last executing test programs: 11m24.93584053s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 11m24.748105502s ago: executing program 3 (id=8): ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) memfd_secret(0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xa]}, &(0x7f00000000c0), 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 11m23.655429359s ago: executing program 3 (id=10): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 11m23.423476646s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800030000000000fb1532"], 0x830200) 11m22.756087377s ago: executing program 3 (id=12): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x25, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x202, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x20}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) dup(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$unix(r0, 0x0, 0x0) 11m7.079941009s ago: executing program 32 (id=12): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x25, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x202, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x20}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) dup(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$unix(r0, 0x0, 0x0) 9m48.985880305s ago: executing program 2 (id=173): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x30) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf02000000"], 0x78) 9m42.909420723s ago: executing program 2 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4084, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) fanotify_init(0x0, 0x0) 9m41.62265173s ago: executing program 2 (id=185): semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 9m31.940646918s ago: executing program 2 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) 9m29.53723612s ago: executing program 2 (id=209): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 9m27.987970933s ago: executing program 2 (id=213): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x30) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300"], 0x78) 9m22.623909452s ago: executing program 5 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) 9m20.796328535s ago: executing program 5 (id=223): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000240)={0x4, 0x4, 0x2, 0x8e, 0x2, 0x0, [{0xffffffff, 0x4, 0x7fffffffffffffff, '\x00', 0x400}, {0x0, 0x74ae, 0x7, '\x00', 0x1000}]}) 9m18.611210716s ago: executing program 5 (id=226): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) 9m13.876202202s ago: executing program 5 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8, 0x986}]}}}, 0x8) select(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 9m11.693275219s ago: executing program 33 (id=213): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x30) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300"], 0x78) 9m7.81949185s ago: executing program 5 (id=240): socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 9m5.933925421s ago: executing program 5 (id=242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffe, 0x0, 0x4}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000fb1f20b401e0903003bd70102030109f55990aaefa3899b00ce7be234368f84e0d9e022bcf9219ba94c170c08dfd418b5af04262654a99520db480fa401b0f1bacd357d5622aff5d38c8463928606b8414d50f1f99ac58a0a493daae181a87dbe9997a1040431b9225da35a1290752c9e83058a4a63d5150118a0"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x400], [0x1000], [0x1, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000033c0)={'wlan0\x00', &(0x7f0000003380)=@ethtool_regs={0x4, 0x7}}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r6, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x8, 0x6, 0x5) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000000100)) 8m49.238533474s ago: executing program 34 (id=242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffeffe, 0x0, 0x4}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000fb1f20b401e0903003bd70102030109f55990aaefa3899b00ce7be234368f84e0d9e022bcf9219ba94c170c08dfd418b5af04262654a99520db480fa401b0f1bacd357d5622aff5d38c8463928606b8414d50f1f99ac58a0a493daae181a87dbe9997a1040431b9225da35a1290752c9e83058a4a63d5150118a0"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x400], [0x1000], [0x1, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000033c0)={'wlan0\x00', &(0x7f0000003380)=@ethtool_regs={0x4, 0x7}}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r6, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x8, 0x6, 0x5) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000000100)) 2m16.064218495s ago: executing program 6 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 2m14.531924656s ago: executing program 6 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, 0x0) 2m13.358143801s ago: executing program 6 (id=958): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000080000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 2m11.588713753s ago: executing program 6 (id=960): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea04850000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r3, r3, 0x0, 0x40008) close_range(r1, 0xffffffffffffffff, 0x0) 2m10.251661634s ago: executing program 6 (id=962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1) 2m8.127013088s ago: executing program 6 (id=964): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) clock_gettime(0xfffffff2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1m51.69768519s ago: executing program 35 (id=964): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) clock_gettime(0xfffffff2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 24.208147394s ago: executing program 8 (id=1164): socket$alg(0x26, 0x5, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 19.824989621s ago: executing program 8 (id=1167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) 19.689981405s ago: executing program 7 (id=1169): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff"], 0x0) 18.100197274s ago: executing program 7 (id=1171): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket(0xa, 0x5, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 16.665787539s ago: executing program 7 (id=1175): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000a40)=0x4, 0x4) 14.740179425s ago: executing program 8 (id=1178): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) 14.53753258s ago: executing program 8 (id=1179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000600)="c60ecae98643dfdf4b97485c944a5c35a4de1b0b1e887c5e0e9a8c690b40e06268ab05453fa58909401c21ef2a1b121751106c82bca7902e62bd5fa54f7d95bce4114315b1b3499335d49455a0d4", 0x4e, 0x2, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r0, 0xf9f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x3, 0xb5c, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0xf, 0xc7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @local]}, @end]}}}}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x99, &(0x7f0000000280)=""/153, 0x41000, 0x2c, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r4, 0x1], &(0x7f0000000500), 0x10, 0x40}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 13.19631593s ago: executing program 8 (id=1180): r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x2a}, 0x10) ioctl$mixer_OSS_GETVERSION(r0, 0x40086602, &(0x7f0000000000)) 10.965692913s ago: executing program 1 (id=1185): r0 = semget(0x2, 0x7, 0x20a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x547b) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r5, 0x9, 0x5, 0x0, 0x2, {0x8001, 0x6, 0x0, 0x4, 0x0, 0x4, 0xfffc, 0xfffd, 0x4, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x12) 10.955596833s ago: executing program 4 (id=1186): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/kcm\x00') openat$sysfs(0xffffff9c, 0x0, 0x309080, 0x1) openat$dsp1(0xffffffffffffff9c, 0x0, 0x143082, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000200)={0x66, 0x29, 0x2, {0x945, [{{0x80, 0x2, 0x3}, 0x3, 0x9, 0x7, './file1'}, {{0x1, 0x3, 0x3}, 0x3, 0x7, 0x5, './bus'}, {{0x0, 0x40000004, 0x4}, 0xf, 0x8, 0x7, './file1'}]}}, 0x66) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f4"], 0x1c, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 10.71589039s ago: executing program 8 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffff0000, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 9.888173696s ago: executing program 1 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) 8.778566945s ago: executing program 0 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x7c, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2000002, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x6, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x0, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x80, 0x2000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) 8.746348519s ago: executing program 4 (id=1190): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x7d, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"}}}}, 0x9f) 8.457148639s ago: executing program 7 (id=1191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r1, 0x701}, 0x14}}, 0x0) 7.669562487s ago: executing program 1 (id=1192): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x0) 7.437005899s ago: executing program 0 (id=1193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200008047403a7419c0af7a00050000000000000034ebbbf7ad9d538fcbb692548976c74cbd9208000000f335b9487e76b5272a7676dfe2c57c027187d9d3c0dd83d719000000100000", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRESHEX=r0], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x40000121, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 7.286398478s ago: executing program 7 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) socket(0x10, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xa721) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x20) write$cgroup_int(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) 7.209518155s ago: executing program 4 (id=1195): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1) 6.985567121s ago: executing program 1 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 6.933921973s ago: executing program 0 (id=1197): rseq(0x0, 0x0, 0x0, 0x0) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 3.864237688s ago: executing program 7 (id=1198): io_uring_setup(0x19c1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 3.728087742s ago: executing program 1 (id=1199): r0 = semget(0x2, 0x7, 0x20a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x547b) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r5, 0x9, 0x5, 0x0, 0x2, {0x8001, 0x6, 0x0, 0x4, 0x0, 0x4, 0xfffc, 0xfffd, 0x4, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x1, 0x12) 3.628108934s ago: executing program 4 (id=1200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.610278978s ago: executing program 0 (id=1201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x0, 0x44}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12002, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800340200140067000002019078ac1414bbac1414256cc5428df11502440a0b3b140e16d142bb7d41bf8e21232cc0a6a5c6a08f33b84f2d02bd19cde518f0bb455fa9ad9850a53160ffa5e36ae2087646068a0377463af9fed95cef9eafd0f2a30107d3ff4f6b8cb35822967dfbed4e4c473c76a9671631"], 0x0) 3.270360589s ago: executing program 1 (id=1202): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000a40)=0x4, 0x4) 3.119973636s ago: executing program 4 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.861018574s ago: executing program 0 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1.07137394s ago: executing program 4 (id=1205): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 0 (id=1206): r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6}) fcntl$setsig(r5, 0xa, 0x1d) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008000000010000000000", @ANYBLOB='\x00'/19], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) connect$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 334.979505][ T63] veth0_vlan: left promiscuous mode [ 335.931125][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.969600][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.978445][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.002073][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.012000][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.091596][ T5841] Bluetooth: hci6: command tx timeout [ 338.407892][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 338.621172][ T63] team0 (unregistering): Port device team_slave_1 removed [ 338.656402][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880299e7400: rx timeout, send abort [ 338.714727][ T63] team0 (unregistering): Port device team_slave_0 removed [ 338.728246][ T7560] netlink: 'syz.6.367': attribute type 23 has an invalid length. [ 338.868096][ T7560] xt_hashlimit: max too large, truncated to 1048576 [ 338.882742][ T7560] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.157028][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880538da000: rx timeout, send abort [ 339.165788][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880299e7400: abort rx timeout. Force session deactivation [ 339.665343][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880538da000: abort rx timeout. Force session deactivation [ 340.169373][ T5841] Bluetooth: hci6: command tx timeout [ 340.185080][ T7502] Restarting kernel threads ... [ 340.230008][ T7502] Done restarting kernel threads. [ 340.270841][ T7373] chnl_net:caif_netlink_parms(): no params data found [ 340.829403][ T5972] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 341.049442][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 341.063749][ T5972] usb 5-1: config 0 has no interfaces? [ 341.529484][ T5972] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 341.538585][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.642129][ T5972] usb 5-1: config 0 descriptor?? [ 341.707644][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.750473][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.757913][ T7373] bridge_slave_0: entered allmulticast mode [ 341.766823][ T7373] bridge_slave_0: entered promiscuous mode [ 341.805051][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.814121][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.921321][ T1204] usb 5-1: USB disconnect, device number 17 [ 342.211408][ T7373] bridge_slave_1: entered allmulticast mode [ 342.234996][ T7373] bridge_slave_1: entered promiscuous mode [ 342.249387][ T5841] Bluetooth: hci6: command tx timeout [ 343.192191][ T7611] syz.0.377: attempt to access beyond end of device [ 343.192191][ T7611] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 343.206616][ T7611] syz.0.377: attempt to access beyond end of device [ 343.206616][ T7611] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 343.219914][ T7611] Mount JFS Failure: -5 [ 343.224157][ T7611] jfs_mount failed w/return code = -5 [ 343.970782][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.036074][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.330697][ T5841] Bluetooth: hci6: command tx timeout [ 345.442450][ T7630] random: crng reseeded on system resumption [ 346.501721][ T7373] team0: Port device team_slave_0 added [ 346.563441][ T7373] team0: Port device team_slave_1 added [ 346.619351][ T5914] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 346.829902][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 346.848629][ T5914] usb 5-1: config 0 has no interfaces? [ 346.871027][ T5914] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 346.896167][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.926281][ T5914] usb 5-1: config 0 descriptor?? [ 346.951945][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.979718][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.056218][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.075520][ T7525] chnl_net:caif_netlink_parms(): no params data found [ 347.103809][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.116139][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.189614][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.226239][ T1204] usb 5-1: USB disconnect, device number 18 [ 347.802196][ T30] audit: type=1800 audit(1750960016.044:13): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.390" name="bus" dev="overlay" ino=319 res=0 errno=0 [ 348.450613][ T7373] hsr_slave_0: entered promiscuous mode [ 348.511436][ T7373] hsr_slave_1: entered promiscuous mode [ 348.527264][ T7373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.556067][ T7373] Cannot create hsr debugfs directory [ 349.028564][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.048265][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.058432][ T7525] bridge_slave_0: entered allmulticast mode [ 349.084919][ T7525] bridge_slave_0: entered promiscuous mode [ 349.256018][ T7682] netlink: 112 bytes leftover after parsing attributes in process `syz.1.395'. [ 349.756261][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.813739][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.388863][ T7525] bridge_slave_1: entered allmulticast mode [ 350.407634][ T7525] bridge_slave_1: entered promiscuous mode [ 353.124183][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.923070][ T30] audit: type=1800 audit(1750960021.634:14): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.402" name="bus" dev="overlay" ino=343 res=0 errno=0 [ 354.457429][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.519643][ T63] bridge_slave_1: left allmulticast mode [ 354.527242][ T63] bridge_slave_1: left promiscuous mode [ 354.533497][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.882844][ T63] bridge_slave_0: left allmulticast mode [ 355.104137][ T63] bridge_slave_0: left promiscuous mode [ 355.139129][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.514952][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.491291][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.511349][ T63] bond0 (unregistering): Released all slaves [ 358.751966][ T63] hsr_slave_0: left promiscuous mode [ 358.757967][ T63] hsr_slave_1: left promiscuous mode [ 358.778310][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.866295][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.755758][ T63] team0 (unregistering): Port device team_slave_1 removed [ 360.112919][ T63] team0 (unregistering): Port device team_slave_0 removed [ 360.113232][ T7767] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 360.290673][ T7771] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 360.297259][ T7771] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.418117][ T7771] vhci_hcd vhci_hcd.0: Device attached [ 360.589739][ T7776] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 360.783023][ T5972] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 361.261480][ T7772] vhci_hcd: connection reset by peer [ 361.270733][ T1094] vhci_hcd: stop threads [ 361.275008][ T1094] vhci_hcd: release socket [ 361.289458][ T1094] vhci_hcd: disconnect device [ 361.556436][ T7755] vlan2: entered promiscuous mode [ 361.561551][ T7755] bond_slave_1: entered promiscuous mode [ 362.205963][ T7525] team0: Port device team_slave_0 added [ 362.234485][ T7525] team0: Port device team_slave_1 added [ 362.644750][ T7769] dvmrp1: entered allmulticast mode [ 362.951824][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.967130][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.034736][ T7525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.001688][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.024214][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.081151][ T7525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.108680][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.422'. [ 365.482674][ T7525] hsr_slave_0: entered promiscuous mode [ 365.492617][ T7525] hsr_slave_1: entered promiscuous mode [ 365.502956][ T7525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.523410][ T7525] Cannot create hsr debugfs directory [ 366.281318][ T7819] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 366.569562][ T5972] vhci_hcd: vhci_device speed not set [ 368.173959][ T7373] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.273585][ T7373] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.291595][ T7840] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 368.298150][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.631195][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 369.737174][ T7841] vhci_hcd: connection closed [ 369.738210][ T63] vhci_hcd: stop threads [ 369.780401][ T63] vhci_hcd: release socket [ 369.819346][ T7373] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.827626][ T63] vhci_hcd: disconnect device [ 369.866652][ T7373] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.873563][ T5915] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 369.889608][ T5915] usb 45-1: enqueue for inactive port 0 [ 369.975887][ T5915] vhci_hcd: vhci_device speed not set [ 370.542256][ T13] bridge_slave_1: left allmulticast mode [ 370.597437][ T13] bridge_slave_1: left promiscuous mode [ 370.642084][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.722829][ T13] bridge_slave_0: left allmulticast mode [ 370.759510][ T13] bridge_slave_0: left promiscuous mode [ 370.791428][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.339475][ T1204] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 371.543611][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.554287][ T1204] usb 2-1: Using ep0 maxpacket: 8 [ 371.574404][ T1204] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 371.602894][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.633596][ T1204] usb 2-1: Product: syz [ 371.637795][ T1204] usb 2-1: Manufacturer: syz [ 371.668835][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.681558][ T1204] usb 2-1: SerialNumber: syz [ 371.709873][ T1204] usb 2-1: config 0 descriptor?? [ 371.750631][ T1204] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 372.224360][ T1204] usb 2-1: setting power ON [ 372.229001][ T1204] dvb-usb: bulk message failed: -22 (2/0) [ 372.245218][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.265367][ T1204] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 372.644382][ T7887] dvb-usb: bulk message failed: -22 (3/0) [ 372.651431][ T7887] dvb-usb: bulk message failed: -22 (4/0) [ 372.657238][ T7887] cxusb: i2c read failed [ 373.243943][ T1204] usb 2-1: media controller created [ 374.234819][ T13] bond0 (unregistering): Released all slaves [ 374.247603][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.299507][ T1204] usb 2-1: selecting invalid altsetting 6 [ 374.305280][ T1204] usb 2-1: digital interface selection failed (-22) [ 374.330653][ T1204] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 374.340962][ T1204] usb 2-1: setting power OFF [ 374.345583][ T1204] dvb-usb: bulk message failed: -22 (2/0) [ 374.399512][ T1204] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 374.408829][ T1204] (NULL device *): no alternate interface [ 374.687244][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.704437][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.715945][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.726336][ T1204] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 374.749510][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.759066][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.775492][ T1204] usb 2-1: USB disconnect, device number 8 [ 374.955125][ T13] hsr_slave_0: left promiscuous mode [ 375.720750][ T13] hsr_slave_1: left promiscuous mode [ 375.755137][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.774029][ T7899] 9pnet_fd: Insufficient options for proto=fd [ 376.114023][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.158872][ T7905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.899431][ T5841] Bluetooth: hci4: command tx timeout [ 376.932771][ T7905] Falling back ldisc for ptm1. [ 379.062675][ T5841] Bluetooth: hci4: command tx timeout [ 379.856559][ T13] team0 (unregistering): Port device team_slave_1 removed [ 379.942152][ T7931] random: crng reseeded on system resumption [ 380.099041][ T7928] Restarting kernel threads ... [ 380.105602][ T7928] Done restarting kernel threads. [ 380.234169][ T13] team0 (unregistering): Port device team_slave_0 removed [ 381.000436][ T5929] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 381.143125][ T5841] Bluetooth: hci4: command tx timeout [ 381.165514][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 381.186405][ T5929] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 381.206581][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.223998][ T5929] usb 7-1: Product: syz [ 381.228229][ T5929] usb 7-1: Manufacturer: syz [ 381.233401][ T5929] usb 7-1: SerialNumber: syz [ 381.297157][ T5929] usb 7-1: config 0 descriptor?? [ 381.337724][ T5929] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 381.368213][ T7944] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 381.389391][ T5929] usb 7-1: setting power ON [ 381.412120][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 381.464843][ T7944] netlink: 'syz.0.456': attribute type 6 has an invalid length. [ 381.479856][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.516449][ T5929] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 381.541045][ T7944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.456'. [ 381.811998][ T5929] usb 7-1: media controller created [ 381.847563][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.923489][ T7950] dvb-usb: bulk message failed: -22 (3/0) [ 381.929725][ T7950] dvb-usb: bulk message failed: -22 (4/0) [ 381.935522][ T7950] cxusb: i2c read failed [ 382.614855][ T5929] usb 7-1: selecting invalid altsetting 6 [ 382.623719][ T5929] usb 7-1: digital interface selection failed (-22) [ 382.643081][ T5929] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 382.683891][ T5929] usb 7-1: setting power OFF [ 382.688521][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 382.719673][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 382.754410][ T5929] (NULL device *): no alternate interface [ 383.209472][ T5841] Bluetooth: hci4: command tx timeout [ 383.806266][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 383.840902][ T5929] usb 7-1: USB disconnect, device number 6 [ 385.264619][ T7525] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.513230][ T7525] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 385.661479][ T7525] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.619908][ T7525] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.121697][ T8007] random: crng reseeded on system resumption [ 388.207191][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.222655][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.266613][ T13] bridge_slave_1: left allmulticast mode [ 388.272820][ T13] bridge_slave_1: left promiscuous mode [ 388.292733][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.726942][ T13] bridge_slave_0: left allmulticast mode [ 388.747011][ T13] bridge_slave_0: left promiscuous mode [ 388.778007][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.116240][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 389.223884][ T8017] ceph: No mds server is up or the cluster is laggy [ 389.229867][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 389.688065][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 390.058834][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 392.256951][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.197614][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.336129][ T13] bond0 (unregistering): Released all slaves [ 393.454338][ T7891] chnl_net:caif_netlink_parms(): no params data found [ 394.679503][ T13] hsr_slave_0: left promiscuous mode [ 395.181549][ T13] hsr_slave_1: left promiscuous mode [ 395.234016][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.339581][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.720015][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.740880][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.769447][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.804937][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.820325][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.542383][ T13] team0 (unregistering): Port device team_slave_1 removed [ 396.826138][ T13] team0 (unregistering): Port device team_slave_0 removed [ 397.311335][ T8068] random: crng reseeded on system resumption [ 397.409018][ T8068] Restarting kernel threads ... [ 397.415966][ T8068] Done restarting kernel threads. [ 397.849550][ T5841] Bluetooth: hci5: command tx timeout [ 398.709602][ T8071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.481'. [ 399.987322][ T5841] Bluetooth: hci5: command tx timeout [ 400.649384][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.654868][ T5972] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 400.679475][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.697152][ T7891] bridge_slave_0: entered allmulticast mode [ 400.771112][ T7891] bridge_slave_0: entered promiscuous mode [ 400.788094][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.795460][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.803224][ T7891] bridge_slave_1: entered allmulticast mode [ 400.814451][ T7891] bridge_slave_1: entered promiscuous mode [ 400.909376][ T5972] usb 2-1: Using ep0 maxpacket: 8 [ 400.961735][ T5972] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 400.973593][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.996680][ T5972] usb 2-1: Product: syz [ 401.002182][ T5972] usb 2-1: Manufacturer: syz [ 401.007157][ T5972] usb 2-1: SerialNumber: syz [ 401.017272][ T5972] usb 2-1: config 0 descriptor?? [ 401.048844][ T7891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.092943][ T7891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.373151][ T5922] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 401.604941][ T5972] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 401.726473][ T5972] gspca_sunplus: reg_w_riv err -71 [ 401.818485][ T5972] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 402.179407][ T5841] Bluetooth: hci5: command tx timeout [ 402.249678][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 402.290353][ T5922] usb 5-1: config 0 has no interfaces? [ 402.295910][ T5922] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 402.329821][ T5972] usb 2-1: USB disconnect, device number 9 [ 402.433415][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.781011][ T5922] usb 5-1: config 0 descriptor?? [ 403.357658][ T5922] usb 5-1: USB disconnect, device number 19 [ 403.644676][ T7891] team0: Port device team_slave_0 added [ 403.693182][ T7891] team0: Port device team_slave_1 added [ 403.950630][ T8114] random: crng reseeded on system resumption [ 404.169497][ T8114] Restarting kernel threads ... [ 404.175846][ T8114] Done restarting kernel threads. [ 404.265834][ T5841] Bluetooth: hci5: command tx timeout [ 404.475709][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.525001][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.952031][ T7891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.965343][ T7891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.972707][ T7891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.998939][ T7891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.650754][ T8135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'. [ 406.834478][ T7891] hsr_slave_0: entered promiscuous mode [ 406.866011][ T7891] hsr_slave_1: entered promiscuous mode [ 406.875039][ T7891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.893093][ T7891] Cannot create hsr debugfs directory [ 407.459516][ T1204] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 407.686309][ T1204] usb 2-1: Using ep0 maxpacket: 8 [ 407.890470][ T1204] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 408.826707][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.836444][ T1204] usb 2-1: Product: syz [ 408.840803][ T1204] usb 2-1: Manufacturer: syz [ 408.846310][ T1204] usb 2-1: SerialNumber: syz [ 408.855518][ T1204] usb 2-1: config 0 descriptor?? [ 409.033499][ T8154] batadv0: entered promiscuous mode [ 409.073822][ T8154] batadv0: left promiscuous mode [ 409.096452][ T1204] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 409.119151][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 409.128512][ T1204] gspca_sunplus: reg_w_riv err -71 [ 409.137300][ T1204] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 409.160999][ T1204] usb 2-1: USB disconnect, device number 10 [ 409.178184][ T7036] udevd[7036]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory [ 409.195848][ T7036] udevd[7036]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=0 failed: No such file or directory [ 410.007589][ T1204] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 411.389349][ T1204] usb 1-1: Using ep0 maxpacket: 32 [ 411.398576][ T1204] usb 1-1: config 0 has no interfaces? [ 411.418184][ T1204] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 411.446758][ T13] bridge_slave_1: left allmulticast mode [ 411.638709][ T13] bridge_slave_1: left promiscuous mode [ 412.298514][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.308650][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.326725][ T1204] usb 1-1: config 0 descriptor?? [ 412.368022][ T13] bridge_slave_0: left allmulticast mode [ 412.378340][ T13] bridge_slave_0: left promiscuous mode [ 412.385739][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.614663][ T5922] usb 1-1: USB disconnect, device number 13 [ 412.703602][ T7386] Bluetooth: Error in BCSP hdr checksum [ 412.965244][ T1094] Bluetooth: Error in BCSP hdr checksum [ 413.047245][ T8190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'. [ 413.141466][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.161349][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.174215][ T13] bond0 (unregistering): Released all slaves [ 413.463124][ T3551] Bluetooth: Error in BCSP hdr checksum [ 413.689548][ T8199] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 413.697507][ T5841] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 413.722106][ T37] Bluetooth: Error in BCSP hdr checksum [ 414.330038][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.352939][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.360953][ T8059] bridge_slave_0: entered allmulticast mode [ 414.369230][ T8059] bridge_slave_0: entered promiscuous mode [ 414.476800][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.484244][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.509518][ T8059] bridge_slave_1: entered allmulticast mode [ 414.517601][ T8059] bridge_slave_1: entered promiscuous mode [ 414.549882][ T8199] syz_tun: entered promiscuous mode [ 414.563726][ T8199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 414.637066][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.6.516'. [ 414.646465][ T13] hsr_slave_0: left promiscuous mode [ 414.678250][ T13] hsr_slave_1: left promiscuous mode [ 414.695157][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.720228][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.971753][ T13] team0 (unregistering): Port device team_slave_1 removed [ 416.025338][ T13] team0 (unregistering): Port device team_slave_0 removed [ 416.569330][ T8219] netlink: 112 bytes leftover after parsing attributes in process `syz.0.519'. [ 418.032956][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.325444][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.467753][ T8059] team0: Port device team_slave_0 added [ 419.664521][ T8059] team0: Port device team_slave_1 added [ 419.835163][ T8244] random: crng reseeded on system resumption [ 419.983181][ T8249] netlink: 'syz.0.526': attribute type 23 has an invalid length. [ 420.142900][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.189116][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.790270][ T8258] netlink: 112 bytes leftover after parsing attributes in process `syz.4.532'. [ 421.280501][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.369842][ T7891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 421.565013][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.588809][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.837345][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.889744][ T7891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 422.882033][ T7891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.394612][ T7891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.491619][ T8059] hsr_slave_0: entered promiscuous mode [ 423.520983][ T8059] hsr_slave_1: entered promiscuous mode [ 423.544762][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.595750][ T8059] Cannot create hsr debugfs directory [ 425.265485][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.461258][ T8292] sp0: Synchronizing with TNC [ 425.498866][ T7891] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.295483][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.302707][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.924385][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.931620][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.286647][ T8300] random: crng reseeded on system resumption [ 429.295220][ T8312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.543'. [ 432.534838][ T8059] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 432.602460][ T8059] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 433.090578][ T8059] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 433.199222][ T8059] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 433.769363][ T8348] random: crng reseeded on system resumption [ 434.019316][ T8348] Restarting kernel threads ... [ 434.028366][ T8348] Done restarting kernel threads. [ 434.710451][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.743043][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.763478][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.780245][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.788960][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.861897][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.942943][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.991278][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.998445][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.060397][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.067673][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.093073][ T1204] libceph: connect (1)[c::]:6789 error -101 [ 435.104555][ T1204] libceph: mon0 (1)[c::]:6789 connect error [ 435.221881][ T8358] ceph: No mds server is up or the cluster is laggy [ 435.840644][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 435.846777][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 436.970004][ T51] Bluetooth: hci4: command tx timeout [ 439.207698][ T51] Bluetooth: hci4: command tx timeout [ 439.671786][ T8372] sp0: Synchronizing with TNC [ 441.405883][ T51] Bluetooth: hci4: command tx timeout [ 441.618711][ T8408] random: crng reseeded on system resumption [ 441.676555][ T8408] Restarting kernel threads ... [ 441.682821][ T8408] Done restarting kernel threads. [ 442.856717][ T8419] Invalid ELF header type: 3 != 1 [ 442.879164][ T8419] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8419 comm: syz.6.567) [ 443.009782][ T30] audit: type=1800 audit(1750960111.194:15): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.567" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=17657 res=0 errno=0 [ 443.449383][ T51] Bluetooth: hci4: command tx timeout [ 445.538867][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 446.218259][ T7386] bridge_slave_1: left allmulticast mode [ 446.241325][ T7386] bridge_slave_1: left promiscuous mode [ 446.301207][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.385212][ T7386] bridge_slave_0: left allmulticast mode [ 446.396959][ T7386] bridge_slave_0: left promiscuous mode [ 446.410091][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.838752][ T8435] ptrace attach of ""[8436] was attempted by "./syz-executor exec"[8435] [ 449.327007][ T8455] program syz.0.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.486791][ T8459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'. [ 449.536406][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.543027][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.695276][ T7386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.702652][ T8470] overlayfs: missing 'lowerdir' [ 450.930602][ T7386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.975343][ T7386] bond0 (unregistering): Released all slaves [ 451.104743][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.967110][ T7386] hsr_slave_0: left promiscuous mode [ 452.023738][ T7386] hsr_slave_1: left promiscuous mode [ 452.061777][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.120156][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.809872][ T5901] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 452.874905][ T7386] team0 (unregistering): Port device team_slave_1 removed [ 452.966838][ T7386] team0 (unregistering): Port device team_slave_0 removed [ 453.019736][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.055973][ T5901] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.077045][ T5901] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 453.623213][ T5901] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 453.866307][ T5901] usb 1-1: Manufacturer: syz [ 453.875229][ T5901] usb 1-1: config 0 descriptor?? [ 455.615901][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.636317][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.645747][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.661031][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.678771][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.963365][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.979513][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.986799][ T8353] bridge_slave_0: entered allmulticast mode [ 456.040475][ T8353] bridge_slave_0: entered promiscuous mode [ 456.074405][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.086000][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.098612][ T8353] bridge_slave_1: entered allmulticast mode [ 456.138406][ T8353] bridge_slave_1: entered promiscuous mode [ 456.167675][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 456.188461][ T8480] bond_slave_0: entered promiscuous mode [ 456.194400][ T8480] bond_slave_1: entered promiscuous mode [ 456.378429][ T5914] usb 1-1: USB disconnect, device number 14 [ 456.486561][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.532383][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.636695][ T8507] program syz.0.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.826825][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.592'. [ 456.878486][ T8353] team0: Port device team_slave_0 added [ 457.420568][ T8353] team0: Port device team_slave_1 added [ 457.770355][ T5841] Bluetooth: hci6: command tx timeout [ 459.442614][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.467924][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.525926][ T8515] overlayfs: missing 'workdir' [ 459.531648][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.545483][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.573170][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.642763][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.849737][ T5841] Bluetooth: hci6: command tx timeout [ 461.584290][ T8528] ptrace attach of ""[8529] was attempted by "./syz-executor exec"[8528] [ 461.929912][ T5841] Bluetooth: hci6: command tx timeout [ 462.805140][ T8543] random: crng reseeded on system resumption [ 463.598646][ T8353] hsr_slave_0: entered promiscuous mode [ 463.605629][ T8353] hsr_slave_1: entered promiscuous mode [ 463.630217][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.637797][ T8353] Cannot create hsr debugfs directory [ 464.019378][ T5841] Bluetooth: hci6: command tx timeout [ 464.886609][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 464.939780][ T8555] program syz.4.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.163407][ T8557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.605'. [ 466.341103][ T37] bridge_slave_1: left allmulticast mode [ 466.369481][ T37] bridge_slave_1: left promiscuous mode [ 466.375281][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.440691][ T37] bridge_slave_0: left allmulticast mode [ 466.446366][ T37] bridge_slave_0: left promiscuous mode [ 466.501215][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.389923][ T8577] overlayfs: missing 'workdir' [ 467.437847][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.518439][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.565492][ T37] bond0 (unregistering): Released all slaves [ 467.626243][ T1204] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 468.198622][ T1204] usb 2-1: Using ep0 maxpacket: 8 [ 468.237909][ T1204] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 468.278215][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.294068][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.298214][ T1204] usb 2-1: Product: syz [ 468.319607][ T1204] usb 2-1: Manufacturer: syz [ 468.326645][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.367615][ T8496] bridge_slave_0: entered allmulticast mode [ 468.398203][ T1204] usb 2-1: SerialNumber: syz [ 468.504845][ T8496] bridge_slave_0: entered promiscuous mode [ 468.692482][ T1204] usb 2-1: config 0 descriptor?? [ 468.900422][ T1204] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 468.913791][ T1204] usb 2-1: setting power ON [ 468.918325][ T1204] dvb-usb: bulk message failed: -22 (2/0) [ 468.961538][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.002250][ T1204] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 469.024426][ T1204] usb 2-1: media controller created [ 469.097278][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.431511][ T37] hsr_slave_0: left promiscuous mode [ 469.500347][ T8595] dvb-usb: bulk message failed: -22 (3/0) [ 469.506176][ T8595] dvb-usb: bulk message failed: -22 (4/0) [ 469.512022][ T8595] cxusb: i2c read failed [ 470.146650][ T37] hsr_slave_1: left promiscuous mode [ 470.161500][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.181186][ T1204] usb 2-1: selecting invalid altsetting 6 [ 470.271689][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.279013][ T1204] usb 2-1: digital interface selection failed (-22) [ 470.291027][ T1204] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 470.325841][ T1204] usb 2-1: setting power OFF [ 470.331510][ T1204] dvb-usb: bulk message failed: -22 (2/0) [ 470.385157][ T8600] random: crng reseeded on system resumption [ 470.421664][ T1204] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 470.599459][ T1204] (NULL device *): no alternate interface [ 473.821621][ T1204] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 473.897962][ T8600] Restarting kernel threads ... [ 473.904248][ T8600] Done restarting kernel threads. [ 473.919870][ T8601] Falling back ldisc for ptm0. [ 473.978767][ T1204] usb 2-1: USB disconnect, device number 11 [ 474.114365][ T8613] program syz.4.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.256988][ T8615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.619'. [ 474.379599][ T1204] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 474.683379][ T1204] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 474.683414][ T1204] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 474.683442][ T1204] usb 2-1: config 0 has no interface number 0 [ 474.683486][ T1204] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 474.683517][ T1204] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 474.683560][ T1204] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 474.683591][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.686014][ T1204] usb 2-1: config 0 descriptor?? [ 475.268273][ T8623] overlayfs: missing 'workdir' [ 475.605795][ T37] team0 (unregistering): Port device team_slave_1 removed [ 475.885560][ T1204] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input6 [ 475.916324][ T1204] input: failed to attach handler kbd to device input6, error: -5 [ 475.988997][ T1204] usb 2-1: USB disconnect, device number 12 [ 476.020657][ T37] team0 (unregistering): Port device team_slave_0 removed [ 478.817718][ T8647] ptrace attach of ""[8649] was attempted by "./syz-executor exec"[8647] [ 479.568577][ T5929] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 479.729339][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 479.737982][ T5929] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 479.749342][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.757391][ T5929] usb 5-1: Product: syz [ 479.765530][ T5929] usb 5-1: Manufacturer: syz [ 479.982966][ T5929] usb 5-1: SerialNumber: syz [ 479.993359][ T5929] usb 5-1: config 0 descriptor?? [ 480.005418][ T5929] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 480.019427][ T5929] usb 5-1: setting power ON [ 480.023960][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 480.063165][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 480.084503][ T5929] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 480.118191][ T5929] usb 5-1: media controller created [ 480.216890][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.496641][ T5929] usb 5-1: selecting invalid altsetting 6 [ 480.502495][ T5929] usb 5-1: digital interface selection failed (-22) [ 480.518170][ T5929] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 480.589558][ T8656] dvb-usb: bulk message failed: -22 (3/0) [ 480.595391][ T8656] dvb-usb: bulk message failed: -22 (4/0) [ 480.601325][ T8656] cxusb: i2c read failed [ 481.431170][ T5929] usb 5-1: setting power OFF [ 481.449448][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 481.455622][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 481.465364][ T5929] (NULL device *): no alternate interface [ 481.525184][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.585217][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.592590][ T8496] bridge_slave_1: entered allmulticast mode [ 481.601331][ T8496] bridge_slave_1: entered promiscuous mode [ 481.727851][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.924043][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.432820][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 482.463631][ T5929] usb 5-1: USB disconnect, device number 20 [ 483.592129][ T8661] Falling back ldisc for ptm0. [ 484.342513][ T8496] team0: Port device team_slave_0 added [ 484.431299][ T8496] team0: Port device team_slave_1 added [ 485.202688][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.238672][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.313453][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.352683][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.363173][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.470355][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.616181][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 486.164890][ T8496] hsr_slave_0: entered promiscuous mode [ 486.181672][ T8496] hsr_slave_1: entered promiscuous mode [ 486.188041][ T8496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.196182][ T8496] Cannot create hsr debugfs directory [ 486.277264][ T8692] ptrace attach of ""[8696] was attempted by "./syz-executor exec"[8692] [ 488.179226][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 488.304301][ T8353] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.449343][ T8708] overlayfs: missing 'lowerdir' [ 488.478312][ T8705] veth0_vlan: entered allmulticast mode [ 488.967949][ T8353] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 489.024892][ T8353] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.698942][ T8353] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 490.780082][ T8733] netlink: 'syz.0.648': attribute type 23 has an invalid length. [ 490.858547][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 490.929871][ T8734] : entered promiscuous mode [ 491.815458][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.649'. [ 494.412190][ T8760] ptrace attach of ""[8761] was attempted by "./syz-executor exec"[8760] [ 495.359363][ T24] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 495.381565][ T8496] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 495.744829][ T8496] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 495.814602][ T8496] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 495.851906][ T24] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 495.867154][ T8764] overlayfs: missing 'lowerdir' [ 495.873731][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.908800][ T8496] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 495.935699][ T24] usb 7-1: config 0 has no interface number 0 [ 495.982406][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 