disabled [ 2095.663632][ C0] Rebooting in 86400 seconds..