last executing test programs: 18m20.727583345s ago: executing program 3 (id=568): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000008840)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2, 0x3d}}}], 0x18}}], 0x2, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$drirender128(0xffffff9c, 0x0, 0x1c000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000027523812594828300c000000000030837c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000300"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0x10810020, 0x9, 0x4, 0xffff8572, 0x9, 0x0, 0x0, 0x2, 0x7}}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 18m19.944134664s ago: executing program 3 (id=570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) 18m18.990345432s ago: executing program 3 (id=571): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$inet6(0xa, 0x2, 0x0) 18m15.047508994s ago: executing program 3 (id=588): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000040)) 18m14.824818013s ago: executing program 3 (id=590): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r3, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x248}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 18m10.012680973s ago: executing program 3 (id=604): mknod$loop(0x0, 0x6000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) 17m54.397799312s ago: executing program 32 (id=604): mknod$loop(0x0, 0x6000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) 22.363942002s ago: executing program 5 (id=3499): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) 20.364033931s ago: executing program 5 (id=3503): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000000000001"], 0xb8, 0x20000000}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) eventfd2(0x9, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000180), 0x0, 0x20008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0xfffffffd, [0x6]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = dup2(r6, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x2, 0x0, 0x0) 17.359919745s ago: executing program 5 (id=3506): syz_io_uring_setup(0xd0, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x677, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x1f, &(0x7f00000003c0)={@multicast, @multicast, @void, {@x25={0x805, {0x2, 0x9, 0xf, "353d79bcc36f1464e86520a9f07e"}}}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) write$cgroup_devices(r5, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 17.354487965s ago: executing program 2 (id=3507): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) mmap(&(0x7f0000c02000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x208000, 0x0) 14.940013371s ago: executing program 2 (id=3512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) getdents64(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'geneve0\x00', &(0x7f0000000340)=@ethtool_eeprom={0x43, 0x3, 0x80000001, 0x46, "533c2c70eb2ccf5645323cbc86e6aa4b83a1864b8f8365ab50a54576877e7e4530607799027aa2b17f11de94d08054108652f70d2b2cd99ef4c5cc1059b510af0f5321671093"}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_open_dev$loop(0x0, 0x2, 0x404b02) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 12.520626778s ago: executing program 5 (id=3514): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 12.470556028s ago: executing program 2 (id=3515): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) mmap(&(0x7f0000c02000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffffffffffffe) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000045}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x208000, 0x0) 11.252864471s ago: executing program 1 (id=3521): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 9.672462202s ago: executing program 2 (id=3525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x1, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x7, 0xff, 0x80000}) close_range(r4, 0xffffffffffffffff, 0x0) 9.003982429s ago: executing program 1 (id=3526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x1, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x7, 0x7, 0xff, 0x80000}) 8.994746579s ago: executing program 0 (id=3527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) getdents64(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'geneve0\x00', &(0x7f0000000340)=@ethtool_eeprom={0x43, 0x3, 0x80000001, 0x46, "533c2c70eb2ccf5645323cbc86e6aa4b83a1864b8f8365ab50a54576877e7e4530607799027aa2b17f11de94d08054108652f70d2b2cd99ef4c5cc1059b510af0f5321671093"}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_open_dev$loop(0x0, 0x2, 0x404b02) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 7.658939352s ago: executing program 2 (id=3529): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f907, 0x0, '\x00', @p_u32=0x0}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @rand_addr=0xfffffc13}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@remote, @random="e24262b57fc9", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @multicast, @broadcast, @broadcast, @random="e54a4dea2d55"]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x7}}}}}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) read(r1, &(0x7f0000000440)=""/70, 0x46) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c201020301"], 0x0) 7.490609161s ago: executing program 4 (id=3530): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 6.883308847s ago: executing program 0 (id=3531): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x64000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) write$sequencer(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_create(0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0xd34, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 6.851073957s ago: executing program 1 (id=3532): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000000000001"], 0xb8, 0x20000000}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) eventfd2(0x9, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000180), 0x0, 0x20008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0xfffffffd, [0x6]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = dup2(r6, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x2, 0x0, 0x0) 6.361867114s ago: executing program 5 (id=3533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000005"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) 5.923141262s ago: executing program 1 (id=3534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.174735488s ago: executing program 4 (id=3535): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) mmap(&(0x7f0000c02000/0x3000)=nil, 0x3000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.042381322s ago: executing program 4 (id=3536): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 3.976918671s ago: executing program 0 (id=3537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x1, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x7, 0xff, 0x80000}) close_range(r4, 0xffffffffffffffff, 0x0) 3.73236945s ago: executing program 1 (id=3538): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00', @ANYBLOB="00022abd7000070000000b0000", @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x24000094}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 2.760450855s ago: executing program 0 (id=3539): syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x352}, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x677, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x1f, &(0x7f00000003c0)={@multicast, @multicast, @void, {@x25={0x805, {0x2, 0x9, 0xf, "353d79bcc36f1464e86520a9f07e"}}}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) write$cgroup_devices(r4, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.501690494s ago: executing program 4 (id=3540): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) 2.478202083s ago: executing program 2 (id=3541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) getdents64(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'geneve0\x00', &(0x7f0000000340)=@ethtool_eeprom={0x43, 0x3, 0x80000001, 0x46, "533c2c70eb2ccf5645323cbc86e6aa4b83a1864b8f8365ab50a54576877e7e4530607799027aa2b17f11de94d08054108652f70d2b2cd99ef4c5cc1059b510af0f5321671093"}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_open_dev$loop(0x0, 0x2, 0x404b02) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1.92515133s ago: executing program 4 (id=3542): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000c800) io_uring_setup(0x39e5, &(0x7f0000000300)={0x0, 0x1d6, 0x80, 0x3, 0x2ab}) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/182, 0xb6}], 0x2, 0x1239, 0x4b4a) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x8002, &(0x7f00000003c0)={[{@lazytime}, {@errors_remount}]}, 0x7, 0x4a9, &(0x7f0000000b40)="$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") r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 1.359481778s ago: executing program 0 (id=3543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x1, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x7, 0xff, 0x80000}) close_range(r4, 0xffffffffffffffff, 0x0) 1.345991487s ago: executing program 1 (id=3544): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 1.317229677s ago: executing program 4 (id=3545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x1, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.212062436s ago: executing program 5 (id=3546): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) preadv2(r5, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 0s ago: executing program 0 (id=3547): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x64000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) write$sequencer(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_create(0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0xd34, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) kernel console output (not intermixed with test programs): 16] smsc75xx v1.0.0 [ 438.601342][ T5132] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 438.659511][ T5132] usb 2-1: USB disconnect, device number 14 [ 438.682064][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'. [ 438.741309][ T3816] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 438.745932][ T4636] udevd[4636]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.770636][ T3816] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 438.855758][ T3816] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 438.895203][ T3816] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 438.938980][ T3816] usb 3-1: USB disconnect, device number 12 [ 439.151121][ T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 439.488234][ T8737] misc userio: Invalid payload size [ 440.162405][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177194][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.795773][ T5132] libceph: connect (1)[c::]:6789 error -101 [ 440.820109][ T5132] libceph: mon0 (1)[c::]:6789 connect error [ 440.833991][ T8739] ceph: No mds server is up or the cluster is laggy [ 440.842249][ T4213] libceph: connect (1)[c::]:6789 error -101 [ 440.848377][ T4213] libceph: mon0 (1)[c::]:6789 connect error [ 440.851550][ T8743] ceph: No mds server is up or the cluster is laggy [ 441.114530][ T2396] libceph: connect (1)[c::]:6789 error -101 [ 441.120627][ T2396] libceph: mon0 (1)[c::]:6789 connect error [ 441.141378][ T13] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 441.150585][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.187410][ T13] usb 6-1: Product: syz [ 441.217323][ T13] usb 6-1: Manufacturer: syz [ 441.262252][ T8758] usb usb8: usbfs: process 8758 (syz.1.1249) did not claim interface 0 before use [ 441.326424][ T13] usb 6-1: SerialNumber: syz [ 441.485854][ T2396] hid-generic 1AA0:0002:0386.0006: item fetching failed at offset 0/2 [ 441.530397][ T13] usb 6-1: config 0 descriptor?? [ 441.656710][ T2396] hid-generic: probe of 1AA0:0002:0386.0006 failed with error -22 [ 442.541282][ T13] usb 6-1: USB disconnect, device number 6 [ 442.963604][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.528762][ T13] libceph: connect (1)[c::]:6789 error -101 [ 444.539212][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 444.570100][ T8789] ceph: No mds server is up or the cluster is laggy [ 444.584036][ T26] audit: type=1326 audit(1738100972.287:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9dbdada9 code=0x7ffc0000 [ 444.704039][ T8796] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1260'. [ 444.864455][ T26] audit: type=1326 audit(1738100972.327:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9dbdada9 code=0x7ffc0000 [ 445.360339][ T26] audit: type=1326 audit(1738100972.327:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9dbdada9 code=0x7ffc0000 [ 446.979198][ T26] audit: type=1326 audit(1738100972.327:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9dbdada9 code=0x7ffc0000 [ 447.161281][ T26] audit: type=1326 audit(1738100972.327:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4c9dbdada9 code=0x7ffc0000 [ 447.331058][ T26] audit: type=1326 audit(1738100972.327:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9dbdada9 code=0x7ffc0000 [ 448.752247][ T3816] libceph: connect (1)[c::]:6789 error -101 [ 448.764539][ T3816] libceph: mon0 (1)[c::]:6789 connect error [ 449.196221][ T8835] ceph: No mds server is up or the cluster is laggy [ 449.371269][ T2983] Bluetooth: Error in BCSP hdr checksum [ 449.768674][ T8858] usb usb8: usbfs: process 8858 (syz.1.1279) did not claim interface 0 before use [ 451.542410][ T1324] Bluetooth: hci3: command 0x1003 tx timeout [ 451.640542][ T8869] loop4: detected capacity change from 0 to 128 [ 451.748926][ T8869] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 451.824635][ T8869] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 453.624379][ T8903] usb usb8: usbfs: process 8903 (syz.4.1293) did not claim interface 0 before use [ 455.336444][ T1324] Bluetooth: hci3: command 0x1001 tx timeout [ 455.391899][ T4175] Bluetooth: hci3: sending frame failed (-49) [ 455.951094][ T8915] tipc: Started in network mode [ 455.956565][ T8915] tipc: Node identity f7, cluster identity 4711 [ 455.962926][ T8915] tipc: Node number set to 247 [ 457.628612][ T1324] Bluetooth: hci3: command 0x1009 tx timeout [ 458.100921][ T8935] loop4: detected capacity change from 0 to 128 [ 458.386048][ T8935] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 458.422128][ T8935] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 459.357846][ T8954] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1304'. [ 459.793372][ T4317] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.951241][ T5132] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 460.131620][ T1324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 460.391767][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.411461][ T1324] usb 2-1: Using ep0 maxpacket: 8 [ 460.445848][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.521165][ T5132] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 460.531388][ T1324] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 460.545584][ T1324] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 