last executing test programs: 13.677703669s ago: executing program 2 (id=1014): clock_adjtime(0x0, &(0x7f00000010c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 13.415960631s ago: executing program 2 (id=1016): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x6628, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000180)={0x18, 0x0, r4}, 0x18) 13.036372497s ago: executing program 2 (id=1017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r3 = io_uring_setup(0x4d63, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) getpid() openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) 10.759846577s ago: executing program 4 (id=1024): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000080000000950000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0xe8, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@random="64059bf280de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'sit0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'hsr0\x00', 'netdevsim0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ec759c9bd8abef17d071680057cd9a6d71ad0e76926c26a2c1ab2520dfb4ce00814bdaac3aa171fdd8a6cca413899529bed424eb7511bd4aa223ebea3bcf29b0"}}}, {{@arp={@broadcast, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @remote, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r5 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x7058, &(0x7f0000000040)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x18, 0x20000000, r9) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r10, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 8.410515144s ago: executing program 4 (id=1028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 7.336476633s ago: executing program 0 (id=1030): capset(0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40000016}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 6.658022433s ago: executing program 1 (id=1032): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.421780969s ago: executing program 2 (id=1034): syz_usb_connect(0x0, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0xef, 0xaa, 0x6e, 0x10, 0x1397, 0xbd, 0xc566, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x2b, 0x3d}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) utimensat(r2, &(0x7f0000000080)='./bus\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f00001fb000/0x3000)=nil, 0x3000}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000002a40)) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200040800b0001006d61637365630000100002800c000f0000000000000000000c001980060002003a0000000500110080000000b0001a"], 0x104}}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x40, 0x4, 0x800, {{0x6, 0x4, 0x1, 0x3e, 0x18, 0x65, 0x0, 0xb, 0x2f, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@setneightbl={0x64, 0x43, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1c}, [@NDTA_NAME={0x9, 0x1, 'p\x00\x00\x00\x00'}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x9}, @NDTA_THRESH1={0x8, 0x2, 0x5}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x8}, @NDTPA_APP_PROBES={0x8, 0x9, 0x9b53}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x8}, @NDTPA_APP_PROBES={0x8, 0x9, 0x81}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) r7 = socket$inet(0x2, 0x6, 0x20005) getsockopt$inet_pktinfo(r7, 0x10d, 0xeb, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r11, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c000480180001800d000073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001000000000000c60b3409d5800450"], 0x70}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) 5.842824022s ago: executing program 4 (id=1036): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x8004551a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x80045519, 0x0) r5 = open(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {0x2}, {0x6}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open_tree(r5, &(0x7f0000000280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80000) r8 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000009, 0x13, r8, 0x0) 4.745888849s ago: executing program 1 (id=1037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) landlock_create_ruleset(&(0x7f0000000140)={0x4110, 0x2}, 0x10, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3f, 0x1, 0x5, 0x2210, r2, 0x0, '\x00', 0x0, r2, 0x0, 0x2, 0x3, 0xc}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = accept4(r7, 0x0, 0x0, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f00000010c0)=0xffff) recvmsg$kcm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/64, 0x40}], 0x1}, 0x0) sendmmsg$unix(r10, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000012c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r7]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60, 0x4004080}}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001bc0)}, {&(0x7f0000000480)="a1d57d8556af6fbc3bd84f5903bce2d617ad8e27f366e4d754a5f6", 0x1b}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{0x0}], 0x1, &(0x7f0000003380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x80}}], 0x5, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a32"], 0x88}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef40d000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 4.436244312s ago: executing program 3 (id=1038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 4.26712274s ago: executing program 4 (id=1039): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0xe020600) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)) 4.152133071s ago: executing program 3 (id=1040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000b4000040"]) 4.093341136s ago: executing program 4 (id=1041): syz_usb_connect$cdc_ecm(0x5, 0x64, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "55d102a9f0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0xfe00, 0x13, 0x6}, [@obex={0x5, 0x24, 0x15, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x31}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x6, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1d, 0x1, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0x3, 0x1}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x12, 0x2, 0x3a, 0x0, 0x2}, 0x51, &(0x7f0000000100)={0x5, 0xf, 0x51, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x7f, 0x6, 0x8, 0xf00f, 0xfffd, [0x3f00, 0xcf, 0xff00c0, 0xc030, 0x3fc0, 0x1fe0000]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x3, 0x8001}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "3ad6faa1abcd0ca861e014693af4d332"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}]}) r0 = userfaultfd(0x80001) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000019c0)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00009bd000/0x4000)=nil, 0x4000}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="23010000000000206d0404c740000102030109022400010100000009040f0000090301020009210000000122000009058103000000000002371551a781cb2a187a2baa268977863d03a33373752b138b523a60370e68d7e0cc582bdf727d73978254967f7d6807f19c0ca3121c03a4a9b6f682052df39c61008cdb42f9662524a9bc2b302fe6c8e88ffa72facc345d7d8a71291d6b8309f1a81d2d77ac2c07deee3efc861a"], 0x0) 3.754485562s ago: executing program 3 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r1, 0x917}, 0x14}, 0x1, 0x620b}, 0x0) 3.684084056s ago: executing program 0 (id=1043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f0000000000)=""/167, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd5}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) 3.527849066s ago: executing program 3 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) r1 = socket(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000240)=[{0x0, 0x15, 0x0, 0x8}, {0x3, 0x0, 0x6, 0x7}, {0x2, 0x7, 0x0, 0x5}, {0x2, 0x80, 0x5, 0x4}, {0x7, 0x7, 0x6, 0x6}]}) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x8, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x9, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x9, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYBLOB="6d93000000000000972567440e8ce8a60600000100000008000300020000000c0006000000000000000000b14ad6b5d53805a20bb99afeab5949e0ce1b45169ab3cc6f541be1222342d848cc6b6ef528e0b88c98a9089afca19127d923bb7af4ab14c92859d16affc96c18065ca7cf7c"], 0x28}}, 0x840) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b00000081"]) 3.214569948s ago: executing program 0 (id=1047): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.145067256s ago: executing program 1 (id=1048): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x6628, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000180)={0x18, 0x0, r4}, 0x18) 2.775354937s ago: executing program 1 (id=1049): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x10001, 0x4) 2.508185474s ago: executing program 3 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000040)={0x2}, 0x12) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2.50267329s ago: executing program 1 (id=1051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) 1.231437649s ago: executing program 3 (id=1052): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet6(0xa, 0x3, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32=r6, @ANYBLOB="08000a00251c"], 0x24}}, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10) sendmsg$sock(r3, &(0x7f0000000280)={&(0x7f0000000200)=@nl=@kern={0x10, 0x0, 0x0, 0x400}, 0x80, 0x0}, 0x4040000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(r7, 0x1, 0x0, &(0x7f00000002c0), 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r0, 0x0) 1.20119783s ago: executing program 4 (id=1053): capset(0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffff001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40000016}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x1, 0x1000) 1.138268449s ago: executing program 0 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) fsopen(0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, 0x0}, 0x20040050) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x40) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) 1.137097301s ago: executing program 2 (id=1055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) 73.388452ms ago: executing program 1 (id=1056): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) 0s ago: executing program 0 (id=1057): syz_usb_connect(0x0, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0xef, 0xaa, 0x6e, 0x10, 0x1397, 0xbd, 0xc566, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x2b, 0x3d}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) utimensat(r2, &(0x7f0000000080)='./bus\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f00001fb000/0x3000)=nil, 0x3000}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000002a40)) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200040800b0001006d61637365630000100002800c000f0000000000000000000c001980060002003a0000000500110080000000b0001a"], 0x104}}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x40, 0x4, 0x800, {{0x6, 0x4, 0x1, 0x3e, 0x18, 0x65, 0x0, 0xb, 0x2f, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=@setneightbl={0x64, 0x43, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1c}, [@NDTA_NAME={0x9, 0x1, 'p\x00\x00\x00\x00'}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x9}, @NDTA_THRESH1={0x8, 0x2, 0x5}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x8}, @NDTPA_APP_PROBES={0x8, 0x9, 0x9b53}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x8}, @NDTPA_APP_PROBES={0x8, 0x9, 0x81}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) r7 = socket$inet(0x2, 0x6, 0x20005) getsockopt$inet_pktinfo(r7, 0x10d, 0xeb, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r11, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c000480180001800d000073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001000000000000c60b3409d5800450"], 0x70}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) kernel console output (not intermixed with test programs): f19 code=0x7ffc0000 [ 180.975209][ T29] audit: type=1326 audit(1721764935.533:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0591775f19 code=0x7ffc0000 [ 181.103116][ T930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.157922][ T6465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.245508][ T6465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.298676][ T6465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.395871][ T6465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.423621][ T930] usb 3-1: Using ep0 maxpacket: 32 [ 181.455311][ T930] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.532920][ T6616] xt_TCPMSS: Only works on TCP SYN packets [ 181.563314][ T930] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 181.607436][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.687814][ T930] usb 3-1: config 0 descriptor?? [ 181.751920][ T930] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 182.305706][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.331005][ T930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.355007][ T6465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.637098][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.077486][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.096968][ T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.140285][ T6465] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.147826][ T8] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 183.160547][ T930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.187682][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.194867][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.204424][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.213916][ T930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.251533][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.258798][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.275861][ T8] usb 1-1: config 0 descriptor?? [ 183.303656][ T930] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 183.329632][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.359735][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 183.391708][ T930] usb 5-1: config 0 descriptor?? [ 183.438512][ T6635] netlink: 'syz.3.424': attribute type 18 has an invalid length. [ 183.492483][ T1158] usb 3-1: USB disconnect, device number 4 [ 183.641193][ T6635] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.650541][ T6635] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.659688][ T6635] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.660686][ T930] usbhid 5-1:0.0: can't add hid device: -71 [ 183.668746][ T6635] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.702630][ T930] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.726022][ T6635] vxlan0: entered promiscuous mode [ 183.777186][ T930] usb 5-1: USB disconnect, device number 4 [ 183.859623][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 183.883157][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 183.942204][ T8] usb 1-1: USB disconnect, device number 2 [ 183.988029][ T6465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.033056][ T6465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.673658][ T5101] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 185.573203][ T6660] xt_TCPMSS: Only