last executing test programs: 1m29.561143298s ago: executing program 2 (id=153): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) 1m29.480772843s ago: executing program 2 (id=154): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB12q/=4=67890123456789012345PHK\x15', 0x0) 1m29.480610449s ago: executing program 2 (id=155): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x4000002, 0x12, r0, 0x0) 1m29.4308309s ago: executing program 2 (id=156): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xa000005, 0x0, &(0x7f0000000080), 0x2, 0x8}) 1m29.37761177s ago: executing program 2 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) 1m29.321389693s ago: executing program 2 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1m25.182179305s ago: executing program 32 (id=69): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.190205951s ago: executing program 0 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.120963237s ago: executing program 0 (id=193): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 1m24.120625247s ago: executing program 0 (id=194): writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000040)="d6eceef830b9967586c2f516b0ba4bb687be48b8e5477911c59403a79f26963ee83b159bed5ba316705a198d", 0x2c}], 0x1) 1m24.010782693s ago: executing program 0 (id=202): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m23.732712124s ago: executing program 3 (id=198): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000700)=""/247, &(0x7f0000000840)=0xf7) syz_io_uring_setup(0x49a, &(0x7f0000000fc0)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0), &(0x7f0000000000)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101600, 0x20}, 0x18) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x4048851) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0107800000000000000a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfd02, &(0x7f0000000600)=ANY=[], 0x0) 1m23.681177516s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) 1m23.618754522s ago: executing program 0 (id=200): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 1m22.790299889s ago: executing program 3 (id=201): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) close(0x3) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r6, &(0x7f0000001800)=ANY=[@ANYBLOB="ca06"], 0x6ca) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r6, 0x0) 1m21.101521929s ago: executing program 3 (id=206): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 1m20.961084688s ago: executing program 3 (id=207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000b80), &(0x7f0000000c00)=0x8) 1m20.790805021s ago: executing program 3 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) 1m20.677408776s ago: executing program 3 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000700)=""/247, &(0x7f0000000840)=0xf7) syz_io_uring_setup(0x49a, &(0x7f0000000fc0)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0), &(0x7f0000000000)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101600, 0x20}, 0x18) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x4048851) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0107800000000000000a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfd02, &(0x7f0000000600)=ANY=[], 0x0) 1m19.261528859s ago: executing program 4 (id=213): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80001, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000040)="d6eceef830b9967586c2f516b0ba4bb687be48b8e5477911c59403a79f26963ee83b159bed5ba316705a198d", 0x2c}], 0x1) 1m19.210434346s ago: executing program 4 (id=214): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="ca06"], 0x6ca) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m19.13142921s ago: executing program 4 (id=215): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0xc0c, 0x2, 0x6, 0x7fff, 0xf, "0100216a00ce6bab0ad4e2500300"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x1) 1m15.544737485s ago: executing program 4 (id=216): r0 = timerfd_create(0x0, 0x80000) socket$inet(0x2, 0x4000000000000001, 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) unshare(0x400) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 1m14.481258283s ago: executing program 4 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) 1m14.48081664s ago: executing program 4 (id=218): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a0000000000000000020000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) 1m13.43021771s ago: executing program 33 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1m8.606397248s ago: executing program 34 (id=200): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "7a0afacb1ba30ef3", "a3966a9c2c799501471a53222718e691", "b728f3ff", "0d461df8b401a3a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 1m5.520908539s ago: executing program 35 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000700)=""/247, &(0x7f0000000840)=0xf7) syz_io_uring_setup(0x49a, &(0x7f0000000fc0)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), &(0x7f00000006c0), &(0x7f0000000000)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101600, 0x20}, 0x18) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x4048851) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0107800000000000000a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfd02, &(0x7f0000000600)=ANY=[], 0x0) 59.42790066s ago: executing program 36 (id=218): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a0000000000000000020000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) 44.066262263s ago: executing program 6 (id=426): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500020000000069"], 0x0, 0x5}, 0x94) syz_emit_vhci(0x0, 0x10) 44.063786847s ago: executing program 6 (id=428): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) lremovexattr(0x0, 0x0) 43.990277252s ago: executing program 6 (id=430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 43.910980186s ago: executing program 6 (id=433): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611114000000000006100000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 43.910814153s ago: executing program 6 (id=434): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xc}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 43.841058032s ago: executing program 6 (id=435): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 35.488631358s ago: executing program 5 (id=509): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x4) read$FUSE(r7, &(0x7f0000000940)={0x2020}, 0x2020) shutdown(r2, 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r9 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) 34.539440318s ago: executing program 5 (id=518): r0 = socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d0000000000003f000a00000000000006"], 0x30}}, 0x4004890) 33.631266576s ago: executing program 5 (id=523): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x800, 0x2f) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) userfaultfd(0x801) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000700)={0xfffff15f, 0xffffffff}) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES8=r1], 0x7) 33.519064351s ago: executing program 5 (id=524): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x4c810, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffdc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) 33.470960124s ago: executing program 5 (id=525): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r6, &(0x7f0000001800)=ANY=[@ANYBLOB="ca06"], 0x6ca) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r6, 0x0) 32.471067638s ago: executing program 5 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='seria', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bdc\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='serial8250\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='snd_aloop.0', 0xb) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='snd_aloop.0', 0xb) 28.856493961s ago: executing program 37 (id=435): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 17.45166375s ago: executing program 38 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='seria', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bdc\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='serial8250\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='snd_aloop.0', 0xb) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='snd_aloop.0', 0xb) 5.458980389s ago: executing program 1 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.352437564s ago: executing program 1 (id=717): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x5, 0xa, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x161602, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r5 = syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 4.460797954s ago: executing program 7 (id=724): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x3, 0x4}, 0x50) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 4.257047602s ago: executing program 7 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.011029347s ago: executing program 7 (id=727): unshare(0x20000400) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4f0dec3b1841e8ed, 0x0, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) 3.855263023s ago: executing program 7 (id=728): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(r1, &(0x7f0000000040)="a226ed379b12c4c5f9d335f0e2891999f886aa3eb97fbdee54166856ddc1f2730dab15b7fc938964ccc66a1a2ed4e7deb7b4e3bc6187d14950f4d80e25ccc2deabf96aa4c655d52fe06afb164950357132ca8a3100abf8acf5c5df0327c86178cbfc256c0a59", 0x66, 0x40, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x80) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109341) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x0, 0xb, 0x0}) 3.830441062s ago: executing program 1 (id=729): setns(0xc9, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 3.450783702s ago: executing program 1 (id=730): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x26d0d5f1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000025c0), 0x1, 0x0) 3.281239746s ago: executing program 9 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) 3.199898202s ago: executing program 9 (id=733): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x80100000], [0xfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x1}, {}, {}, {}, {}, {0x3}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 3.070226887s ago: executing program 9 (id=734): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.983608654s ago: executing program 9 (id=735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() signalfd4(r0, &(0x7f0000000180)={[0x8]}, 0x8, 0x40000) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0x3) 2.407386719s ago: executing program 7 (id=737): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getenv(0x4201, r1, 0x4, &(0x7f0000000100)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023896) 1.56522314s ago: executing program 9 (id=738): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2, @ANYBLOB="0c0058000100c9dfce1d5f7755087047606b3ab109cadf999bcd6687b60717f634103d192f634aef6bdfcd4a7df9cc55"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 1.534397072s ago: executing program 8 (id=739): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x23, 0x4000, @fd_index, 0x5b2c9b36, &(0x7f0000002140)=[{0x0}], 0x1, 0x2, 0x1, {0x0, 0x0, 0x8, '\x00', &(0x7f0000003180)={0x5, 0x421d, 0x0, 0x0, 0x76a0}, 0x1}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.401094018s ago: executing program 8 (id=740): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001800010020000000000000000200940000000009000100400600150006000000100016800c000180080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) 1.400547284s ago: executing program 9 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38) 1.29888786s ago: executing program 8 (id=742): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 1.11086044s ago: executing program 8 (id=743): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 1.020573508s ago: executing program 8 (id=744): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000900)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x3, "f86037dcabbb2e44a15cbc2f041ab5dcbeead81ed7118c2200793cb0b379463dc09143b33b47b727b87b0b97c8383f6bf8289924bc913a020d37f818fe58b94379c2a53e2ce0f78de223e1bef07a2c12a2a4a4a3d194661b8a6d5e174a9e1afb7a"}, 0x64) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) 940.392694ms ago: executing program 1 (id=745): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x8) 537.087476ms ago: executing program 7 (id=746): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xe9) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c900"], 0x22) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.320122ms ago: executing program 8 (id=747): r0 = socket(0x2b, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x5, 0x7, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x8, 0x7e, 0x3}}) 0s ago: executing program 1 (id=748): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50357' (ED25519) to the list of known hosts. [ 42.103580][ T5715] cgroup: Unknown subsys name 'net' [ 42.273869][ T5715] cgroup: Unknown subsys name 'cpuset' [ 42.277958][ T5715] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.282700][ T5715] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.369674][ T5732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.376457][ T5732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.377600][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.381831][ T5732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.382743][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.385110][ T5732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.388453][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.390187][ T5732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.393009][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.394106][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.395509][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.396610][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.397213][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.397806][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.398453][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.398907][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.398996][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.401751][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.407884][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.422981][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.011623][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.014550][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.017021][ T5730] bridge_slave_0: entered allmulticast mode [ 48.019750][ T5730] bridge_slave_0: entered promiscuous mode [ 48.059316][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.062207][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.064898][ T5730] bridge_slave_1: entered allmulticast mode [ 48.068360][ T5730] bridge_slave_1: entered promiscuous mode [ 48.128842][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.136452][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.145334][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.147644][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.149941][ T5737] bridge_slave_0: entered allmulticast mode [ 48.153313][ T5737] bridge_slave_0: entered promiscuous mode [ 48.157872][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.160861][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.163441][ T5737] bridge_slave_1: entered allmulticast mode [ 48.166095][ T5737] bridge_slave_1: entered promiscuous mode [ 