460.558679][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.577936][ T8977] loop5: detected capacity change from 0 to 512 [ 460.586094][ T5132] usb 5-1: config 0 descriptor?? [ 460.601339][ T1324] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 460.661130][ T8977] EXT4-fs (loop5): Unrecognized mount option "fscontext=staff_u" or missing value [ 460.827691][ T1324] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 460.835647][ T1324] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 460.847032][ T1324] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 460.931499][ T1324] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 461.333617][ T1324] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 461.364636][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.371753][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.379019][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.386144][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.393249][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.400319][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.407405][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.421170][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.467603][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.532666][ T5132] hid_mf 0003:0079:1846.0007: unknown main item tag 0x0 [ 461.539673][ T5132] hid_mf 0003:0079:1846.0007: collection stack underflow [ 461.581650][ T8994] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1312'. [ 461.598806][ T5132] hid_mf 0003:0079:1846.0007: item 0 0 0 12 parsing failed [ 461.601621][ T1324] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 461.613991][ T5132] hid_mf 0003:0079:1846.0007: HID parse failed. [ 461.629605][ T5132] hid_mf: probe of 0003:0079:1846.0007 failed with error -22 [ 461.661162][ T5132] usb 5-1: USB disconnect, device number 19 [ 461.805894][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 462.012018][ T1324] usb 2-1: string descriptor 0 read error: -22 [ 462.025335][ T1324] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 462.153210][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.352766][ T1324] adutux 2-1:168.0: interrupt endpoints not found [ 462.648207][ T1324] usb 2-1: USB disconnect, device number 15 [ 462.694397][ T26] audit: type=1326 audit(1738100990.367:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.4.1320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d87a8ada9 code=0x0 [ 464.534065][ T9042] loop1: detected capacity change from 0 to 512 [ 464.576429][ T9038] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 464.582972][ T9038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 464.597109][ T9042] EXT4-fs (loop1): Unrecognized mount option "fscontext=staff_u" or missing value [ 464.723110][ T9038] vhci_hcd vhci_hcd.0: Device attached [ 465.034784][ T1324] vhci_hcd: vhci_device speed not set [ 465.271753][ T9062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1328'. [ 465.333662][ T1324] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 465.958836][ T9071] loop1: detected capacity change from 0 to 128 [ 466.021191][ T2396] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 466.030336][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 466.530900][ T9074] netlink: 'syz.2.1335': attribute type 10 has an invalid length. [ 466.569755][ T9071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 466.616435][ T9074] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 466.625650][ T9071] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.361320][ T2396] usb 6-1: config 0 has no interfaces? [ 467.373482][ T2396] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.401159][ T2396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.440726][ T2396] usb 6-1: config 0 descriptor?? [ 467.471588][ T9045] vhci_hcd: connection reset by peer [ 467.480239][ T4322] vhci_hcd: stop threads [ 467.484838][ T2396] usb 6-1: can't set config #0, error -71 [ 467.493556][ T4322] vhci_hcd: release socket [ 467.503258][ T2396] usb 6-1: USB disconnect, device number 7 [ 467.519381][ T4322] vhci_hcd: disconnect device [ 468.308687][ T9104] batman_adv: Cannot find parent device [ 468.320670][ T9104] batman_adv: batadv0: Adding interface: gretap1 [ 468.327186][ T9104] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.352705][ T9104] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 470.273044][ T9120] usb usb8: usbfs: process 9120 (syz.2.1346) did not claim interface 0 before use [ 470.497482][ T1324] vhci_hcd: vhci_device speed not set [ 470.779270][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 474.694859][ T9158] tmpfs: Unknown parameter 'usrquota' [ 476.563467][ T9172] usb usb8: usbfs: process 9172 (syz.1.1364) did not claim interface 0 before use [ 478.239330][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1373'. [ 478.260447][ T9190] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 478.632664][ T9176] loop4: detected capacity change from 0 to 32768 [ 482.407129][ T9238] Error parsing options; rc = [-22] [ 482.643781][ T9247] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1389'. [ 483.974378][ T9267] loop4: detected capacity change from 0 to 128 [ 484.046826][ T9267] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 484.171296][ T4208] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 484.194564][ T9267] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.361274][ T4208] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 485.480765][ T5861] Bluetooth: hci4: command 0x0401 tx timeout [ 485.491591][ T4208] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 485.514544][ T4208] usb 6-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 485.525850][ T4208] usb 6-1: Product: syz [ 485.537032][ T4208] usb 6-1: config 0 descriptor?? [ 486.351211][ T4208] ath6kl: Failed to submit usb control message: -71 [ 486.359052][ T4208] ath6kl: unable to send the bmi data to the device: -71 [ 486.369028][ T4208] ath6kl: Unable to send get target info: -71 [ 486.379472][ T4208] ath6kl: Failed to init ath6kl core: -71 [ 486.481367][ T4208] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 486.492183][ T4208] usb 6-1: USB disconnect, device number 8 [ 486.801125][ T2396] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 486.828358][ T9319] binder: 9318:9319 ioctl c018620c 0 returned -14 [ 487.170843][ T5861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 488.481174][ T2396] usb 5-1: Using ep0 maxpacket: 8 [ 488.623042][ T2396] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 488.680786][ T2396] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 488.778211][ T2396] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 488.791083][ T2396] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.809918][ T2396] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.819620][ T2396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.901271][ T5861] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 489.919176][ T5861] usb 3-1: can't read configurations, error -71 [ 491.867648][ T2983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.131154][ T2396] usb 5-1: can't set config #16, error -71 [ 492.138098][ T2396] usb 5-1: USB disconnect, device number 20 [ 492.340971][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1426'. [ 494.591300][ T4208] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 495.201837][ T4208] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 495.782966][ T9400] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1438'. [ 496.519728][ T4208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.582003][ T4208] usb 6-1: config 0 descriptor?? [ 496.709610][ T9402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1441'. [ 498.459743][ T4208] usbhid 6-1:0.0: can't add hid device: -71 [ 498.477224][ T4208] usbhid: probe of 6-1:0.0 failed with error -71 [ 499.009223][ T4208] usb 6-1: USB disconnect, device number 9 [ 500.538814][ T9449] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.1451'. [ 501.624991][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.633428][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.966980][ T9476] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1462'. [ 504.544829][ T9498] netlink: 'syz.0.1469': attribute type 8 has an invalid length. [ 506.312102][ T9508] loop4: detected capacity change from 0 to 128 [ 506.580310][ T9508] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.596142][ T9508] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 509.079801][ T9532] overlayfs: missing 'lowerdir' [ 511.501438][ T2396] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 512.832114][ T9575] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 512.844119][ T9575] TCP: tcp_parse_options: Illegal window scaling value 175 > 14 received [ 512.961484][ T9573] netdevsim netdevsim1: Direct firmware load for . [ 512.961484][ T9573] failed with error -2 [ 512.981186][ T9573] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 512.981186][ T9573] [ 513.241433][ T2396] usb 3-1: device descriptor read/all, error -71 [ 514.765972][ T9590] netlink: 163260 bytes leftover after parsing attributes in process `syz.5.1491'. [ 515.443926][ T9598] usb usb8: usbfs: process 9598 (syz.5.1495) did not claim interface 0 before use [ 520.148458][ T9645] device vlan0 entered promiscuous mode [ 520.187878][ T9645] team0: Port device vlan0 added [ 520.263110][ T9647] usb usb8: usbfs: process 9647 (syz.2.1509) did not claim interface 0 before use [ 520.362699][ T4208] hid-generic 1AA0:0002:0386.0008: item fetching failed at offset 0/2 [ 520.519621][ T4208] hid-generic: probe of 1AA0:0002:0386.0008 failed with error -22 [ 520.991126][ T4213] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 521.362432][ T4208] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 521.428291][ T4213] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 521.445158][ T4213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.479987][ T4213] usb 6-1: config 0 descriptor?? [ 521.711142][ T4208] usb 2-1: Using ep0 maxpacket: 32 [ 522.131214][ T4208] usb 2-1: unable to get BOS descriptor or descriptor too short [ 522.322936][ T4208] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 522.330608][ T4208] usb 2-1: can't read configurations, error -71 [ 523.305592][ T4213] usbhid 6-1:0.0: can't add hid device: -71 [ 524.635217][ T4213] usbhid: probe of 6-1:0.0 failed with error -71 [ 524.643464][ T4213] usb 6-1: USB disconnect, device number 10 [ 524.895846][ T9705] loop4: detected capacity change from 0 to 128 [ 525.018419][ T4474] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 525.108832][ T9705] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.953494][ T9705] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 528.993771][ T2396] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 529.322234][ T2396] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 539.622249][ T9840] vxfs: WRONG superblock magic 00000000 at 1 [ 539.635980][ T9840] vxfs: WRONG superblock magic 00000000 at 8 [ 539.644583][ T9841] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1565'. [ 539.814553][ T9840] vxfs: can't find superblock. [ 541.749215][ T9869] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 541.831902][ T144] Bluetooth: hci3: Frame reassembly failed (-84) [ 544.454893][ T5223] Bluetooth: hci3: command 0x1003 tx timeout [ 544.461642][ T4175] Bluetooth: hci3: sending frame failed (-49) [ 544.668515][ T9889] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1578'. [ 546.071638][ T9905] loop4: detected capacity change from 0 to 128 [ 546.143768][ T9905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 546.218615][ T9905] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 547.157593][ T5223] Bluetooth: hci3: command 0x1001 tx timeout [ 547.164272][ T4175] Bluetooth: hci3: sending frame failed (-49) [ 548.734419][ T4211] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 549.312122][ T5223] Bluetooth: hci3: command 0x1009 tx timeout [ 549.370597][ T9939] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1593'. [ 549.441123][ T4211] usb 6-1: Using ep0 maxpacket: 32 [ 550.732159][ T9945] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1594'. [ 551.449286][ T9956] loop2: detected capacity change from 0 to 128 [ 551.457460][ T4211] usb 6-1: unable to read config index 0 descriptor/all [ 551.471132][ T4211] usb 6-1: can't read configurations, error -71 [ 551.699917][ T9956] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.723057][ T9956] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 553.759984][ T9979] lo speed is unknown, defaulting to 1000 [ 553.766544][ T9979] lo speed is unknown, defaulting to 1000 [ 553.778374][ T9979] lo speed is unknown, defaulting to 1000 [ 553.835867][ T9979] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 554.059138][ T9979] lo speed is unknown, defaulting to 1000 [ 554.068795][ T9979] lo speed is unknown, defaulting to 1000 [ 554.075512][ T9979] lo speed is unknown, defaulting to 1000 [ 554.083756][ T9979] lo speed is unknown, defaulting to 1000 [ 554.090386][ T9979] lo speed is unknown, defaulting to 1000 [ 556.266336][T10004] loop2: detected capacity change from 0 to 128 [ 557.504570][T10014] netlink: 163260 bytes leftover after parsing attributes in process `syz.5.1607'. [ 558.431209][T10004] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 558.496211][T10004] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 564.533263][T10070] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.1628'. [ 565.154433][T10077] loop2: detected capacity change from 0 to 128 [ 565.294275][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.416137][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.627034][T10077] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 565.637920][T10077] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.711242][ T4209] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 567.917269][T10128] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.1642'. [ 567.961279][ T4209] usb 2-1: Using ep0 maxpacket: 8 [ 568.382046][ T4209] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.450963][ T4209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.595539][ T4209] usb 2-1: Product: syz [ 568.673338][ T4209] usb 2-1: Manufacturer: syz [ 568.756636][ T4209] usb 2-1: SerialNumber: syz [ 568.962197][ T4209] usb 2-1: config 0 descriptor?? [ 569.096138][T10141] loop4: detected capacity change from 0 to 128 [ 569.194765][T10141] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 569.211423][ T4209] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.242812][T10141] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 569.394790][ T5861] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 569.952187][T10146] overlayfs: failed to clone upperpath [ 570.488159][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 570.518487][ T5861] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 570.538933][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 570.562414][ T5861] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 570.595757][ T5861] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 570.622191][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.664709][ T5861] usb 6-1: config 0 descriptor?? [ 570.911366][ T5861] hdpvr 6-1:0.0: firmware version 0x9c dated Ö.