works on TCP SYN packets [ 185.614796][ T6465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.869842][ T6465] veth0_vlan: entered promiscuous mode [ 185.883539][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.926842][ T6465] veth1_vlan: entered promiscuous mode [ 185.957369][ T5149] IPVS: starting estimator thread 0... [ 186.024693][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.077250][ T6465] veth0_macvtap: entered promiscuous mode [ 186.093348][ T6668] IPVS: using max 17 ests per chain, 40800 per kthread [ 186.164280][ T6465] veth1_macvtap: entered promiscuous mode [ 186.249063][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.302451][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.327922][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.373752][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.411827][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.441220][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.529457][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.572929][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.613170][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.663406][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.693761][ T6675] ======================================================= [ 186.693761][ T6675] WARNING: The mand mount option has been deprecated and [ 186.693761][ T6675] and is ignored by this kernel. Remove the mand [ 186.693761][ T6675] option from the mount to silence this warning. [ 186.693761][ T6675] ======================================================= [ 186.745129][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.805907][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.883144][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.923626][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.973288][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.997828][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.023622][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.052291][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.087464][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.109286][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.133141][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.166252][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.206177][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 187.233897][ T6679] netlink: 'syz.0.437': attribute type 18 has an invalid length. [ 187.298201][ T6679] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.307970][ T6679] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.317685][ T6679] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.326516][ T6679] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.371067][ T6679] vxlan0: entered promiscuous mode [ 187.474921][ T6465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.503166][ T6465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.533369][ T6465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.562503][ T6465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.873320][ T5177] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.938472][ T6694] xt_TCPMSS: Only works on TCP SYN packets [ 188.034369][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.042233][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.137763][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.203677][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.238133][ T5177] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 188.312654][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.336044][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 188.336058][ T29] audit: type=1326 audit(1721764943.673:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6695 comm="syz.0.444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3012775f19 code=0x0 [ 188.404690][ T5177] usb 5-1: config 0 descriptor?? [ 188.409960][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.464989][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.048530][ T5177] usbhid 5-1:0.0: can't add hid device: -71 [ 189.063400][ T5177] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 189.128839][ T5177] usb 5-1: USB disconnect, device number 5 [ 189.823164][ T5147] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.293689][ T5147] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 190.666068][ T6723] xt_TCPMSS: Only works on TCP SYN packets [ 190.705092][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.757254][ T5147] usb 3-1: config 0 descriptor?? [ 190.857144][ T6726] [U] [ 190.859868][ T6726] [U] \ÏfŸN#k·v”„í42yÛìÐláÞ% [ 190.864674][ T6726] [U] ˆŠ [ 190.867666][ T6726] [U] [ 190.870394][ T6726] [U] [ 190.882281][ T6726] [U] [ 190.885123][ T6726] [U] [ 190.887868][ T6726] [U] [ 190.890597][ T6726] [U] [ 190.895467][ T6726] [U] [ 190.898187][ T6726] [U] [ 190.900883][ T6726] [U] [ 190.974873][ T5147] usb 3-1: can't set first interface for hiFace device. [ 190.981849][ T5147] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 191.048120][ T5147] usb 3-1: USB disconnect, device number 5 [ 191.414612][ T6720] [U] [ 191.761794][ T29] audit: type=1326 audit(1721764947.093:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe575f19 code=0x7fc00000 [ 191.866586][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.457'. [ 191.948187][ T29] audit: type=1326 audit(1721764947.283:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f32fe575f19 code=0x7fc00000 [ 192.123067][ T29] audit: type=1326 audit(1721764947.423:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fe575f19 code=0x7fc00000 [ 194.526426][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563916][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.633192][ T930] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.973165][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 195.018919][ T930] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.090777][ T930] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 195.139009][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.198015][ T930] usb 5-1: config 0 descriptor?? [ 195.278773][ T930] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 196.635152][ T29] audit: type=1326 audit(1721764951.973:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 196.716353][ T29] audit: type=1326 audit(1721764951.993:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 196.841691][ T8] usb 5-1: USB disconnect, device number 6 [ 196.995065][ T4487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.043413][ T4487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.052049][ T4487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.083941][ T4487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.084153][ T29] audit: type=1326 audit(1721764952.403:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 197.114805][ T4487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 197.123739][ T4487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.221627][ T29] audit: type=1326 audit(1721764952.403:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 197.749678][ T29] audit: type=1326 audit(1721764952.403:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 197.794628][ T29] audit: type=1326 audit(1721764952.403:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 197.817337][ T29] audit: type=1326 audit(1721764952.403:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 197.858077][ T6805] ip6gretap0 speed is unknown, defaulting to 1000 [ 197.887454][ T29] audit: type=1326 audit(1721764952.403:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 198.016629][ T29] audit: type=1326 audit(1721764952.403:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 198.113280][ T29] audit: type=1326 audit(1721764952.403:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.0.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3012775f19 code=0x7fc00000 [ 198.567661][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 198.623272][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 198.876727][ T8] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 198.963152][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.979113][ T8] usb 1-1: config 0 descriptor?? [ 199.042264][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 199.334988][ T5101] Bluetooth: hci6: command tx timeout [ 199.544513][ T8] usb 1-1: can't set first interface for hiFace device. [ 199.551646][ T8] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 199.584931][ T8] usb 1-1: USB disconnect, device number 3 [ 199.839032][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.871298][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.892006][ T6805] bridge_slave_0: entered allmulticast mode [ 199.937433][ T6805] bridge_slave_0: entered promiscuous mode [ 200.683939][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.691142][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.773217][ T6805] bridge_slave_1: entered allmulticast mode [ 200.820695][ T6805] bridge_slave_1: entered promiscuous mode [ 200.986274][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.040318][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.289102][ T6805] team0: Port device team_slave_0 added [ 201.303207][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.339254][ T6805] team0: Port device team_slave_1 added [ 201.393217][ T5099] Bluetooth: hci6: command tx timeout [ 201.523121][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 201.551928][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.582246][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.599467][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.632011][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 201.663575][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.715856][ T5099] Bluetooth: hci0: command 0x0406 tx timeout [ 201.723121][ T5099] Bluetooth: hci1: command 0x0406 tx timeout [ 201.732478][ T25] usb 2-1: config 0 descriptor?? [ 201.737627][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.843851][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 201.854675][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.861751][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.023158][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.192336][ T6805] hsr_slave_0: entered promiscuous mode [ 203.199372][ T6805] hsr_slave_1: entered promiscuous mode [ 203.208791][ T6805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.228176][ T6805] Cannot create hsr debugfs directory [ 203.483406][ T5101] Bluetooth: hci6: command tx timeout [ 204.591913][ T58] usb 2-1: USB disconnect, device number 3 [ 204.805989][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 205.572387][ T5101] Bluetooth: hci6: command tx timeout [ 205.640337][ T6805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.793215][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 205.845822][ T6805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.034390][ T58] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 206.066224][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.144287][ T58] usb 3-1: config 0 descriptor?? [ 206.181530][ T58] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 206.552171][ T5095] usb 3-1: USB disconnect, device number 6 [ 206.558445][ T6805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.603445][ T6805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.074507][ T6805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.135452][ T6805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.564614][ T6805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.640758][ T6805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.035434][ T6805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.156937][ T6805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.207325][ T6805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.269804][ T6805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.727141][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.911127][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.972319][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.979561][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.072906][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.080144][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.370746][ T6805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.397434][ T6938] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 209.524368][ T6938] overlayfs: conflicting lowerdir path [ 209.712354][ T5101] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 211.022744][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.096273][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 211.096293][ T29] audit: type=1326 audit(1721764966.433:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 211.163457][ T6964] ip6gretap0 speed is unknown, defaulting to 1000 [ 211.176269][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 211.243097][ T29] audit: type=1326 audit(1721764966.463:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 212.186762][ T29] audit: type=1326 audit(1721764967.283:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 212.214337][ T6805] veth0_vlan: entered promiscuous mode [ 212.312951][ T29] audit: type=1326 audit(1721764967.293:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 212.468425][ T6805] veth1_vlan: entered promiscuous mode [ 212.616855][ T29] audit: type=1326 audit(1721764967.303:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 212.654633][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 212.904635][ T29] audit: type=1326 audit(1721764967.323:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 213.213595][ T29] audit: type=1326 audit(1721764967.373:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 213.295492][ T29] audit: type=1326 audit(1721764967.373:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 213.373805][ T29] audit: type=1326 audit(1721764967.373:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 213.451602][ T6805] veth0_macvtap: entered promiscuous mode [ 213.463170][ T29] audit: type=1326 audit(1721764967.373:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.2.