496.004177][ T24] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 6779, setting to 64 [ 496.020665][ T24] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.100072][ T24] usb 7-1: config 0 interface 52 has no altsetting 0 [ 496.100301][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 496.123391][ T24] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 496.149889][ T24] usb 7-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 496.168454][ T24] usb 7-1: Product: syz [ 496.184870][ T24] usb 7-1: Manufacturer: syz [ 496.229326][ T24] usb 7-1: SerialNumber: syz [ 496.441842][ T24] usb 7-1: config 0 descriptor?? [ 496.509359][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 497.344412][ T24] usb 7-1: Can not set alternate setting to 1, error: -71 [ 497.344851][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 497.397098][ T24] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -71 [ 497.406202][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.406244][ T9] usb 2-1: Product: syz [ 497.406273][ T9] usb 2-1: Manufacturer: syz [ 497.459324][ T9] usb 2-1: SerialNumber: syz [ 497.496697][ T9] usb 2-1: config 0 descriptor?? [ 497.533379][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 497.560071][ T24] usb 7-1: USB disconnect, device number 7 [ 497.627569][ T9] usb 2-1: setting power ON [ 497.638205][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 497.864943][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.959189][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.975795][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 497.984551][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.998010][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 498.005577][ T9] usb 2-1: media controller created [ 498.011955][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 498.021494][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.056665][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.082248][ T9] usb 2-1: selecting invalid altsetting 6 [ 498.089010][ T9] usb 2-1: digital interface selection failed (-22) [ 498.105801][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 498.135453][ T9] usb 2-1: setting power OFF [ 498.150360][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 498.156113][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 498.250125][ T9] (NULL device *): no alternate interface [ 500.169796][ T5841] Bluetooth: hci4: command tx timeout [ 500.193763][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 500.259438][ T9] usb 2-1: USB disconnect, device number 13 [ 500.339244][ T8796] openvswitch: : Dropping previously announced user features [ 500.637305][ T30] audit: type=1800 audit(1750960168.934:16): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="bus" dev="overlay" ino=807 res=0 errno=0 [ 500.752273][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'. [ 501.155792][ T8798] libceph: connect (1)[c::]:6789 error -101 [ 501.167035][ T8798] libceph: mon0 (1)[c::]:6789 connect error [ 501.253431][ T8821] ceph: No mds server is up or the cluster is laggy [ 501.481173][ T8798] libceph: connect (1)[c::]:6789 error -101 [ 501.500143][ T8798] libceph: mon0 (1)[c::]:6789 connect error [ 501.561936][ T8746] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 501.809750][ T8746] usb 2-1: Using ep0 maxpacket: 16 [ 501.846180][ T8746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.883158][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.891487][ T8746] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.941057][ T8746] usb 2-1: config 0 interface 0 has no altsetting 0 [ 501.963020][ T36] bridge_slave_1: left allmulticast mode [ 501.988975][ T36] bridge_slave_1: left promiscuous mode [ 501.994728][ T8746] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 502.014242][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.039558][ T8746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.073671][ T8746] usb 2-1: config 0 descriptor?? [ 502.114991][ T8746] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 502.131576][ T36] bridge_slave_0: left allmulticast mode [ 502.158679][ T8829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 502.169956][ T36] bridge_slave_0: left promiscuous mode [ 502.175743][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.209384][ T8829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 502.249542][ T5841] Bluetooth: hci4: command tx timeout [ 502.954101][ T8837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.666'. [ 503.072039][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 503.516643][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.544667][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.801026][ T36] bond0 (unregistering): Released all slaves [ 504.428586][ T5841] Bluetooth: hci4: command tx timeout [ 504.451466][ T8843] netlink: 'syz.0.671': attribute type 23 has an invalid length. [ 504.974595][ T5914] usb 2-1: USB disconnect, device number 14 [ 505.026765][ T36] hsr_slave_0: left promiscuous mode [ 505.041293][ T36] hsr_slave_1: left promiscuous mode [ 505.057071][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.310362][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.500040][ T5841] Bluetooth: hci4: command tx timeout [ 508.331536][ T8875] binder: 8874:8875 ioctl c0046209 0 returned -22 [ 509.613699][ T36] team0 (unregistering): Port device team_slave_1 removed [ 509.840353][ T36] team0 (unregistering): Port device team_slave_0 removed [ 510.397955][ T8893] netlink: 'syz.1.679': attribute type 20 has an invalid length. [ 510.977930][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.984489][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.332302][ T8895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 511.439788][ T8895] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 513.124260][ T8858] openvswitch: : Dropping previously announced user features [ 513.468731][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.514489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.521680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.912019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.919372][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.189909][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 515.353933][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 515.383457][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.421416][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.458567][ T24] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 515.511849][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.587262][ T24] usb 5-1: config 0 descriptor?? [ 515.894746][ T8935] loop8: detected capacity change from 0 to 8 [ 515.945676][ T8935] Dev loop8: unable to read RDB block 8 [ 516.005721][ T8935] loop8: unable to read partition table [ 516.058271][ T8935] loop8: partition table beyond EOD, truncated [ 516.126708][ T24] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 516.137831][ T8935] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 516.179583][ T24] steelseries 0003:1038:12B6.0004: item fetching failed at offset 5/7 [ 516.211091][ T24] steelseries 0003:1038:12B6.0004: probe with driver steelseries failed with error -22 [ 516.408753][ T24] usb 5-1: USB disconnect, device number 21 [ 517.602733][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.675224][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.744823][ T8785] bridge_slave_0: entered allmulticast mode [ 517.801749][ T8785] bridge_slave_0: entered promiscuous mode [ 517.858516][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.429516][ T8954] netlink: 'syz.1.690': attribute type 20 has an invalid length. [ 519.059416][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.066683][ T8785] bridge_slave_1: entered allmulticast mode [ 519.118428][ T8785] bridge_slave_1: entered promiscuous mode [ 519.134979][ T8955] netlink: 'syz.6.689': attribute type 23 has an invalid length. [ 519.357712][ T8958] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 519.408190][ T8958] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 519.501833][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.510703][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.518740][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.570984][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.582038][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.674068][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.709675][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.996570][ T8785] team0: Port device team_slave_0 added [ 520.133861][ T8785] team0: Port device team_slave_1 added [ 520.895247][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.911020][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.649614][ T5841] Bluetooth: hci5: command tx timeout [ 521.793329][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.871923][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.878917][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.929550][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.947940][ T8990] openvswitch: : Dropping previously announced user features [ 523.446149][ T8785] hsr_slave_0: entered promiscuous mode [ 523.503958][ T8785] hsr_slave_1: entered promiscuous mode [ 523.556716][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.587100][ T8785] Cannot create hsr debugfs directory [ 523.689439][ T5841] Bluetooth: hci5: command tx timeout [ 525.771623][ T5841] Bluetooth: hci5: command tx timeout [ 527.584577][ T9033] use of bytesused == 0 is deprecated and will be removed in the future, [ 527.593573][ T9033] use the actual size instead. [ 527.866803][ T5841] Bluetooth: hci5: command tx timeout [ 527.950542][ T9035] random: crng reseeded on system resumption [ 528.701841][ T36] bridge_slave_1: left allmulticast mode [ 528.708239][ T36] bridge_slave_1: left promiscuous mode [ 529.739648][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.820572][ T36] bridge_slave_0: left allmulticast mode [ 529.866772][ T36] bridge_slave_0: left promiscuous mode [ 529.906388][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.009396][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 533.190321][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 533.210702][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 533.242820][ T9] usb 1-1: config 0 has no interface number 0 [ 533.248959][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.299556][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 533.325669][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 533.348532][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.398776][ T9] usb 1-1: Product: syz [ 533.418494][ T9] usb 1-1: Manufacturer: syz [ 533.433405][ T9] usb 1-1: SerialNumber: syz [ 533.493019][ T9] usb 1-1: config 0 descriptor?? [ 533.656119][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.672720][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.687401][ T36] bond0 (unregistering): Released all slaves [ 533.806396][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 533.959451][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 533.964520][ T36] hsr_slave_0: left promiscuous mode [ 533.999470][ T36] hsr_slave_1: left promiscuous mode [ 534.007004][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.052255][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.145842][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 534.157275][ T9] appletouch 1-1:0.85: Geyser mode initialized. [ 534.168049][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.193957][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input7 [ 534.194222][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 534.268984][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.320468][ T24] usb 2-1: config 0 descriptor?? [ 534.382424][ T9] usb 1-1: USB disconnect, device number 15 [ 534.518297][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 534.543991][ T24] usb 2-1: USB disconnect, device number 15 [ 537.261796][ T30] audit: type=1800 audit(1750960205.544:17): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.719" name="bus" dev="overlay" ino=961 res=0 errno=0 [ 538.877712][ T36] team0 (unregistering): Port device team_slave_1 removed [ 539.211696][ T36] team0 (unregistering): Port device team_slave_0 removed [ 539.366270][ T9133] ptrace attach of ""[9134] was attempted by "./syz-executor exec"[9133] [ 543.636915][ T9157] ptrace attach of ""[9158] was attempted by "./syz-executor exec"[9157] [ 544.955588][ T9163] fuse: Unknown parameter 'grou00000000000000000000' [ 546.276647][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.297518][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.339582][ T8962] bridge_slave_0: entered allmulticast mode [ 546.378944][ T8962] bridge_slave_0: entered promiscuous mode [ 546.417021][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.449421][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.486334][ T8962] bridge_slave_1: entered allmulticast mode [ 546.500512][ T5929] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 546.532958][ T8962] bridge_slave_1: entered promiscuous mode [ 546.719383][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 546.737768][ T5929] usb 5-1: config 0 has no interfaces? [ 546.765304][ T5929] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 546.798942][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.831784][ T5929] usb 5-1: config 0 descriptor?? [ 546.871622][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.979769][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.065190][ T5929] usb 5-1: USB disconnect, device number 22 [ 547.500042][ T8962] team0: Port device team_slave_0 added [ 547.516540][ T8785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 547.596781][ T30] audit: type=1800 audit(1750960215.844:18): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.739" name="bus" dev="overlay" ino=781 res=0 errno=0 [ 547.775183][ T8785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 547.835230][ T8962] team0: Port device team_slave_1 added [ 547.950337][ T8785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.440362][ T8785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.990640][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.997660][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.327075][ T8962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.393210][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.149755][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.176286][ T8962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.532274][ T9221] ptrace attach of ""[9222] was attempted by "./syz-executor exec"[9221] [ 553.863556][ T8962] hsr_slave_0: entered promiscuous mode [ 553.892156][ T8962] hsr_slave_1: entered promiscuous mode [ 553.947711][ T8962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.010456][ T8962] Cannot create hsr debugfs directory [ 555.075851][ T30] audit: type=1800 audit(1750960223.324:19): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.750" name="bus" dev="overlay" ino=937 res=0 errno=0 [ 558.305442][ T9269] ptrace attach of ""[9271] was attempted by "./syz-executor exec"[9269] [ 558.536164][ T9276] Bluetooth: MGMT ver 1.23 [ 560.334550][ T9293] sp0: Synchronizing with TNC [ 562.538314][ T30] audit: type=1800 audit(1750960230.334:20): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.762" name="bus" dev="overlay" ino=846 res=0 errno=0 [ 562.739984][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 562.775939][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 562.784065][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 562.795932][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 562.812548][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.029840][ T5841] Bluetooth: hci4: command tx timeout [ 565.069871][ T9331] ptrace attach of ""[9332] was attempted by "./syz-executor exec"[9331] [ 567.052949][ T5841] Bluetooth: hci4: command tx timeout [ 567.781812][ T8962] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 567.874670][ T8962] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 567.917279][ T8962] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 568.178927][ T8962] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 568.298025][ T9] libceph: connect (1)[c::]:6789 error -101 [ 568.305568][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 568.391857][ T9358] ceph: No mds server is up or the cluster is laggy [ 568.967423][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 569.130003][ T5841] Bluetooth: hci4: command tx timeout [ 571.209991][ T5841] Bluetooth: hci4: command tx timeout [ 571.250119][ T63] bridge_slave_1: left allmulticast mode [ 571.258914][ T63] bridge_slave_1: left promiscuous mode [ 571.316237][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.484525][ T63] bridge_slave_0: left allmulticast mode [ 571.529418][ T63] bridge_slave_0: left promiscuous mode [ 571.536820][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.416670][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.423079][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.068173][ T9408] netlink: 36 bytes leftover after parsing attributes in process `syz.6.782'. [ 575.503658][ T9404] Falling back ldisc for ptm0. [ 575.910621][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.944304][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.029927][ T63] bond0 (unregistering): Released all slaves [ 576.897223][ T63] hsr_slave_0: left promiscuous mode [ 578.899442][ T63] hsr_slave_1: left promiscuous mode [ 