Ǹé@Päxª½ÅQþ7¯O–6Âùé>ÌÒJ¬ÂJ¬UP&FW [ 570.922388][ T5861] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 571.331842][ T4209] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 571.647054][ T4209] usb 2-1: USB disconnect, device number 18 [ 572.271477][ T5861] hdpvr 6-1:0.0: Could not setup controls [ 572.283201][ T5861] hdpvr 6-1:0.0: registering videodev failed [ 572.295510][ T5861] hdpvr: probe of 6-1:0.0 failed with error -71 [ 572.307000][ T5861] usb 6-1: USB disconnect, device number 13 [ 572.698247][T10174] usb usb8: usbfs: process 10174 (syz.4.1660) did not claim interface 0 before use [ 573.450908][T10180] loop1: detected capacity change from 0 to 128 [ 574.586972][T10180] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 574.614157][T10194] siw: device registration error -23 [ 574.853881][T10180] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 577.016015][T10217] usb usb8: usbfs: process 10217 (syz.5.1674) did not claim interface 0 before use [ 579.575668][T10244] siw: device registration error -23 [ 580.509274][T10265] usb usb8: usbfs: process 10265 (syz.4.1686) did not claim interface 0 before use [ 580.547613][ T5132] hid-generic 1AA0:0002:0386.000A: item fetching failed at offset 0/2 [ 580.729800][ T5132] hid-generic: probe of 1AA0:0002:0386.000A failed with error -22 [ 582.847470][T10283] siw: device registration error -23 [ 585.328482][T10308] usb usb8: usbfs: process 10308 (syz.4.1703) did not claim interface 0 before use [ 587.615845][T10329] siw: device registration error -23 [ 589.252270][T10352] usb usb8: usbfs: process 10352 (syz.5.1717) did not claim interface 0 before use [ 589.544735][T10362] usb usb8: usbfs: process 10362 (syz.1.1718) did not claim interface 0 before use [ 593.715929][T10388] 9pnet: Insufficient options for proto=fd [ 595.831169][T10398] usb usb8: usbfs: process 10398 (syz.5.1733) did not claim interface 0 before use [ 596.356879][ T5223] hid-generic 1AA0:0002:0386.000B: item fetching failed at offset 0/2 [ 596.368194][ T5223] hid-generic: probe of 1AA0:0002:0386.000B failed with error -22 [ 596.381665][T10402] usb usb8: usbfs: process 10402 (syz.2.1734) did not claim interface 0 before use [ 596.832536][ T4320] Bluetooth: hci3: Frame reassembly failed (-84) [ 596.842491][ T4320] Bluetooth: hci3: Frame reassembly failed (-84) [ 596.887727][T10411] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 597.490741][T10424] netlink: 'syz.1.1740': attribute type 153 has an invalid length. [ 598.891124][ T5223] Bluetooth: hci3: command 0x1003 tx timeout [ 598.897304][T10413] Bluetooth: hci3: sending frame failed (-49) [ 599.730141][ T7] Bluetooth: hci5: command 0x0405 tx timeout [ 600.170366][T10446] usb usb8: usbfs: process 10446 (syz.2.1748) did not claim interface 0 before use [ 601.931925][ T2396] Bluetooth: hci3: command 0x1001 tx timeout [ 601.938048][T10413] Bluetooth: hci3: sending frame failed (-49) [ 604.566538][T10480] usb usb8: usbfs: process 10480 (syz.1.1759) did not claim interface 0 before use [ 605.715959][ T7] Bluetooth: hci3: command 0x1009 tx timeout [ 609.043871][T10518] usb usb8: usbfs: process 10518 (syz.2.1770) did not claim interface 0 before use [ 612.757204][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 612.850302][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1764'. [ 613.813719][T10565] usb usb8: usbfs: process 10565 (syz.5.1781) did not claim interface 0 before use [ 615.677605][T10579] siw: device registration error -23 [ 618.221244][ T4212] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 618.319019][ T2396] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 618.435225][T10611] usb usb8: usbfs: process 10611 (syz.4.1795) did not claim interface 0 before use [ 618.601229][ T2396] usb 2-1: Using ep0 maxpacket: 16 [ 618.903288][ T2396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.940869][ T2396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.128406][ T2396] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 619.138444][ T2396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.170413][ T2396] usb 2-1: config 0 descriptor?? [ 619.439667][T10618] usb usb8: usbfs: process 10618 (syz.2.1797) did not claim interface 0 before use [ 619.513944][ T5223] hid-generic 1AA0:0002:0386.000C: item fetching failed at offset 0/2 [ 619.549143][ T5223] hid-generic: probe of 1AA0:0002:0386.000C failed with error -22 [ 619.561321][ T4212] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 619.583228][ T4212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.625362][ T4212] usb 6-1: Product: syz [ 619.728677][ T4212] usb 6-1: Manufacturer: syz [ 619.807576][ T4212] usb 6-1: SerialNumber: syz [ 620.412286][ T4212] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 620.556942][ T2396] zeroplus 0003:0C12:0030.000D: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 620.629234][ T2396] zeroplus 0003:0C12:0030.000D: no inputs found [ 620.676997][ T2396] usb 2-1: USB disconnect, device number 19 [ 620.749168][ T5223] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 620.764616][ T5223] usb 6-1: ath9k_htc: USB layer deinitialized [ 620.860114][ T7] usb 6-1: USB disconnect, device number 14 [ 621.040419][T10633] siw: device registration error -23 [ 622.549818][T10654] usb usb8: usbfs: process 10654 (syz.1.1806) did not claim interface 0 before use [ 625.966164][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 627.231182][T10696] usb usb8: usbfs: process 10696 (syz.1.1820) did not claim interface 0 before use [ 629.860638][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.881645][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.783148][T10725] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.1826'. [ 632.853633][T10724] siw: device registration error -23 [ 635.620366][ T4208] Bluetooth: hci3: command 0x1003 tx timeout [ 635.680145][T10413] Bluetooth: hci3: sending frame failed (-49) [ 637.737918][ T4208] Bluetooth: hci3: command 0x1001 tx timeout [ 637.926849][T10413] Bluetooth: hci3: sending frame failed (-49) [ 638.392366][T10776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1841'. [ 639.732405][T10785] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1843'. [ 640.050148][ T5223] Bluetooth: hci3: command 0x1009 tx timeout [ 645.221220][T10838] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1856'. [ 645.742399][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1860'. [ 646.695686][T10857] tipc: Started in network mode [ 646.700689][T10857] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 646.709853][T10857] tipc: Enabled bearer , priority 10 [ 646.872133][T10857] tipc: Resetting bearer [ 649.117410][ T5132] tipc: Node number set to 10005162 [ 650.209787][T10857] tipc: Disabling bearer [ 650.771908][T10901] netlink: 163260 bytes leftover after parsing attributes in process `syz.5.1872'. [ 652.726008][ T5861] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 654.019704][ T5861] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 654.053949][ T5861] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 654.289541][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 654.464674][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 654.489157][T10932] tmpfs: Unknown parameter 'usrquota' [ 654.618101][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 654.681415][ T5861] usb 6-1: string descriptor 0 read error: -71 [ 654.687700][ T5861] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 654.717215][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 655.054229][ T5861] usb 6-1: can't set config #1, error -71 [ 655.353067][T10946] overlayfs: failed to clone upperpath [ 655.563920][ T5861] usb 6-1: USB disconnect, device number 15 [ 657.901514][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 658.124506][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 661.431867][T11007] dlm: Unknown command passed to DLM device : 9 [ 661.431867][T11007] [ 662.587714][ T26] audit: type=1326 audit(1738101190.257:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9dbdada9 code=0x7fc00000 [ 662.610539][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.652371][T11022] bridge0: port 3(syz_tun) entered blocking state [ 664.658986][T11022] bridge0: port 3(syz_tun) entered disabled state [ 664.667060][T11022] device syz_tun entered promiscuous mode [ 664.675090][T11022] bridge0: port 3(syz_tun) entered blocking state [ 664.681757][T11022] bridge0: port 3(syz_tun) entered forwarding state [ 665.031177][T11028] tmpfs: Unknown parameter 'usrquota' [ 668.111875][T11057] tipc: Started in network mode [ 668.116737][T11057] tipc: Node identity , cluster identity 4711 [ 668.217024][T11057] tipc: Failed to obtain node identity [ 668.261363][T11057] tipc: Enabling of bearer rejected, failed to enable media [ 668.364201][T11041] lo speed is unknown, defaulting to 1000 [ 668.413339][T11041] lo speed is unknown, defaulting to 1000 [ 671.397027][T11097] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 671.405881][T11097] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 671.586355][T11103] lo speed is unknown, defaulting to 1000 [ 671.672149][T11103] lo speed is unknown, defaulting to 1000 [ 671.709434][T11106] siw: device registration error -23 [ 674.291777][T11144] siw: device registration error -23 [ 676.225739][T11179] usb usb8: usbfs: process 11179 (syz.1.1961) did not claim interface 0 before use [ 676.237049][ T13] hid-generic 1AA0:0002:0386.000E: item fetching failed at offset 0/2 [ 676.246826][ T13] hid-generic: probe of 1AA0:0002:0386.000E failed with error -22 [ 677.891914][T11192] siw: device registration error -23 [ 680.142477][T11236] netlink: 'syz.4.1980': attribute type 13 has an invalid length. [ 680.161745][T11236] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1980'. [ 680.253574][T11245] siw: device registration error -23 [ 681.016450][T11236] syz_tun: refused to change device tx_queue_len [ 681.029385][T11236] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 682.481409][ T5132] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 682.768511][T11301] siw: device registration error -23 [ 683.011791][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.093501][ T5132] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.583343][ T5132] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 683.592534][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.981803][ T5132] usb 5-1: config 0 descriptor?? [ 684.376538][T11279] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1995'. [ 684.401163][T11279] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1995'. [ 684.506573][T11313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2006'. [ 684.541451][ T5132] usbhid 5-1:0.0: can't add hid device: -71 [ 684.547775][ T5132] usbhid: probe of 5-1:0.0 failed with error -71 [ 684.577313][ T5132] usb 5-1: USB disconnect, device number 21 [ 685.478788][T11346] siw: device registration error -23 [ 688.544748][T11378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2027'. [ 688.557667][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2027'. [ 690.382962][T11395] loop4: detected capacity change from 0 to 40427 [ 690.513095][T11395] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 690.521337][T11395] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 690.815034][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.822079][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.915618][T11395] F2FS-fs (loop4): Found nat_bits in checkpoint [ 690.983220][T11395] F2FS-fs (loop4): recover fsync data on readonly fs [ 691.000310][T11395] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 691.008036][T11395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 691.282519][T11395] mmap: syz.4.2032 (11395): VmData 37425152 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 692.468580][T11426] siw: device registration error -23 [ 694.673569][T11459] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.2051'. [ 695.599882][T11463] siw: device registration error -23 [ 695.651212][ T5132] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 696.464409][T11469] overlayfs: failed to clone upperpath [ 696.824016][T11476] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 696.848684][T11479] loop4: detected capacity change from 0 to 256 [ 697.058312][T11479] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0xaa00006c [ 697.139512][T11479] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 697.212472][ T5132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.257073][T11479] exFAT-fs (loop4): invalid boot region [ 697.263615][T11479] exFAT-fs (loop4): failed to recognize exfat type [ 697.321125][ T2396] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 697.681100][ T5132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.731134][ T5132] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 697.763991][ T5132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.831888][ T5132] usb 6-1: config 0 descriptor?? [ 697.878866][T11497] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 697.886892][ T5132] usb 6-1: can't set config #0, error -71 [ 697.931548][ T5132] usb 6-1: USB disconnect, device number 16 [ 697.951727][T11498] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.2065'. [ 697.972494][ T2396] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 697.999604][ T2396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.035275][ T2396] usb 3-1: config 0 descriptor?? [ 698.871166][ T2396] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 698.890066][ T2396] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 698.941289][ T2396] [drm:udl_init] *ERROR* Selecting channel failed [ 699.053072][ T2396] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 699.182703][T11516] overlayfs: failed to clone upperpath [ 700.421804][ T2396] [drm] Initialized udl on minor 2 [ 700.441277][ T2396] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 700.453904][ T2396] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 700.479168][ T2396] usb 3-1: USB disconnect, device number 17 [ 700.612703][T11521] loop1: detected capacity change from 0 to 1024 [ 700.772072][T11521] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 702.170518][T11560] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.2081'. [ 702.191285][ T26] audit: type=1326 audit(1738101229.867:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56c408da9 code=0x7ffc0000 [ 702.259330][T11569] siw: device registration error -23 [ 702.637999][ T26] audit: type=1326 audit(1738101229.887:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56c408da9 code=0x7ffc0000 [ 702.660414][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.958998][ T26] audit: type=1326 audit(1738101230.097:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd56c407710 code=0x7ffc0000 [ 703.059598][T11577] loop2: detected capacity change from 0 to 256 [ 703.074586][ T26] audit: type=1326 audit(1738101230.117:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56c408da9 code=0x7ffc0000 [ 703.335706][T11577] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0xaa00006c [ 703.546811][ T26] audit: type=1326 audit(1738101230.127:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.0.