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec6f575f19 code=0x7fc00000 [ 213.520422][ T6805] veth1_macvtap: entered promiscuous mode [ 213.587988][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.626314][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.671573][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.702727][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.743235][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.782043][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.803602][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.823941][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.853116][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.873411][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.899096][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.958881][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.017931][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.061495][ T6996] sp0: Synchronizing with TNC [ 214.089225][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.143138][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.170873][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.193949][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.209141][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.229814][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.242453][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.264906][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.307638][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.327652][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.345958][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.361660][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.398994][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.765825][ T6805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.843148][ T6805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.878630][ T6805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.934367][ T6805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.095622][ T5101] Bluetooth: hci0: unexpected event for opcode 0x86c5 [ 215.517923][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.576650][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.762661][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.783105][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.905963][ T7042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.686332][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.097001][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 219.373142][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 219.383260][ T25] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 219.433374][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.505369][ T25] usb 1-1: config 0 descriptor?? [ 220.037854][ T7066] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 220.360466][ T25] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.410945][ T25] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 220.464599][ T25] asix 1-1:0.0: probe with driver asix failed with error -71 [ 220.481369][ T25] usb 1-1: USB disconnect, device number 4 [ 221.695527][ T7076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.883543][ T1047] bridge_slave_1: left allmulticast mode [ 223.893295][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.911398][ T1047] bridge_slave_1: left promiscuous mode [ 223.944285][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.988902][ T1047] bridge_slave_0: left allmulticast mode [ 224.013452][ T1047] bridge_slave_0: left promiscuous mode [ 224.019373][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.113545][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 224.140556][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 224.202745][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 224.232524][ T25] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 224.272430][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.354696][ T25] usb 3-1: config 0 descriptor?? [ 224.387713][ T7101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.908328][ T25] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 225.138721][ T9] usb 3-1: USB disconnect, device number 7 [ 226.650527][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.734017][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.764604][ T1047] bond0 (unregistering): Released all slaves [ 226.979753][ T1047] tipc: Disabling bearer [ 227.014266][ T1047] tipc: Left network mode [ 227.057774][ T4487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.068460][ T4487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.078759][ T4487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.090112][ T4487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.097878][ T4487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.105396][ T4487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.400465][ T7135] ip6gretap0 speed is unknown, defaulting to 1000 [ 227.806947][ T1047] hsr_slave_0: left promiscuous mode [ 227.840519][ T1047] hsr_slave_1: left promiscuous mode [ 227.860285][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.898404][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.942460][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.964949][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.023704][ T1047] veth1_macvtap: left promiscuous mode [ 228.085985][ T1047] veth0_macvtap: left promiscuous mode [ 228.091616][ T1047] veth1_vlan: left promiscuous mode [ 228.107471][ T1047] veth0_vlan: left promiscuous mode [ 229.153575][ T4487] Bluetooth: hci1: command tx timeout [ 229.361442][ T5101] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.383337][ T5101] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.393795][ T5101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.417438][ T5101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.425502][ T5101] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.439760][ T5101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.714483][ T4487] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 229.723944][ T4487] Bluetooth: hci3: Injecting HCI hardware error event [ 229.732186][ T4487] Bluetooth: hci3: hardware error 0x00 [ 230.083877][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 230.278227][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 231.233661][ T5101] Bluetooth: hci1: command tx timeout [ 231.553453][ T5101] Bluetooth: hci7: command tx timeout [ 231.803198][ T4487] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 232.371713][ T7150] ip6gretap0 speed is unknown, defaulting to 1000 [ 232.932698][ T7135] chnl_net:caif_netlink_parms(): no params data found [ 233.074955][ T7173] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 233.313373][ T4487] Bluetooth: hci1: command tx timeout [ 233.644557][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.651739][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.663215][ T4487] Bluetooth: hci7: command tx timeout [ 233.703283][ T7135] bridge_slave_0: entered allmulticast mode [ 233.710536][ T7135] bridge_slave_0: entered promiscuous mode [ 233.733257][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.741457][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.748898][ T7135] bridge_slave_1: entered allmulticast mode [ 233.756083][ T7135] bridge_slave_1: entered promiscuous mode [ 233.947256][ T7135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.015542][ T7135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.120318][ T7150] chnl_net:caif_netlink_parms(): no params data found [ 234.291718][ T7135] team0: Port device team_slave_0 added [ 234.327327][ T7135] team0: Port device team_slave_1 added [ 234.698366][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.750674][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.873172][ T7135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.133859][ T7135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.143188][ T7135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.243153][ T7135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.394632][ T4487] Bluetooth: hci1: command tx timeout [ 235.562593][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.643454][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.683578][ T7150] bridge_slave_0: entered allmulticast mode [ 235.713191][ T4487] Bluetooth: hci7: command tx timeout [ 235.716545][ T7150] bridge_slave_0: entered promiscuous mode [ 236.458503][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.473428][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.493327][ T7150] bridge_slave_1: entered allmulticast mode [ 236.527018][ T7150] bridge_slave_1: entered promiscuous mode [ 236.684803][ T7135] hsr_slave_0: entered promiscuous mode [ 236.833694][ T7135] hsr_slave_1: entered promiscuous mode [ 237.166374][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.315249][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.793166][ T4487] Bluetooth: hci7: command tx timeout [ 237.836303][ T7150] team0: Port device team_slave_0 added [ 237.915970][ T7150] team0: Port device team_slave_1 added [ 238.103134][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 238.118961][ T7135] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.323217][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 238.345865][ T8] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 238.405849][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.454216][ T8] usb 3-1: config 0 descriptor?? [ 238.997338][ T7135] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.093890][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.123089][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.264852][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.473772][ T7135] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.525347][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 239.581594][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.633416][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.791740][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.846870][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 239.888501][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 239.954434][ T8] asix 3-1:0.0: probe with driver asix failed with error -71 [ 239.999144][ T8] usb 3-1: USB disconnect, device number 8 [ 240.214360][ T7135] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.656690][ T7150] hsr_slave_0: entered promiscuous mode [ 240.716862][ T7150] hsr_slave_1: entered promiscuous mode [ 240.744104][ T7150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.833315][ T7150] Cannot create hsr debugfs directory [ 241.953985][ T5101] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 241.974610][ T5101] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 241.993199][ T5101] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 242.053790][ T5101] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 242.064753][ T5101] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 242.090140][ T5101] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 242.500231][ T7150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.663406][ T7135] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.984018][ T7135] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.041763][ T7135] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.220815][ T7150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.424945][ T7135] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.690164][ T7229] ip6gretap0 speed is unknown, defaulting to 1000 [ 243.867723][ T7150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.116448][ T4487] Bluetooth: hci8: command tx timeout [ 245.044676][ T7150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.758147][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.114024][ T7135] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.194053][ T4487] Bluetooth: hci8: command tx timeout [ 247.333268][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 247.475213][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.482365][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.664383][ T7150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.876911][ T7150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.929401][ T7150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.085198][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.092422][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.208347][ T7150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.274031][ T4487] Bluetooth: hci8: command tx timeout [ 248.386766][ T7229] chnl_net:caif_netlink_parms(): no params data found [ 249.483600][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.543283][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.577482][ T7229] bridge_slave_0: entered allmulticast mode [ 249.654864][ T7229] bridge_slave_0: entered promiscuous mode [ 249.720246][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.764628][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.771977][ T7229] bridge_slave_1: entered allmulticast mode [ 250.259747][ T7229] bridge_slave_1: entered promiscuous mode [ 250.353324][ T4487] Bluetooth: hci8: command tx timeout [ 251.074723][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.129701][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.510962][ T7229] team0: Port device team_slave_0 added [ 251.567512][ T7229] team0: Port device team_slave_1 added [ 251.751460][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.789383][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.880434][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.994448][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.001452][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.121085][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.172530][ T7150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.247705][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.542727][ T7229] hsr_slave_0: entered promiscuous mode [ 252.600730][ T7229] hsr_slave_1: entered promiscuous mode [ 252.672312][ T7229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.700380][ T7229] Cannot create hsr debugfs directory [ 252.715424][ T7150] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.653992][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.661303][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.935522][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.942664][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.511347][ T7229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.549117][ T7229] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.957213][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.966919][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981338][ T7135] veth0_vlan: entered promiscuous mode [ 256.177679][ T7229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.211505][ T7229] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.468489][ T7229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.513453][ T7229] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.596407][ T7135] veth1_vlan: entered promiscuous mode [ 256.629404][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.767968][ T7229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.823218][ T7229] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.894471][ T7326] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 257.068279][ T7135] veth0_macvtap: entered promiscuous mode [ 257.135056][ T7135] veth1_macvtap: entered promiscuous mode [ 