578.905628][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.364581][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.088079][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.101749][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.112193][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 583.141117][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 583.171210][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 584.819941][ T9482] Falling back ldisc for ptm0. [ 584.940636][ T971] libceph: connect (1)[c::]:6789 error -101 [ 584.946757][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 585.081170][ T9496] ceph: No mds server is up or the cluster is laggy [ 585.269022][ T971] libceph: connect (1)[c::]:6789 error -101 [ 585.289765][ T5841] Bluetooth: hci5: command tx timeout [ 585.320317][ T971] libceph: mon0 (1)[c::]:6789 connect error [ 585.705271][ T63] team0 (unregistering): Port device team_slave_1 removed [ 586.061616][ T63] team0 (unregistering): Port device team_slave_0 removed [ 587.379407][ T5841] Bluetooth: hci5: command tx timeout [ 589.462097][ T5841] Bluetooth: hci5: command tx timeout [ 591.529545][ T5841] Bluetooth: hci5: command tx timeout [ 591.896031][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.929808][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.959692][ T9306] bridge_slave_0: entered allmulticast mode [ 591.977981][ T9306] bridge_slave_0: entered promiscuous mode [ 592.029937][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.037207][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.069690][ T9306] bridge_slave_1: entered allmulticast mode [ 593.121417][ T9306] bridge_slave_1: entered promiscuous mode [ 593.282625][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 593.346066][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 593.704388][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.788713][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.020486][ T9306] team0: Port device team_slave_0 added [ 594.103451][ T9306] team0: Port device team_slave_1 added [ 594.387424][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.416720][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.478518][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.971495][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.978494][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.094705][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.773288][ T9306] hsr_slave_0: entered promiscuous mode [ 598.791475][ T9306] hsr_slave_1: entered promiscuous mode [ 598.812155][ T9306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.835812][ T9306] Cannot create hsr debugfs directory [ 599.169821][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 600.261187][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 600.287670][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 600.296901][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.307569][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.317477][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.326951][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.338371][ T9] usb 2-1: config 0 descriptor?? [ 600.468646][ T9483] chnl_net:caif_netlink_parms(): no params data found [ 600.665098][ T24] usb 2-1: USB disconnect, device number 16 [ 602.201346][ T63] bridge_slave_1: left allmulticast mode [ 602.262363][ T63] bridge_slave_1: left promiscuous mode [ 602.750346][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.021742][ T63] bridge_slave_0: left allmulticast mode [ 603.027432][ T63] bridge_slave_0: left promiscuous mode [ 603.076021][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.517850][ T30] audit: type=1800 audit(1750960272.794:21): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.839" name="bus" dev="overlay" ino=980 res=0 errno=0 [ 606.140218][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.206469][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.256247][ T63] bond0 (unregistering): Released all slaves [ 606.598571][ T63] hsr_slave_0: left promiscuous mode [ 606.615550][ T63] hsr_slave_1: left promiscuous mode [ 606.627808][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.645687][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.082142][ T63] team0 (unregistering): Port device team_slave_1 removed [ 609.680167][ T63] team0 (unregistering): Port device team_slave_0 removed [ 610.866689][ T9698] ptrace attach of ""[9699] was attempted by "./syz-executor exec"[9698] [ 613.076118][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.091665][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.103947][ T6038] libceph: connect (1)[c::]:6789 error -101 [ 613.112414][ T9483] bridge_slave_0: entered allmulticast mode [ 613.118570][ T6038] libceph: mon0 (1)[c::]:6789 connect error [ 613.198877][ T9483] bridge_slave_0: entered promiscuous mode [ 613.201471][ T9715] ceph: No mds server is up or the cluster is laggy [ 613.734213][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.745327][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.771990][ T9483] bridge_slave_1: entered allmulticast mode [ 613.843401][ T9483] bridge_slave_1: entered promiscuous mode [ 615.326507][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.368185][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.520850][ T9483] team0: Port device team_slave_0 added [ 615.558643][ T9483] team0: Port device team_slave_1 added [ 616.120145][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.141057][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.240997][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.301107][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.322089][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.403174][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.716767][ T9483] hsr_slave_0: entered promiscuous mode [ 618.770547][ T9483] hsr_slave_1: entered promiscuous mode [ 618.790132][ T9483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.797728][ T9483] Cannot create hsr debugfs directory [ 619.895251][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 619.911802][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 619.930068][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 619.946424][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 619.956044][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 620.195029][ T13] bridge_slave_1: left allmulticast mode [ 620.206724][ T13] bridge_slave_1: left promiscuous mode [ 620.229627][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.248179][ T13] bridge_slave_0: left allmulticast mode [ 620.258485][ T13] bridge_slave_0: left promiscuous mode [ 620.285644][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.424068][ T8746] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 620.477083][ T8746] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 620.518191][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.529614][ T5929] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 620.545713][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.628960][ T13] bond0 (unregistering): Released all slaves [ 620.729598][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 620.770655][ T5929] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 620.781788][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.867140][ T5929] usb 2-1: config 0 has no interface number 0 [ 620.873696][ T5929] usb 2-1: config 0 interface 105 has no altsetting 0 [ 620.883748][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 620.893485][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.901664][ T5929] usb 2-1: Product: syz [ 620.928909][ T5929] usb 2-1: Manufacturer: syz [ 620.949174][ T5929] usb 2-1: SerialNumber: syz [ 620.954998][ T13] hsr_slave_0: left promiscuous mode [ 620.980941][ T13] hsr_slave_1: left promiscuous mode [ 621.009581][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.045760][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.060762][ T5929] usb 2-1: config 0 descriptor?? [ 621.113957][ T5929] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 621.141931][ T5929] usb 2-1: No valid video chain found. [ 622.009438][ T5841] Bluetooth: hci6: command tx timeout [ 622.048479][ T971] usb 2-1: USB disconnect, device number 17 [ 624.089441][ T5841] Bluetooth: hci6: command tx timeout [ 625.402545][ T13] team0 (unregistering): Port device team_slave_1 removed [ 626.191683][ T5841] Bluetooth: hci6: command tx timeout [ 626.391555][ T13] team0 (unregistering): Port device team_slave_0 removed [ 626.890169][ T971] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 627.063207][ T971] usb 2-1: device descriptor read/64, error -71 [ 627.345816][ T971] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 627.529709][ T971] usb 2-1: device descriptor read/64, error -71 [ 627.601480][ T9813] ptrace attach of ""[9814] was attempted by "./syz-executor exec"[9813] [ 628.271973][ T5841] Bluetooth: hci6: command tx timeout [ 628.499622][ T971] usb usb2-port1: attempt power cycle [ 630.221685][ T971] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 630.433454][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 630.629076][ T971] usb 2-1: device not accepting address 20, error -71 [ 632.563971][ T6038] libceph: connect (1)[c::]:6789 error -101 [ 632.653650][ T6038] libceph: mon0 (1)[c::]:6789 connect error [ 632.736172][ T9833] ceph: No mds server is up or the cluster is laggy [ 632.994189][ T6038] libceph: connect (1)[c::]:6789 error -101 [ 633.119546][ T6038] libceph: mon0 (1)[c::]:6789 connect error [ 633.546385][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.827964][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.836133][ T9750] bridge_slave_0: entered allmulticast mode [ 633.844204][ T9750] bridge_slave_0: entered promiscuous mode [ 633.854058][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.861348][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.868543][ T9750] bridge_slave_1: entered allmulticast mode [ 633.868657][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.895361][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.914854][ T9750] bridge_slave_1: entered promiscuous mode [ 633.936274][ T24] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 633.986905][ T24] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 634.035436][ T9483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 634.153086][ T9483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 634.184525][ T9483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 634.238483][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.257965][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.274309][ T9483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 635.420039][ T9750] team0: Port device team_slave_0 added [ 635.435693][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 635.809524][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 635.851156][ T9750] team0: Port device team_slave_1 added [ 635.877223][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.958978][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.016296][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 636.091444][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.165704][ T9] usb 1-1: config 0 descriptor?? [ 636.218303][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 636.358473][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.694942][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.771590][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.626385][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.633612][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.661259][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.739869][ T5179] bcm5974 1-1:0.0: could not read from device [ 637.803381][ T9867] bcm5974 1-1:0.0: could not read from device [ 637.855732][ T5179] bcm5974 1-1:0.0: could not read from device [ 637.874799][ T9] usb 1-1: USB disconnect, device number 16 [ 638.011137][ T9750] hsr_slave_0: entered promiscuous mode [ 638.017953][ T9750] hsr_slave_1: entered promiscuous mode [ 638.098711][ T9750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.112430][ T9750] Cannot create hsr debugfs directory [ 640.238477][ T30] audit: type=1800 audit(1750960308.514:22): pid=9907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.907" name="bus" dev="overlay" ino=1186 res=0 errno=0 [ 640.335832][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.347144][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.375443][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.387926][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.491280][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.590283][ T51] Bluetooth: hci4: command tx timeout [ 643.007023][ T9750] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 643.026099][ T9750] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 643.057896][ T9750] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 643.084524][ T9750] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 644.709363][ T51] Bluetooth: hci4: command tx timeout [ 644.772315][ T12] bridge_slave_1: left allmulticast mode [ 645.360250][ T12] bridge_slave_1: left promiscuous mode [ 645.390786][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.456312][ T12] bridge_slave_0: left allmulticast mode [ 645.469928][ T12] bridge_slave_0: left promiscuous mode [ 645.485916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.058281][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.072996][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.084562][ T12] bond0 (unregistering): Released all slaves [ 646.117428][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 646.476819][ T12] hsr_slave_0: left promiscuous mode [ 646.516610][ T12] hsr_slave_1: left promiscuous mode [ 646.529343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.541912][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.856004][ T51] Bluetooth: hci4: command tx timeout [ 648.919466][ T51] Bluetooth: hci4: command tx timeout [ 651.779543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 651.888877][ T12] team0 (unregistering): Port device team_slave_0 removed [ 654.567588][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.590401][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.611264][ T9908] bridge_slave_0: entered allmulticast mode [ 654.636282][ T9908] bridge_slave_0: entered promiscuous mode [ 654.661387][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.687732][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.953426][ T9908] bridge_slave_1: entered allmulticast mode [ 654.977275][ T9908] bridge_slave_1: entered promiscuous mode [ 655.056144][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.078605][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.156883][ T9908] team0: Port device team_slave_0 added [ 655.194678][ T9908] team0: Port device team_slave_1 added [ 655.276253][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.287397][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.325557][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.358522][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.367277][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.395894][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.449843][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.809748][ T9750] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.855461][ T9908] hsr_slave_0: entered promiscuous mode [ 657.896915][ T9908] hsr_slave_1: entered promiscuous mode [ 657.928039][ T9908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.966593][ T9908] Cannot create hsr debugfs directory [ 658.241511][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.248750][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.657385][T10050] openvswitch: : Dropping previously announced user features [ 659.653378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.660598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.101423][ T9750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 660.119333][ T9750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.528663][ T9750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.784670][ T9908] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 663.834674][ T9908] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 663.887900][ T9908] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 663.953050][ T9908] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 665.133604][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 665.143798][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.459482][T10106] bond0: (slave bond_slave_0): Releasing backup interface [ 665.587206][ T9908] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.650764][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.657914][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.698482][T10117] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 665.707086][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.952'. [ 665.860855][T10117] team0: Port device geneve0 added [ 665.899953][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.907182][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.196775][ T9750] veth0_vlan: entered promiscuous mode [ 667.211348][ T9750] veth1_vlan: entered promiscuous mode [ 667.428613][ T9750] veth0_macvtap: entered promiscuous mode [ 667.521018][ T9750] veth1_macvtap: entered promiscuous mode [ 668.016646][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.121724][ T9750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.173697][ T9750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.225752][ T9750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.281944][ T9750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.347760][ T9750] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.692717][T10143] overlayfs: failed to resolve './file0': -2 [ 670.248045][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.489500][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.407708][ T9908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.442285][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.613685][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.959610][T10178] tipc: Started in network mode [ 675.009871][T10178] tipc: Node identity 663356b32a9d, cluster identity 4711 [ 675.017294][T10178] tipc: Enabled bearer , priority 0 [ 675.448121][T10182] syzkaller0: entered promiscuous mode [ 675.475247][T10182] syzkaller0: entered allmulticast mode [ 675.490896][T10182] tipc: Resetting bearer [ 675.691544][T10177] tipc: Resetting bearer [ 676.812825][ T9] tipc: Node number set to 1286493875 [ 677.014623][ T9] libceph: connect (1)[c::]:6789 error -101 [ 677.030976][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 677.596698][ T9] libceph: connect (1)[c::]:6789 error -101 [ 677.648658][T10216] overlayfs: failed to resolve './file1': -2 [ 677.953265][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 678.018499][T10205] ceph: No mds server is up or the cluster is laggy [ 681.871825][T10251] input: syz1 as /devices/virtual/input/input9 [ 682.472139][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 682.909366][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 682.939435][ T5915] usb 1-1: no configurations [ 682.944076][ T5915] usb 1-1: can't read configurations, error -22 [ 682.975739][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.980'. [ 683.089610][ T5915] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 683.262516][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 683.274423][ T5915] usb 1-1: no configurations [ 683.279107][ T5915] usb 1-1: can't read configurations, error -22 [ 683.292281][ T5915] usb usb1-port1: attempt power cycle [ 685.084301][T10278] overlayfs: failed to resolve './file1': -2 [ 688.409403][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 688.570392][T10177] tipc: Disabling bearer [ 690.968497][ T9908] veth0_vlan: entered promiscuous mode [ 691.120275][ T9908] veth1_vlan: entered promiscuous mode [ 691.378129][ T9908] veth0_macvtap: entered promiscuous mode [ 691.440816][ T9908] veth1_macvtap: entered promiscuous mode [ 691.589186][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.652407][ T9908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.693889][ T9908] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.729083][ T9908] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.760136][ T8746] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 691.779710][ T9908] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.814149][ T9908] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.955709][ T8746] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.018835][ T8746] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.046861][ T8746] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 692.056398][ T8746] usb 8-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 692.094447][ T8746] usb 8-1: Manufacturer: syz [ 692.135726][ T8746] usb 8-1: config 0 descriptor?? [ 692.160992][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.170673][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.178980][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.187199][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.195592][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.317621][T10355] overlayfs: failed to resolve './file1': -2 [ 694.254439][ T5841] Bluetooth: hci0: command tx timeout [ 694.307063][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.997'. [ 694.857447][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.857792][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.873728][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.146393][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.320519][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.338622][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.470393][ T44] usb 8-1: USB disconnect, device number 2 [ 696.462205][T10378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1005'. [ 696.516083][ T5841] Bluetooth: hci0: command tx timeout [ 696.679644][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.986699][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.747881][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.675853][ T5841] Bluetooth: hci0: command tx timeout [ 699.471991][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.729554][ T5841] Bluetooth: hci0: command tx timeout [ 700.776122][T10349] chnl_net:caif_netlink_parms(): no params data found [ 701.089566][ T8746] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 701.323063][ T8746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.374331][ T8746] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 701.431021][ T8746] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 701.465056][ T8746] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 701.515321][ T8746] usb 2-1: Manufacturer: syz [ 701.686670][ T8746] usb 2-1: config 0 descriptor?? [ 702.526434][T10454] openvswitch: : Dropping previously announced user features [ 702.867737][ T37] bridge_slave_1: left allmulticast mode [ 702.876889][ T37] bridge_slave_1: left promiscuous mode [ 702.909833][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.955678][ T37] bridge_slave_0: left allmulticast mode [ 702.971437][ T37] bridge_slave_0: left promiscuous mode [ 702.992165][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.675645][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1022'. [ 705.147685][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.168005][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.183726][ T37] bond0 (unregistering): Released all slaves [ 705.214770][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 705.226319][T10439] ip6gretap0: entered promiscuous mode [ 705.260164][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.280224][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.312304][T10349] bridge_slave_0: entered allmulticast mode [ 705.335875][T10349] bridge_slave_0: entered promiscuous mode [ 705.345032][ T9] usb 2-1: USB disconnect, device number 22 [ 705.385472][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.421564][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.455942][T10349] bridge_slave_1: entered allmulticast mode [ 705.512566][T10349] bridge_slave_1: entered promiscuous mode [ 706.139429][ T37] tipc: Left network mode [ 707.489424][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.613705][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.750983][T10527] overlayfs: failed to resolve './file0': -2 [ 711.563176][ T44] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 711.594962][ T44] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 712.462744][T10537] fido_id[10537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 712.476487][ T44] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 712.573874][T10525] openvswitch: : Dropping previously announced user features [ 712.795533][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.844021][ T44] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.860015][T10542] sp0: Synchronizing with TNC [ 712.949940][ T44] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 712.959011][ T44] usb 9-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 712.992014][T10349] team0: Port device team_slave_0 added [ 713.009057][T10349] team0: Port device team_slave_1 added [ 713.144652][ T44] usb 9-1: Manufacturer: syz [ 713.514220][ T44] usb 9-1: config 0 descriptor?? [ 716.645857][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 716.953532][T10567] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1042'. [ 717.139564][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1036'. [ 717.436041][T10574] syz.1.1044: attempt to access beyond end of device [ 717.436041][T10574] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 717.450328][T10574] FAT-fs (loop3): unable to read boot sector [ 718.210385][ T5972] usb 9-1: USB disconnect, device number 2 [ 718.599318][ T37] hsr_slave_0: left promiscuous mode [ 718.858017][ T37] hsr_slave_1: left promiscuous mode [ 719.246209][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.289361][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.318533][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.352407][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.812065][ T37] veth1_macvtap: left promiscuous mode [ 719.842105][ T37] veth0_macvtap: left promiscuous mode [ 719.848498][ T37] veth1_vlan: left promiscuous mode [ 719.874794][ T37] veth0_vlan: left promiscuous mode [ 720.300667][ T8798] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 720.319380][ T8799] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 720.459375][ T8798] usb 8-1: Using ep0 maxpacket: 8 [ 720.478243][ T8798] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 720.487158][ T8799] usb 1-1: Using ep0 maxpacket: 8 [ 720.492909][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.515397][ T8798] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.532545][ T8799] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 720.543273][ T8799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.558407][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.572904][ T8799] usb 1-1: Product: syz [ 720.577083][ T8799] usb 1-1: Manufacturer: syz [ 720.582045][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.593478][ T8799] usb 1-1: SerialNumber: syz [ 720.611713][ T8799] usb 1-1: config 0 descriptor?? [ 720.620206][ T8798] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 720.627641][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.643101][ T8798] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.664262][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.676425][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.692134][ T8798] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 720.700398][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 720.717345][ T8798] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 720.733610][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 720.752860][ T8798] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 720.765278][ T37] team0 (unregistering): Port device team_slave_1 removed [ 720.768981][ T8798] usb 8-1: string descriptor 0 read error: -22 [ 720.780045][ T8798] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 720.789214][ T8798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.839472][ T8799] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.855400][ T8798] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 720.865375][ T37] team0 (unregistering): Port device team_slave_0 removed [ 721.240051][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.247055][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.277897][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.315356][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.340117][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.404766][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.488597][T10598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.326715][ T8799] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 722.376204][ T8799] usb 1-1: USB disconnect, device number 20 [ 723.051609][ T8799] usb 8-1: USB disconnect, device number 3 [ 723.096359][T10349] hsr_slave_0: entered promiscuous mode [ 723.129741][T10349] hsr_slave_1: entered promiscuous mode [ 723.157414][T10349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.197466][T10349] Cannot create hsr debugfs directory [ 723.239391][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 723.501345][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.519455][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.537960][ T9] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 723.560789][ T9] usb 9-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 723.629215][ T9] usb 9-1: Manufacturer: syz [ 723.872623][ T9] usb 9-1: config 0 descriptor?? [ 724.235266][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1056'. [ 724.279826][T10613] syz_tun: entered promiscuous mode [ 724.378945][ T44] usb 9-1: USB disconnect, device number 3 [ 724.479979][T10632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1061'. [ 725.944543][T10349] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 726.104067][T10349] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 726.487396][T10349] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 729.282528][T10349] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 730.513052][T10349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.421830][T10349] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.572772][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.580048][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.649780][T10705] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1077'. [ 731.773739][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1079'. [ 731.806399][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.813670][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.309580][T10645] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 732.570674][T10645] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.089733][T10645] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.194965][T10645] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 733.281902][T10645] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 733.347614][T10645] usb 1-1: Manufacturer: syz [ 733.410653][T10645] usb 1-1: config 0 descriptor?? [ 736.673358][T10645] usb 1-1: USB disconnect, device number 21 [ 739.454580][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.773370][ T8746] libceph: connect (1)[c::]:6789 error -101 [ 740.851846][ T8746] libceph: mon0 (1)[c::]:6789 connect error [ 741.309064][ T8746] libceph: connect (1)[c::]:6789 error -101 [ 741.329528][ T8746] libceph: mon0 (1)[c::]:6789 connect error [ 741.520710][T10773] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 741.849989][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 741.856192][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 742.047645][T10759] ceph: No mds server is up or the cluster is laggy [ 742.195625][T10792] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1096'. [ 742.939184][T10349] veth0_vlan: entered promiscuous mode [ 743.009139][T10349] veth1_vlan: entered promiscuous mode [ 743.059772][ T8746] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 744.029388][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 744.062645][ T8746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.115886][ T8746] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.224721][ T8746] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 744.242410][T10349] veth0_macvtap: entered promiscuous mode [ 744.279782][ T8746] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 744.319747][T10349] veth1_macvtap: entered promiscuous mode [ 744.326649][ T8746] usb 1-1: Manufacturer: syz [ 744.420941][ T8746] usb 1-1: config 0 descriptor?? [ 744.465086][T10349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.727687][T10349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.754355][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 744.975136][ T8798] usb 1-1: USB disconnect, device number 22 [ 745.195321][T10349] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.379230][T10349] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.448109][T10349] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.493531][T10349] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.032426][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.080053][T10822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 746.091458][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.323095][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.346913][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.430832][ T8799] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 750.609873][ T8799] usb 5-1: Using ep0 maxpacket: 32 [ 750.643530][ T8799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 750.677459][ T8799] usb 5-1: can't read configurations, error -61 [ 750.845733][ T8799] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 751.039815][ T8799] usb 5-1: Using ep0 maxpacket: 32 [ 751.051448][ T8799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 751.068840][ T8799] usb 5-1: can't read configurations, error -61 [ 751.083287][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 751.114658][ T8799] usb usb5-port1: attempt power cycle [ 751.259358][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 751.280837][ T24] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 751.479544][ T8799] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 751.567628][ T8799] usb 5-1: Using ep0 maxpacket: 32 [ 751.582751][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.602096][ T8799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 751.701564][ T8799] usb 5-1: can't read configurations, error -61 [ 751.739591][ T8798] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 751.893562][ T8799] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 751.949996][ T8798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.057567][ T8799] usb 5-1: Using ep0 maxpacket: 32 [ 752.076795][ T8798] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 752.110252][ T8799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 752.148756][ T8799] usb 5-1: can't read configurations, error -61 [ 752.177974][ T8798] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 752.189249][ T24] usb 9-1: config 0 has no interface number 0 [ 752.195623][ T24] usb 9-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.213779][ T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 752.223078][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.231295][ T24] usb 9-1: Product: syz [ 752.231460][ T8799] usb usb5-port1: unable to enumerate USB device [ 752.235481][ T24] usb 9-1: Manufacturer: syz [ 752.235518][ T24] usb 9-1: SerialNumber: syz [ 752.255297][ T8798] usb 1-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 752.300631][ T24] usb 9-1: config 0 descriptor?? [ 752.310212][ T8798] usb 1-1: Manufacturer: syz [ 752.318618][ T24] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 752.352012][ T8798] usb 1-1: config 0 descriptor?? [ 752.464653][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 752.483721][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 752.492981][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 752.509523][ T24] usb 9-1: qt2_setup_urbs - submit read urb failed -8 [ 752.517843][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.544332][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 752.555641][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 753.586641][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 753.643430][ T24] quatech2 9-1:0.51: probe with driver quatech2 failed with error -8 [ 753.671881][ T8799] usb 1-1: USB disconnect, device number 23 [ 753.748119][ T24] usb 9-1: USB disconnect, device number 4 [ 753.913841][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.533326][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.649954][ T5841] Bluetooth: hci0: command tx timeout [ 754.712291][T10908] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1118'. [ 756.758346][ T5841] Bluetooth: hci0: command tx timeout [ 756.900130][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.932760][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.266041][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.537712][T10928] netlink: 'syz.1.1124': attribute type 7 has an invalid length. [ 758.674941][T10928] netlink: 'syz.1.1124': attribute type 3 has an invalid length. [ 758.753219][T10928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1124'. [ 758.810034][ T5841] Bluetooth: hci0: command tx timeout [ 758.950466][ T12] bridge_slave_1: left allmulticast mode [ 758.964880][ T12] bridge_slave_1: left promiscuous mode [ 758.992908][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.071696][ T12] bridge_slave_0: left allmulticast mode [ 759.131779][ T12] bridge_slave_0: left promiscuous mode [ 759.196096][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.379562][ T8746] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 760.158220][ T8746] usb 5-1: Using ep0 maxpacket: 32 [ 760.179227][ T8746] usb 5-1: config 0 has no interfaces? [ 760.192631][ T8746] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 760.206168][ T8746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.250442][ T8746] usb 5-1: config 0 descriptor?? [ 760.939440][ T5841] Bluetooth: hci0: command tx timeout [ 761.014540][ T8746] usb 5-1: USB disconnect, device number 27 [ 762.395119][ T8746] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 762.601503][ T8746] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.633826][ T8746] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.660871][ T8746] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 762.679364][ T8746] usb 9-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 762.697846][ T8746] usb 9-1: Manufacturer: syz [ 762.729114][ T8746] usb 9-1: config 0 descriptor?? [ 763.046789][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.301944][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.323300][ T12] bond0 (unregistering): Released all slaves [ 763.449438][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1132'. [ 763.466912][ T9] usb 9-1: USB disconnect, device number 5 [ 763.630791][T10872] chnl_net:caif_netlink_parms(): no params data found [ 763.931386][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 766.200238][ T12] hsr_slave_0: left promiscuous mode [ 766.251802][ T12] hsr_slave_1: left promiscuous mode [ 766.280388][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.290341][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.302389][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.319086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.381695][ T12] veth1_macvtap: left promiscuous mode [ 766.405423][ T12] veth0_macvtap: left promiscuous mode [ 766.435492][ T12] veth1_vlan: left promiscuous mode [ 766.472231][ T12] veth0_vlan: left promiscuous mode [ 767.488909][T11031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1148'. [ 769.908034][ T12] team0 (unregistering): Port device team_slave_1 removed [ 770.139915][ T12] team0 (unregistering): Port device team_slave_0 removed [ 770.174798][T11043] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 770.181389][T11043] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 770.203103][T11043] vhci_hcd vhci_hcd.0: Device attached [ 770.235251][T11043] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 770.241797][T11043] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 770.251180][T11043] vhci_hcd vhci_hcd.0: Device attached [ 770.304941][T11043] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(8) [ 770.311510][T11043] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 770.332712][T11043] vhci_hcd vhci_hcd.0: Device attached [ 770.370632][T11043] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(10) [ 770.377292][T11043] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 770.400808][T11043] vhci_hcd vhci_hcd.0: Device attached [ 770.405950][ T8798] vhci_hcd: vhci_device speed not set [ 770.454089][T11050] vhci_hcd: connection closed [ 770.455773][ T3551] vhci_hcd: stop threads [ 770.465381][ T3551] vhci_hcd: release socket [ 770.471664][ T3551] vhci_hcd: disconnect device [ 770.499393][ T8798] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 770.517547][T11048] vhci_hcd: connection closed [ 770.517876][T11046] vhci_hcd: connection closed [ 770.523128][T11044] vhci_hcd: connection reset by peer [ 770.580888][ T5997] vhci_hcd: stop threads [ 770.585298][ T5997] vhci_hcd: release socket [ 770.631511][ T5997] vhci_hcd: disconnect device [ 770.674045][ T5997] vhci_hcd: stop threads [ 770.708376][ T5997] vhci_hcd: release socket [ 770.733546][ T5997] vhci_hcd: disconnect device [ 770.858127][ T5997] vhci_hcd: stop threads [ 770.864098][ T5997] vhci_hcd: release socket [ 770.906115][ T5997] vhci_hcd: disconnect device [ 771.481571][ T5922] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 771.681527][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.704552][ T5922] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.856704][ T5922] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 771.869387][ T5922] usb 9-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 771.878334][ T5922] usb 9-1: Manufacturer: syz [ 771.893675][ T5922] usb 9-1: config 0 descriptor?? [ 772.448251][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.318115][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.343513][T10872] bridge_slave_0: entered allmulticast mode [ 773.537837][T10872] bridge_slave_0: entered promiscuous mode [ 773.574227][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1152'. [ 773.599429][T11056] ip6gretap0: entered promiscuous mode [ 773.607899][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.626584][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.672871][T10872] bridge_slave_1: entered allmulticast mode [ 773.673628][ T44] usb 9-1: USB disconnect, device number 6 [ 773.692412][T10872] bridge_slave_1: entered promiscuous mode [ 774.682633][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.788639][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.180405][ T8798] vhci_hcd: vhci_device speed not set [ 780.457178][T11121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1166'. [ 780.709573][T10872] team0: Port device team_slave_0 added [ 780.719169][T10872] team0: Port device team_slave_1 added [ 781.773926][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.809391][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.971156][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.118168][T10872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.150008][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.254664][T10872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.286371][T11137] : entered promiscuous mode [ 784.874766][T10872] hsr_slave_0: entered promiscuous mode [ 784.935455][T10872] hsr_slave_1: entered promiscuous mode [ 784.981927][T10872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.052245][T10872] Cannot create hsr debugfs directory [ 791.970402][T11209] openvswitch: : Dropping previously announced user features [ 793.044067][T10872] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 793.320006][T10872] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 793.711219][T10872] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 793.976885][T10872] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 794.686128][T10872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.706415][T10872] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.809974][ T8798] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 797.659448][ T8798] usb 5-1: Using ep0 maxpacket: 8 [ 797.709014][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.716238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.844535][ T8798] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 797.891610][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.898838][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.909405][ T8798] usb 5-1: can't read configurations, error -71 [ 798.178803][T11256] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1200'. [ 799.327027][T11262] openvswitch: : Dropping previously announced user features [ 800.726077][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1198'. [ 802.127014][T11289] [ 802.129402][T11289] ===================================================== [ 802.136347][T11289] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 802.143819][T11289] 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 Not tainted [ 802.150944][T11289] ----------------------------------------------------- [ 802.157882][T11289] syz.0.1206/11289 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 802.165628][T11289] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 802.174339][T11289] [ 802.174339][T11289] and this task is already holding: [ 802.181715][T11289] ffff888076338fa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 802.190512][T11289] which would create a new lock dependency: [ 802.196421][T11289] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 802.204083][T11289] [ 802.204083][T11289] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 802.213547][T11289] (&dev->event_lock#2){..-.}-{3:3} [ 802.213617][T11289] [ 802.213617][T11289] ... which became SOFTIRQ-irq-safe at: [ 802.226530][T11289] lock_acquire+0x179/0x350 [ 802.231181][T11289] _raw_spin_lock_irqsave+0x3a/0x60 [ 802.236508][T11289] input_event+0x70/0xb0 [ 802.240877][T11289] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 802.246536][T11289] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 802.252037][T11289] usb_hcd_giveback_urb+0x39b/0x450 [ 802.257368][T11289] dummy_timer+0x180e/0x3a20 [ 802.262069][T11289] __hrtimer_run_queues+0x202/0xad0 [ 802.267401][T11289] hrtimer_run_softirq+0x17d/0x350 [ 802.272640][T11289] handle_softirqs+0x219/0x8e0 [ 802.277522][T11289] __irq_exit_rcu+0x109/0x170 [ 802.282318][T11289] irq_exit_rcu+0x9/0x30 [ 802.286679][T11289] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 802.292447][T11289] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.298546][T11289] _raw_spin_unlock_irqrestore+0x31/0x80 [ 802.304315][T11289] dummy_urb_enqueue+0x558/0x920 [ 802.309366][T11289] usb_hcd_submit_urb+0x25b/0x1c60 [ 802.314616][T11289] usb_submit_urb+0x87c/0x1790 [ 802.319504][T11289] atp_open+0x60/0xd0 [ 802.323626][T11289] input_open_device+0x233/0x390 [ 802.328687][T11289] mousedev_open_device+0xe0/0x140 [ 802.333913][T11289] mousedev_open+0x2fd/0x580 [ 802.338617][T11289] chrdev_open+0x234/0x6a0 [ 802.343150][T11289] do_dentry_open+0x744/0x1c10 [ 802.348027][T11289] vfs_open+0x82/0x3f0 [ 802.352220][T11289] path_openat+0x1de4/0x2cb0 [ 802.356924][T11289] do_filp_open+0x20b/0x470 [ 802.361542][T11289] do_sys_openat2+0x11b/0x1d0 [ 802.366339][T11289] __x64_sys_openat+0x174/0x210 [ 802.371321][T11289] do_syscall_64+0xcd/0x4c0 [ 802.375946][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.381942][T11289] [ 802.381942][T11289] to a SOFTIRQ-irq-unsafe lock: [ 802.388957][T11289] (tasklist_lock){.+.+}-{3:3} [ 802.389005][T11289] [ 802.389005][T11289] ... which became SOFTIRQ-irq-unsafe at: [ 802.401632][T11289] ... [ 802.401645][T11289] lock_acquire+0x179/0x350 [ 802.408840][T11289] _raw_read_lock+0x5f/0x70 [ 802.413464][T11289] __do_wait+0x105/0x890 [ 802.417828][T11289] do_wait+0x21e/0x5a0 [ 802.422017][T11289] kernel_wait+0x9f/0x160 [ 802.426469][T11289] call_usermodehelper_exec_work+0xf1/0x170 [ 802.432476][T11289] process_one_work+0x9cf/0x1b70 [ 802.437520][T11289] worker_thread+0x6c8/0xf10 [ 802.442214][T11289] kthread+0x3c5/0x780 [ 802.446380][T11289] ret_from_fork+0x5d7/0x6f0 [ 802.451095][T11289] ret_from_fork_asm+0x1a/0x30 [ 802.455962][T11289] [ 802.455962][T11289] other info that might help us debug this: [ 802.455962][T11289] [ 802.466191][T11289] Chain exists of: [ 802.466191][T11289] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 802.466191][T11289] [ 802.479287][T11289] Possible interrupt unsafe locking scenario: [ 802.479287][T11289] [ 802.487611][T11289] CPU0 CPU1 [ 802.492980][T11289] ---- ---- [ 802.498353][T11289] lock(tasklist_lock); [ 802.502616][T11289] local_irq_disable(); [ 802.509370][T11289] lock(&dev->event_lock#2); [ 802.516627][T11289] lock(&f_owner->lock); [ 802.523497][T11289] [ 802.526947][T11289] lock(&dev->event_lock#2); [ 802.531828][T11289] [ 802.531828][T11289] *** DEADLOCK *** [ 802.531828][T11289] [ 802.539968][T11289] 2 locks held by syz.0.1206/11289: [ 802.545166][T11289] #0: ffff8880321fd940 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xc7b/0x11d0 [ 802.554734][T11289] #1: ffff888076338fa0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 802.563950][T11289] [ 802.563950][T11289] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 802.574358][T11289] -> (&dev->event_lock#2){..-.}-{3:3} { [ 802.580234][T11289] IN-SOFTIRQ-W at: [ 802.584486][T11289] lock_acquire+0x179/0x350 [ 802.591195][T11289] _raw_spin_lock_irqsave+0x3a/0x60 [ 802.598596][T11289] input_event+0x70/0xb0 [ 802.605035][T11289] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 802.612768][T11289] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 802.620342][T11289] usb_hcd_giveback_urb+0x39b/0x450 [ 802.627750][T11289] dummy_timer+0x180e/0x3a20 [ 802.634527][T11289] __hrtimer_run_queues+0x202/0xad0 [ 802.641915][T11289] hrtimer_run_softirq+0x17d/0x350 [ 802.649214][T11289] handle_softirqs+0x219/0x8e0 [ 802.656170][T11289] __irq_exit_rcu+0x109/0x170 [ 802.663039][T11289] irq_exit_rcu+0x9/0x30 [ 802.669479][T11289] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 802.677338][T11289] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.685512][T11289] _raw_spin_unlock_irqrestore+0x31/0x80 [ 802.693350][T11289] dummy_urb_enqueue+0x558/0x920 [ 802.700473][T11289] usb_hcd_submit_urb+0x25b/0x1c60 [ 802.707787][T11289] usb_submit_urb+0x87c/0x1790 [ 802.714734][T11289] atp_open+0x60/0xd0 [ 802.720923][T11289] input_open_device+0x233/0x390 [ 802.728055][T11289] mousedev_open_device+0xe0/0x140 [ 802.735364][T11289] mousedev_open+0x2fd/0x580 [ 802.742147][T11289] chrdev_open+0x234/0x6a0 [ 802.748765][T11289] do_dentry_open+0x744/0x1c10 [ 802.755723][T11289] vfs_open+0x82/0x3f0 [ 802.761990][T11289] path_openat+0x1de4/0x2cb0 [ 802.768768][T11289] do_filp_open+0x20b/0x470 [ 802.775466][T11289] do_sys_openat2+0x11b/0x1d0 [ 802.782346][T11289] __x64_sys_openat+0x174/0x210 [ 802.789409][T11289] do_syscall_64+0xcd/0x4c0 [ 802.796119][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.804197][T11289] INITIAL USE at: [ 802.808359][T11289] lock_acquire+0x179/0x350 [ 802.814985][T11289] _raw_spin_lock_irqsave+0x3a/0x60 [ 802.822298][T11289] input_inject_event+0x9f/0x390 [ 802.829346][T11289] led_set_brightness+0x217/0x290 [ 802.836479][T11289] kbd_led_trigger_activate+0xcb/0x110 [ 802.844058][T11289] led_trigger_set+0x59a/0xc50 [ 802.850933][T11289] led_trigger_set_default+0x1e0/0x2e0 [ 802.858503][T11289] led_classdev_register_ext+0x7b8/0xa10 [ 802.866242][T11289] input_leds_connect+0x552/0x8e0 [ 802.873370][T11289] input_attach_handler.isra.0+0x184/0x260 [ 802.881288][T11289] input_register_device+0xa84/0x1130 [ 802.888765][T11289] atkbd_connect+0x5da/0xa20 [ 802.895470][T11289] serio_driver_probe+0x77/0xb0 [ 802.902433][T11289] really_probe+0x241/0xa90 [ 802.909050][T11289] __driver_probe_device+0x1de/0x440 [ 802.916454][T11289] driver_probe_device+0x4c/0x1b0 [ 802.923593][T11289] __driver_attach+0x283/0x580 [ 802.930473][T11289] bus_for_each_dev+0x13e/0x1d0 [ 802.937432][T11289] serio_handle_event+0x247/0xa50 [ 802.944569][T11289] process_one_work+0x9cf/0x1b70 [ 802.951606][T11289] worker_thread+0x6c8/0xf10 [ 802.958296][T11289] kthread+0x3c5/0x780 [ 802.964459][T11289] ret_from_fork+0x5d7/0x6f0 [ 802.971165][T11289] ret_from_fork_asm+0x1a/0x30 [ 802.978029][T11289] } [ 802.980785][T11289] ... key at: [] __key.7+0x0/0x40 [ 802.988178][T11289] -> (&client->buffer_lock){....