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56c408da9 code=0x7ffc0000 [ 703.593041][T11577] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 703.784613][T11584] overlayfs: failed to clone upperpath [ 703.801173][T11577] exFAT-fs (loop2): invalid boot region [ 703.901392][T11577] exFAT-fs (loop2): failed to recognize exfat type [ 706.112434][T11609] fuse: Bad value for 'fd' [ 706.188394][T11610] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.2101'. [ 707.377516][T11626] overlayfs: failed to clone upperpath [ 709.189329][T11649] loop4: detected capacity change from 0 to 40427 [ 709.240047][T11649] F2FS-fs (loop4): invalid crc value [ 709.349846][T11649] F2FS-fs (loop4): Found nat_bits in checkpoint [ 709.422072][T11649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 713.630657][T11697] usb usb8: usbfs: process 11697 (syz.4.2129) did not claim interface 0 before use [ 713.690617][ T3816] hid-generic 1AA0:0002:0386.000F: item fetching failed at offset 0/2 [ 713.819620][ T3816] hid-generic: probe of 1AA0:0002:0386.000F failed with error -22 [ 718.334504][T11747] loop1: detected capacity change from 0 to 256 [ 718.462335][T11747] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 718.496055][T11747] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 718.581280][T11747] exFAT-fs (loop1): invalid boot region [ 718.586860][T11747] exFAT-fs (loop1): failed to recognize exfat type [ 719.022743][T11754] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 728.208128][T11876] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.2177'. [ 729.001936][T11881] loop2: detected capacity change from 0 to 256 [ 729.086605][T11881] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0xaa00006c [ 729.140005][T11881] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 729.201244][T11881] exFAT-fs (loop2): invalid boot region [ 729.207852][T11881] exFAT-fs (loop2): failed to recognize exfat type [ 730.265570][T11892] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 732.884273][T11926] siw: device registration error -23 [ 735.081347][T11943] loop1: detected capacity change from 0 to 256 [ 735.377761][T11943] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 735.395388][T11943] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 735.461078][T11943] exFAT-fs (loop1): invalid boot region [ 735.466662][T11943] exFAT-fs (loop1): failed to recognize exfat type [ 735.838731][T11956] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 740.404022][T12016] loop1: detected capacity change from 0 to 256 [ 740.528026][T12016] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 740.556806][T12016] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 740.600716][T12016] exFAT-fs (loop1): invalid boot region [ 740.644171][T12016] exFAT-fs (loop1): failed to recognize exfat type [ 741.055868][T12019] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 746.879964][T12069] loop1: detected capacity change from 0 to 256 [ 747.179931][T12069] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 747.365640][T12069] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 747.681841][T12069] exFAT-fs (loop1): invalid boot region [ 747.687432][T12069] exFAT-fs (loop1): failed to recognize exfat type [ 748.232586][T12081] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 749.204614][T12089] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.2234'. [ 752.301876][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.308211][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.605261][T12130] netlink: 163260 bytes leftover after parsing attributes in process `syz.5.2247'. [ 755.943671][T12151] loop1: detected capacity change from 0 to 256 [ 756.045215][T12151] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 756.081631][T12151] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 756.121515][T12151] exFAT-fs (loop1): invalid boot region [ 756.133868][T12151] exFAT-fs (loop1): failed to recognize exfat type [ 757.021262][T12162] overlayfs: failed to clone upperpath [ 757.334736][T12168] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 762.556649][T12217] overlayfs: failed to clone upperpath [ 763.196340][T12222] netlink: 163260 bytes leftover after parsing attributes in process `syz.5.2275'. [ 764.468731][T12250] loop1: detected capacity change from 0 to 256 [ 764.618449][T12250] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 764.652685][T12250] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 764.687734][T12250] exFAT-fs (loop1): invalid boot region [ 764.717615][T12250] exFAT-fs (loop1): failed to recognize exfat type [ 767.155004][T12278] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.2290'. [ 770.443610][T12308] loop2: detected capacity change from 0 to 2048 [ 770.607270][T12308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 772.038340][T12319] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.2302'. [ 775.559356][T12354] siw: device registration error -23 [ 775.644441][T12357] loop2: detected capacity change from 0 to 256 [ 775.736908][T12357] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0xaa00006c [ 775.756268][T12357] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 775.816102][T12357] exFAT-fs (loop2): invalid boot region [ 775.830113][T12357] exFAT-fs (loop2): failed to recognize exfat type [ 776.503052][T12368] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 779.831838][ T5132] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 782.313388][T12432] siw: device registration error -23 [ 784.543859][T12449] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.2338'. [ 785.003595][T12454] loop1: detected capacity change from 0 to 256 [ 785.180398][T12454] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0xaa00006c [ 785.193557][T12457] overlayfs: failed to clone upperpath [ 785.311628][T12454] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 785.533552][T12454] exFAT-fs (loop1): invalid boot region [ 785.951314][T12454] exFAT-fs (loop1): failed to recognize exfat type [ 790.321719][ T4213] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 790.407592][T12500] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.2350'. [ 790.731278][ T4213] usb 3-1: config 0 has no interfaces? [ 790.736790][ T4213] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 790.831061][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.238320][ T4213] usb 3-1: config 0 descriptor?? [ 791.506415][ T13] usb 3-1: USB disconnect, device number 18 [ 791.738899][T12509] loop4: detected capacity change from 0 to 128 [ 794.063489][T12536] overlayfs: failed to resolve './file1': -2 [ 795.479584][T12553] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.2367'. [ 795.992431][T12564] loop2: detected capacity change from 0 to 64 [ 796.181190][ T4213] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 796.751621][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 796.901993][ T4213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.233477][ T4213] usb 5-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 797.242906][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.259536][ T4213] usb 5-1: config 0 descriptor?? [ 798.234706][ T4213] wacom 0003:056A:032A.0010: item fetching failed at offset 3/5 [ 798.243272][ T4213] wacom 0003:056A:032A.0010: parse failed [ 798.249157][ T4213] wacom: probe of 0003:056A:032A.0010 failed with error -22 [ 798.268920][ T4213] usb 5-1: USB disconnect, device number 22 [ 799.751257][ T4211] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 800.114653][T12623] Bluetooth: Can't allocate semaphore structure [ 800.364580][T12628] vivid-001: ================= START STATUS ================= [ 800.381206][T12628] vivid-001: Test Pattern: 75% Colorbar [ 800.398615][T12628] vivid-001: Fill Percentage of Frame: 100 [ 800.414502][ T4211] usb 3-1: Using ep0 maxpacket: 8 [ 800.441116][T12628] vivid-001: Horizontal Movement: Move Right [ 800.475353][T12628] vivid-001: Vertical Movement: No Movement [ 800.523271][T12628] vivid-001: OSD Text Mode: All [ 800.541256][ T4211] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 800.557175][T12628] vivid-001: Show Border: false [ 800.565837][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.590458][T12628] vivid-001: Show Square: false [ 800.618970][ T4211] usb 3-1: config 0 descriptor?? [ 800.641215][T12628] vivid-001: Sensor Flipped Horizontally: false [ 800.647585][T12628] vivid-001: Sensor Flipped Vertically: false [ 800.664543][T12628] vivid-001: Insert SAV Code in Image: false [ 800.684842][T12628] vivid-001: Insert EAV Code in Image: false [ 800.701206][T12628] vivid-001: Reduced Framerate: false [ 800.717015][T12628] vivid-001: Enable Capture Cropping: true [ 800.731256][T12628] vivid-001: Enable Capture Composing: true [ 800.761114][T12628] vivid-001: Enable Capture Scaler: true [ 800.792196][T12628] vivid-001: Timestamp Source: End of Frame [ 800.851259][T12628] vivid-001: Colorspace: sRGB [ 800.855984][T12628] vivid-001: Transfer Function: Default [ 801.004671][T12646] siw: device registration error -23 [ 801.042668][T12628] vivid-001: Y'CbCr Encoding: Default [ 801.285474][T12628] vivid-001: HSV Encoding: Hue 0-179 [ 801.419501][T12628] vivid-001: Quantization: Default [ 801.563448][T12628] vivid-001: Apply Alpha To Red Only: false [ 801.590484][T12628] vivid-001: Standard Aspect Ratio: 4x3 [ 801.616636][T12628] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 801.651255][ T4211] video4linux radio48: keene_cmd_main failed (-71) [ 801.658286][ T4211] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 801.677714][T12628] vivid-001: DV Timings: 640x480p59 inactive [ 801.717320][T12628] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 801.741936][ T4211] usb 3-1: USB disconnect, device number 19 [ 801.784255][T12628] vivid-001: Maximum EDID Blocks: 2 [ 801.811183][T12628] vivid-001: Limited RGB Range (16-235): false [ 801.830214][T12628] vivid-001: Rx RGB Quantization Range: Automatic [ 801.891281][T12628] vivid-001: Power Present: 0x00000001 [ 801.896804][T12628] tpg source WxH: 640x360 (Y'CbCr) [ 801.924575][T12628] tpg field: 1 [ 801.927985][T12628] tpg crop: 640x360@0x0 [ 802.001198][T12628] tpg compose: 640x360@0x0 [ 802.005652][T12628] tpg colorspace: 8 [ 802.044741][T12628] tpg transfer function: 0/0 [ 802.049360][T12628] tpg Y'CbCr encoding: 0/0 [ 802.097524][T12628] tpg quantization: 0/0 [ 802.141386][T12628] tpg RGB range: 0/2 [ 802.145320][T12628] vivid-001: ================== END STATUS ================== [ 802.284645][T12666] netlink: 'syz.0.2392': attribute type 10 has an invalid length. [ 802.285787][T12667] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.2390'. [ 802.307953][T12668] loop4: detected capacity change from 0 to 256 [ 802.334654][T12666] team0: Port device netdevsim0 added [ 802.399462][T12668] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0xaa00006c [ 802.461468][T12668] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 802.501048][T12668] exFAT-fs (loop4): invalid boot region [ 802.532659][T12668] exFAT-fs (loop4): failed to recognize exfat type [ 802.766806][T12674] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 805.943932][T12717] loop5: detected capacity change from 0 to 256 [ 806.105311][T12720] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.2408'. [ 806.957653][T12717] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0xaa00006c [ 807.118978][T12717] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 807.141293][T12717] exFAT-fs (loop5): invalid boot region [ 807.146865][T12717] exFAT-fs (loop5): failed to recognize exfat type [ 808.381536][T12742] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 808.624323][T12745] loop1: detected capacity change from 0 to 2048 [ 808.859849][T12745] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 808.922310][T12750] siw: device registration error -23 [ 810.796181][T12772] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.2423'. [ 814.928066][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.001503][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.865383][T12817] loop5: detected capacity change from 0 to 256 [ 816.111435][T12817] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0xaa00006c [ 816.165870][T12817] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 816.207817][T12817] exFAT-fs (loop5): invalid boot region [ 816.231185][T12817] exFAT-fs (loop5): failed to recognize exfat type [ 817.776962][ T13] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 818.903943][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.053935][ T13] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 819.077131][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.108767][ T13] usb 5-1: config 0 descriptor?? [ 819.153702][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 819.321193][ T13] pwc: send_video_command error -71 [ 819.326464][ T13] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 819.344868][ T13] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 819.371341][ T13] usb 5-1: USB disconnect, device number 23 [ 819.486420][T12852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 819.543447][T12852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.878582][T12852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 819.967812][T12852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.676184][T12852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 820.701207][T12852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.892955][T12852] team0: Port device netdevsim0 removed [ 820.931268][T12852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 820.952467][T12852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.153866][T12852] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 821.171359][T12852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.217296][T12852] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 821.251159][T12852] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.278543][T12852] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 821.315774][T12852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.346620][T12852] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 821.385452][T12852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.507101][T12966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 828.567259][T12966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 828.627976][T12969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 828.712356][T12972] netlink: 'syz.5.2484': attribute type 2 has an invalid length. [ 828.720111][T12972] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2484'. [ 828.845866][T12973] netlink: 'syz.4.2485': attribute type 2 has an invalid length. [ 828.896988][T12973] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2485'. [ 829.042985][T12967] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 829.178796][T12982] netlink: 'syz.0.2489': attribute type 