257.378656][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.420110][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.480125][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.533338][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.574261][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.612084][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.622268][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.646307][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.686827][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.706521][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.728666][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.747630][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.788736][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.827306][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.872889][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.944045][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.033023][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.042897][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.116542][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.173226][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.193569][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.213967][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.245814][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.333260][ T7135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.363073][ T7135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.423770][ T7135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.546064][ T7135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.624289][ T7135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.643217][ T7135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.652032][ T7135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.701157][ T7150] veth0_vlan: entered promiscuous mode [ 258.768933][ T7229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.884481][ T7229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.926849][ T7229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.991164][ T7150] veth1_vlan: entered promiscuous mode [ 259.111981][ T7229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.616871][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.654430][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.724140][ T35] bond0 (unregistering): Released all slaves [ 260.834256][ T25] ip6gretap0 speed is unknown, defaulting to 1000 [ 260.936165][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.967141][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.006740][ T7150] veth0_macvtap: entered promiscuous mode [ 261.087258][ T7150] veth1_macvtap: entered promiscuous mode [ 261.126545][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.181098][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.395922][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.443928][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.485395][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.530361][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.542501][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.563470][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.593017][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.613130][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.645297][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.673045][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.712744][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.753131][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.783149][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.813444][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.844553][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.005783][ T7331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.101868][ T35] hsr_slave_0: left promiscuous mode [ 262.157655][ T35] hsr_slave_1: left promiscuous mode [ 262.168111][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.185644][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.207589][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.433338][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.490809][ T35] veth1_macvtap: left promiscuous mode [ 262.534475][ T35] veth0_macvtap: left promiscuous mode [ 262.541362][ T35] veth1_vlan: left promiscuous mode [ 262.547117][ T35] veth0_vlan: left promiscuous mode [ 263.163669][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 264.667714][ T35] team0 (unregistering): Port device team_slave_1 removed [ 264.826019][ T35] team0 (unregistering): Port device team_slave_0 removed [ 265.984057][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.999351][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.009401][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.025090][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.032780][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 266.040365][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.673680][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.693064][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.721662][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.742673][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.793007][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.823077][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.854396][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.883157][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.923029][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.943010][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.970449][ T7150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.001434][ T7150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.042221][ T7150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.231618][ T7150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.271623][ T7150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.314162][ T7150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.362862][ T7150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.770240][ T7353] netlink: 64 bytes leftover after parsing attributes in process `syz.4.635'. [ 267.823393][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 267.864395][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 268.063896][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.130283][ T5101] Bluetooth: hci4: command tx timeout [ 268.307040][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.363204][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.435351][ T4487] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 268.455229][ T4487] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 268.470199][ T4487] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 268.479306][ T4487] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 268.487577][ T4487] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 268.495033][ T4487] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.624240][ T7229] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.889819][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.897052][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.991840][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.999075][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.083823][ T7246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.105382][ T7246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.193550][ T5101] Bluetooth: hci4: command tx timeout [ 270.349973][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 270.423309][ T7376] ieee802154 phy0 wpan0: encryption failed: -90 [ 270.593653][ T5101] Bluetooth: hci9: command tx timeout [ 271.399335][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.409241][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.419695][ T7349] bridge_slave_0: entered allmulticast mode [ 271.427692][ T7349] bridge_slave_0: entered promiscuous mode [ 271.445673][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.452843][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.487737][ T7349] bridge_slave_1: entered allmulticast mode [ 271.505198][ T7349] bridge_slave_1: entered promiscuous mode [ 271.527732][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 271.557278][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.736893][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.876180][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.273619][ T5101] Bluetooth: hci4: command tx timeout [ 272.366950][ T7349] team0: Port device team_slave_0 added [ 272.406464][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.421845][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.444961][ T7357] bridge_slave_0: entered allmulticast mode [ 272.452671][ T7357] bridge_slave_0: entered promiscuous mode [ 272.480793][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.507701][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.526487][ T7357] bridge_slave_1: entered allmulticast mode [ 272.544114][ T7357] bridge_slave_1: entered promiscuous mode [ 272.638795][ T7349] team0: Port device team_slave_1 added [ 272.673100][ T5101] Bluetooth: hci9: command tx timeout [ 272.898067][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.930180][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.965546][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.983267][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.019086][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.043176][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 273.156617][ T7229] veth0_vlan: entered promiscuous mode [ 273.177516][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.192307][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.251902][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.265523][ T25] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 273.283946][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.331772][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.370858][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 273.402250][ T7357] team0: Port device team_slave_0 added [ 273.415314][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.449342][ T7357] team0: Port device team_slave_1 added [ 273.482045][ T7229] veth1_vlan: entered promiscuous mode [ 273.488649][ T25] usb 2-1: config 0 descriptor?? [ 273.711465][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.743385][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.780712][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.849211][ T7349] hsr_slave_0: entered promiscuous mode [ 273.895433][ T7349] hsr_slave_1: entered promiscuous mode [ 273.905920][ T25] corsair 0003:1B1C:1B3E.0002: failed to start in urb: -90 [ 273.925156][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.944365][ T25] corsair 0003:1B1C:1B3E.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 273.963983][ T7349] Cannot create hsr debugfs directory [ 273.987428][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.198085][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.218367][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.278097][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.337640][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.393249][ T5101] Bluetooth: hci4: command tx timeout [ 274.514081][ T5177] usb 2-1: USB disconnect, device number 4 [ 274.754240][ T5101] Bluetooth: hci9: command tx timeout [ 275.289446][ T7229] veth0_macvtap: entered promiscuous mode [ 275.357480][ T7229] veth1_macvtap: entered promiscuous mode [ 275.500968][ T7416] ieee802154 phy0 wpan0: encryption failed: -90 [ 275.554685][ T7357] hsr_slave_0: entered promiscuous mode [ 275.593732][ T7357] hsr_slave_1: entered promiscuous mode [ 275.614119][ T7357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.622216][ T7357] Cannot create hsr debugfs directory [ 275.762512][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.799760][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.813111][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.824179][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.834605][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.845937][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.856127][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.866719][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.896522][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.914109][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.936222][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.948942][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.975856][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.007925][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.029675][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.216348][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.240528][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.271900][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.316880][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.330043][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.342877][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.354558][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.367609][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.381634][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.401086][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.419042][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.434810][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.447533][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.459253][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.485919][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.621192][ T7229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.667151][ T7229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.693343][ T7229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.717823][ T7229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.873016][ T5101] Bluetooth: hci9: command tx timeout [ 277.932832][ T7427] use of bytesused == 0 is deprecated and will be removed in the future, [ 277.946149][ T7427] use the actual size instead. [ 278.062388][ T7434] netlink: 'syz.1.655': attribute type 11 has an invalid length. [ 278.204806][ T7349] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.519466][ T7349] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.625234][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.649867][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.766721][ T7349] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.777743][ T5095] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 278.919333][ T7349] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.960352][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.982088][ T5095] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 278.991068][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.019910][ T5095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.067637][ T5095] usb 5-1: config 0 descriptor?? [ 279.124536][ T5095] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 279.332789][ T7349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.425487][ T7349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.438179][ T5095] usb 5-1: USB disconnect, device number 7 [ 279.620352][ T7448] ieee802154 phy0 wpan0: encryption failed: -90 [ 279.675066][ T7357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.711923][ T7349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.742881][ T7349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.976530][ T7357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.114934][ T7458] program syz.4.662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.192396][ T7357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.324646][ T7452] kvm: emulating exchange as write [ 280.349555][ T7357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.609151][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.782297][ T7462] netlink: 44 bytes leftover after parsing attributes in process `syz.1.663'. [ 280.898709][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.021447][ T7357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 281.092703][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.099856][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.150738][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.157905][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.218989][ T7357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.261309][ T7357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.521264][ T7357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.526884][ T7472] netlink: 1212 bytes leftover after parsing attributes in process `syz.1.664'. [ 282.879469][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.006730][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.037786][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.045001][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.047000][ C0] eth0: bad gso: type: 1, size: 1408 [ 283.078436][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.085665][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.539426][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.783147][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.066491][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 284.293221][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.379677][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 284.439170][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 284.493925][ T7349] veth0_vlan: entered promiscuous mode [ 284.500825][ T9] usb 2-1: Manufacturer: syz [ 284.589027][ T9] usb 2-1: config 0 descriptor?? [ 284.643124][ T7509] netlink: 'syz.4.675': attribute type 79 has an invalid length. [ 284.690235][ T7349] veth1_vlan: entered promiscuous mode [ 284.742645][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.828377][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.854016][ T9] rc_core: IR keymap rc-hauppauge not found [ 284.859966][ T9] Registered IR keymap rc-empty [ 284.863614][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.890969][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 284.959673][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 285.030217][ T7357] veth0_vlan: entered promiscuous mode [ 285.056619][ T9] usb 2-1: USB disconnect, device number 5 [ 285.079819][ T7349] veth0_macvtap: entered promiscuous mode [ 285.139637][ T7349] veth1_macvtap: entered promiscuous mode [ 285.234834][ T7357] veth1_vlan: entered promiscuous mode [ 285.316650][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.363046][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.412110][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.452419][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.483379][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.533305][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.563228][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.593181][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.632663][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.653050][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.703215][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.743122][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.764085][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.803038][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.824879][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.853150][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.905642][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.964031][ T930] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 286.020999][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.089342][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.133253][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.167793][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.193808][ T930] usb 1-1: Using ep0 maxpacket: 32 [ 286.203230][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.233700][ T930] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.274607][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.285043][ T930] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.325909][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.353734][ T930] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 286.387585][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.399222][ T930] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 286.440285][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.451231][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.464192][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.468882][ T930] usb 1-1: Product: syz [ 286.483392][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.523464][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.854910][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.123097][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.185189][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.205416][ T930] usb 1-1: Manufacturer: syz [ 287.217391][ T930] hub 1-1:4.0: USB hub found [ 287.236031][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.451944][ T7349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.496929][ T930] hub 1-1:4.0: 2 ports detected [ 287.501515][ T7349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.533204][ T7349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.563129][ T7349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.647249][ T7357] veth0_macvtap: entered promiscuous mode [ 287.676577][ T7541] netlink: 'syz.1.685': attribute type 79 has an invalid length. [ 287.761268][ T7357] veth1_macvtap: entered promiscuous mode [ 287.929519][ T930] hub 1-1:4.0: set hub depth failed [ 287.970486][ T930] usb 1-1: USB disconnect, device number 5 [ 288.073541][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.099502][ T1047] Bluetooth: hci3: Frame reassembly failed (-84) [ 288.127864][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.183119][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.214473][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.234040][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.253361][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.297208][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.323006][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.344502][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.372184][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.395017][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.413335][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.433319][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.483236][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.515722][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.541466][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.551532][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.576282][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.598856][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.697496][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.708539][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.720138][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.730724][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.741089][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.760505][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.772271][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.800830][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.811067][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.821932][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.842410][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.863279][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.894354][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.913640][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.933088][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.953050][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.973255][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.003998][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.027648][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.132850][ T7357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.144297][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.173170][ T7357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.181965][ T7357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.196408][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.235487][ T7357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.421631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.439759][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.590691][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.618901][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.613079][ T5101] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 290.811347][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.853213][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.179229][ T7555] netlink: 'syz.2.690': attribute type 29 has an invalid length. [ 291.223228][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 291.241617][ T7555] netlink: 'syz.2.690': attribute type 29 has an invalid length. [ 291.269806][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 291.333314][ T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 291.558430][ T7567] netlink: 'syz.0.694': attribute type 79 has an invalid length. [ 291.565605][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.615027][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.671323][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.726170][ T58] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 291.770033][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.802386][ T58] usb 2-1: config 0 descriptor?? [ 292.270242][ T58] acrux 0003:1A34:0802.0003: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 292.303872][ T58] acrux 0003:1A34:0802.0003: no inputs found [ 292.323128][ T58] acrux 0003:1A34:0802.0003: Failed to enable force feedback support, error: -19 [ 292.386806][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 292.386819][ T29] audit: type=1326 audit(1721765047.723:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7578 comm="syz.2.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5577175f19 code=0x0 [ 292.403203][ T5095] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 292.421718][ T5146] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 292.637285][ T5146] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 292.657047][ T5146] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 292.674034][ T5095] usb 4-1: Using ep0 maxpacket: 32 [ 292.676437][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.699947][ T5095] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.715739][ T5146] usb 1-1: config 0 descriptor?? [ 292.745693][ T5095] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 292.751291][ T5146] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 292.780891][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.824924][ T5095] usb 4-1: config 0 descriptor?? [ 292.858153][ T5095] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 293.097472][ T58] usb 2-1: USB disconnect, device number 6 [ 293.345065][ T8] usb 1-1: USB disconnect, device number 6 [ 293.848054][ T7592] netlink: 'syz.1.704': attribute type 29 has an invalid length. [ 293.856115][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 293.941331][ T7594] netlink: 'syz.1.704': attribute type 29 has an invalid length. [ 293.993295][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 294.500306][ T5095] usb 4-1: USB disconnect, device number 4 [ 294.619286][ T7603] netem: change failed [ 295.444815][ T7619] hub 6-0:1.0: USB hub found [ 295.450964][ T7619] hub 6-0:1.0: 1 port detected [ 296.536472][ T7622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.784622][ T7641] netem: change failed [ 299.393108][ T4487] Bluetooth: hci5: command 0x0406 tx timeout [ 300.084964][ T4487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.100278][ T4487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.108829][ T4487] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.125018][ T4487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.133003][ T4487] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.140466][ T4487] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.293120][ T5146] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 301.385284][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 301.412224][ T5146] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.433377][ T5146] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 301.443244][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.458498][ T5146] usb 1-1: config 0 descriptor?? [ 301.488775][ T5146] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 301.844635][ T930] usb 1-1: USB disconnect, device number 7 [ 303.380570][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 303.414528][ T4487] Bluetooth: hci3: command tx timeout [ 303.723075][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 303.819770][ T7678] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.732'. [ 303.829466][ T7678] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.732'. [ 303.829550][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 303.863782][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 303.903183][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.948936][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.985448][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.028761][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.099002][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.118538][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.196192][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.253270][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.270839][ T5149] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 304.301463][ T7650] bridge_slave_0: entered allmulticast mode [ 304.337160][ T7650] bridge_slave_0: entered promiscuous mode [ 304.385059][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.395798][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 304.401338][ T8] usbtmc 4-1:16.0: can't read capabilities [ 304.418770][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.448256][ T7650] bridge_slave_1: entered allmulticast mode [ 304.483310][ T7650] bridge_slave_1: entered promiscuous mode [ 304.503470][ T5149] usb 3-1: Using ep0 maxpacket: 16 [ 304.559319][ T5149] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 304.588955][ T5149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.622800][ T5149] usb 3-1: Product: syz [ 304.632645][ T5149] usb 3-1: Manufacturer: syz [ 304.643095][ T5149] usb 3-1: SerialNumber: syz [ 304.705559][ T5149] r8152-cfgselector 3-1: Unknown version 0x0000 [ 304.725083][ T5149] r8152-cfgselector 3-1: config 0 descriptor?? [ 304.779857][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.823322][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.975391][ T7650] team0: Port device team_slave_0 added [ 305.009505][ T7650] team0: Port device team_slave_1 added [ 305.226993][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.271613][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.304177][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.339799][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.348167][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.381995][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.473257][ T5101] Bluetooth: hci3: command tx timeout [ 305.604314][ T7708] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 306.941890][ T5095] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 307.553587][ T5101] Bluetooth: hci3: command tx timeout [ 307.554064][ T7736] syz.2.750[7736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.559207][ T7736] syz.2.750[7736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.599982][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.750'. [ 307.879772][ T7650] hsr_slave_0: entered promiscuous mode [ 308.093457][ T7650] hsr_slave_1: entered promiscuous mode [ 308.369686][ T7650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.643016][ T7650] Cannot create hsr debugfs directory [ 308.854823][ T5147] usb 4-1: USB disconnect, device number 5 [ 309.332006][ T7747] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 309.654725][ T5101] Bluetooth: hci3: command tx timeout [ 310.783803][ T7650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.933158][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 311.012700][ T7650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.133109][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 311.151411][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 311.173269][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.222277][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.250303][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.278137][ T7650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.289355][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.343067][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.383031][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.544342][ T7650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.683275][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 311.688846][ T8] usbtmc 3-1:16.0: can't read capabilities [ 312.027060][ T7650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.097277][ T7650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.154362][ T7650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.253147][ T7650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.689920][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.476023][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.520091][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.527380][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.601944][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.609276][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.316991][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.464935][ T1158] usb 3-1: USB disconnect, device number 10 [ 316.581678][ T7650] veth0_vlan: entered promiscuous mode [ 316.651738][ T7650] veth1_vlan: entered promiscuous mode [ 316.749530][ T7650] veth0_macvtap: entered promiscuous mode [ 317.049874][ T7650] veth1_macvtap: entered promiscuous mode [ 317.176961][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.248951][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.401766][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.406604][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.420582][ T7866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.444092][ T7870] syz.0.792: attempt to access beyond end of device [ 317.444092][ T7870] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.462783][ T7870] SQUASHFS error: Failed to read block 0x0: -5 [ 317.469188][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.485022][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.503039][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.513666][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.533090][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.558006][ T7870] unable to read squashfs_super_block [ 317.572384][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.602918][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.632117][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.659004][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.700849][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.735431][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.771353][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.809466][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.843218][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.877406][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.916361][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.948459][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.988369][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.041941][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.097683][ T7876] syz_tun: entered promiscuous mode [ 318.134020][ T7876] syz_tun: left promiscuous mode [ 318.257673][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.334296][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.362365][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.429332][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.433111][ T7880] netlink: 'syz.1.799': attribute type 1 has an invalid length. [ 318.463050][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.508905][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.560801][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.597482][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.633204][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.676050][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.710349][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.752377][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.821689][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.874509][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.926599][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.965248][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.001771][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.068030][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.106536][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.151010][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.203552][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.252747][ T7650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.312428][ T7650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.339824][ T7650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.365445][ T7650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.473096][ T4487] Bluetooth: hci6: command 0x0406 tx timeout [ 321.045488][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.102319][ T7896] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 321.107717][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.231198][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.305020][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.346621][ T7904] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 321.427975][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 321.801647][ T29] audit: type=1326 audit(1721765077.133:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7909 comm="syz.3.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1ae175f19 code=0x0 [ 322.277121][ T7929] ISOFS: Unable to identify CD-ROM format. [ 322.987201][ T7927] netlink: 'syz.2.817': attribute type 3 has an invalid length. [ 323.054641][ T7931] sg_write: process 156 (syz.0.815) changed security contexts after opening file descriptor, this is not allowed. [ 323.120597][ T7927] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.817'. [ 325.223824][ T7965] ISOFS: Unable to identify CD-ROM format. [ 326.583373][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 326.810564][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.830304][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.568230][ T25] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 327.603024][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.644303][ T25] usb 3-1: config 0 descriptor?? [ 328.126960][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 328.141261][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 328.203592][ T25] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input12 [ 328.348296][ T25] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 328.653666][ T5146] usb 3-1: USB disconnect, device number 11 [ 333.269587][ T8038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.635075][ T5095] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 333.878222][ T8038] syz.1.853: attempt to access beyond end of device [ 333.878222][ T8038] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 333.935448][ T8038] SQUASHFS error: Failed to read block 0x0: -5 [ 333.970175][ T8038] unable to read squashfs_super_block [ 333.993464][ T5095] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 334.029627][ T5095] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 3 [ 334.066133][ T5095] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 334.116276][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 334.138313][ T5095] usb 3-1: SerialNumber: syz [ 334.596196][ T8043] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 334.633823][ T8043] netlink: 228 bytes leftover after parsing attributes in process `syz.2.855'. [ 335.316673][ T5095] usb 3-1: 0:2 : does not exist [ 335.349849][ T5095] usb 3-1: unit 5 not found! [ 335.488969][ T5095] usb 3-1: USB disconnect, device number 12 [ 335.899275][ T7435] udevd[7435]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.322741][ T5101] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 337.338228][ T5101] Bluetooth: hci4: Injecting HCI hardware error event [ 337.347586][ T5101] Bluetooth: hci4: hardware error 0x00 [ 337.801320][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 339.633219][ T5101] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 339.738898][ T8122] loop0: detected capacity change from 0 to 524287999 [ 339.795226][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.804546][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.833033][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.842235][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.856457][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.865708][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.898307][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.907556][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.917761][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.927067][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.935636][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.944870][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.954393][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.963670][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.973000][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.982231][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 339.990273][ T8122] ldm_validate_partition_table(): Disk read failed. [ 340.001972][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.011224][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 340.019959][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.029169][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 340.045318][ T8122] Dev loop0: unable to read RDB block 0 [ 340.095598][ T8122] loop0: unable to read partition table [ 340.154081][ T8122] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 340.883497][ T8143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.905185][ T8143] team0: Port device bond0 added [ 341.524731][ C0] eth0: bad gso: type: 1, size: 1408 [ 342.083273][ T5095] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 342.093662][ T8167] loop0: detected capacity change from 0 to 524287999 [ 342.173656][ T8167] ldm_validate_partition_table(): Disk read failed. [ 342.197604][ T8167] Dev loop0: unable to read RDB block 0 [ 342.221964][ T8167] loop0: unable to read partition table [ 342.233931][ T8167] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 342.310595][ T5095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.357981][ T5095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.412441][ T5095] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 342.447212][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.510884][ T5095] usb 4-1: config 0 descriptor?? [ 343.120547][ T5095] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 343.156681][ T5095] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 343.231136][ T5095] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0005/input/input13 [ 343.295514][ T5095] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 343.299364][ T8201] vivid-000: disconnect [ 343.356754][ T8201] vivid-000: reconnect [ 343.383123][ T1158] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 343.605369][ T1158] usb 3-1: Using ep0 maxpacket: 8 [ 343.663494][ T1158] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 343.671086][ T8212] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 343.695251][ T1158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.734276][ T1158] usb 3-1: config 0 descriptor?? [ 343.885345][ T58] usb 4-1: USB disconnect, device number 6 [ 344.197765][ T1158] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 344.231705][ T1158] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 344.255143][ T8209] loop0: detected capacity change from 0 to 524287999 [ 344.274637][ T1158] asix 3-1:0.0: probe with driver asix failed with error -32 [ 344.296054][ T8209] ldm_validate_partition_table(): Disk read failed. [ 344.315749][ T8209] Dev loop0: unable to read RDB block 0 [ 344.348854][ T8209] loop0: unable to read partition table [ 344.391740][ T8209] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 345.054766][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.108392][ T8226] team0: Port device bond0 added [ 345.274017][ T8241] vivid-000: disconnect [ 345.287548][ T8241] vivid-000: reconnect [ 345.795178][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 345.833193][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.936'. [ 345.920887][ T8256] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 346.550202][ T1158] usb 3-1: USB disconnect, device number 13 [ 346.859925][ C0] eth0: bad gso: type: 1, size: 1408 [ 346.936776][ T8261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.064584][ T8268] syz.1.938: attempt to access beyond end of device [ 347.064584][ T8268] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 347.313973][ T8268] SQUASHFS error: Failed to read block 0x0: -5 [ 347.337922][ T8268] unable to read squashfs_super_block [ 348.667299][ T8285] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 348.697572][ T8285] vhci_hcd: invalid port number 9 [ 348.721109][ T8285] vhci_hcd: invalid port number 9 [ 348.772204][ T8284] tipc: Started in network mode [ 348.815098][ T8284] tipc: Node identity , cluster identity 4711 [ 348.841971][ T8284] tipc: Failed to set node id, please configure manually [ 348.868926][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 350.303364][ T4487] Bluetooth: hci1: command 0x0406 tx timeout [ 350.808041][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.949'. [ 351.533106][ T58] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 351.766737][ T58] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.806486][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 351.858775][ T58] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.947518][ T58] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 351.975873][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.001579][ T58] usb 1-1: Product: syz [ 352.024406][ T58] usb 1-1: Manufacturer: syz [ 352.034484][ T58] usb 1-1: SerialNumber: syz [ 352.077682][ T58] usb 1-1: config 0 descriptor?? [ 352.149488][ T58] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2013:0251, interface 0, class 0) [ 352.209722][ T58] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 352.466874][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 352.603479][ T58] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 352.621881][ T58] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 352.655745][ T58] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 352.699663][ T58] em28xx 1-1:0.0: No AC97 audio processor [ 352.814922][ T58] usb 1-1: USB disconnect, device number 8 [ 353.134322][ T58] em28xx 1-1:0.0: Disconnecting em28xx [ 353.226025][ T58] em28xx 1-1:0.0: Freeing device [ 353.481505][ T8331] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 353.554545][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 354.063182][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 354.266115][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 354.289448][ T8] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 354.313070][ T8] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 354.350791][ T8] usb 3-1: config 135 has no interface number 0 [ 354.375863][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 354.393220][ T8] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.427125][ T8] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 354.449910][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.514504][ T8] usb 3-1: Product: syz [ 354.567884][ T8] usb 3-1: Manufacturer: syz [ 354.572561][ T8] usb 3-1: SerialNumber: syz [ 354.711528][ T8356] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 355.086999][ T29] audit: type=1326 audit(1721765110.403:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8351 comm="syz.4.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7c575f19 code=0x0 [ 355.320068][ T5101] Bluetooth: hci7: command 0x0406 tx timeout [ 355.581685][ T8] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 355.593020][ T8] usb 3-1: No valid video chain found. [ 355.625168][ T8] usb 3-1: USB disconnect, device number 14 [ 356.066522][ T58] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.213051][ T29] audit: type=1326 audit(1721765111.543:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8368 comm="syz.4.977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7c575f19 code=0x0 [ 356.266659][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 356.311571][ T58] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 356.341030][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.356817][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 356.358152][ T8378] xt_TCPMSS: Only works on TCP SYN packets [ 356.383299][ T58] usb 4-1: Product: syz [ 356.393106][ T58] usb 4-1: Manufacturer: syz [ 356.423097][ T58] usb 4-1: SerialNumber: syz [ 356.478841][ T58] r8152-cfgselector 4-1: Unknown version 0x0000 [ 356.517076][ T58] r8152-cfgselector 4-1: config 0 descriptor?? [ 356.558827][ T8383] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 356.558827][ T8383] The task syz.2.980 (8383) triggered the difference, watch for misbehavior. [ 357.378538][ T5095] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 357.450244][ T8394] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 357.931522][ T29] audit: type=1326 audit(1721765113.123:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8389 comm="syz.1.985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x0 [ 360.008799][ T29] audit: type=1326 audit(1721765115.323:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.077748][ T29] audit: type=1326 audit(1721765115.323:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.150191][ T29] audit: type=1326 audit(1721765115.383:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.243661][ T29] audit: type=1326 audit(1721765115.383:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.273357][ T58] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 360.289263][ T29] audit: type=1326 audit(1721765115.383:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.321519][ T29] audit: type=1326 audit(1721765115.383:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.353185][ T29] audit: type=1326 audit(1721765115.383:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.353672][ T1158] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 360.449225][ T29] audit: type=1326 audit(1721765115.393:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.503083][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 360.515058][ T58] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=a8.f7 [ 360.529646][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.543133][ T29] audit: type=1326 audit(1721765115.393:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.591082][ T58] usb 1-1: Product: syz [ 360.601816][ T58] usb 1-1: Manufacturer: syz [ 360.624862][ T58] usb 1-1: SerialNumber: syz [ 360.653087][ T1158] usb 3-1: Using ep0 maxpacket: 8 [ 360.653409][ T58] usb 1-1: config 0 descriptor?? [ 360.668296][ T29] audit: type=1326 audit(1721765115.393:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.715546][ T58] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 360.733320][ T29] audit: type=1326 audit(1721765115.403:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.790514][ T1158] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 360.811556][ T1158] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 360.856971][ T29] audit: type=1326 audit(1721765115.403:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8410 comm="syz.1.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x7ffc0000 [ 360.872785][ T1158] usb 3-1: config 135 has no interface number 0 [ 360.945637][ T1158] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.962752][ T58] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 361.016164][ T58] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 361.027417][ T1158] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 361.037994][ T1158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.064989][ T1158] usb 3-1: Product: syz [ 361.081323][ T1158] usb 3-1: Manufacturer: syz [ 361.092884][ T1158] usb 3-1: SerialNumber: syz [ 361.234303][ T58] usb 1-1: USB disconnect, device number 9 [ 361.235608][ T8426] xt_TCPMSS: Only works on TCP SYN packets [ 361.353220][ T1158] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 361.382457][ T1158] usb 3-1: No valid video chain found. [ 361.424335][ T1158] usb 3-1: USB disconnect, device number 15 [ 362.583997][ T8444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 362.794601][ T1158] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 363.074901][ T1158] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 363.112260][ T1158] usb 5-1: config 0 has no interface number 0 [ 363.173164][ T1158] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice= d.92 [ 363.199485][ T1158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.233272][ T1158] usb 5-1: Product: syz [ 363.237517][ T1158] usb 5-1: Manufacturer: syz [ 363.264076][ T1158] usb 5-1: SerialNumber: syz [ 363.378662][ T1158] usb 5-1: config 0 descriptor?? [ 363.439284][ T1158] smsusb:smsusb_probe: board id=9, interface number 128 [ 364.369545][ T5149] usb 5-1: USB disconnect, device number 8 [ 364.773043][ T1158] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 365.009526][ T1158] usb 2-1: Using ep0 maxpacket: 8 [ 365.046869][ T1158] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 365.076957][ T1158] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 365.111798][ T1158] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.129985][ T1158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.163459][ T1158] usb 2-1: Product: syz [ 365.171494][ T1158] usb 2-1: Manufacturer: syz [ 365.181636][ T1158] usb 2-1: SerialNumber: syz [ 365.194741][ T8463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.202492][ T8463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 365.448938][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.513578][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.554743][ T5101] Bluetooth: hci8: command 0x0406 tx timeout [ 365.556279][ T1158] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 365.608515][ T1158] usb 2-1: USB disconnect, device number 7 [ 367.138824][ T8498] hub 6-0:1.0: USB hub found [ 367.145137][ T8498] hub 6-0:1.0: 1 port detected [ 368.447647][ T8508] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 369.218430][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 369.218453][ T29] audit: type=1326 audit(1721765124.123:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8500 comm="syz.1.1023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff92df75f19 code=0x0 [ 369.583014][ T4487] Bluetooth: hci8: unexpected event for opcode 0x1005 [ 371.551483][ T8523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.671387][ T8523] syz.1.1027: attempt to access beyond end of device [ 371.671387][ T8523] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 371.695711][ T8523] SQUASHFS error: Failed to read block 0x0: -5 [ 371.702385][ T8523] unable to read squashfs_super_block [ 372.803217][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 373.025384][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 373.038457][ T8] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 373.065457][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.348085][ T8] usb 3-1: config 0 descriptor?? [ 373.374987][ T8] usb 3-1: invalid MIDI EP [ 373.379866][ T8] usb 3-1: snd-bcd2000: error during probing [ 373.397550][ T8] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 373.508551][ T8558] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.020077][ T29] audit: type=1326 audit(1721765129.233:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.4.1036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7c575f19 code=0x0 [ 374.771008][ T8548] netlink: 'syz.2.1034': attribute type 64 has an invalid length. [ 374.805414][ T8548] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 374.903846][ T8567] trusted_key: syz.1.1037 sent an empty control message without MSG_MORE. [ 374.935025][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 374.951359][ T5146] usb 3-1: USB disconnect, device number 16 [ 375.028137][ T8562] netlink: 'syz.1.1037': attribute type 10 has an invalid length. [ 375.057482][ T8562] bridge_slave_1: left allmulticast mode [ 375.073771][ T8562] bridge_slave_1: left promiscuous mode [ 375.085022][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.165879][ T8562] bridge_slave_0: left allmulticast mode [ 375.172443][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 375.192178][ T8562] bridge_slave_0: left promiscuous mode [ 375.209173][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.383263][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 375.416934][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 375.453071][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 375.492526][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.502669][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.543829][ T8] usb 5-1: Product: syz [ 375.554214][ T8] usb 5-1: Manufacturer: syz [ 375.559065][ T8] usb 5-1: SerialNumber: syz [ 375.588919][ T8575] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.604782][ T8575] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.910980][ T8581] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1044'. [ 375.926763][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.989528][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.062528][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 376.140349][ T8] usb 5-1: USB disconnect, device number 9 [ 377.009070][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 377.505052][ T8605] netlink: 'syz.1.1051': attribute type 11 has an invalid length. [ 377.544725][ T8605] netlink: 'syz.1.1051': attribute type 12 has an invalid length. [ 377.741348][ T8605] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.750530][ T8605] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.760435][ T8605] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.772254][ T8605] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.845391][ T8605] vxlan0: entered promiscuous mode [ 378.840144][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.848838][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.865190][ T30] INFO: task syz.1.549:7048 blocked for more than 143 seconds. [ 378.892998][ T30] Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 378.953136][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.983570][ T30] task:syz.1.549 state:D stack:24960 pid:7048 tgid:7046 ppid:6465 flags:0x00004004 [ 379.081692][ T30] Call Trace: [ 379.085276][ T30] [ 379.091880][ T30] __schedule+0x17ae/0x4a10 [ 379.143174][ T30] ? __pfx___schedule+0x10/0x10 [ 379.175267][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.204741][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.241990][ T30] ? schedule+0x90/0x320 [ 379.288168][ T930] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 379.291447][ T30] schedule+0x14b/0x320 [ 379.302998][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.308554][ T30] __ww_mutex_lock+0xec2/0x2790 [ 379.322258][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 379.327480][ T30] ? drm_modeset_lock+0x6f/0x90 [ 379.332684][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 379.339029][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 379.344790][ T30] ww_mutex_lock+0x40/0x1f0 [ 379.349368][ T30] ? drm_modeset_lock+0x65/0x90 [ 379.354362][ T30] drm_modeset_lock+0x6f/0x90 [ 379.359136][ T30] drm_mode_getplane+0xf0/0x7a0 [ 379.364100][ T30] drm_ioctl_kernel+0x33a/0x440 [ 