48.168669][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.171783][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.174210][ T5731] bridge_slave_0: entered allmulticast mode [ 48.176667][ T5731] bridge_slave_0: entered promiscuous mode [ 48.218509][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.220576][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.223211][ T5740] bridge_slave_0: entered allmulticast mode [ 48.227101][ T5740] bridge_slave_0: entered promiscuous mode [ 48.238234][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.240491][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.242651][ T5731] bridge_slave_1: entered allmulticast mode [ 48.245228][ T5731] bridge_slave_1: entered promiscuous mode [ 48.256598][ T5730] team0: Port device team_slave_0 added [ 48.258645][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.261779][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.264924][ T5740] bridge_slave_1: entered allmulticast mode [ 48.267965][ T5740] bridge_slave_1: entered promiscuous mode [ 48.292239][ T5730] team0: Port device team_slave_1 added [ 48.306049][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.310279][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.329570][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.331932][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.339904][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.345593][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.356126][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.361620][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.365158][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.367273][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.375478][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.398940][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.403440][ T5737] team0: Port device team_slave_0 added [ 48.407186][ T5737] team0: Port device team_slave_1 added [ 48.430362][ T5731] team0: Port device team_slave_0 added [ 48.452038][ T5740] team0: Port device team_slave_0 added [ 48.455442][ T5731] team0: Port device team_slave_1 added [ 48.468507][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.470822][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.479515][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.487230][ T5740] team0: Port device team_slave_1 added [ 48.493941][ T5730] hsr_slave_0: entered promiscuous mode [ 48.496515][ T5730] hsr_slave_1: entered promiscuous mode [ 48.505562][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.508327][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.518834][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.540232][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.542639][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.551199][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.563908][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.566204][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.575636][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.594477][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.597314][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.607177][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.638288][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.640412][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.648723][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.665213][ T5737] hsr_slave_0: entered promiscuous mode [ 48.668290][ T5737] hsr_slave_1: entered promiscuous mode [ 48.671529][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.673749][ T5737] Cannot create hsr debugfs directory [ 48.693686][ T5731] hsr_slave_0: entered promiscuous mode [ 48.696747][ T5731] hsr_slave_1: entered promiscuous mode [ 48.699171][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.701671][ T5731] Cannot create hsr debugfs directory [ 48.761475][ T5740] hsr_slave_0: entered promiscuous mode [ 48.764154][ T5740] hsr_slave_1: entered promiscuous mode [ 48.766408][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.768368][ T5740] Cannot create hsr debugfs directory [ 48.986266][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.992927][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.996580][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.001958][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.004650][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.009504][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.013229][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.017910][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.063649][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.068206][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.072073][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.077949][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.081784][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.087584][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.092369][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.098347][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.185343][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.189763][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.198233][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.202542][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.205141][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.208903][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.216182][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.224001][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.281591][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.288932][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.295946][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.302589][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.308201][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.313318][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.318365][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.323902][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.330026][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.343864][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.364046][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.370272][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.381829][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.384254][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.396565][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.398769][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.402516][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.405282][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.424805][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.427452][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.441800][ T64] Bluetooth: hci1: command tx timeout [ 49.441804][ T5734] Bluetooth: hci3: command tx timeout [ 49.441844][ T5742] Bluetooth: hci0: command tx timeout [ 49.441985][ T5734] Bluetooth: hci2: command tx timeout [ 49.486282][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.522195][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.535657][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.538162][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.546360][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.548868][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.559262][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.588077][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.610290][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.612663][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.627022][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.629638][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.846062][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.857446][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.865076][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.910581][ T5737] veth0_vlan: entered promiscuous mode [ 49.922613][ T5730] veth0_vlan: entered promiscuous mode [ 49.929179][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.936803][ T5737] veth1_vlan: entered promiscuous mode [ 49.951942][ T5730] veth1_vlan: entered promiscuous mode [ 49.967539][ T5740] veth0_vlan: entered promiscuous mode [ 49.981156][ T5740] veth1_vlan: entered promiscuous mode [ 49.990385][ T5737] veth0_macvtap: entered promiscuous mode [ 49.999100][ T5737] veth1_macvtap: entered promiscuous mode [ 50.022173][ T5730] veth0_macvtap: entered promiscuous mode [ 50.030421][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.034039][ T5730] veth1_macvtap: entered promiscuous mode [ 50.047181][ T5740] veth0_macvtap: entered promiscuous mode [ 50.056378][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.064044][ T5740] veth1_macvtap: entered promiscuous mode [ 50.069020][ T5731] veth0_vlan: entered promiscuous mode [ 50.085280][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.089555][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.099057][ T5731] veth1_vlan: entered promiscuous mode [ 50.107451][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.126144][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.224992][ T5731] veth0_macvtap: entered promiscuous mode [ 50.230512][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.231028][ T5731] veth1_macvtap: entered promiscuous mode [ 50.233524][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.256409][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.261180][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.271206][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.276537][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.277852][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.278969][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.284254][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.287810][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.299519][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.306410][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.311840][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.338279][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.340809][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.386013][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.387779][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.390338][ T5730] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.393704][ T5730] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.401515][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.406902][ T5730] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.419407][ T5730] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.424791][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.434378][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.438117][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.454717][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.465665][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.472680][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.478998][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.489100][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.498005][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.504019][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.532493][ T5587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536443][ T5587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.539165][ T5587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.542358][ T5587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.571074][ T5587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.577135][ T5587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.602159][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.621883][ T5892] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 50.658395][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.662271][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.862901][ T5908] Illegal XDP return value 1393232947 on prog (id 2) dev syz_tun, expect packet loss! [ 51.368769][ T5926] netlink: 'syz.2.19': attribute type 13 has an invalid length. [ 51.521149][ T5742] Bluetooth: hci2: command tx timeout [ 51.522221][ T64] Bluetooth: hci3: command tx timeout [ 51.531285][ T64] Bluetooth: hci0: command tx timeout [ 51.531377][ T5742] Bluetooth: hci1: command tx timeout [ 51.562163][ T5926] syzkaller0: entered promiscuous mode [ 51.564628][ T5926] syzkaller0: entered allmulticast mode [ 51.993372][ T42] audit: type=1326 audit(1786169635.791:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.000130][ T42] audit: type=1326 audit(1786169635.791:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.009411][ T42] audit: type=1326 audit(1786169635.791:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.029534][ T42] audit: type=1326 audit(1786169635.791:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.040079][ T42] audit: type=1326 audit(1786169635.791:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.049505][ T42] audit: type=1326 audit(1786169635.791:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.058273][ T42] audit: type=1326 audit(1786169635.791:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.067144][ T42] audit: type=1326 audit(1786169635.791:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.076003][ T42] audit: type=1326 audit(1786169635.791:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.092811][ T42] audit: type=1326 audit(1786169635.791:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.24" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 52.637054][ T5957] process 'syz.0.27' launched './file2' with NULL argv: empty string added [ 53.022400][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.042847][ T5965] random: crng reseeded on system resumption [ 53.194945][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.210989][ T5824] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.215201][ T5824] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 53.218255][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.355209][ T5980] Bluetooth: MGMT ver 1.23 [ 53.357946][ T5980] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 53.453934][ T5988] Zero length message leads to an empty skb [ 53.493701][ T5824] usb 6-1: USB disconnect, device number 2 [ 53.602179][ T5742] Bluetooth: hci1: command tx timeout [ 53.602779][ T64] Bluetooth: hci2: command tx timeout [ 53.602907][ T5746] Bluetooth: hci0: command tx timeout [ 53.602930][ T5746] Bluetooth: hci3: command tx timeout [ 55.662112][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 55.682738][ T64] Bluetooth: hci2: command tx timeout [ 55.689846][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 55.691670][ T64] Bluetooth: hci1: command tx timeout [ 55.694030][ T5742] Bluetooth: hci3: command tx timeout [ 55.694137][ T5734] Bluetooth: hci0: command tx timeout [ 56.825357][ T6078] netlink: 'syz.3.74': attribute type 13 has an invalid length. [ 56.883713][ T6078] syzkaller0: entered promiscuous mode [ 56.885496][ T6078] syzkaller0: entered allmulticast mode [ 57.844290][ T6103] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.84'. [ 57.915154][ T6107] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 57.915154][ T6107] program syz.0.86 not setting count and/or reply_len properly [ 58.433060][ T6123] netlink: 136 bytes leftover after parsing attributes in process `syz.2.91'. [ 59.093289][ T6131] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.94'. [ 59.841958][ T6158] netlink: 'syz.0.100': attribute type 13 has an invalid length. [ 59.881544][ T6158] syzkaller0: entered promiscuous mode [ 59.883350][ T6158] syzkaller0: entered allmulticast mode [ 60.279517][ T6176] netlink: 'syz.0.109': attribute type 13 has an invalid length. [ 60.471029][ T61] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 60.625142][ T61] usb 7-1: string descriptor 0 read error: -22 [ 60.627985][ T61] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 60.631321][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.648190][ T61] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.651471][ T61] usb 7-1: MIDIStreaming interface descriptor not found [ 60.736381][ T6193] team_slave_1: Caught tx_queue_len zero misconfig [ 60.851784][ T61] usb 7-1: USB disconnect, device number 2 [ 62.121046][ T5824] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.257884][ T6209] netlink: 'syz.3.120': attribute type 13 has an invalid length. [ 62.272866][ T5824] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.276812][ T5824] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.282165][ T5824] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.285944][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.297439][ T5824] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.302402][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.305932][ T5824] usb 7-1: Product: syz [ 62.308899][ T5824] usb 7-1: Manufacturer: syz [ 62.333554][ T5824] cdc_wdm 7-1:1.0: skipping garbage [ 62.336371][ T5824] cdc_wdm 7-1:1.0: skipping garbage [ 62.348722][ T5824] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 62.351522][ T5824] cdc_wdm 7-1:1.0: Unknown control protocol [ 62.391079][ T851] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.534145][ T41] usb 7-1: USB disconnect, device number 3 [ 62.542988][ T851] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 62.546406][ T851] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 62.548975][ T851] usb 5-1: config 0 has no interface number 0 [ 62.552991][ T851] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.556712][ T851] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.560735][ T851] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 62.566366][ T851] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 62.569254][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.573814][ T851] usb 5-1: config 0 descriptor?? [ 62.578701][ T6205] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 62.741167][ T6225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 62.971022][ T1341] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.001504][ T851] usb 5-1: USB disconnect, device number 2 [ 63.122796][ T1341] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.125682][ T1341] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.128839][ T1341] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.131831][ T1341] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.137612][ T1341] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.140488][ T1341] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.143093][ T1341] usb 7-1: Product: syz [ 63.144398][ T1341] usb 7-1: Manufacturer: syz [ 63.151384][ T1341] cdc_wdm 7-1:1.0: skipping garbage [ 63.153063][ T1341] cdc_wdm 7-1:1.0: skipping garbage [ 63.156149][ T1341] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 63.158069][ T1341] cdc_wdm 7-1:1.0: Unknown control protocol [ 63.534956][ T6232] netlink: 'syz.0.130': attribute type 13 has an invalid length. [ 63.756077][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.759078][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.762872][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.765589][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.769496][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.772213][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.774882][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.777575][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.780283][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.782984][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.785632][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.788233][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.790955][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.793740][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.797138][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.799772][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.804731][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 63.804741][ T42] audit: type=1326 audit(1786169647.601:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.805687][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.807194][ T42] audit: type=1326 audit(1786169647.601:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.815464][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.817868][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.821830][ T42] audit: type=1326 audit(1786169647.611:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.826609][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.832684][ T61] usb 7-1: USB disconnect, device number 4 [ 63.839524][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 63.840068][ T42] audit: type=1326 audit(1786169647.621:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.887047][ T42] audit: type=1326 audit(1786169647.631:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.896136][ T42] audit: type=1326 audit(1786169647.631:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.904539][ T42] audit: type=1326 audit(1786169647.631:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.922837][ T42] audit: type=1326 audit(1786169647.631:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 63.933158][ T42] audit: type=1326 audit(1786169647.631:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.134" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fd8fec code=0x7ffc0000 [ 65.046218][ T6258] netlink: 'syz.3.139': attribute type 13 has an invalid length. [ 65.134787][ T6260] syzkaller0: entered promiscuous mode [ 65.136597][ T6260] syzkaller0: entered allmulticast mode [ 65.331062][ T851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.487038][ T851] usb 5-1: config index 0 descriptor too short (expected 12592, got 935) [ 65.495498][ T851] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 65.505806][ T851] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 65.513705][ T851] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 65.526099][ T851] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 65.534898][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.543177][ T851] usb 5-1: Product: syz [ 65.544486][ T851] usb 5-1: Manufacturer: syz [ 65.548380][ T851] usb 5-1: SerialNumber: syz [ 65.610366][ T6265] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 65.768010][ T851] usb 5-1: USB disconnect, device number 3 [ 66.190099][ T6274] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 66.289338][ T6274] bond1: entered promiscuous mode [ 66.292057][ T6274] bond1: entered allmulticast mode [ 66.294448][ T6274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.311143][ T6276] erspan1: entered allmulticast mode [ 66.333874][ T6276] bond1: (slave erspan1): making interface the new active one [ 66.341252][ T6276] erspan1: entered promiscuous mode [ 66.345669][ T6276] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 66.542792][ T6285] netlink: 'syz.2.149': attribute type 13 has an invalid length. [ 66.674652][ T6285] syzkaller0: entered promiscuous mode [ 66.676630][ T6285] syzkaller0: entered allmulticast mode [ 69.358947][ T6313] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.162'. [ 69.701049][ T851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.850996][ T851] usb 5-1: Using ep0 maxpacket: 8 [ 69.855048][ T851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.859039][ T851] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 69.862879][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 69.866414][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 69.870062][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 69.873662][ T851] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.879707][ T851] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 69.883158][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.885745][ T851] usb 5-1: Product: syz [ 69.887133][ T851] usb 5-1: Manufacturer: syz [ 69.888605][ T851] usb 5-1: SerialNumber: syz [ 69.893487][ T851] usb 5-1: config 0 descriptor?? [ 69.896319][ T6322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.901389][ T851] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 70.102425][ T851] usb 5-1: USB disconnect, device number 4 [ 70.461630][ T6335] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.171'. [ 70.963809][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.966430][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.494794][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.501113][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.504293][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.509854][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.515506][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.707693][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 71.718183][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 71.751900][ T6360] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 71.826782][ T6369] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.180'. [ 71.868673][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.007994][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.054421][ T6381] syz.0.184 uses obsolete (PF_INET,SOCK_PACKET) [ 72.123940][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.150164][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.153266][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.155758][ T6346] bridge_slave_0: entered allmulticast mode [ 72.158981][ T6346] bridge_slave_0: entered promiscuous mode [ 72.165285][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.167648][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.169988][ T6346] bridge_slave_1: entered allmulticast mode [ 72.173871][ T6346] bridge_slave_1: entered promiscuous mode [ 72.210793][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.216074][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.261729][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.272211][ T6346] team0: Port device team_slave_0 added [ 72.276081][ T6346] team0: Port device team_slave_1 added [ 72.292744][ T6392] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.188'. [ 72.297279][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.299336][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.307481][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.311816][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.313993][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.321648][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.352731][ T6346] hsr_slave_0: entered promiscuous mode [ 72.354855][ T6346] hsr_slave_1: entered promiscuous mode [ 72.356913][ T6346] debugfs: 'hsr0' already exists in 'hsr' [ 72.358610][ T6346] Cannot create hsr debugfs directory [ 72.532316][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 72.548656][ T13] bridge_slave_1: left allmulticast mode [ 72.550856][ T13] bridge_slave_1: left promiscuous mode [ 72.554144][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.562573][ T13] bridge_slave_0: left allmulticast mode [ 72.564446][ T13] bridge_slave_0: left promiscuous mode [ 72.566981][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.687645][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.692943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.697491][ T13] bond0 (unregistering): Released all slaves [ 72.917517][ T6346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.923029][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.925809][ T6346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.930470][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.933992][ T6346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.938043][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.940857][ T6346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.949808][ T6346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.034885][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.042919][ T6346] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.059879][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.072632][ T13] hsr_slave_0: left promiscuous mode [ 73.074921][ T13] hsr_slave_1: left promiscuous mode [ 73.077534][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.090784][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.095119][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.097497][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.106287][ T13] veth1_macvtap: left promiscuous mode [ 73.108580][ T13] veth0_macvtap: left promiscuous mode [ 73.110468][ T13] veth1_vlan: left promiscuous mode [ 73.112411][ T13] veth0_vlan: left promiscuous mode [ 73.310804][ T13] team0 (unregistering): Port device team_slave_1 removed [ 73.328207][ T13] team0 (unregistering): Port device team_slave_0 removed [ 73.477666][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.479995][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.499441][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.502548][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.601348][ T64] Bluetooth: hci4: command tx timeout [ 73.720381][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.902961][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.013783][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.087673][ T6346] veth0_vlan: entered promiscuous mode [ 74.108870][ T6346] veth1_vlan: entered promiscuous mode [ 74.140845][ T6346] veth0_macvtap: entered promiscuous mode [ 74.145297][ T6346] veth1_macvtap: entered promiscuous mode [ 74.165964][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.181011][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.242189][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.270995][ T5587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.278179][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.285452][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.295552][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.311162][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.315277][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.323290][ T5587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.332919][ T5587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.692520][ T64] Bluetooth: hci4: command tx timeout [ 77.761097][ T64] Bluetooth: hci4: command tx timeout [ 79.841000][ T64] Bluetooth: hci4: command tx timeout [ 81.215099][ T50] cfg80211: failed to load regulatory.db [ 83.263786][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.279471][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.288834][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.293983][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.298702][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.497934][ T5587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.587279][ T5587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.708777][ T5587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.836793][ T5587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.923661][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.929185][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.934372][ T6519] bridge_slave_0: entered allmulticast mode [ 83.945309][ T6519] bridge_slave_0: entered promiscuous mode [ 83.953847][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.956862][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.959847][ T6519] bridge_slave_1: entered allmulticast mode [ 83.964617][ T6519] bridge_slave_1: entered promiscuous mode [ 84.044786][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.051215][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.113529][ T6519] team0: Port device team_slave_0 added [ 84.116783][ T6519] team0: Port device team_slave_1 added [ 84.154745][ T5587] bridge_slave_1: left allmulticast mode [ 84.156545][ T5587] bridge_slave_1: left promiscuous mode [ 84.158397][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.164718][ T5587] bridge_slave_0: left allmulticast mode [ 84.166585][ T5587] bridge_slave_0: left promiscuous mode [ 84.168490][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.260621][ T5587] bond1 (unregistering): (slave erspan1): Releasing active interface [ 84.267404][ T5587] erspan1 (unregistering): left promiscuous mode [ 84.309119][ T5587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.314843][ T5587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.318504][ T5587] bond0 (unregistering): Released all slaves [ 84.326971][ T5587] bond1 (unregistering): Released all slaves [ 84.344847][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.347075][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.358399][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.363049][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.365266][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.373701][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.461262][ T6519] hsr_slave_0: entered promiscuous mode [ 84.463887][ T6519] hsr_slave_1: entered promiscuous mode [ 84.466100][ T6519] debugfs: 'hsr0' already exists in 'hsr' [ 84.467914][ T6519] Cannot create hsr debugfs directory [ 84.668313][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 84.737541][ T5587] hsr_slave_0: left promiscuous mode [ 84.746954][ T5587] hsr_slave_1: left promiscuous mode [ 84.752705][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.761954][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.765753][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.768558][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.788795][ T5587] veth1_macvtap: left promiscuous mode [ 84.792979][ T5587] veth0_macvtap: left promiscuous mode [ 84.796582][ T5587] veth1_vlan: left promiscuous mode [ 84.801031][ T5587] veth0_vlan: left promiscuous mode [ 85.174088][ T5587] team0 (unregistering): Port device team_slave_1 removed [ 85.198488][ T5587] team0 (unregistering): Port device team_slave_0 removed [ 85.371472][ T64] Bluetooth: hci3: command tx timeout [ 85.547937][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 85.617616][ T6519] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.648909][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.661780][ T6519] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.682200][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.694105][ T6519] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.719404][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.742149][ T6519] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.750447][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.844142][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.883976][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.895048][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.898041][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.918578][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.921537][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.179476][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 86.334088][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.465729][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 86.549632][ T6519] veth0_vlan: entered promiscuous mode [ 86.563161][ T6519] veth1_vlan: entered promiscuous mode [ 86.596876][ T6519] veth0_macvtap: entered promiscuous mode [ 86.605978][ T6519] veth1_macvtap: entered promiscuous mode [ 86.625051][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.639983][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.722155][ T5587] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.725430][ T5587] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.732729][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.735257][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.757178][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.761835][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.781014][ T5587] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.833873][ T5587] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.451004][ T64] Bluetooth: hci3: command tx timeout [ 88.104590][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.110129][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.113004][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.116392][ T5742] Bluetooth: hci3: unknown advertising packet type: 0x30 [ 88.116419][ T5742] Bluetooth: hci3: unknown advertising packet type: 0x6f [ 88.119636][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.127472][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.521849][ T5587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.620362][ T5587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.702983][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.708263][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.721118][ T6628] bridge_slave_0: entered allmulticast mode [ 88.726261][ T6628] bridge_slave_0: entered promiscuous mode [ 88.744585][ T5587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.755822][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.760247][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.763072][ T6628] bridge_slave_1: entered allmulticast mode [ 88.768137][ T6628] bridge_slave_1: entered promiscuous mode [ 88.809923][ T6628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.814622][ T6628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.830104][ T5587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.860734][ T6628] team0: Port device team_slave_0 added [ 88.865046][ T6628] team0: Port device team_slave_1 added [ 88.883898][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.886202][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.895026][ T6628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.899713][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.902784][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.912368][ T6628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.944992][ T6628] hsr_slave_0: entered promiscuous mode [ 88.947364][ T6628] hsr_slave_1: entered promiscuous mode [ 88.949627][ T6628] debugfs: 'hsr0' already exists in 'hsr' [ 88.951612][ T6628] Cannot create hsr debugfs directory [ 89.094475][ T5587] bridge_slave_1: left allmulticast mode [ 89.096970][ T5587] bridge_slave_1: left promiscuous mode [ 89.099462][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.105670][ T5587] bridge_slave_0: left allmulticast mode [ 89.108324][ T5587] bridge_slave_0: left promiscuous mode [ 89.110868][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.250798][ T6656] netlink: 260 bytes leftover after parsing attributes in process `syz.5.227'. [ 89.253883][ T6656] netlink: 104 bytes leftover after parsing attributes in process `syz.5.227'. [ 89.257620][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.5.227'. [ 89.392059][ T5587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.397804][ T5587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.404851][ T5587] bond0 (unregistering): Released all slaves [ 89.521224][ T64] Bluetooth: hci3: command tx timeout [ 89.586066][ T6628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.592533][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.601938][ T6628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.616368][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.624039][ T6628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.646408][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.668135][ T6628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.688895][ T6628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.752109][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 89.829171][ T5587] hsr_slave_0: left promiscuous mode [ 89.831772][ T5587] hsr_slave_1: left promiscuous mode [ 89.833835][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.836168][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.838851][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.842809][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.850704][ T5587] veth1_macvtap: left promiscuous mode [ 89.853163][ T5587] veth0_macvtap: left promiscuous mode [ 89.855012][ T5587] veth1_vlan: left promiscuous mode [ 89.856742][ T5587] veth0_vlan: left promiscuous mode [ 90.162305][ T64] Bluetooth: hci2: command tx timeout [ 90.172518][ T5587] team0 (unregistering): Port device team_slave_1 removed [ 90.186058][ T5587] team0 (unregistering): Port device team_slave_0 removed [ 90.338763][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 90.360855][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.384200][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.394686][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.397734][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.423852][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.426397][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.546505][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 90.736847][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 90.774111][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.923635][ T6628] veth0_vlan: entered promiscuous mode [ 90.929650][ T6628] veth1_vlan: entered promiscuous mode [ 90.947570][ T6628] veth0_macvtap: entered promiscuous mode [ 90.953776][ T6628] veth1_macvtap: entered promiscuous mode [ 90.964160][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.970382][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.978906][ T5587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.983213][ T5587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.002832][ T5837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.048855][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.063311][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.085549][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.088747][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.119345][ T5587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.139434][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.143356][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.146658][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.149563][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.153563][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.495460][ T5587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.598724][ T5587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.603161][ T64] Bluetooth: hci3: command tx timeout [ 91.684978][ T5587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.774166][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.776582][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.778933][ T6722] bridge_slave_0: entered allmulticast mode [ 91.783029][ T6722] bridge_slave_0: entered promiscuous mode [ 91.786728][ T6722] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.789085][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.791636][ T6722] bridge_slave_1: entered allmulticast mode [ 91.794571][ T6722] bridge_slave_1: entered promiscuous mode [ 91.818913][ T6722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.824365][ T6722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.859988][ T5587] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.883732][ T6722] team0: Port device team_slave_0 added [ 91.887856][ T6722] team0: Port device team_slave_1 added [ 91.905250][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.907553][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.916541][ T6722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.921266][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.923752][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.935427][ T6722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.983001][ T6722] hsr_slave_0: entered promiscuous mode [ 91.986160][ T6722] hsr_slave_1: entered promiscuous mode [ 91.989054][ T6722] debugfs: 'hsr0' already exists in 'hsr' [ 91.991521][ T6722] Cannot create hsr debugfs directory [ 92.190000][ T5587] bridge_slave_1: left allmulticast mode [ 92.192463][ T5587] bridge_slave_1: left promiscuous mode [ 92.194437][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.199679][ T5587] bridge_slave_0: left allmulticast mode [ 92.203018][ T5587] bridge_slave_0: left promiscuous mode [ 92.205449][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.251034][ T64] Bluetooth: hci2: command tx timeout [ 92.333949][ T5587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.342133][ T5587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.347167][ T5587] bond0 (unregistering): Released all slaves [ 92.507335][ T6722] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 92.513509][ T6722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.516539][ T6722] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 92.525441][ T6722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.566904][ T6722] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 92.577387][ T6722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.585547][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 92.589030][ T6722] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 92.607987][ T6722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.729822][ T6722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.750827][ T6722] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.780515][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.783646][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.789915][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.793724][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.807154][ T5587] hsr_slave_0: left promiscuous mode [ 92.810309][ T5587] hsr_slave_1: left promiscuous mode [ 92.813482][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.816675][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.820560][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.824150][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.832467][ T5587] veth1_macvtap: left promiscuous mode [ 92.834802][ T5587] veth0_macvtap: left promiscuous mode [ 92.837257][ T5587] veth1_vlan: left promiscuous mode [ 92.840853][ T5587] veth0_vlan: left promiscuous mode [ 93.016666][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.244'. [ 93.020223][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.244'. [ 93.103795][ T5587] team0 (unregistering): Port device team_slave_1 removed [ 93.127995][ T5587] team0 (unregistering): Port device team_slave_0 removed [ 93.211027][ T64] Bluetooth: hci0: command tx timeout [ 93.297151][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 93.332235][ T6722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.845398][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.022270][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 94.272731][ T6722] veth0_vlan: entered promiscuous mode [ 94.283966][ T6722] veth1_vlan: entered promiscuous mode [ 94.320476][ T6722] veth0_macvtap: entered promiscuous mode [ 94.323295][ T64] Bluetooth: hci2: command tx timeout [ 94.345912][ T6722] veth1_macvtap: entered promiscuous mode [ 