10 has an invalid length. [ 829.512401][T12982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2489'. [ 829.648447][T12982] device vlan1 entered promiscuous mode [ 829.934154][T12982] bridge0: port 3(vlan1) entered blocking state [ 830.120676][T12982] bridge0: port 3(vlan1) entered disabled state [ 830.165623][T12982] bridge0: port 3(vlan1) entered blocking state [ 830.172568][T12982] bridge0: port 3(vlan1) entered forwarding state [ 830.591319][ T5244] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 831.281474][ T5244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.407441][ T5244] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 831.581105][ T5244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.660289][ T5244] usb 5-1: config 0 descriptor?? [ 831.744161][ T5244] pwc: Askey VC010 type 2 USB webcam detected. [ 831.764737][T13011] netlink: 'syz.2.2500': attribute type 1 has an invalid length. [ 831.798599][T13011] netlink: 16227 bytes leftover after parsing attributes in process `syz.2.2500'. [ 832.898430][T13022] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 833.051636][T13022] bridge0: port 4(team0) entered blocking state [ 833.081323][T13022] bridge0: port 4(team0) entered disabled state [ 833.121800][T13022] device team0 entered promiscuous mode [ 833.147807][T13022] device team_slave_0 entered promiscuous mode [ 833.161838][T13022] device team_slave_1 entered promiscuous mode [ 833.169529][T13022] bridge0: port 4(team0) entered blocking state [ 833.171097][ T5244] pwc: recv_control_msg error -32 req 02 val 2b00 [ 833.175899][T13022] bridge0: port 4(team0) entered forwarding state [ 833.241199][ T5244] pwc: recv_control_msg error -32 req 02 val 2700 [ 833.281153][ T5244] pwc: recv_control_msg error -32 req 02 val 2c00 [ 833.321149][ T5244] pwc: recv_control_msg error -32 req 04 val 1000 [ 833.366501][ T5244] pwc: recv_control_msg error -32 req 04 val 1300 [ 834.339060][ T5244] pwc: recv_control_msg error -71 req 02 val 2000 [ 834.561854][ T5244] pwc: recv_control_msg error -71 req 02 val 2100 [ 834.601127][ T5244] pwc: recv_control_msg error -71 req 04 val 1500 [ 834.653457][ T5244] pwc: recv_control_msg error -71 req 02 val 2500 [ 834.692476][ T5244] pwc: recv_control_msg error -71 req 02 val 2400 [ 834.751206][ T5244] pwc: recv_control_msg error -71 req 02 val 2600 [ 834.771334][ T5244] pwc: recv_control_msg error -71 req 02 val 2900 [ 834.788298][T13050] loop2: detected capacity change from 0 to 256 [ 834.802275][ T5244] pwc: recv_control_msg error -71 req 02 val 2800 [ 834.841183][ T5244] pwc: recv_control_msg error -71 req 04 val 1100 [ 834.871281][ T5244] pwc: recv_control_msg error -71 req 04 val 1200 [ 834.900612][ T5244] pwc: Registered as video103. [ 834.921583][ T5244] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 834.925343][T13050] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0xaa00006c [ 834.975102][T13050] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 834.991313][ T5244] usb 5-1: USB disconnect, device number 24 [ 835.038865][T13050] exFAT-fs (loop2): invalid boot region [ 835.073211][T13050] exFAT-fs (loop2): failed to recognize exfat type [ 836.629287][T13082] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 837.924262][T13096] netlink: 'syz.0.2528': attribute type 21 has an invalid length. [ 837.951153][T13096] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 838.269621][T13109] netlink: 'syz.0.2534': attribute type 46 has an invalid length. [ 838.461529][T13115] netlink: 'syz.5.2537': attribute type 10 has an invalid length. [ 838.512802][T13115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2537'. [ 838.552327][T13115] batman_adv: batadv0: Adding interface: veth0_vlan [ 838.579654][T13115] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.641176][T13115] batman_adv: batadv0: Interface activated: veth0_vlan [ 839.952227][T13137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2544'. [ 840.727821][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2548'. [ 840.851207][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2548'. [ 840.897356][T13146] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2548'. [ 840.960664][T13155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2548'. [ 842.872856][T13172] siw: device registration error -23 [ 845.102680][T13203] lo speed is unknown, defaulting to 1000 [ 845.353788][T13203] lo speed is unknown, defaulting to 1000 [ 845.624949][T13203] chnl_net:caif_netlink_parms(): no params data found [ 845.864699][T13223] netlink: 'syz.5.2570': attribute type 29 has an invalid length. [ 845.933199][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.951216][T13203] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.959400][T13203] device bridge_slave_0 entered promiscuous mode [ 846.181497][T13223] netlink: 'syz.5.2570': attribute type 29 has an invalid length. [ 846.452840][T13203] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.459972][T13203] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.518954][T13203] device bridge_slave_1 entered promiscuous mode [ 846.981436][ T4211] Bluetooth: hci2: command 0x0409 tx timeout [ 847.706230][T13203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.283588][T13203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.444728][ T2396] Bluetooth: hci2: command 0x041b tx timeout [ 850.042351][T13203] team0: Port device team_slave_0 added [ 850.261059][T13203] team0: Port device team_slave_1 added [ 850.463432][T13203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.470399][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.718083][T13203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.733954][T13203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.891573][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.530164][T13203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.543138][ T4213] Bluetooth: hci2: command 0x040f tx timeout [ 852.404233][T13203] device hsr_slave_0 entered promiscuous mode [ 852.461916][T13203] device hsr_slave_1 entered promiscuous mode [ 853.284999][T13203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.346539][T13203] Cannot create hsr debugfs directory [ 853.701315][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 853.757565][T13203] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 853.798505][T13203] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.035947][T13203] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 854.064142][T13203] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.140326][T13203] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 854.155561][T13203] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.246370][T13203] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 854.256350][T13203] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.242766][T13203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 856.673940][T10220] tipc: Left network mode [ 857.452006][T13203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 857.501461][T13203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 857.524531][T13203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 859.956357][T13203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.976150][T13203] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.060459][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 860.078499][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.741970][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 860.753289][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.893494][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.900546][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.086741][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 861.614897][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 861.632453][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.639548][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.832018][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 861.883752][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 861.982329][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 862.327834][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 862.345366][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.354317][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 862.364326][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.374505][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 862.387413][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 862.399059][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.458456][ T4636] udevd[4636]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 862.625713][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 862.634796][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.701513][T13416] loop5: detected capacity change from 0 to 1024 [ 865.715218][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 865.734815][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 865.798250][T13203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.104756][T13203] device veth0_vlan entered promiscuous mode [ 866.391190][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 866.557027][ T4317] hfsplus: b-tree write err: -5, ino 8 [ 866.570273][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 866.632253][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 866.670873][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.738553][T13203] device veth1_vlan entered promiscuous mode [ 866.805525][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 866.866766][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 866.968072][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 867.351603][T10220] device hsr_slave_0 left promiscuous mode [ 867.577122][T10220] device hsr_slave_1 left promiscuous mode [ 867.742148][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.772019][T10220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.852798][T10220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.860233][T10220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.163306][T10220] bridge0: port 3(vlan1) entered disabled state [ 868.174047][T10220] device bridge_slave_1 left promiscuous mode [ 868.180485][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.119210][T10220] device bridge_slave_0 left promiscuous mode [ 870.131224][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.191522][T10220] device veth1_macvtap left promiscuous mode [ 871.297342][T10220] device veth0_macvtap left promiscuous mode [ 871.303852][T10220] device veth1_vlan left promiscuous mode [ 871.312827][T10220] device veth0_vlan left promiscuous mode [ 872.632318][T10220] team0 (unregistering): Port device team_slave_1 removed [ 873.369380][T10220] team0 (unregistering): Port device team_slave_0 removed [ 873.469695][T10220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.500009][T10220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.719628][T10220] bond0 (unregistering): Released all slaves [ 873.969784][T13203] device veth0_macvtap entered promiscuous mode [ 873.984500][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 874.049127][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 874.059652][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 874.126981][T13203] device veth1_macvtap entered promiscuous mode [ 874.704029][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.924867][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.974794][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.013497][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.059717][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.096142][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.111151][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.125776][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.133627][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.138791][T13203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.141903][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.152236][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.211366][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.244391][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.280506][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.298274][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.315604][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.337996][T13203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.362572][T13203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.385837][T13203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.409660][T13203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.423432][T13203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.436968][T13203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.469238][T13203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.513542][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 875.531885][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 875.553686][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 875.573774][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 877.317985][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.352724][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.420132][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.567030][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.591674][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.610422][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.501794][T13545] Bluetooth: Can't allocate semaphore structure [ 891.561317][T13643] delete_channel: no stack [ 899.533114][T13726] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2698'. [ 904.283935][T13783] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2713'. [ 908.492938][T13808] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2720'. [ 912.755156][T13834] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2726'. [ 918.696380][T13890] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2739'. [ 920.366557][T13902] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2745'. [ 921.084872][T13907] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2746'. [ 923.656217][T13929] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2742'. [ 925.228392][T13936] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2751'. [ 928.973916][T13970] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2755'. [ 931.660969][T13996] siw: device registration error -23 [ 933.242341][T13942] udevd[13942]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 934.292721][T14024] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2775'. [ 936.795719][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.804675][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.485195][T14065] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2780'. [ 942.266521][T14095] siw: device registration error -23 [ 948.973270][T14148] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 949.188859][T14148] delete_channel: no stack [ 949.341105][T14152] delete_channel: no stack [ 949.847763][T14160] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 