379.369214][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 379.374983][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 379.380451][ T30] ? __might_fault+0xc6/0x120 [ 379.407692][ T30] drm_ioctl+0x611/0xad0 [ 379.412104][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 379.435617][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 379.440537][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 379.481013][ T30] ? security_file_ioctl+0x87/0xb0 [ 379.492433][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 379.503257][ T930] usb 1-1: Using ep0 maxpacket: 16 [ 379.511378][ T30] __se_sys_ioctl+0xfc/0x170 [ 379.527214][ T930] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 379.528258][ T30] do_syscall_64+0xf3/0x230 [ 379.546095][ T30] ? clear_bhb_loop+0x35/0x90 [ 379.550886][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.556517][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.586451][ T30] RIP: 0033:0x7f32fe575f19 [ 379.598903][ T930] usb 1-1: config 0 descriptor?? [ 379.602535][ T30] RSP: 002b:00007f32ff39d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.643603][ T930] usb 1-1: invalid MIDI EP [ 379.644309][ T30] RAX: ffffffffffffffda RBX: 00007f32fe705f60 RCX: 00007f32fe575f19 [ 379.658309][ T930] usb 1-1: snd-bcd2000: error during probing [ 379.675721][ T930] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 379.692345][ T30] RDX: 00000000200001c0 RSI: 00000000c02064b6 RDI: 0000000000000008 [ 379.737789][ T30] RBP: 00007f32fe5e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 379.762990][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.791505][ T30] R13: 000000000000000b R14: 00007f32fe705f60 R15: 00007ffebfcef838 [ 379.825216][ T30] [ 379.842462][ T30] INFO: task syz.1.549:7051 blocked for more than 144 seconds. [ 379.913071][ T30] Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 379.942660][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.961513][ T30] task:syz.1.549 state:D stack:26096 pid:7051 tgid:7046 ppid:6465 flags:0x00000004 [ 379.995631][ T30] Call Trace: [ 380.006077][ T30] [ 380.019202][ T30] __schedule+0x17ae/0x4a10 [ 380.040068][ T30] ? __pfx___schedule+0x10/0x10 [ 380.060352][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.082681][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.102026][ T30] ? schedule+0x90/0x320 [ 380.115441][ T30] schedule+0x14b/0x320 [ 380.132638][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.148431][ T30] __ww_mutex_lock+0xec2/0x2790 [ 380.165054][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 380.181758][ T30] ? modeset_lock+0x2bf/0x650 [ 380.198184][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 380.218037][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 380.220077][ T8623] netlink: 'syz.0.1057': attribute type 64 has an invalid length. [ 380.245426][ T30] ? __asan_memset+0x23/0x50 [ 380.256911][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 380.267536][ T8623] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 380.272625][ T30] ww_mutex_lock+0x40/0x1f0 [ 380.314215][ T30] ? modeset_lock+0x2b0/0x650 [ 380.332134][ T30] modeset_lock+0x2bf/0x650 [ 380.345855][ T30] drm_modeset_lock_all_ctx+0x12e/0x350 [ 380.364250][ T30] drm_mode_obj_get_properties_ioctl+0x22d/0x610 [ 380.392378][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 380.408075][ T30] ? drm_dev_enter+0x45/0x150 [ 380.423115][ T30] drm_ioctl_kernel+0x33a/0x440 [ 380.443612][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 380.468785][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 380.484879][ T30] ? __might_fault+0xc6/0x120 [ 380.507111][ T30] drm_ioctl+0x611/0xad0 [ 380.518777][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 380.547231][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 380.562583][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 380.587347][ T30] ? security_file_ioctl+0x87/0xb0 [ 380.603209][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 380.621114][ T30] __se_sys_ioctl+0xfc/0x170 [ 380.636996][ T30] do_syscall_64+0xf3/0x230 [ 380.662031][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.673521][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.686431][ T30] RIP: 0033:0x7f32fe575f19 [ 380.695576][ T30] RSP: 002b:00007f32ff37c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.714195][ T30] RAX: ffffffffffffffda RBX: 00007f32fe706038 RCX: 00007f32fe575f19 [ 380.736109][ T30] RDX: 00000000200002c0 RSI: 00000000c02064b9 RDI: 0000000000000009 [ 380.751886][ T30] RBP: 00007f32fe5e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 380.785336][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.809179][ T30] R13: 000000000000006e R14: 00007f32fe706038 R15: 00007ffebfcef838 [ 380.829887][ T30] [ 380.846186][ T30] [ 380.846186][ T30] Showing all locks held in the system: [ 380.870900][ T30] 1 lock held by khungtaskd/30: [ 380.888610][ T30] #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 380.928671][ T30] 3 locks held by kworker/u8:6/1047: [ 380.949508][ T30] 2 locks held by getty/4852: [ 380.962525][ T30] #0: ffff88802a73b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.995452][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 381.021697][ T30] 3 locks held by syz.3.433/6665: [ 381.037176][ T30] 1 lock held by syz.1.549/7048: [ 381.059953][ T30] #0: ffff88801fffc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 381.095969][ T30] 2 locks held by syz.1.549/7051: [ 381.109013][ T30] #0: ffffc9001809fb30 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_obj_get_properties_ioctl+0x1d3/0x610 [ 381.155249][ T30] #1: ffff88801fb8c518 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x2bf/0x650 [ 381.173038][ T30] 1 lock held by syz.2.625/7319: [ 381.183058][ T30] #0: ffff88801fffc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 381.213004][ T30] 1 lock held by syz.4.683/7538: [ 381.223063][ T30] #0: ffff88801fffc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 381.253483][ T30] 2 locks held by kworker/u8:11/7891: [ 381.270818][ T30] #0: ffff8880b943e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 381.291481][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 381.323082][ T30] [ 381.335709][ T30] ============================================= [ 381.335709][ T30] [ 381.364958][ T30] NMI backtrace for cpu 0 [ 381.369376][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 381.379699][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 381.390340][ T30] Call Trace: [ 381.393655][ T30] [ 381.396983][ T30] dump_stack_lvl+0x241/0x360 [ 381.401742][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.407443][ T30] ? __pfx__printk+0x10/0x10 [ 381.413612][ T30] ? vprintk_emit+0x631/0x770 [ 381.418465][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 381.423652][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 381.429056][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 381.434798][ T30] ? _printk+0xd5/0x120 [ 381.439118][ T30] ? __pfx__printk+0x10/0x10 [ 381.443768][ T30] ? __wake_up_klogd+0xcc/0x110 [ 381.448763][ T30] ? __pfx__printk+0x10/0x10 [ 381.454805][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 381.459885][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.465944][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 381.472951][ T30] watchdog+0xfee/0x1030 [ 381.477448][ T30] ? watchdog+0x1ea/0x1030 [ 381.482174][ T30] ? __pfx_watchdog+0x10/0x10 [ 381.486896][ T30] kthread+0x2f0/0x390 [ 381.490979][ T30] ? __pfx_watchdog+0x10/0x10 [ 381.496821][ T30] ? __pfx_kthread+0x10/0x10 [ 381.501622][ T30] ret_from_fork+0x4b/0x80 [ 381.506083][ T30] ? __pfx_kthread+0x10/0x10 [ 381.510724][ T30] ret_from_fork_asm+0x1a/0x30 [ 381.515710][ T30] [ 381.523411][ T30] Sending NMI from CPU 0 to CPUs 1: [ 381.528724][ C1] NMI backtrace for cpu 1 [ 381.528740][ C1] CPU: 1 UID: 0 PID: 6665 Comm: syz.3.433 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 381.528762][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 381.528774][ C1] RIP: 0010:__lock_acquire+0xed6/0x2040 [ 381.528806][ C1] Code: cb 01 d6 29 da 89 dd c1 c5 13 31 d5 01 f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 48 c7 c0 c0 aa ae 8f 48 c1 e8 03 0f b6 04 38 <84> c0 0f 85 62 0c 00 00 48 09 dd 83 3d 28 ea 3e 0e 00 0f 85 77 04 [ 381.528821][ C1] RSP: 0018:ffffc90015036b30 EFLAGS: 00000802 [ 381.528838][ C1] RAX: 0000000000000000 RBX: 000000008bf7bef8 RCX: 00000000fca651a6 [ 381.528850][ C1] RDX: 00000000b6114683 RSI: 00000000b8b19b16 RDI: dffffc0000000000 [ 381.528863][ C1] RBP: b39d036500000000 R08: ffffffff92fcd8ff R09: 1ffffffff25f9b1f [ 381.528877][ C1] R10: dffffc0000000000 R11: fffffbfff25f9b20 R12: 0000000000000000 [ 381.528889][ C1] R13: ffff88807af7e4d8 R14: 00000000c498ece5 R15: ffff88807af7e578 [ 381.528903][ C1] FS: 00007f10819cb6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 381.528919][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.528932][ C1] CR2: 00007f9e7d3919a0 CR3: 0000000022a5e000 CR4: 00000000003506f0 [ 381.528948][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.528958][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.528970][ C1] Call Trace: [ 381.528977][ C1] [ 381.528984][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 381.529013][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 381.529038][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 381.529074][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 381.529100][ C1] ? nmi_handle+0x14f/0x5a0 [ 381.529117][ C1] ? nmi_handle+0x2a/0x5a0 [ 381.529136][ C1] ? __lock_acquire+0xed6/0x2040 [ 381.529159][ C1] ? default_do_nmi+0x63/0x160 [ 381.529177][ C1] ? exc_nmi+0x123/0x1f0 [ 381.529193][ C1] ? end_repeat_nmi+0xf/0x53 [ 381.529215][ C1] ? __lock_acquire+0xed6/0x2040 [ 381.529239][ C1] ? __lock_acquire+0xed6/0x2040 [ 381.529263][ C1] ? __lock_acquire+0xed6/0x2040 [ 381.529287][ C1] [ 381.529293][ C1] [ 381.529308][ C1] lock_acquire+0x1ed/0x550 [ 381.529331][ C1] ? try_charge_memcg+0x25a/0x1010 [ 381.529357][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 381.529387][ C1] ? __lock_acquire+0x137a/0x2040 [ 381.529419][ C1] try_charge_memcg+0x277/0x1010 [ 381.529438][ C1] ? try_charge_memcg+0x25a/0x1010 [ 381.529461][ C1] ? try_charge_memcg+0x25a/0x1010 [ 381.529485][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 381.529506][ C1] ? __pfx_lock_release+0x10/0x10 [ 381.529539][ C1] charge_memcg+0xa2/0x160 [ 381.529564][ C1] __mem_cgroup_charge+0x27/0x80 [ 381.529587][ C1] shmem_alloc_and_add_folio+0x857/0x14e0 [ 381.529619][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 381.529643][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 381.529671][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.529698][ C1] shmem_get_folio_gfp+0x8dc/0x2370 [ 381.529729][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 381.529756][ C1] shmem_read_folio_gfp+0xd6/0x170 [ 381.529780][ C1] ? __pfx_shmem_read_folio_gfp+0x10/0x10 [ 381.529803][ C1] ? drm_gem_get_pages+0x2cd/0xe50 [ 381.529829][ C1] drm_gem_get_pages+0x21b/0xe50 [ 381.529856][ C1] ? __pfx_drm_gem_get_pages+0x10/0x10 [ 381.529896][ C1] drm_gem_shmem_get_pages+0xdd/0x290 [ 381.529921][ C1] drm_gem_shmem_vmap+0x2ba/0x630 [ 381.529946][ C1] drm_gem_vmap_unlocked+0x103/0x1d0 [ 381.529971][ C1] drm_gem_fb_vmap+0xa6/0x810 [ 381.529998][ C1] drm_atomic_helper_prepare_planes+0x2b2/0xb50 [ 381.530026][ C1] drm_atomic_helper_commit+0x18b/0x9f0 [ 381.530049][ C1] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 381.530072][ C1] drm_atomic_commit+0x296/0x2f0 [ 381.530093][ C1] ? __pfx_drm_atomic_commit+0x10/0x10 [ 381.530111][ C1] ? __pfx___drm_printfn_info+0x10/0x10 [ 381.530135][ C1] ? drm_mode_object_get+0xd3/0x150 [ 381.530155][ C1] ? drm_atomic_set_fb_for_plane+0x222/0x290 [ 381.530179][ C1] drm_atomic_helper_update_plane+0x238/0x3a0 [ 381.530206][ C1] drm_mode_cursor_common+0xd6e/0x1570 [ 381.530234][ C1] ? __pfx_validate_chain+0x10/0x10 [ 381.530263][ C1] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 381.530306][ C1] ? drm_mode_cursor_ioctl+0x97/0x160 [ 381.530335][ C1] drm_mode_cursor_ioctl+0xe1/0x160 [ 381.530362][ C1] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 381.530399][ C1] ? _raw_spin_unlock+0x28/0x50 [ 381.530427][ C1] drm_ioctl_kernel+0x33a/0x440 [ 381.530453][ C1] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 381.530479][ C1] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 381.530503][ C1] ? __might_fault+0xc6/0x120 [ 381.530527][ C1] drm_ioctl+0x611/0xad0 [ 381.530551][ C1] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 381.530581][ C1] ? __pfx_drm_ioctl+0x10/0x10 [ 381.530613][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 381.530639][ C1] ? security_file_ioctl+0x87/0xb0 [ 381.530658][ C1] ? __pfx_drm_ioctl+0x10/0x10 [ 381.530683][ C1] __se_sys_ioctl+0xfc/0x170 [ 381.530700][ C1] do_syscall_64+0xf3/0x230 [ 381.530723][ C1] ? clear_bhb_loop+0x35/0x90 [ 381.530741][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.530767][ C1] RIP: 0033:0x7f1080b75f19 [ 381.530782][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.530797][ C1] RSP: 002b:00007f10819cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.530815][ C1] RAX: ffffffffffffffda RBX: 00007f1080d05f60 RCX: 00007f1080b75f19 [ 381.530828][ C1] RDX: 0000000020000340 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 381.530840][ C1] RBP: 00007f1080be4e68 R08: 0000000000000000 R09: 0000000000000000 [ 381.530851][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.530861][ C1] R13: 000000000000000b R14: 00007f1080d05f60 R15: 00007ffd9470ba98 [ 381.530881][ C1] [ 382.472404][ T1158] usb 1-1: USB disconnect, device number 10 [ 382.514998][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 382.524641][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 382.535896][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 382.546097][ T30] Call Trace: [ 382.549435][ T30] [ 382.552839][ T30] dump_stack_lvl+0x241/0x360 [ 382.557583][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.563206][ T30] ? __pfx__printk+0x10/0x10 [ 382.568396][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 382.575001][ T30] ? vscnprintf+0x5d/0x90 [ 382.579432][ T30] panic+0x349/0x860 [ 382.583409][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.589907][ T30] ? __pfx_panic+0x10/0x10 [ 382.594636][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 382.600230][ T30] ? __irq_work_queue_local+0x137/0x410 [ 382.605837][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 382.611450][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.617652][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 382.624244][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 382.630706][ T30] watchdog+0x102d/0x1030 [ 382.635149][ T30] ? watchdog+0x1ea/0x1030 [ 382.639803][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.644595][ T30] kthread+0x2f0/0x390 [ 382.649730][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.656890][ T30] ? __pfx_kthread+0x10/0x10 [ 382.662665][ T30] ret_from_fork+0x4b/0x80 [ 382.667303][ T30] ? __pfx_kthread+0x10/0x10 [ 382.674549][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.679413][ T30] [ 382.683484][ T30] Kernel Offset: disabled [ 382.688151][ T30] Rebooting in 86400 seconds..