}-{3:3} { [ 802.994119][T11289] INITIAL USE at: [ 802.998194][T11289] lock_acquire+0x179/0x350 [ 803.004647][T11289] _raw_spin_lock+0x2e/0x40 [ 803.011086][T11289] evdev_pass_values+0x10e/0x9b0 [ 803.017961][T11289] evdev_events+0x1bb/0x390 [ 803.024403][T11289] input_pass_values+0x6c7/0x890 [ 803.031300][T11289] input_handle_event+0xf00/0x14d0 [ 803.038371][T11289] input_inject_event+0x1cd/0x390 [ 803.045339][T11289] evdev_write+0x457/0x750 [ 803.051697][T11289] vfs_write+0x2a0/0x1150 [ 803.057951][T11289] ksys_write+0x1f8/0x250 [ 803.064206][T11289] do_syscall_64+0xcd/0x4c0 [ 803.070657][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.078478][T11289] } [ 803.081150][T11289] ... key at: [] __key.1+0x0/0x40 [ 803.088455][T11289] ... acquired at: [ 803.092434][T11289] _raw_spin_lock+0x2e/0x40 [ 803.097135][T11289] evdev_pass_values+0x10e/0x9b0 [ 803.102273][T11289] evdev_events+0x1bb/0x390 [ 803.106974][T11289] input_pass_values+0x6c7/0x890 [ 803.112115][T11289] input_handle_event+0xf00/0x14d0 [ 803.117434][T11289] input_inject_event+0x1cd/0x390 [ 803.122664][T11289] evdev_write+0x457/0x750 [ 803.127282][T11289] vfs_write+0x2a0/0x1150 [ 803.131812][T11289] ksys_write+0x1f8/0x250 [ 803.136334][T11289] do_syscall_64+0xcd/0x4c0 [ 803.141052][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.147134][T11289] [ 803.149453][T11289] -> (&new->fa_lock){....}-{3:3} { [ 803.154698][T11289] INITIAL USE at: [ 803.158689][T11289] lock_acquire+0x179/0x350 [ 803.164964][T11289] _raw_write_lock_irq+0x36/0x50 [ 803.171673][T11289] fasync_remove_entry+0xb2/0x1e0 [ 803.178468][T11289] fasync_helper+0xaf/0xd0 [ 803.184654][T11289] __fput+0x96b/0xb70 [ 803.190409][T11289] task_work_run+0x150/0x240 [ 803.196750][T11289] exit_to_user_mode_loop+0xeb/0x110 [ 803.203790][T11289] do_syscall_64+0x3f6/0x4c0 [ 803.210154][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.217797][T11289] INITIAL READ USE at: [ 803.222219][T11289] lock_acquire+0x179/0x350 [ 803.228927][T11289] _raw_read_lock_irqsave+0x74/0x90 [ 803.236326][T11289] kill_fasync+0x138/0x510 [ 803.242949][T11289] evdev_pass_values+0x619/0x9b0 [ 803.250089][T11289] evdev_events+0x1bb/0x390 [ 803.256790][T11289] input_pass_values+0x6c7/0x890 [ 803.263925][T11289] input_handle_event+0xf00/0x14d0 [ 803.271241][T11289] input_inject_event+0x1cd/0x390 [ 803.278480][T11289] evdev_write+0x457/0x750 [ 803.285094][T11289] vfs_write+0x2a0/0x1150 [ 803.291613][T11289] ksys_write+0x1f8/0x250 [ 803.298135][T11289] do_syscall_64+0xcd/0x4c0 [ 803.304847][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.312927][T11289] } [ 803.315510][T11289] ... key at: [] __key.0+0x0/0x40 [ 803.322725][T11289] ... acquired at: [ 803.326612][T11289] _raw_read_lock_irqsave+0x74/0x90 [ 803.332017][T11289] kill_fasync+0x138/0x510 [ 803.336636][T11289] evdev_pass_values+0x619/0x9b0 [ 803.341775][T11289] evdev_events+0x1bb/0x390 [ 803.346476][T11289] input_pass_values+0x6c7/0x890 [ 803.351613][T11289] input_handle_event+0xf00/0x14d0 [ 803.356931][T11289] input_inject_event+0x1cd/0x390 [ 803.362152][T11289] evdev_write+0x457/0x750 [ 803.366765][T11289] vfs_write+0x2a0/0x1150 [ 803.371298][T11289] ksys_write+0x1f8/0x250 [ 803.375816][T11289] do_syscall_64+0xcd/0x4c0 [ 803.380529][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.386609][T11289] [ 803.388928][T11289] -> (&f_owner->lock){....}-{3:3} { [ 803.394174][T11289] INITIAL USE at: [ 803.398072][T11289] lock_acquire+0x179/0x350 [ 803.404174][T11289] _raw_write_lock_irq+0x36/0x50 [ 803.410704][T11289] __f_setown+0x61/0x3c0 [ 803.416537][T11289] generic_setlease+0xef2/0x1300 [ 803.423048][T11289] kernel_setlease+0x106/0x140 [ 803.429384][T11289] vfs_setlease+0x258/0x2d0 [ 803.435461][T11289] fcntl_setlease+0x3ed/0x5a0 [ 803.441710][T11289] do_fcntl+0x751/0x15a0 [ 803.447544][T11289] __x64_sys_fcntl+0x163/0x200 [ 803.453903][T11289] do_syscall_64+0xcd/0x4c0 [ 803.460005][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.467477][T11289] INITIAL READ USE at: [ 803.471813][T11289] lock_acquire+0x179/0x350 [ 803.478347][T11289] _raw_read_lock_irqsave+0x74/0x90 [ 803.485573][T11289] send_sigio+0x31/0x3e0 [ 803.491843][T11289] kill_fasync+0x214/0x510 [ 803.498286][T11289] lease_break_callback+0x23/0x30 [ 803.505339][T11289] __break_lease+0x674/0x1810 [ 803.512028][T11289] vfs_truncate+0x4d3/0x6e0 [ 803.518545][T11289] __x64_sys_truncate+0x172/0x1e0 [ 803.525586][T11289] do_syscall_64+0xcd/0x4c0 [ 803.532130][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.540040][T11289] } [ 803.542536][T11289] ... key at: [] __key.1+0x0/0x40 [ 803.549670][T11289] ... acquired at: [ 803.553471][T11289] _raw_read_lock_irqsave+0x74/0x90 [ 803.558870][T11289] send_sigio+0x31/0x3e0 [ 803.563315][T11289] kill_fasync+0x214/0x510 [ 803.567935][T11289] lease_break_callback+0x23/0x30 [ 803.573162][T11289] __break_lease+0x674/0x1810 [ 803.578024][T11289] vfs_truncate+0x4d3/0x6e0 [ 803.582717][T11289] __x64_sys_truncate+0x172/0x1e0 [ 803.587933][T11289] do_syscall_64+0xcd/0x4c0 [ 803.592646][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.598734][T11289] [ 803.601053][T11289] [ 803.601053][T11289] the dependencies between the lock to be acquired [ 803.601070][T11289] and SOFTIRQ-irq-unsafe lock: [ 803.614583][T11289] -> (tasklist_lock){.+.+}-{3:3} { [ 803.619753][T11289] HARDIRQ-ON-R at: [ 803.623740][T11289] lock_acquire+0x179/0x350 [ 803.629930][T11289] _raw_read_lock+0x5f/0x70 [ 803.636111][T11289] __do_wait+0x105/0x890 [ 803.642036][T11289] do_wait+0x21e/0x5a0 [ 803.647785][T11289] kernel_wait+0x9f/0x160 [ 803.653797][T11289] call_usermodehelper_exec_work+0xf1/0x170 [ 803.661363][T11289] process_one_work+0x9cf/0x1b70 [ 803.667967][T11289] worker_thread+0x6c8/0xf10 [ 803.674220][T11289] kthread+0x3c5/0x780 [ 803.679985][T11289] ret_from_fork+0x5d7/0x6f0 [ 803.686258][T11289] ret_from_fork_asm+0x1a/0x30 [ 803.692694][T11289] SOFTIRQ-ON-R at: [ 803.696692][T11289] lock_acquire+0x179/0x350 [ 803.702879][T11289] _raw_read_lock+0x5f/0x70 [ 803.709063][T11289] __do_wait+0x105/0x890 [ 803.714990][T11289] do_wait+0x21e/0x5a0 [ 803.720739][T11289] kernel_wait+0x9f/0x160 [ 803.726750][T11289] call_usermodehelper_exec_work+0xf1/0x170 [ 803.734317][T11289] process_one_work+0x9cf/0x1b70 [ 803.740920][T11289] worker_thread+0x6c8/0xf10 [ 803.747176][T11289] kthread+0x3c5/0x780 [ 803.752908][T11289] ret_from_fork+0x5d7/0x6f0 [ 803.759186][T11289] ret_from_fork_asm+0x1a/0x30 [ 803.765615][T11289] INITIAL USE at: [ 803.769525][T11289] lock_acquire+0x179/0x350 [ 803.775641][T11289] _raw_write_lock_irq+0x36/0x50 [ 803.782178][T11289] copy_process+0x4caf/0x76a0 [ 803.788475][T11289] kernel_clone+0xfc/0x960 [ 803.794479][T11289] user_mode_thread+0xc7/0x110 [ 803.800834][T11289] rest_init+0x23/0x2b0 [ 803.806568][T11289] start_kernel+0x3ee/0x4d0 [ 803.812658][T11289] x86_64_start_reservations+0x18/0x30 [ 803.819705][T11289] x86_64_start_kernel+0x130/0x190 [ 803.826403][T11289] common_startup_64+0x13e/0x148 [ 803.832917][T11289] INITIAL READ USE at: [ 803.837253][T11289] lock_acquire+0x179/0x350 [ 803.843788][T11289] _raw_read_lock+0x5f/0x70 [ 803.850315][T11289] __do_wait+0x105/0x890 [ 803.856589][T11289] do_wait+0x21e/0x5a0 [ 803.862692][T11289] kernel_wait+0x9f/0x160 [ 803.869051][T11289] call_usermodehelper_exec_work+0xf1/0x170 [ 803.876964][T11289] process_one_work+0x9cf/0x1b70 [ 803.883916][T11289] worker_thread+0x6c8/0xf10 [ 803.890538][T11289] kthread+0x3c5/0x780 [ 803.896619][T11289] ret_from_fork+0x5d7/0x6f0 [ 803.903249][T11289] ret_from_fork_asm+0x1a/0x30 [ 803.910028][T11289] } [ 803.912528][T11289] ... key at: [] tasklist_lock+0x18/0x40 [ 803.920282][T11289] ... acquired at: [ 803.924083][T11289] lock_acquire+0x179/0x350 [ 803.928792][T11289] _raw_read_lock+0x5f/0x70 [ 803.933498][T11289] send_sigurg+0xed/0xc80 [ 803.938032][T11289] sk_send_sigurg+0x76/0x360 [ 803.942823][T11289] unix_stream_sendmsg+0xeb3/0x11d0 [ 803.948226][T11289] ____sys_sendmsg+0xa98/0xc70 [ 803.953180][T11289] ___sys_sendmsg+0x134/0x1d0 [ 803.958066][T11289] __sys_sendmmsg+0x200/0x420 [ 803.962954][T11289] __x64_sys_sendmmsg+0x9c/0x100 [ 803.968103][T11289] do_syscall_64+0xcd/0x4c0 [ 803.972820][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.978918][T11289] [ 803.981239][T11289] [ 803.981239][T11289] stack backtrace: [ 803.987126][T11289] CPU: 1 UID: 0 PID: 11289 Comm: syz.0.1206 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 803.987170][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.987191][T11289] Call Trace: [ 803.987201][T11289] [ 803.987214][T11289] dump_stack_lvl+0x116/0x1f0 [ 803.987268][T11289] check_irq_usage+0x7dc/0x920 [ 803.987331][T11289] ? check_path.constprop.0+0x24/0x50 [ 803.987387][T11289] ? __lock_acquire+0x1285/0x1c90 [ 803.987440][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.987482][T11289] __lock_acquire+0x1285/0x1c90 [ 803.987539][T11289] ? rcu_is_watching+0x12/0xc0 [ 803.987586][T11289] lock_acquire+0x179/0x350 [ 803.987639][T11289] ? send_sigurg+0xed/0xc80 [ 803.987696][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.987743][T11289] _raw_read_lock+0x5f/0x70 [ 803.987789][T11289] ? send_sigurg+0xed/0xc80 [ 803.987838][T11289] send_sigurg+0xed/0xc80 [ 803.987888][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.987929][T11289] ? find_held_lock+0x2b/0x80 [ 803.987975][T11289] sk_send_sigurg+0x76/0x360 [ 803.988023][T11289] unix_stream_sendmsg+0xeb3/0x11d0 [ 803.988079][T11289] ? irqentry_exit+0x3b/0x90 [ 803.988130][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.988172][T11289] ? lockdep_hardirqs_on+0x7c/0x110 [ 803.988224][T11289] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 803.988280][T11289] ? ____sys_sendmsg+0x2fe/0xc70 [ 803.988322][T11289] ____sys_sendmsg+0xa98/0xc70 [ 803.988359][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.988401][T11289] ? copy_msghdr_from_user+0x10a/0x160 [ 803.988453][T11289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.988502][T11289] ___sys_sendmsg+0x134/0x1d0 [ 803.988555][T11289] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.988606][T11289] ? find_held_lock+0x2b/0x80 [ 803.988678][T11289] __sys_sendmmsg+0x200/0x420 [ 803.988734][T11289] ? __pfx___sys_sendmmsg+0x10/0x10 [ 803.988786][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.988835][T11289] ? __pfx_do_futex+0x10/0x10 [ 803.988900][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.988942][T11289] ? xfd_validate_state+0x61/0x180 [ 803.988990][T11289] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 803.989040][T11289] __x64_sys_sendmmsg+0x9c/0x100 [ 803.989092][T11289] ? srso_alias_return_thunk+0x5/0xfbef5 [ 803.989134][T11289] ? lockdep_hardirqs_on+0x7c/0x110 [ 803.989186][T11289] do_syscall_64+0xcd/0x4c0 [ 803.989242][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.989277][T11289] RIP: 0033:0x7fa3b6d8e929 [ 803.989307][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.989343][T11289] RSP: 002b:00007fa3b7b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 803.989374][T11289] RAX: ffffffffffffffda RBX: 00007fa3b6fb6240 RCX: 00007fa3b6d8e929 [ 803.989397][T11289] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 803.989419][T11289] RBP: 00007fa3b6e10b39 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 803.989440][T11289] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 803.989462][T11289] R13: 0000000000000000 R14: 00007fa3b6fb6240 R15: 00007fffad133c78 [ 803.989495][T11289] [ 804.517923][ T5922] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 805.626916][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.728359][ T5830] bond0: (slave syz_tun): Releasing backup interface [ 805.748838][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.872714][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.043813][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.237665][ T12] bridge_slave_1: left allmulticast mode [ 806.245012][ T12] bridge_slave_1: left promiscuous mode [ 806.251058][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.262192][ T12] bridge_slave_0: left allmulticast mode [ 806.267854][ T12] bridge_slave_0: left promiscuous mode [ 806.276265][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.387596][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.398004][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.408040][ T12] bond0 (unregistering): Released all slaves [ 806.631143][ T12] hsr_slave_0: left promiscuous mode [ 806.636999][ T12] hsr_slave_1: left promiscuous mode [ 806.644149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.651820][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.659828][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.667429][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.679516][ T12] veth1_macvtap: left promiscuous mode [ 806.685041][ T12] veth0_macvtap: left promiscuous mode [ 806.691048][ T12] veth1_vlan: left promiscuous mode [ 806.696345][ T12] veth0_vlan: left promiscuous mode [ 806.884186][ T12] team0 (unregistering): Port device team_slave_1 removed [ 806.906048][ T12] team0 (unregistering): Port device team_slave_0 removed [ 807.514145][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.566656][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.634426][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.689713][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.806274][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.867861][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.918545][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.966032][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.078291][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.147890][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.196611][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.248838][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.378237][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.448000][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.527852][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.566824][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.677626][ T12] bridge_slave_1: left allmulticast mode [ 808.686723][ T12] bridge_slave_1: left promiscuous mode [ 808.692920][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.701735][ T12] bridge_slave_0: left allmulticast mode [ 808.707391][ T12] bridge_slave_0: left promiscuous mode [ 808.714713][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.724624][ T12] bridge_slave_1: left allmulticast mode [ 808.730894][ T12] bridge_slave_1: left promiscuous mode [ 808.736579][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.746835][ T12] bridge_slave_0: left allmulticast mode [ 808.752643][ T12] bridge_slave_0: left promiscuous mode [ 808.758328][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.770872][ T12] bridge_slave_1: left allmulticast mode [ 808.776528][ T12] bridge_slave_1: left promiscuous mode [ 808.784301][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.793214][ T12] bridge_slave_0: left allmulticast mode [ 808.798868][ T12] bridge_slave_0: left promiscuous mode [ 808.808118][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.818124][ T12] bridge_slave_1: left allmulticast mode [ 808.824346][ T12] bridge_slave_1: left promiscuous mode [ 808.830434][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.838800][ T12] bridge_slave_0: left allmulticast mode [ 808.844771][ T12] bridge_slave_0: left promiscuous mode [ 808.851517][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.862104][ T12] bridge_slave_1: left allmulticast mode [ 808.867760][ T12] bridge_slave_1: left promiscuous mode [ 808.874155][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.883371][ T12] bridge_slave_0: left allmulticast mode [ 808.889030][ T12] bridge_slave_0: left promiscuous mode [ 808.895131][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.914919][ T12] bond_slave_0: left promiscuous mode [ 808.923033][ T12] bond_slave_1: left promiscuous mode [ 809.224086][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.234095][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.244027][ T12] bond0 (unregistering): Released all slaves [ 809.353786][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.366134][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.375792][ T12] bond0 (unregistering): Released all slaves [ 809.464083][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.474434][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.484641][ T12] bond0 (unregistering): Released all slaves [ 809.523788][ T12] dvmrp1 (unregistering): left allmulticast mode [ 809.544302][ T12] team0: Port device geneve0 removed [ 809.614288][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.625706][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.636529][ T12] bond0 (unregistering): Released all slaves [ 809.693061][ T12] bond1 (unregistering): Released all slaves [ 809.794893][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.804776][ T12] bond0 (unregistering): Released all slaves [ 811.425541][ T12] : left promiscuous mode [ 811.481809][ T12] : left promiscuous mode [ 811.540777][ T12] : left promiscuous mode [ 811.590848][ T12] : left promiscuous mode [ 812.099850][ T12] hsr_slave_0: left promiscuous mode [ 812.105670][ T12] hsr_slave_1: left promiscuous mode [ 812.112513][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.122303][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.135213][ T12] hsr_slave_0: left promiscuous mode [ 812.141333][ T12] hsr_slave_1: left promiscuous mode