949.948219][T14165] delete_channel: no stack [ 951.106438][T14166] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2814'. [ 952.372860][T14182] siw: device registration error -23 [ 960.744682][T14242] delete_channel: no stack [ 964.803210][T14270] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 965.944598][T14270] delete_channel: no stack [ 968.188043][T14303] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.2847'. [ 969.681283][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 971.636311][T14329] delete_channel: no stack [ 976.398233][T14377] delete_channel: no stack [ 984.074877][T14436] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 985.314133][T14432] delete_channel: no stack [ 987.931150][ T2396] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 988.853253][ T2396] usb 3-1: device not accepting address 20, error -71 [ 995.385428][T14520] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 995.550726][T14520] delete_channel: no stack [ 998.017729][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.024254][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.155948][T14539] udevd[14539]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 998.933828][ T4168] bridge0: port 3(syz_tun) entered disabled state [ 999.675572][ T4168] device syz_tun left promiscuous mode [ 999.785632][ T4168] bridge0: port 3(syz_tun) entered disabled state [ 999.980942][T14549] lo speed is unknown, defaulting to 1000 [ 1000.080975][ T4474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.090151][T14558] delete_channel: no stack [ 1000.180667][T14549] lo speed is unknown, defaulting to 1000 [ 1000.299445][ T4474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.388296][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 1003.033202][ T4474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.451614][ T5244] Bluetooth: hci1: command 0x041b tx timeout [ 1004.075704][ T4474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.531204][ T3816] Bluetooth: hci1: command 0x040f tx timeout [ 1005.542398][T14549] chnl_net:caif_netlink_parms(): no params data found [ 1005.859640][T14549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.877344][T14549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.905935][T14549] device bridge_slave_0 entered promiscuous mode [ 1006.084412][T14549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.162438][T14549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.237419][T14549] device bridge_slave_1 entered promiscuous mode [ 1006.618264][T14549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.630691][T14622] netlink: 163260 bytes leftover after parsing attributes in process `syz.5.2923'. [ 1006.830407][T14549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.217099][T14549] team0: Port device team_slave_0 added [ 1008.248638][T14549] team0: Port device team_slave_1 added [ 1008.256830][ T5244] Bluetooth: hci1: command 0x0419 tx timeout [ 1008.401828][T14635] delete_channel: no stack [ 1008.985826][T14549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.134666][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.512962][T14549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.673324][T14549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.731176][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.071814][T14549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.622449][T14549] device hsr_slave_0 entered promiscuous mode [ 1011.630719][T14549] device hsr_slave_1 entered promiscuous mode [ 1011.856976][T14549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.885930][T14549] Cannot create hsr debugfs directory [ 1017.605006][T14712] udevd[14712]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1017.917883][T14549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1017.958720][T14549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1018.231918][T14549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1019.777678][T14549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1019.866386][T14744] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.2947'. [ 1020.062631][T14549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.085672][T14549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.127231][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.149282][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.880357][T14549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1020.908820][T14549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.027384][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1021.046194][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1021.096071][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.103260][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.184472][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1021.208716][ T4213] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1021.221092][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1021.229589][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.236698][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.245329][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1021.254501][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1021.264322][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1021.274759][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1021.299436][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1021.440146][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1021.598083][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1021.642340][ T4213] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1021.702731][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.774526][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1022.092820][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1022.122702][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1022.171582][ T4213] usb 5-1: config 0 descriptor?? [ 1022.206112][ T4474] device hsr_slave_0 left promiscuous mode [ 1022.235418][ T4474] device hsr_slave_1 left promiscuous mode [ 1023.988919][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.063213][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.112835][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.144020][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.201278][ T4213] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1024.220151][ T4213] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1024.241271][ T4213] [drm:udl_init] *ERROR* Selecting channel failed [ 1026.416992][ T4474] device team0 left promiscuous mode [ 1026.422458][ T4474] device team_slave_0 left promiscuous mode [ 1026.429109][ T4474] device team_slave_1 left promiscuous mode [ 1026.449475][ T4474] bridge0: port 4(team0) entered disabled state [ 1026.467516][ T4213] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1026.612745][ T4213] [drm] Initialized udl on minor 2 [ 1026.631192][ T4213] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1026.650063][ T4213] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1026.673239][ T4213] usb 5-1: USB disconnect, device number 25 [ 1026.701161][ T4474] device bridge_slave_1 left promiscuous mode [ 1026.707394][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.802402][ T4474] device bridge_slave_0 left promiscuous mode [ 1026.808616][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.574003][ T4474] device veth1_macvtap left promiscuous mode [ 1027.588776][ T4474] device veth0_macvtap left promiscuous mode [ 1027.603829][ T4474] device veth1_vlan left promiscuous mode [ 1027.610124][ T4474] device veth0_vlan left promiscuous mode [ 1029.025581][ T4474] team0 (unregistering): Port device vlan0 removed [ 1029.337800][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1029.352518][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1029.366904][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.387082][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.233781][ T4474] bond0 (unregistering): Released all slaves [ 1030.481897][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1030.499474][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1030.536880][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1032.191190][ T3816] lo speed is unknown, defaulting to 1000 [ 1033.634804][T14854] loop0: detected capacity change from 0 to 1024 [ 1034.349050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1034.565859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1034.770922][T14549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.277190][T14549] device veth0_vlan entered promiscuous mode [ 1035.312039][T14549] device veth1_vlan entered promiscuous mode [ 1035.359263][T14549] device veth0_macvtap entered promiscuous mode [ 1035.389231][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1035.449656][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1035.475396][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1035.488001][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1035.500655][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1035.516387][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1035.530241][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1035.651785][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1035.719059][T14549] device veth1_macvtap entered promiscuous mode [ 1035.736856][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.747563][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.792615][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.803807][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.870021][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.882362][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.896840][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.665565][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.925016][T14549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.951122][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.968219][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1037.127451][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.166037][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1037.261784][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1037.284850][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.275164][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.365643][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.377676][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.388929][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.399743][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.431383][T14549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.466989][T14549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.493863][T14549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.530170][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.547150][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1039.682825][T14549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.708885][T14549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.777991][T14549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.794557][T14549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.775589][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.782499][T10220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.801787][T10220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.815973][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.856538][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.879256][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1041.753671][T14915] delete_channel: no stack [ 1043.418258][T14932] delete_channel: no stack [ 1047.102695][T14955] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1049.040495][T14967] usb usb8: usbfs: process 14967 (syz.5.3001) did not claim interface 0 before use [ 1049.786685][T14969] udevd[14969]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1058.379522][T15016] usb usb8: usbfs: process 15016 (syz.4.3015) did not claim interface 0 before use [ 1061.663410][T15041] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1062.411138][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.417845][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.560721][T15046] delete_channel: no stack [ 1068.473410][T15078] usb usb8: usbfs: process 15078 (syz.0.3030) did not claim interface 0 before use [ 1068.856035][T15086] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1070.893035][T15079] udevd[15079]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1074.468678][T15128] usb usb8: usbfs: process 15128 (syz.0.3043) did not claim interface 0 before use [ 1078.061530][T15158] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3049'. [ 1081.309281][T15178] usb usb8: usbfs: process 15178 (syz.0.3054) did not claim interface 0 before use [ 1089.034428][T15223] lo speed is unknown, defaulting to 1000 [ 1089.040463][T15223] lo speed is unknown, defaulting to 1000 [ 1089.046631][T15223] lo speed is unknown, defaulting to 1000 [ 1089.055945][T15223] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1089.070742][T15223] lo speed is unknown, defaulting to 1000 [ 1089.078410][T15223] lo speed is unknown, defaulting to 1000 [ 1089.085114][T15223] lo speed is unknown, defaulting to 1000 [ 1089.091796][T15223] lo speed is unknown, defaulting to 1000 [ 1089.098386][T15223] lo speed is unknown, defaulting to 1000 [ 1090.611141][T15235] usb usb8: usbfs: process 15235 (syz.5.3070) did not claim interface 0 before use [ 1094.396700][T15279] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3078'. [ 1095.510113][T15292] usb usb8: usbfs: process 15292 (syz.2.3082) did not claim interface 0 before use [ 1095.538124][ T3816] hid-generic 1AA0:0002:0386.0011: item fetching failed at offset 0/2 [ 1095.773671][ T3816] hid-generic: probe of 1AA0:0002:0386.0011 failed with error -22 [ 1098.772912][T15337] usb usb8: usbfs: process 15337 (syz.5.3097) did not claim interface 0 before use [ 1098.809179][ T3816] hid-generic 1AA0:0002:0386.0012: item fetching failed at offset 0/2 [ 1098.842908][ T3816] hid-generic: probe of 1AA0:0002:0386.0012 failed with error -22 [ 1104.062325][T15383] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3112'. [ 1105.163856][T15404] kvm [15403]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1105.185910][T15404] kvm [15403]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 1105.234573][T15404] kvm [15403]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1105.279803][T15404] kvm [15403]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1106.473631][T15417] lo speed is unknown, defaulting to 1000 [ 1108.411104][ T4212] Bluetooth: hci0: command 0x0409 tx timeout [ 1110.023442][ T4474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.050098][ T4474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.115810][T15417] lo speed is unknown, defaulting to 1000 [ 1110.228950][ T4474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.416960][ T4474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.491208][ T4211] Bluetooth: hci0: command 0x041b tx timeout [ 1110.562622][ T4474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.608916][ T4474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.871219][ T4211] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1110.893374][T15463] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3134'. [ 1111.078833][ T4474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1111.178381][ T4474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.247296][ T4211] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1111.270377][ T4211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.303452][T15417] chnl_net:caif_netlink_parms(): no params data found [ 1111.322050][ T4211] usb 3-1: config 0 descriptor?? [ 1111.631208][ T4211] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1111.646149][ T4211] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1111.691509][ T4211] [drm:udl_init] *ERROR* Selecting channel failed [ 1111.700205][T15417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.729451][T15417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.743168][ T4211] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1111.765483][T15417] device bridge_slave_0 entered promiscuous mode [ 1111.777834][ T4211] [drm] Initialized udl on minor 2 [ 1111.811186][ T4211] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1111.831440][ T4211] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1111.880750][ T4211] usb 3-1: USB disconnect, device number 22 [ 1111.902615][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1111.955663][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1112.006215][ T13] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1112.092580][T15417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.169774][T15417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.374026][T15417] device bridge_slave_1 entered promiscuous mode [ 1112.913480][T14934] Bluetooth: hci0: command 0x040f tx timeout [ 1113.204837][T15417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.271839][T15417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.561529][T15417] team0: Port device team_slave_0 added [ 1114.640130][T15417] team0: Port device team_slave_1 added [ 1114.940800][T15417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.951389][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.982376][ T2396] Bluetooth: hci0: command 0x0419 tx timeout [ 1115.021103][T15417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.069811][T15417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.082257][T15417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.129402][T15417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.316058][T15417] device hsr_slave_0 entered promiscuous mode [ 1115.343857][T15417] device hsr_slave_1 entered promiscuous mode [ 1115.942952][ T3816] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1116.591998][ T3816] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1116.666680][ T3816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.062462][ T3816] usb 2-1: config 0 descriptor?? [ 1117.109270][ T4474] device hsr_slave_0 left promiscuous mode [ 1117.125206][ T4474] device hsr_slave_1 left promiscuous mode [ 1117.142730][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.150193][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.179606][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.190727][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.199964][ T4474] device bridge_slave_1 left promiscuous mode [ 1117.207794][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.216873][ T4474] device bridge_slave_0 left promiscuous mode [ 1117.230925][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.243857][ T4474] device veth1_to_team left promiscuous mode [ 1117.261112][ T4474] device veth1_macvtap left promiscuous mode [ 1117.267184][ T4474] device veth0_macvtap left promiscuous mode [ 1117.282266][ T4474] device veth1_vlan left promiscuous mode [ 1117.288115][ T4474] device veth0_vlan left promiscuous mode [ 1117.371327][ T3816] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1117.385452][ T3816] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1117.451248][ T3816] [drm:udl_init] *ERROR* Selecting channel failed [ 1117.504683][ T3816] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1117.521064][ T3816] [drm] Initialized udl on minor 2 [ 1117.551147][ T3816] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1117.568219][ T3816] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1117.598259][ T3816] usb 2-1: USB disconnect, device number 20 [ 1117.919499][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1117.936179][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1117.950058][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.106368][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.042613][ T4474] bond0 (unregistering): Released all slaves [ 1123.381244][ T3816] Bluetooth: hci1: command 0x0406 tx timeout [ 1123.636879][T15417] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1124.330260][T15417] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1124.530511][T15417] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1124.791537][T15417] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1126.165656][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.182483][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.002965][T15417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.097273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1128.105738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1128.132875][T15417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.150154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1128.210117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1128.225350][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.232482][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.441542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1128.452014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1128.491711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1128.533937][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.541060][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.591576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1128.639230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1128.690527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1128.783580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1128.841795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1128.891653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1128.907769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1128.939176][T15417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1129.014448][T15417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.039952][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1129.059682][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1129.088584][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1129.126769][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1129.159908][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1133.791316][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1133.798779][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1133.867672][T15417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.831368][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1135.865402][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1135.968726][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1135.983987][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1136.115554][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1136.159589][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1136.170361][T15417] device veth0_vlan entered promiscuous mode [ 1136.227993][T15417] device veth1_vlan entered promiscuous mode [ 1137.044626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1137.568106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1138.049758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.108493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.184320][T15417] device veth0_macvtap entered promiscuous mode [ 1138.240153][T15417] device veth1_macvtap entered promiscuous mode [ 1138.387164][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.499938][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.550852][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.640655][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.689958][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.737665][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.777344][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.788204][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.838245][T15417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.872167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1138.900159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1138.929195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1138.962238][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1138.987501][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.014888][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.047819][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.084437][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.117030][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.139256][T15417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.173795][T15417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.209210][T15417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.230044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1139.254371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1139.278230][T15417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.296062][T15417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.311164][T15417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.320976][T15417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.480048][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.504316][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.567949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1139.592675][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.636143][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.688588][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1145.377449][ T4474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.002842][ T4474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.481078][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 1152.713178][ T4474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.993597][ T4474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.784941][T15936] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3214'. [ 1153.801207][T15895] lo speed is unknown, defaulting to 1000 [ 1154.683994][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 1155.656831][T15895] lo speed is unknown, defaulting to 1000 [ 1156.327412][ T4474] tipc: Left network mode [ 1157.000152][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 1158.972550][T15895] chnl_net:caif_netlink_parms(): no params data found [ 1159.051322][ T5861] Bluetooth: hci3: command 0x0419 tx timeout [ 1159.167018][T15895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.182276][T15895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.196814][T15895] device bridge_slave_0 entered promiscuous mode [ 1159.207521][T15895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.223023][T15895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.237281][T15895] device bridge_slave_1 entered promiscuous mode [ 1159.779640][T15895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.898781][T15895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.751863][T15895] team0: Port device team_slave_0 added [ 1161.845059][T15895] team0: Port device team_slave_1 added [ 1161.923766][ T4474] batman_adv: batadv0: Removing interface: gretap1 [ 1162.376776][T15895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.416775][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.611263][T15895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.682925][T15895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.689945][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.821238][T15895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.944642][T15895] device hsr_slave_0 entered promiscuous mode [ 1162.975095][T15895] device hsr_slave_1 entered promiscuous mode [ 1163.003594][T15895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1163.021080][T15895] Cannot create hsr debugfs directory [ 1163.026895][ T4474] IPVS: stopping master sync thread 11476 ... [ 1163.061668][ T4474] bond0: (slave wlan1): Releasing backup interface [ 1166.166569][ T4474] device hsr_slave_0 left promiscuous mode [ 1166.174207][ T4474] device hsr_slave_1 left promiscuous mode [ 1166.201213][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.243039][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.311190][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.320520][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.334422][ T4474] device bridge_slave_1 left promiscuous mode [ 1166.340649][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.357428][ T4474] device bridge_slave_0 left promiscuous mode [ 1166.381610][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.425150][ T4474] device veth1_macvtap left promiscuous mode [ 1166.431341][ T4474] device veth0_macvtap left promiscuous mode [ 1166.437440][ T4474] device veth1_vlan left promiscuous mode [ 1166.443296][ T4474] device veth0_vlan left promiscuous mode [ 1169.623180][T16099] usb usb8: usbfs: process 16099 (syz.4.3244) did not claim interface 0 before use [ 1175.092115][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 1175.109726][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 1175.133071][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.374367][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.397796][T16151] usb usb8: usbfs: process 16151 (syz.0.3258) did not claim interface 0 before use [ 1179.555385][ T4474] bond0 (unregistering): Released all slaves [ 1182.542993][ T144] smc: removing ib device sz1 [ 