94.370120][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.377988][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.528961][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.531607][ T5837] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534958][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.538685][ T5837] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.543286][ T5837] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.588803][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.591734][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.601036][ T5837] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.607519][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 94.770204][ T6878] ======================================================= [ 94.770204][ T6878] WARNING: The mand mount option has been deprecated and [ 94.770204][ T6878] and is ignored by this kernel. Remove the mand [ 94.770204][ T6878] option from the mount to silence this warning. [ 94.770204][ T6878] ======================================================= [ 95.281763][ T64] Bluetooth: hci0: command tx timeout [ 96.114774][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.7.267'. [ 96.331019][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 96.401110][ T64] Bluetooth: hci2: command tx timeout [ 96.481267][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 96.490413][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 96.495972][ T10] usb 11-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 96.500454][ T10] usb 11-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.507446][ T10] usb 11-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 96.510860][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.514982][ T10] usb 11-1: Product: syz [ 96.517579][ T10] usb 11-1: Manufacturer: syz [ 96.520971][ T10] usb 11-1: SerialNumber: syz [ 96.749777][ T6901] netlink: 36 bytes leftover after parsing attributes in process `syz.6.268'. [ 96.790412][ T10] usb 11-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 96.795766][ T10] usb 11-1: 1:1 : invalid channels 0 [ 96.808086][ T10] usb 11-1: unit 37 not found! [ 96.813708][ T10] usb 11-1: unit 0 not found! [ 96.894267][ T10] usb 11-1: USB disconnect, device number 2 [ 96.937447][ T6907] syzkaller0: entered promiscuous mode [ 96.939471][ T6907] syzkaller0: entered allmulticast mode [ 96.954875][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.050415][ T64] Bluetooth: hci0: unknown advertising packet type: 0x30 [ 97.050459][ T64] Bluetooth: hci0: unknown advertising packet type: 0x6f [ 97.334497][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.348450][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.351796][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.355727][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.358398][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.361049][ T5734] Bluetooth: hci0: command tx timeout [ 97.632110][ T5587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.845013][ T5587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.993178][ T5587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.108341][ T5587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.410512][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.423789][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.434874][ T6925] bridge_slave_0: entered allmulticast mode [ 98.448550][ T6925] bridge_slave_0: entered promiscuous mode [ 98.468880][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.479293][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.491529][ T6925] bridge_slave_1: entered allmulticast mode [ 98.504122][ T6925] bridge_slave_1: entered promiscuous mode [ 98.619064][ T6955] netlink: 40 bytes leftover after parsing attributes in process `syz.6.281'. [ 98.680154][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.690828][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.731531][ T5587] bridge_slave_1: left allmulticast mode [ 98.733982][ T5587] bridge_slave_1: left promiscuous mode [ 98.736373][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.746636][ T6957] ubi16: attaching mtd0 [ 98.759027][ T5587] bridge_slave_0: left allmulticast mode [ 98.761143][ T5587] bridge_slave_0: left promiscuous mode [ 98.763510][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.779610][ T6957] ubi16: scanning is finished [ 98.782391][ T6957] ubi16: empty MTD device detected [ 98.945953][ T5587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.950730][ T5587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.955595][ T5587] bond0 (unregistering): Released all slaves [ 98.983775][ T64] Bluetooth: hci0: unknown advertising packet type: 0x6f [ 98.997004][ T6957] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 99.002107][ T6957] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 99.007386][ T6957] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 99.010247][ T6957] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 99.010319][ T6925] team0: Port device team_slave_0 added [ 99.013065][ T6957] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 99.020630][ T6957] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 99.023505][ T6925] team0: Port device team_slave_1 added [ 99.028015][ T6957] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1166696034 [ 99.035916][ T6957] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 99.042370][ T6968] ubi16: background thread "ubi_bgt16d" started, PID 6968 [ 99.092007][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.104574][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.143491][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.155181][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.181065][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.195122][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.199688][ T6980] netlink: 40 bytes leftover after parsing attributes in process `syz.6.289'. [ 99.322459][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18 [ 99.337109][ T6925] hsr_slave_0: entered promiscuous mode [ 99.343807][ T6925] hsr_slave_1: entered promiscuous mode [ 99.451025][ T64] Bluetooth: hci0: command tx timeout [ 99.451083][ T5734] Bluetooth: hci1: command tx timeout [ 99.517207][ T5587] hsr_slave_0: left promiscuous mode [ 99.542187][ T5587] hsr_slave_1: left promiscuous mode [ 99.546917][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.549556][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.554718][ T5587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.557216][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.573760][ T5587] veth1_macvtap: left promiscuous mode [ 99.577507][ T5587] veth0_macvtap: left promiscuous mode [ 99.579453][ T5587] veth1_vlan: left promiscuous mode [ 99.581352][ T5587] veth0_vlan: left promiscuous mode [ 99.836626][ T5587] team0 (unregistering): Port device team_slave_1 removed [ 99.854032][ T5587] team0 (unregistering): Port device team_slave_0 removed [ 100.178392][ T6925] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.216364][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.232175][ T6925] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.243942][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.246995][ T6925] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.259113][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.266291][ T6925] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.281690][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.417309][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.433229][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.444138][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.447004][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.467702][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.470582][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.579328][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.296'. [ 100.647631][ T5734] Bluetooth: hci2: unknown advertising packet type: 0x6f [ 100.911612][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.7.301'. [ 101.061002][ T5839] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 101.082596][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.232710][ T5839] usb 11-1: config 0 has no interfaces? [ 101.246129][ T5839] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.256206][ T5839] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.262126][ T5839] usb 11-1: Product: syz [ 101.263499][ T5839] usb 11-1: Manufacturer: syz [ 101.271034][ T5839] usb 11-1: SerialNumber: syz [ 101.280661][ T5839] usb 11-1: config 0 descriptor?? [ 101.367317][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19 [ 101.454269][ T6925] veth0_vlan: entered promiscuous mode [ 101.470781][ T6925] veth1_vlan: entered promiscuous mode [ 101.521114][ T5734] Bluetooth: hci1: command tx timeout [ 101.533732][ T6925] veth0_macvtap: entered promiscuous mode [ 101.534698][ T29] usb 11-1: USB disconnect, device number 3 [ 101.543571][ T6925] veth1_macvtap: entered promiscuous mode [ 101.588797][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.620534][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.701089][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.707920][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.733717][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.743338][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.805886][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.819423][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.881508][ T5445] 8021q: adding VLAN 0 to HW filter on device eth20 [ 101.884960][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.894643][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.196623][ T5734] Bluetooth: hci2: unknown advertising packet type: 0x6f [ 102.319413][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 102.606189][ T5734] Bluetooth: hci1: unknown advertising packet type: 0x30 [ 103.398543][ T7159] netlink: 40 bytes leftover after parsing attributes in process `syz.5.328'. [ 103.612655][ T5734] Bluetooth: hci1: command tx timeout [ 104.266221][ T7187] netlink: 40 bytes leftover after parsing attributes in process `syz.8.337'. [ 104.837528][ T7215] ./file0: Can't open blockdev [ 105.691083][ T5734] Bluetooth: hci1: command tx timeout [ 106.310529][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.7.354'. [ 106.727395][ T7282] kAFS: unable to lookup cell '(,c¾û/' [ 107.688062][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.373'. [ 108.239669][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.243447][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.252523][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.255494][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.258941][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.262099][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.271280][ T7336] team0: Port device bridge0 added [ 108.351352][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.355699][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.418619][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.382'. [ 108.614852][ T7350] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 109.271129][ T7191] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 109.421126][ T7191] usb 12-1: Using ep0 maxpacket: 8 [ 109.426723][ T7191] usb 12-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 109.430420][ T7191] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 109.433715][ T7191] usb 12-1: Product: syz [ 109.435232][ T7191] usb 12-1: Manufacturer: syz [ 109.436732][ T7191] usb 12-1: SerialNumber: syz [ 109.439602][ T7191] usb 12-1: config 0 descriptor?? [ 109.454515][ T7191] gspca_main: sq905-2.14.0 probing 2770:9120 [ 109.729862][ T7379] binder_alloc: 7375: binder_alloc_buf, no vma [ 109.811926][ T42] audit: type=1326 audit(1786169693.611:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.6.399" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x0 [ 110.497512][ T7191] gspca_sq905: bulk read fail (-22) len 0/4 [ 110.499518][ T7191] sq905 12-1:0.0: probe with driver sq905 failed with error -5 [ 110.715983][ T5810] usb 12-1: USB disconnect, device number 2 [ 111.231094][ T7191] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.391108][ T7191] usb 10-1: Using ep0 maxpacket: 16 [ 111.395154][ T7191] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.399465][ T7191] usb 10-1: config 0 has no interfaces? [ 111.402223][ T7191] usb 10-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 111.405711][ T7191] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.411113][ T7191] usb 10-1: config 0 descriptor?? [ 111.451222][ T5810] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 111.452506][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.8.412'. [ 111.611170][ T5810] usb 11-1: Using ep0 maxpacket: 32 [ 111.619519][ T7191] usb 10-1: USB disconnect, device number 2 [ 111.624094][ T5810] usb 11-1: unable to get BOS descriptor or descriptor too short [ 111.631024][ T5810] usb 11-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 111.638076][ T5810] usb 11-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.655874][ T5810] usb 11-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 111.667186][ T5810] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.673614][ T5810] usb 11-1: Product: syz [ 111.675010][ T5810] usb 11-1: Manufacturer: syz [ 111.681045][ T5810] usb 11-1: SerialNumber: syz [ 111.910022][ T7411] netlink: 36 bytes leftover after parsing attributes in process `syz.6.410'. [ 111.926663][ T7434] netlink: 36 bytes leftover after parsing attributes in process `syz.8.419'. [ 111.927705][ T5810] usb 11-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 111.933076][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.937431][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.938315][ T5810] usb 11-1: 1:1 : invalid channels 0 [ 111.946007][ T5810] usb 11-1: unit 37 not found! [ 111.949197][ T5810] usb 11-1: unit 0 not found! [ 112.030809][ T5810] usb 11-1: USB disconnect, device number 4 [ 112.573034][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.429'. [ 112.772025][ T7478] bochs-drm 0000:00:01.0: [drm] Unknown color mode 256; guessing buffer size. [ 113.519067][ T7488] raw_sendmsg: syz.5.439 forgot to set AF_INET. Fix it! [ 115.261104][ T6889] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 115.425429][ T6889] usb 13-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 115.428575][ T6889] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.431624][ T6889] usb 13-1: Product: syz [ 115.433113][ T6889] usb 13-1: Manufacturer: syz [ 115.434720][ T6889] usb 13-1: SerialNumber: syz [ 115.437865][ T6889] usb 13-1: config 0 descriptor?? [ 115.833670][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.7.460'. [ 116.520848][ T7592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.475'. [ 116.883739][ T6889] usb 13-1: f81604_read: reg: 200f failed: -EPROTO [ 116.890072][ T6889] usb 13-1: USB disconnect, device number 2 [ 116.906636][ T6889] usb 13-1: f81604_read: reg: 100f failed: -ENODEV [ 116.954878][ T5445] usb 13-1: f81604_read: reg: 200f failed: -ENODEV [ 116.984431][ T6889] usb 13-1: f81604_read: reg: 200f failed: -ENODEV [ 117.823446][ T1469] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 118.004994][ T1469] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.010204][ T1469] usb 10-1: config 0 has no interface number 0 [ 118.013347][ T1469] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.018070][ T1469] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 118.023203][ T1469] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 118.028253][ T1469] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 118.034945][ T1469] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 118.039768][ T1469] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.046006][ T1469] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.050031][ T1469] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.056398][ T1469] usb 10-1: config 0 descriptor?? [ 118.060440][ T7622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 118.064934][ T7622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 118.073972][ T1469] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 118.453858][ T5839] usb 10-1: USB disconnect, device number 3 [ 118.459694][ T5839] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 119.184026][ T7656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.188107][ T7656] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.208070][ T7656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.210391][ T7656] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.220432][ T7656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.228634][ T7656] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.238239][ T7656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.240389][ T7656] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.001121][ T1469] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 120.160975][ T1469] usb 10-1: Using ep0 maxpacket: 32 [ 120.174247][ T1469] usb 10-1: unable to get BOS descriptor or descriptor too short [ 120.190746][ T1469] usb 10-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 120.204091][ T1469] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.223371][ T1469] usb 10-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 120.227176][ T1469] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.230458][ T1469] usb 10-1: Product: syz [ 120.234572][ T1469] usb 10-1: Manufacturer: syz [ 120.237340][ T1469] usb 10-1: SerialNumber: syz [ 120.416214][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.8.508'. [ 120.456701][ T1469] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 120.460608][ T1469] usb 10-1: 1:1 : invalid channels 0 [ 120.463412][ T1469] usb 10-1: unit 37 not found! [ 120.465415][ T1469] usb 10-1: unit 0 not found! [ 120.497646][ T1469] usb 10-1: USB disconnect, device number 4 [ 120.537048][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.211037][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.292139][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.292206][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.292249][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.795350][ T7698] ieee802154 phy0 wpan0: encryption failed: -22 [ 122.112950][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.518'. [ 122.161476][ T5883] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 122.312937][ T5883] usb 12-1: config 0 has an invalid interface number: 52 but max is 0 [ 122.316387][ T5883] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.321076][ T5883] usb 12-1: config 0 has no interface number 0 [ 122.323917][ T5883] usb 12-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 122.328661][ T5883] usb 12-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.334317][ T5883] usb 12-1: config 0 interface 52 has no altsetting 0 [ 122.338263][ T5883] usb 12-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 122.342415][ T5883] usb 12-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 122.346009][ T5883] usb 12-1: Manufacturer: syz [ 122.351152][ T5883] usb 12-1: config 0 descriptor?? [ 122.356807][ T5883] hub 12-1:0.52: bad descriptor, ignoring hub [ 122.359919][ T5883] hub 12-1:0.52: probe with driver hub failed with error -5 [ 122.768123][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.517'. [ 122.981358][ T5838] usb 12-1: USB disconnect, device number 3 [ 123.291041][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.362174][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.362241][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.362280][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.251113][ T1035] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 125.433822][ T1035] usb 12-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 125.436863][ T1035] usb 12-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 125.439488][ T1035] usb 12-1: Product: syz [ 125.442700][ T1035] usb 12-1: SerialNumber: syz [ 125.446335][ T1035] usb 12-1: config 0 descriptor?? [ 125.659347][ T1035] hso 12-1:0.0: Failed to find BULK eps [ 125.860852][ T5883] usb 12-1: USB disconnect, device number 4 [ 126.550452][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.7.538'. [ 127.801576][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.806656][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.813184][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.818752][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.823200][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.370543][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.373454][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.375993][ T7782] bridge_slave_0: entered allmulticast mode [ 128.378727][ T7782] bridge_slave_0: entered promiscuous mode [ 128.382873][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.385308][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.392293][ T7782] bridge_slave_1: entered allmulticast mode [ 128.399494][ T7782] bridge_slave_1: entered promiscuous mode [ 128.435627][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.440822][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.460953][ T10] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 128.465998][ T7782] team0: Port device team_slave_0 added [ 128.469788][ T7782] team0: Port device team_slave_1 added [ 128.484611][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.486980][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.495616][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.500134][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.503039][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.511373][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.535627][ T7782] hsr_slave_0: entered promiscuous mode [ 128.537971][ T7782] hsr_slave_1: entered promiscuous mode [ 128.540110][ T7782] debugfs: 'hsr0' already exists in 'hsr' [ 128.542648][ T7782] Cannot create hsr debugfs directory [ 128.634525][ T10] usb 13-1: unable to get BOS descriptor or descriptor too short [ 128.642319][ T10] usb 13-1: not running at top speed; connect to a high speed hub [ 128.648319][ T10] usb 13-1: config 0 has an invalid interface number: 88 but max is 0 [ 128.653830][ T10] usb 13-1: config 0 has no interface number 0 [ 128.658588][ T10] usb 13-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 128.665194][ T10] usb 13-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 128.670491][ T10] usb 13-1: config 0 interface 88 has no altsetting 0 [ 128.675531][ T7782] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 128.685186][ T10] usb 13-1: string descriptor 0 read error: -22 [ 128.687303][ T10] usb 13-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 128.691493][ T5810] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 128.694228][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.696672][ T10] usb 13-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 128.700513][ T7782] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 128.707635][ T10] usb 13-1: config 0 descriptor?? [ 128.713064][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.721400][ T7782] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 128.724876][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.88/input/input7 [ 128.738840][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.752694][ T7782] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 128.764878][ T7782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.797276][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.799641][ T7782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.802092][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.804380][ T7782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.807743][ T6732] udevd[6732]: Error opening device "/dev/input/event4": Input/output error [ 128.812953][ T6732] udevd[6732]: Unable to EVIOCGABS device "/dev/input/event4" [ 128.816069][ T6732] udevd[6732]: Unable to EVIOCGABS device "/dev/input/event4" [ 128.838163][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.841240][ T5810] usb 12-1: Using ep0 maxpacket: 32 [ 128.845322][ T5810] usb 12-1: unable to get BOS descriptor or descriptor too short [ 128.848852][ T5810] usb 12-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 128.852314][ T5810] usb 12-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.862977][ T5810] usb 12-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 128.865915][ T5810] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.868559][ T5810] usb 12-1: Product: syz [ 128.869949][ T5810] usb 12-1: Manufacturer: syz [ 128.871670][ T5810] usb 12-1: SerialNumber: syz [ 128.873993][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.877626][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.900098][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.912070][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.914445][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.922776][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.925084][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.929367][ T6889] usb 13-1: USB disconnect, device number 3 [ 129.099068][ T5810] usb 12-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 129.103038][ T5810] usb 12-1: 1:1 : invalid channels 0 [ 129.105249][ T5810] usb 12-1: unit 37 not found! [ 129.106800][ T5810] usb 12-1: unit 0 not found! [ 129.133699][ T5810] usb 12-1: USB disconnect, device number 5 [ 129.157611][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 129.320795][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.465975][ T7782] veth0_vlan: entered promiscuous mode [ 129.472954][ T7782] veth1_vlan: entered promiscuous mode [ 129.501429][ T7782] veth0_macvtap: entered promiscuous mode [ 129.507957][ T7782] veth1_macvtap: entered promiscuous mode [ 129.567009][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.582759][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.622391][ T5587] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.631831][ T5587] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.681682][ T5837] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.693703][ T5837] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.786074][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.789569][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.833130][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.835722][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.841615][ T5734] Bluetooth: hci4: command tx timeout [ 129.850378][ T1469] libceph: connect (1)[c::]:6789 error -22 [ 129.857078][ T1469] libceph: mon0 (1)[c::]:6789 connect error [ 129.888381][ T1469] libceph: connect (1)[c::]:6789 error -22 [ 129.894039][ T1469] libceph: mon0 (1)[c::]:6789 connect error [ 129.897703][ T7837] ceph: No mds server is up or the cluster is laggy [ 131.908731][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.563'. [ 131.931121][ T5734] Bluetooth: hci4: command tx timeout [ 132.404870][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.407829][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.977920][ T7870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.981913][ T7870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.984164][ T7870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.987144][ T7870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.995244][ T7870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.999112][ T7870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.009181][ T7870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.594071][ T7886] Bluetooth: MGMT ver 1.23 [ 134.175876][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.7.573'. [ 134.179879][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.7.573'. [ 134.251594][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.489126][ T7902] netlink: 196 bytes leftover after parsing attributes in process `syz.8.576'. [ 134.831066][ T5744] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 134.983338][ T5744] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 134.990346][ T5744] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 134.996529][ T5744] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 135.004308][ T5744] usb 13-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 135.010001][ T5744] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.017444][ T5744] usb 13-1: Product: syz [ 135.018717][ T5744] usb 13-1: Manufacturer: syz [ 135.020268][ T5744] usb 13-1: SerialNumber: syz [ 135.023930][ T5744] usb 13-1: config 0 descriptor?? [ 135.027023][ T7906] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 135.029267][ T7906] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 135.032927][ T5744] usb 13-1: ucan: probing device on interface #0 [ 135.041483][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 135.042989][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.043020][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.043099][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.249340][ T5744] usb 13-1: ucan: could not read protocol version, ret=-71 [ 135.251672][ T5744] usb 13-1: ucan: probe failed; try to update the device firmware [ 135.263783][ T5744] usb 13-1: USB disconnect, device number 4 [ 136.534171][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.593'. [ 137.121050][ T64] Bluetooth: hci4: command 0x0419 tx timeout [ 137.310981][ T1035] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 137.462307][ T1035] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.467683][ T1035] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.476922][ T1035] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.484114][ T1035] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 137.488069][ T1035] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 137.493831][ T1035] usb 13-1: Product: syz [ 137.496169][ T1035] usb 13-1: Manufacturer: syz [ 137.498756][ T1035] usb 13-1: SerialNumber: syz [ 137.720840][ T1035] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.090988][ T5883] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 138.241050][ T5883] usb 14-1: Using ep0 maxpacket: 32 [ 138.246861][ T5883] usb 14-1: unable to get BOS descriptor or descriptor too short [ 138.251652][ T5883] usb 14-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 138.255872][ T5883] usb 14-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.263392][ T5883] usb 14-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 138.266482][ T5883] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.269265][ T5883] usb 14-1: Product: syz [ 138.271620][ T5883] usb 14-1: Manufacturer: syz [ 138.273686][ T5883] usb 14-1: SerialNumber: syz [ 138.451947][ T1035] usb 13-1: USB disconnect, device number 5 [ 138.468573][ T1035] usblp0: removed [ 138.506563][ T5883] usb 14-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 138.509816][ T5883] usb 14-1: 1:1 : invalid channels 0 [ 138.512743][ T5883] usb 14-1: unit 37 not found! [ 138.514387][ T5883] usb 14-1: unit 0 not found! [ 138.545877][ T5883] usb 14-1: USB disconnect, device number 2 [ 139.212257][ T64] Bluetooth: hci4: command 0x0419 tx timeout [ 139.283873][ T5734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.290493][ T5734] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.304500][ T5734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.314356][ T5734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.318379][ T5734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.881209][ T7191] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 140.032080][ T7191] usb 13-1: Using ep0 maxpacket: 32 [ 140.042195][ T7191] usb 13-1: unable to get BOS descriptor or descriptor too short [ 140.045945][ T7191] usb 13-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 140.050455][ T7191] usb 13-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.058964][ T7191] usb 13-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 140.062153][ T7191] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.066045][ T7191] usb 13-1: Product: syz [ 140.067329][ T7191] usb 13-1: Manufacturer: syz [ 140.071119][ T7191] usb 13-1: SerialNumber: syz [ 140.249164][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.251675][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.254516][ T7998] bridge_slave_0: entered allmulticast mode [ 140.257591][ T7998] bridge_slave_0: entered promiscuous mode [ 140.263693][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.266130][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.268453][ T7998] bridge_slave_1: entered allmulticast mode [ 140.271750][ T7998] bridge_slave_1: entered promiscuous mode [ 140.294667][ T7191] usb 13-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 140.301317][ T7191] usb 13-1: 1:1 : invalid channels 0 [ 140.304530][ T7191] usb 13-1: unit 37 not found! [ 140.305954][ T7191] usb 13-1: unit 0 not found! [ 140.312094][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.318655][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.334148][ T7191] usb 13-1: USB disconnect, device number 6 [ 140.345028][ T7998] team0: Port device team_slave_0 added [ 140.353037][ T7998] team0: Port device team_slave_1 added [ 140.384390][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.387417][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.396103][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.400258][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.404448][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.409801][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 140.414304][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.446814][ T7998] hsr_slave_0: entered promiscuous mode [ 140.449009][ T7998] hsr_slave_1: entered promiscuous mode [ 140.451174][ T7998] debugfs: 'hsr0' already exists in 'hsr' [ 140.452847][ T7998] Cannot create hsr debugfs directory [ 141.170108][ T7998] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.184239][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.187531][ T7998] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.198757][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.201828][ T7998] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.213501][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.217542][ T7998] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.224348][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.281290][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 141.361717][ T5734] Bluetooth: hci5: command tx timeout [ 141.389020][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.424930][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.442079][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.444416][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.462938][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.465299][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.175367][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.280866][ T7998] veth0_vlan: entered promiscuous mode [ 142.295225][ T7998] veth1_vlan: entered promiscuous mode [ 142.321022][ T5839] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 142.367549][ T7998] veth0_macvtap: entered promiscuous mode [ 142.395552][ T7998] veth1_macvtap: entered promiscuous mode [ 142.427322][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.455148][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.471918][ T5839] usb 13-1: Using ep0 maxpacket: 16 [ 142.475334][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.479743][ T5839] usb 13-1: config index 0 descriptor too short (expected 16456, got 72) [ 142.485691][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.485829][ T5839] usb 13-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.491507][ T5839] usb 13-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.494106][ T5839] usb 13-1: config 0 has an invalid interface number: 125 but max is 1 [ 142.496810][ T5839] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.500654][ T5839] usb 13-1: config 0 has no interface number 0 [ 142.505315][ T5839] usb 13-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 142.509940][ T5839] usb 13-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 142.521438][ T5587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.524416][ T5839] usb 13-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.524501][ T5587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.533913][ T5839] usb 13-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.543754][ T5839] usb 13-1: config 0 interface 125 has no altsetting 0 [ 142.546077][ T5839] usb 13-1: config 0 interface 125 has no altsetting 2 [ 142.552573][ T5839] usb 13-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 142.555502][ T5839] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.561789][ T5839] usb 13-1: Product: syz [ 142.563226][ T5839] usb 13-1: Manufacturer: syz [ 142.566981][ T5839] usb 13-1: SerialNumber: syz [ 142.572127][ T5839] usb 13-1: config 0 descriptor?? [ 142.577541][ T5839] usb 13-1: selecting invalid altsetting 2 [ 142.660670][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.670540][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.731203][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.733777][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.791032][ T50] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 142.941115][ T50] usb 12-1: Using ep0 maxpacket: 8 [ 142.954111][ T50] usb 12-1: unable to get BOS descriptor or descriptor too short [ 142.964790][ T50] usb 12-1: config 4 interface 0 has no altsetting 0 [ 142.974766][ T50] usb 12-1: string descriptor 0 read error: -22 [ 142.979529][ C2] usb 13-1: async_complete: urb error -71 [ 142.980036][ T50] usb 12-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 142.981447][ C2] usb 13-1: async_complete: urb error -71 [ 142.981489][ C2] usb 13-1: async_complete: urb error -71 [ 142.991060][ T50] usb 12-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 143.002052][ T5839] get_1284_register: usb error -71 [ 143.009068][ T5839] usb 13-1: USB disconnect, device number 7 [ 143.031890][ T50] usb 12-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 143.081847][ T50] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.097798][ T50] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 143.114557][ T50] usb 12-1: media controller created [ 143.156881][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.237590][ T50] zl10353_read_register: readreg error (reg=127, ret==0) [ 143.255622][ T8151] binder: 8150:8151 ioctl c0306201 0 returned -14 [ 143.324863][ T50] usb 12-1: USB disconnect, device number 6 [ 143.441213][ T5734] Bluetooth: hci5: command tx timeout [ 143.754401][ T8167] 9p: Bad value for 'rfdno' [ 144.071001][ T50] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 144.224730][ T8182] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 144.236795][ T50] usb 14-1: Using ep0 maxpacket: 32 [ 144.242614][ T50] usb 14-1: unable to get BOS descriptor or descriptor too short [ 144.252298][ T50] usb 14-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 144.263413][ T50] usb 14-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.277159][ T50] usb 14-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 144.284804][ T50] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.293943][ T50] usb 14-1: Product: syz [ 144.298634][ T50] usb 14-1: Manufacturer: syz [ 144.303002][ T50] usb 14-1: SerialNumber: syz [ 144.311678][ T5838] usb 12-1: new low-speed USB device number 7 using dummy_hcd [ 144.411892][ T8187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.417969][ T8187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.428720][ T8187] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.435005][ T8187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.442651][ T8187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.449321][ T8187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 144.459855][ T8187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 144.470187][ T8187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 144.474883][ T5838] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.478762][ T5838] usb 12-1: config 0 has no interface number 0 [ 144.481241][ T5838] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.486561][ T5838] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 144.490103][ T5838] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.494373][ T5838] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 144.498117][ T5838] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 144.501922][ T5838] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.507391][ T5838] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.510593][ T5838] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.519172][ T5838] usb 12-1: config 0 descriptor?? [ 144.521767][ T8180] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 144.525139][ T8180] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 144.535345][ T5838] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.555228][ T50] usb 14-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 144.563053][ T50] usb 14-1: 1:1 : invalid channels 0 [ 144.578554][ T50] usb 14-1: unit 37 not found! [ 144.580018][ T50] usb 14-1: unit 0 not found! [ 144.600331][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 144.688537][ T50] usb 14-1: USB disconnect, device number 3 [ 144.746157][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 144.883820][ T5838] usb 12-1: USB disconnect, device number 7 [ 144.891859][ T5838] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 145.442012][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.7.665'. [ 145.662528][ T8221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.664817][ T8221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.666955][ T8221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.669558][ T8221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.671669][ T8221] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.673557][ T8221] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 146.101374][ T5838] usb 13-1: new low-speed USB device number 8 using dummy_hcd [ 146.270002][ T5838] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.291211][ T5838] usb 13-1: config 0 has no interface number 0 [ 146.293928][ T5838] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.298370][ T5838] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 146.321217][ T5838] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.330980][ T5838] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 146.341010][ T5838] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 146.361059][ T5838] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.370999][ T5838] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.376142][ T5838] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.391488][ T5838] usb 13-1: config 0 descriptor?? [ 146.396421][ T8229] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 146.406902][ T8229] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 146.412949][ T5838] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 146.659354][ T8241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.661848][ T8241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.664038][ T8241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.666272][ T8241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.668619][ T8241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.670787][ T8241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 146.860936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 146.933871][ T5838] usb 13-1: USB disconnect, device number 8 [ 146.942555][ T5838] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 146.968752][ T8258] netlink: 76 bytes leftover after parsing attributes in process `syz.9.685'. [ 146.980987][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.9.685'. [ 146.984798][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.9.685'. [ 147.167106][ T8267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.170152][ T8267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.173407][ T8267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.177127][ T8267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.179759][ T8267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.182454][ T8267] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 147.441134][ T1035] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 147.601845][ T1035] usb 14-1: Using ep0 maxpacket: 32 [ 147.607193][ T1035] usb 14-1: unable to get BOS descriptor or descriptor too short [ 147.613211][ T1035] usb 14-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 147.617600][ T1035] usb 14-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.623677][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.8.694'. [ 147.625321][ T1035] usb 14-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 147.631541][ T1035] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.635210][ T1035] usb 14-1: Product: syz [ 147.637069][ T1035] usb 14-1: Manufacturer: syz [ 147.639229][ T1035] usb 14-1: SerialNumber: syz [ 147.873716][ T1035] usb 14-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 147.877234][ T1035] usb 14-1: 1:1 : invalid channels 0 [ 147.879626][ T1035] usb 14-1: unit 37 not found! [ 147.881437][ T1035] usb 14-1: unit 0 not found! [ 147.912937][ T1035] usb 14-1: USB disconnect, device number 4 [ 148.279406][ T8288] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 148.283110][ T8288] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 148.290774][ T8288] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 148.301385][ T29] IPVS: starting estimator thread 0... [ 148.393320][ T8296] IPVS: using max 43 ests per chain, 103200 per kthread [ 148.408021][ T8298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.410177][ T8298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.412755][ T8298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.417556][ T8298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.421975][ T8298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.424811][ T8298] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 148.671016][ T29] usb 14-1: new low-speed USB device number 5 using dummy_hcd [ 148.824894][ T29] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.828654][ T29] usb 14-1: config 0 has no interface number 0 [ 148.831745][ T29] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.836362][ T29] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 148.840754][ T29] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 148.846268][ T29] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 148.851238][ T29] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 148.855842][ T29] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.864966][ T29] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.871455][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.879820][ T29] usb 14-1: config 0 descriptor?? [ 148.883945][ T8301] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 148.887431][ T8301] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 148.906035][ T29] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 148.969727][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 149.193775][ T8313] ubi: mtd0 is already attached to ubi16 [ 149.341344][ T6889] usb 14-1: USB disconnect, device number 5 [ 149.382139][ T6889] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 149.492603][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.8.708'. [ 150.271518][ T6889] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 150.430979][ T6889] usb 14-1: Using ep0 maxpacket: 32 [ 150.436284][ T6889] usb 14-1: unable to get BOS descriptor or descriptor too short [ 150.449863][ T6889] usb 14-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 150.459295][ T6889] usb 14-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.469906][ T6889] usb 14-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 150.480941][ T6889] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.481205][ T5734] Bluetooth: hci5: command 0x0419 tx timeout [ 150.481242][ T64] Bluetooth: hci4: command 0x0419 tx timeout [ 150.481276][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.481294][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.481312][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.481330][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.492040][ T6889] usb 14-1: Product: syz [ 150.506250][ T6889] usb 14-1: Manufacturer: syz [ 150.510774][ T6889] usb 14-1: SerialNumber: syz [ 150.734814][ T6889] usb 14-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 150.740679][ T6889] usb 14-1: 1:1 : invalid channels 0 [ 150.750461][ T6889] usb 14-1: unit 37 not found! [ 150.754995][ T6889] usb 14-1: unit 0 not found! [ 150.781785][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 150.824579][ T6889] usb 14-1: USB disconnect, device number 6 [ 150.901216][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 151.360537][ T8354] netlink: 64 bytes leftover after parsing attributes in process `syz.9.718'. [ 151.595439][ T8357] 9p: Bad value for 'rfdno' [ 151.848745][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.8.721'. [ 152.243716][ T42] audit: type=1804 audit(1786169736.031:107): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.723" name="/newroot/137/file0" dev="tmpfs" ino=721 res=1 errno=0 [ 152.561035][ T5734] Bluetooth: hci5: command 0x0419 tx timeout [ 152.771084][ T9] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 152.921813][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 152.931887][ T9] usb 13-1: unable to get BOS descriptor or descriptor too short [ 152.939103][ T9] usb 13-1: config 1 has an invalid descriptor of length 6, skipping remainder of the config [ 152.949380][ T9] usb 13-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.965512][ T9] usb 13-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 152.971584][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.976767][ T9] usb 13-1: Product: syz [ 152.978626][ T9] usb 13-1: Manufacturer: syz [ 152.984459][ T9] usb 13-1: SerialNumber: syz [ 153.017482][ T8381] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 153.216465][ T9] usb 13-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 153.228990][ T9] usb 13-1: 1:1 : invalid channels 0 [ 153.231359][ T9] usb 13-1: unit 37 not found! [ 153.234934][ T9] usb 13-1: unit 0 not found! [ 153.315196][ T9] usb 13-1: USB disconnect, device number 9 [ 153.359034][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 154.643159][ T5734] Bluetooth: hci5: command 0x0419 tx timeout [ 156.665971][ T7475] ================================================================== [ 156.669084][ T7475] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0 [ 156.672118][ T7475] Read of size 1 at addr ffff88804b76c909 by task syz.6.435/7475 [ 156.675807][ T7475] [ 156.677577][ T7475] CPU: 3 UID: 0 PID: 7475 Comm: syz.6.435 Not tainted syzkaller #0 PREEMPT(full) [ 156.677599][ T7475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.677610][ T7475] Call Trace: [ 156.677617][ T7475] [ 156.677625][ T7475] dump_stack_lvl+0x100/0x190 [ 156.677661][ T7475] print_report+0x13d/0x4b0 [ 156.677694][ T7475] ? __virt_addr_valid+0x239/0x430 [ 156.677713][ T7475] ? release_card_device+0x17d/0x1a0 [ 156.677730][ T7475] kasan_report+0xdf/0x1c0 [ 156.677763][ T7475] ? release_card_device+0x17d/0x1a0 [ 156.677782][ T7475] release_card_device+0x17d/0x1a0 [ 156.677799][ T7475] ? __pfx_release_card_device+0x10/0x10 [ 156.677816][ T7475] device_release+0xd2/0x270 [ 156.677865][ T7475] kobject_put+0x1f7/0x640 [ 156.677886][ T7475] put_device+0x1f/0x30 [ 156.677902][ T7475] snd_card_file_remove+0x38f/0x560 [ 156.677921][ T7475] snd_pcm_oss_release+0x217/0x300 [ 156.677945][ T7475] ? __pfx_snd_disconnect_release+0x10/0x10 [ 156.677963][ T7475] __fput+0x3ff/0xb50 [ 156.677993][ T7475] task_work_run+0x150/0x240 [ 156.678016][ T7475] ? __pfx_task_work_run+0x10/0x10 [ 156.678040][ T7475] exit_to_user_mode_loop+0x1d8/0x6f0 [ 156.678058][ T7475] ? rcu_is_watching+0x12/0xc0 [ 156.678077][ T7475] __do_fast_syscall_32+0x701/0x970 [ 156.678103][ T7475] do_fast_syscall_32+0x32/0x70 [ 156.678125][ T7475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.678145][ T7475] RIP: 0023:0xf700efec [ 156.678168][ T7475] Code: Unable to access opcode bytes at 0xf700efc2. [ 156.678175][ T7475] RSP: 002b:00000000ffc128fc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 156.678193][ T7475] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 156.678203][ T7475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.678212][ T7475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.678222][ T7475] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 156.678232][ T7475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.678246][ T7475] [ 156.678252][ T7475] [ 156.725349][ T5734] Bluetooth: hci5: command 0x0419 tx timeout [ 156.726176][ T7475] The buggy address belongs to the physical page: [ 156.726187][ T7475] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b76c [ 156.726203][ T7475] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 156.726218][ T7475] page_type: f0(buddy) [ 156.726232][ T7475] raw: 04fff00000000000 ffffea0001310d08 ffffea00016a4a08 0000000000000000 [ 156.726246][ T7475] raw: 0000000000000000 0000000000000002 00000000f0000000 0000000000000000 [ 156.726255][ T7475] page dumped because: kasan: bad access detected [ 156.726265][ T7475] page_owner tracks the page as freed [ 156.726270][ T7475] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 15114392675, free_ts 156649443179 [ 156.726297][ T7475] post_alloc_hook+0xfd/0x120 [ 156.726320][ T7475] get_page_from_freelist+0xf48/0x3530 [ 156.726337][ T7475] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 156.726355][ T7475] alloc_pages_mpol+0x1fb/0x540 [ 156.726375][ T7475] ___kmalloc_large_node+0xe5/0x120 [ 156.795352][ T7475] __kmalloc_large_node_noprof+0x1c/0x70 [ 156.797593][ T7475] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 156.800104][ T7475] __devres_alloc_node+0x6e/0x1e0 [ 156.801737][ T7475] snd_devm_card_new+0x9d/0x190 [ 156.803656][ T7475] loopback_probe+0x140/0x11a0 [ 156.805546][ T7475] platform_probe+0x106/0x1d0 [ 156.807523][ T7475] really_probe+0x241/0xa60 [ 156.809380][ T7475] __driver_probe_device+0x20e/0x450 [ 156.811481][ T7475] driver_probe_device+0x4a/0x140 [ 156.813483][ T7475] __device_attach_driver+0x1df/0x320 [ 156.815610][ T7475] bus_for_each_drv+0x159/0x1e0 [ 156.817560][ T7475] page last free pid 7742 tgid 7741 stack trace: [ 156.820082][ T7475] __free_frozen_pages+0x79f/0x1090 [ 156.822174][ T7475] release_nodes+0xc3/0x120 [ 156.823991][ T7475] devres_release_all+0x112/0x180 [ 156.825614][ T7475] device_unbind_cleanup+0x81/0x270 [ 156.827567][ T7475] device_release_driver_internal+0x4c4/0x620 [ 156.830011][ T7475] unbind_store+0xf8/0x110 [ 156.831789][ T7475] drv_attr_store+0x74/0xb0 [ 156.833610][ T7475] sysfs_kf_write+0xf2/0x150 [ 156.835390][ T7475] kernfs_fop_write_iter+0x3e0/0x5f0 [ 156.837106][ T7475] vfs_write+0x6ac/0x1050 [ 156.838836][ T7475] ksys_write+0x12a/0x250 [ 156.840612][ T7475] __do_fast_syscall_32+0xe7/0x970 [ 156.842668][ T7475] do_fast_syscall_32+0x32/0x70 [ 156.844622][ T7475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.847154][ T7475] [ 156.848121][ T7475] Memory state around the buggy address: [ 156.850394][ T7475] ffff88804b76c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.853541][ T7475] ffff88804b76c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.856338][ T1035] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.856692][ T7475] >ffff88804b76c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.862220][ T7475] ^ [ 156.863949][ T7475] ffff88804b76c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.867111][ T7475] ffff88804b76ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.870005][ T7475] ================================================================== [ 157.001350][ T1035] usb 6-1: Using ep0 maxpacket: 32 [ 157.013885][ T1035] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 157.031018][ T1035] usb 6-1: config 0 has no interface number 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.040352][ T1035] usb 6-1: config 0 interface 12 has no altsetting 0 [ 157.049814][ T1035] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 157.057458][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.065311][ T1035] usb 6-1: Product: syz [ 157.066697][ T1035] usb 6-1: Manufacturer: syz [ 157.075650][ T1035] usb 6-1: SerialNumber: syz [ 157.084147][ T1035] usb 6-1: config 0 descriptor?? [ 157.095449][ T7475] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.097806][ T7475] CPU: 2 UID: 0 PID: 7475 Comm: syz.6.435 Not tainted syzkaller #0 PREEMPT(full) [ 157.100970][ T7475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.104915][ T7475] Call Trace: [ 157.106141][ T7475] [ 157.107217][ T7475] dump_stack_lvl+0x100/0x190 [ 157.108940][ T7475] vpanic+0x552/0x970 [ 157.110401][ T7475] ? __pfx_vpanic+0x10/0x10 [ 157.112058][ T7475] ? release_card_device+0x17d/0x1a0 [ 157.113964][ T7475] panic+0xd1/0xe0 [ 157.115323][ T7475] ? __pfx_panic+0x10/0x10 [ 157.116939][ T7475] ? release_card_device+0x17d/0x1a0 [ 157.118831][ T7475] ? preempt_schedule_common+0x42/0xc0 [ 157.120798][ T7475] ? check_panic_on_warn+0x1f/0x90 [ 157.122684][ T7475] check_panic_on_warn.cold+0x19/0x34 [ 157.124626][ T7475] end_report.part.0+0x3a/0x90 [ 157.126359][ T7475] kasan_report.cold+0xe/0x18 [ 157.128058][ T7475] ? release_card_device+0x17d/0x1a0 [ 157.130019][ T7475] release_card_device+0x17d/0x1a0 [ 157.131840][ T7475] ? __pfx_release_card_device+0x10/0x10 [ 157.133850][ T7475] device_release+0xd2/0x270 [ 157.135528][ T7475] kobject_put+0x1f7/0x640 [ 157.137151][ T7475] put_device+0x1f/0x30 [ 157.138662][ T7475] snd_card_file_remove+0x38f/0x560 [ 157.140560][ T7475] snd_pcm_oss_release+0x217/0x300 [ 157.142425][ T7475] ? __pfx_snd_disconnect_release+0x10/0x10 [ 157.144549][ T7475] __fput+0x3ff/0xb50 [ 157.145995][ T7475] task_work_run+0x150/0x240 [ 157.147667][ T7475] ? __pfx_task_work_run+0x10/0x10 [ 157.149540][ T7475] exit_to_user_mode_loop+0x1d8/0x6f0 [ 157.151474][ T7475] ? rcu_is_watching+0x12/0xc0 [ 157.153231][ T7475] __do_fast_syscall_32+0x701/0x970 [ 157.155118][ T7475] do_fast_syscall_32+0x32/0x70 [ 157.156925][ T7475] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.159214][ T7475] RIP: 0023:0xf700efec [ 157.160709][ T7475] Code: Unable to access opcode bytes at 0xf700efc2. [ 157.162844][ T7475] RSP: 002b:00000000ffc128fc EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 157.165839][ T7475] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 157.168858][ T7475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.171967][ T7475] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.175072][ T7475] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.177786][ T7475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.180909][ T7475] [ 157.182777][ T7475] Kernel Offset: disabled [ 157.184469][ T7475] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:15:40 Registers: info registers vcpu 0 CPU#0 RAX=000000000032d035 RBX=ffffffff8e891480 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f742b108 CR3=000000007330a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fd2ee2 RDX=ffff888040a90000 RSI=ffffffff81fd2ebc RDI=ffff888040a90000 RBP=ffff88802b543380 RSP=ffffc9000219ef50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10056a8671 R14=0000000000000001 R15=ffff88802b33c9c0 RIP=ffffffff81fd2ec3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f855c0 CR3=0000000050b76000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001a4c65 RBX=ffff88801c3eca80 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=ffffed100387d950 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed100568678d R10=ffff88802b433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056023a99f000 CR3=000000004cf18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002f4 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffe508 0480030e00000098 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff020fffffffff 0240b40800060176 960008000fffffff ff02420800060102 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a20008000fffffff ff020a0800060102 ce40080005800201 0000000806060159 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b20fffffffff0210 83c2d49408000108 0006012bc0028008 000fffffffff0204 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 014f9c0280080014 8080808080808008 0004800206007998 00236e6f6d627375 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fffffffff0204 014f9c0280080014 8080808080808008 0004800206007998 ZMM25=32aa052732aa0527 32aa052732aa0527 32aa052732aa0527 32aa052732aa0527 32aa052732aa0527 32aa052732aa0527 32aa052732aa0527 32aa052732aa0527 ZMM26=544b0327544b0327 544b0327544b0327 544b0327544b0327 544b0327544b0327 544b0327544b0327 544b0327544b0327 544b0327544b0327 544b0327544b0327 ZMM27=78cf5b5f78cf5b5f 78cf5b5f78cf5b5f 78cf5b5f78cf5b5f 78cf5b5f78cf5b5f 78cf5b5f78cf5b5f 78cf5b5f78cf5b5f 78cf5b5f78cf5b5f 78cf5b5f78cf5b5f ZMM28=000000d0000000cf 000000ce000000cd 000000cc000000cb 000000ca000000c9 000000c8000000c7 000000c6000000c5 000000c4000000c3 000000c2000000c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0d0900000d090000 0d0900000d090000 0d0900000d090000 0d0900000d090000 0d0900000d090000 0d0900000d090000 0d0900000d090000 0d0900000d090000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0ddf5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc9000752f6a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037343754 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b6e31ed R15=ffffffff85a0dd90 RIP=ffffffff85a0de1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ef3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005636a62c55d0 CR3=0000000072495000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c8cc0000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 372f6b636f6c622f 7665642f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00313a372f6b636f 6c622f7665642f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d007bb0b0 0000557d007bb0b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e63f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9e6352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d007bc510 0000557d007bef30 0000557d007bce40 0000557d007c7320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d007c8970 0000557d007cdcb0 0000557d007bdc70 0000557d007ae5e0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d007c18f0 0000557d007d74f0 0000557d007c4520 0000557d007bf170 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d007d58e0 0000557d007bd010 0000557d007ba4a0 0000557d007dddb0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000