1184.995457][T15895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1185.033149][T15895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1185.061758][T15895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1185.367297][T15895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1187.866499][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.872947][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.134506][T15895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.164052][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1189.457569][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1190.144906][T15895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.259806][T15895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1190.339806][T15895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.371680][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1190.392666][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1190.441877][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.449299][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.594016][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1190.779135][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1190.871866][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.879080][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.647501][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1191.658140][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1191.672172][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1192.225606][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1192.285925][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1192.401813][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1192.410768][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1192.425600][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1192.435989][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.449415][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1192.485638][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1192.509436][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1192.527870][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1193.225389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1193.240498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1193.284062][T15895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.376881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1193.406011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1193.480630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1193.508957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1193.572495][T15895] device veth0_vlan entered promiscuous mode [ 1193.651528][T15895] device veth1_vlan entered promiscuous mode [ 1193.761223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1193.786467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1193.827489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1193.952737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1194.886779][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1194.896560][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1194.943756][T15895] device veth0_macvtap entered promiscuous mode [ 1195.004484][T15895] device veth1_macvtap entered promiscuous mode [ 1195.233087][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.349708][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.461477][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.571197][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.605835][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.641885][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.682305][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.914690][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.012525][T15895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.113740][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.271120][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.322160][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.412783][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.472889][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.499011][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.560195][T15895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.623821][T15895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.938252][T15895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.104912][T10220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1198.140298][T10220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1198.192880][T10220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1198.351560][T10220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1198.427564][T10220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1198.495167][T15895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.505923][T15895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.515510][T15895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.524741][T15895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.096514][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.128433][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.194025][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1199.242280][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.250657][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.317715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1201.466580][T16397] kvm [16394]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7112 [ 1201.779362][T16401] kvm [16400]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7112 [ 1201.940476][T16417] kvm [16415]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1202.007250][T16417] kvm [16415]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 1202.041416][T16417] kvm [16415]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1202.101444][T16417] kvm [16415]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1204.563720][T16449] usb usb8: usbfs: process 16449 (syz.4.3311) did not claim interface 0 before use [ 1204.977688][ T3816] hid-generic 1AA0:0002:0386.0013: item fetching failed at offset 0/2 [ 1205.006874][ T3816] hid-generic: probe of 1AA0:0002:0386.0013 failed with error -22 [ 1207.511823][T16481] kvm [16478]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7112 [ 1210.355355][T16507] usb usb8: usbfs: process 16507 (syz.4.3323) did not claim interface 0 before use [ 1210.772434][T16498] loop0: detected capacity change from 0 to 1024 [ 1211.043960][T16498] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1211.187544][T16498] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1211.358905][T16498] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 1213.929557][T16533] kvm [16532]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x3952 [ 1213.942519][T16533] kvm [16532]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x3966 [ 1214.729468][T16533] kvm [16532]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x39c0 [ 1214.740285][T16533] kvm [16532]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x3980 [ 1214.824032][T16533] kvm [16532]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x3966 [ 1214.879433][T16533] kvm [16532]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x391d [ 1215.208857][T16547] siw: device registration error -23 [ 1217.238497][T16557] usb usb8: usbfs: process 16557 (syz.0.3335) did not claim interface 0 before use [ 1217.286883][ T2396] hid-generic 1AA0:0002:0386.0014: item fetching failed at offset 0/2 [ 1217.296314][ T2396] hid-generic: probe of 1AA0:0002:0386.0014 failed with error -22 [ 1220.812954][T16592] loop1: detected capacity change from 0 to 1024 [ 1222.088097][T16592] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1222.099010][T16592] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1222.108936][T16592] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 1226.534610][T16630] loop1: detected capacity change from 0 to 512 [ 1226.832648][T16630] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1226.864905][T16630] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.113843][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 1232.907362][T16672] loop1: detected capacity change from 0 to 1024 [ 1232.946659][T16672] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1232.958335][T16672] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1232.968076][T16672] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 1234.850614][ T5223] kworker/dying (5223) used greatest stack depth: 18496 bytes left [ 1249.735738][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.742086][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.954930][T16799] loop1: detected capacity change from 0 to 512 [ 1250.301381][T16799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1250.343340][T16799] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.149408][T16841] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.3403'. [ 1270.459469][T16989] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.3431'. [ 1278.906262][ T4169] Bluetooth: hci3: command 0x0406 tx timeout [ 1293.995472][T17189] usb usb8: usbfs: process 17189 (syz.1.3475) did not claim interface 0 before use [ 1295.118327][T17203] loop0: detected capacity change from 0 to 512 [ 1298.184447][T17203] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 1310.733447][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.739768][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1322.038658][T14934] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1322.491256][T14934] usb 3-1: Using ep0 maxpacket: 16 [ 1323.271402][T14934] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1323.281122][T14934] usb 3-1: can't read configurations, error -61 [ 1323.431121][T14934] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1327.224707][T17478] ------------[ cut here ]------------ [ 1327.259401][T17478] WARNING: CPU: 0 PID: 17478 at block/genhd.c:586 del_gendisk+0x6fb/0x770 [ 1327.291221][T17478] Modules linked in: [ 1327.295445][T17478] CPU: 1 PID: 17478 Comm: syz.1.3544 Not tainted 5.15.177-syzkaller #0 [ 1327.339317][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1327.551233][T17478] RIP: 0010:del_gendisk+0x6fb/0x770 [ 1327.556735][T17478] Code: 00 00 4c 89 f6 e8 35 85 fa ff 4c 89 f7 be 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 12 fd ff e8 d5 77 83 fd <0f> 0b 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 e9 80 e1 07 [ 1327.598133][T17478] RSP: 0018:ffffc90003277df0 EFLAGS: 00010283 [ 1327.617458][T17478] RAX: ffffffff83fd0dbb RBX: 0000000000000240 RCX: 0000000000080000 [ 1327.635858][T17478] RDX: ffffc90005c01000 RSI: 000000000000044e RDI: 000000000000044f [ 1327.651130][T17478] RBP: 0000000000000000 R08: ffffffff83fd07d8 R09: fffff5200064efb9 [ 1327.669614][T17478] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100c76cb90 [ 1327.696279][T17478] R13: ffff888063b65c00 R14: ffff8881473e4740 R15: ffff888063b65c80 [ 1327.712960][T17478] FS: 00007f487fc166c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1327.740697][T17478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1327.761146][T17478] CR2: 000000002000a000 CR3: 0000000067ef1000 CR4: 00000000003506e0 [ 1327.779148][T17478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1327.791960][T17478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1327.821323][T17478] Call Trace: [ 1327.931927][T17478] [ 1327.994017][T17478] ? __warn+0x15b/0x300 [ 1328.001772][T17478] ? del_gendisk+0x6fb/0x770 [ 1328.009005][T17478] ? report_bug+0x1b7/0x2e0 [ 1328.015648][T17478] ? handle_bug+0x3d/0x70 [ 1328.020445][T17478] ? exc_invalid_op+0x16/0x40 [ 1328.025675][T17478] ? asm_exc_invalid_op+0x16/0x20 [ 1328.032730][T17478] ? del_gendisk+0x118/0x770 [ 1328.061648][T17478] ? del_gendisk+0x6fb/0x770 [ 1328.069349][T17478] ? del_gendisk+0x6fb/0x770 [ 1328.194724][T17478] loop_control_ioctl+0x552/0x700 [ 1328.200594][T17478] ? xor_init+0x60/0x60 [ 1328.205511][T17478] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1328.210931][T17478] ? security_file_ioctl+0x7d/0xa0 [ 1328.216784][T17478] ? xor_init+0x60/0x60 [ 1328.221538][T17478] __se_sys_ioctl+0xf1/0x160 [ 1328.226476][T17478] do_syscall_64+0x3b/0xb0 [ 1328.232004][T17478] ? clear_bhb_loop+0x15/0x70 [ 1328.236817][T17478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1328.247802][T17478] RIP: 0033:0x7f4881deeda9 [ 1328.253130][T17478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.274184][T17478] RSP: 002b:00007f487fc16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.282939][T17478] RAX: ffffffffffffffda RBX: 00007f4882008160 RCX: 00007f4881deeda9 [ 1328.292406][T17478] RDX: 0000000007000000 RSI: 0000000000004c81 RDI: 0000000000000008 [ 1328.300606][T17478] RBP: 00007f4881e702a0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.311297][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.341661][T17478] R13: 0000000000000000 R14: 00007f4882008160 R15: 00007fff4592d348 [ 1328.373626][T17478] [ 1328.383570][T17478] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1328.390962][T17478] CPU: 0 PID: 17478 Comm: syz.1.3544 Not tainted 5.15.177-syzkaller #0 [ 1328.399213][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1328.409626][T17478] Call Trace: [ 1328.413219][T17478] [ 1328.416158][T17478] dump_stack_lvl+0x1e3/0x2d0 [ 1328.420940][T17478] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1328.426588][T17478] ? panic+0x860/0x860 [ 1328.430675][T17478] ? del_gendisk+0x640/0x770 [ 1328.435288][T17478] ? del_gendisk+0x640/0x770 [ 1328.439895][T17478] panic+0x318/0x860 [ 1328.443890][T17478] ? __warn+0x16a/0x300 [ 1328.448056][T17478] ? fb_is_primary_device+0xd0/0xd0 [ 1328.453283][T17478] ? del_gendisk+0x6fb/0x770 [ 1328.457901][T17478] __warn+0x2b2/0x300 [ 1328.461897][T17478] ? del_gendisk+0x6fb/0x770 [ 1328.466522][T17478] report_bug+0x1b7/0x2e0 [ 1328.471041][T17478] handle_bug+0x3d/0x70 [ 1328.475289][T17478] exc_invalid_op+0x16/0x40 [ 1328.479797][T17478] asm_exc_invalid_op+0x16/0x20 [ 1328.484649][T17478] RIP: 0010:del_gendisk+0x6fb/0x770 [ 1328.489860][T17478] Code: 00 00 4c 89 f6 e8 35 85 fa ff 4c 89 f7 be 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0a 12 fd ff e8 d5 77 83 fd <0f> 0b 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 89 e9 80 e1 07 [ 1328.509479][T17478] RSP: 0018:ffffc90003277df0 EFLAGS: 00010283 [ 1328.515662][T17478] RAX: ffffffff83fd0dbb RBX: 0000000000000240 RCX: 0000000000080000 [ 1328.524294][T17478] RDX: ffffc90005c01000 RSI: 000000000000044e RDI: 000000000000044f [ 1328.533265][T17478] RBP: 0000000000000000 R08: ffffffff83fd07d8 R09: fffff5200064efb9 [ 1328.541333][T17478] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100c76cb90 [ 1328.549461][T17478] R13: ffff888063b65c00 R14: ffff8881473e4740 R15: ffff888063b65c80 [ 1328.557577][T17478] ? del_gendisk+0x118/0x770 [ 1328.562358][T17478] ? del_gendisk+0x6fb/0x770 [ 1328.566984][T17478] loop_control_ioctl+0x552/0x700 [ 1328.572925][T17478] ? xor_init+0x60/0x60 [ 1328.577112][T17478] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1328.582071][T17478] ? security_file_ioctl+0x7d/0xa0 [ 1328.587198][T17478] ? xor_init+0x60/0x60 [ 1328.591360][T17478] __se_sys_ioctl+0xf1/0x160 [ 1328.609860][T17478] do_syscall_64+0x3b/0xb0 [ 1328.614298][T17478] ? clear_bhb_loop+0x15/0x70 [ 1328.618984][T17478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1328.624986][T17478] RIP: 0033:0x7f4881deeda9 [ 1328.629521][T17478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.651076][T17478] RSP: 002b:00007f487fc16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.659538][T17478] RAX: ffffffffffffffda RBX: 00007f4882008160 RCX: 00007f4881deeda9 [ 1328.667522][T17478] RDX: 0000000007000000 RSI: 0000000000004c81 RDI: 0000000000000008 [ 1328.675500][T17478] RBP: 00007f4881e702a0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.683476][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.691462][T17478] R13: 0000000000000000 R14: 00007f4882008160 R15: 00007fff4592d348 [ 1328.699544][T17478] [ 1328.702671][T17478] Kernel Offset: disabled [ 1328.706999][T17478] Rebooting in 86400 seconds..